last executing test programs: 1m46.87787233s ago: executing program 2 (id=796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m46.749801581s ago: executing program 2 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x4, 0x0, 0x3}, 0x2c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='+\x00') 1m46.606707842s ago: executing program 2 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001f0ffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000005bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1m46.558233823s ago: executing program 2 (id=808): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18150057bf0800d05a1b940000000000fcff62c9f4a3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioperm(0x5, 0x8004, 0x6) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r1, 0x0, 0x0, 0x0) 1m46.184262556s ago: executing program 2 (id=812): r0 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@noload}, {@grpid}, {@errors_remount}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 'fo\x00', 0x45, 0x80005, 0x60}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'rr\x00', 0x4, 0x8, 0x7b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xe, 0x80012d58, 0x12d5c}}, 0x44) 1m45.976071617s ago: executing program 2 (id=818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 1m30.659302031s ago: executing program 32 (id=818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 39.345100884s ago: executing program 4 (id=1924): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 39.334271274s ago: executing program 4 (id=1925): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x7c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$eJzs3T9rc1UYAPDnpmmSV4dkcJKCF3RwKm1XlxRpoZhJyaAOWmwL0gShhYJ/MHZydXH0EwiCm1/CxW8guApudihcuTf3mqSmaSNN9S2/39LTc89zznNOz6V0yNMPN4anR2mcXH7xa7RaSdS68SyukuhELSpfxYzuNwEAPM+usiz+yMaWiUsiorW6tACAFVr69/+PK08JAFixd959763dXm/v7TRtxf7w64t+/pd9/nX8fPckPo5BHMdWtOM6IvvbuL2fZdmonuY68dpwdNHPI4cf/FzOv/t7RBG/He3oFF2z8Qe9ve10bCp+lOfxQrl+N4/fiXa8NGf9g97ezpz46Dfi9Ven8t+MdvzyUXwSgzgqkpjEf7mdpm9m3/75+ft5enl8MrroN4txE9naI/9oAAAAAAAAAAAAAAAAAAAAAAB4wjbL2jnNKOr35F1l/Z216/yb9Ugrndn6POP4pJroRn2gURbfVfV1ttI0zcqBk/h6vFyP+n+zawAAAAAAAAAAAAAAAAAAAPh/Of/0s9PDweD47EEaVTWA6mP9/3ae7lTPK7F4cHOyVq1sLpg51qoxScTCNPJNPNCx3NV4dlvO3/+w7IStu8esLzqfh2lUt+v0MJl/hs2oelrVJflpekwj7rlW47ZHG0UC1eW4a57G3EftpffeeLFojBaMiWTRe/HGb+OEy57k5kvUKE51bvh62ZgKv3E3brvP1SnNvin/kKjWAQAAAAAAAAAAAAAAAAAAKzX5GPCch5cLQ2tZc2VpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjmvz//yUaozL4HoMbcXY+f+X6Y24TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ+6vAAAA//+lillR") ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 39.199147055s ago: executing program 4 (id=1927): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xab1}, 0x18) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="8437984a2dfd4b0713b58097f837d54e945cf8b64580d4454d94d040fe94429a046e74ca304b574b337ecdf81198e6e2fd0e0b40f528ad9d711dd4a43f07c6f3ed791170b24c3b5da2b7d5bfbe", @ANYRES8=r0]) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 39.198551815s ago: executing program 4 (id=1928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() ptrace(0x10, r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={0x0}) 39.102123326s ago: executing program 4 (id=1929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x2a) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, 0x8) close(r3) 38.957099136s ago: executing program 4 (id=1931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000680)='$\x00\xe1s\r\xa7\xda\x15\xe9\x0e\xb6\x80\xdb\xab\x15}\xdd\xc5\xe1\xfb\f\xd3bo\x81\xef\xad&\xf7\xd4\xf8\xb8|s\x16\xd1\xfb\xfd\xc2@\x18l\xfe(,\xb6)\x84\xc0\xc0^5e\xcc\xe0\xdf`Z;\x1a\x94\xbf\xe6\x12\x1d>\x1e\xd1+\\>\xcf\xb0\x95\xf0c\xea\xbfO#\xc6\xef\x80\fi\xb9\xb5E\x85\xb2S\xc3%Q\xb7\x1eo=\xc8;\x8a\x1a\x7f=k$]?\xe4\x91^', 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x36}, {{0x0, 0x0, 0x0}, 0xb6c}], 0x2, 0x10042, 0x0) 35.115730998s ago: executing program 3 (id=1994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() ptrace(0x10, r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={0x0}) 34.87456635s ago: executing program 3 (id=1997): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r1}, 0x0, &(0x7f00000013c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x6) 34.197165535s ago: executing program 3 (id=2009): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) preadv(r3, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) 34.196993195s ago: executing program 34 (id=2009): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) preadv(r3, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) 1.663893227s ago: executing program 0 (id=2637): bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000640)={'a', ' *:* ', 'w\x00'}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xa, 0x0, &(0x7f0000000600)="c9f7b986000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.193777081s ago: executing program 6 (id=2643): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) 1.120797731s ago: executing program 5 (id=2647): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57dd60c00000700000002"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) 1.106315111s ago: executing program 1 (id=2648): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x3, 0x34e}, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 612.863125ms ago: executing program 0 (id=2652): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 612.669295ms ago: executing program 1 (id=2653): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000040)='./file0\x00', 0x0) 603.046835ms ago: executing program 5 (id=2654): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xd, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffff445, 0x2, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 584.667786ms ago: executing program 5 (id=2656): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14) close(r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) unshare(0x6020400) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) timerfd_gettime(r2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x1b8, 0x2, 0xa, 0x401, 0x0, 0x0, {0x8, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x73, 0x6, "49c9fa436e4893e7a6f3060ef2caed06e44d9f6fb894d17a1ff08075823fa7ddfd4588aa4a5fab45197d8f9819af9775c479386318e5410e809907c04cc415d82b7e0a4364d8b2db6691863e76d316377a10c92ba0e675ba35e8b31278b93170a60eacebb2ad45e84ecb18f01524ac"}, @NFTA_TABLE_USERDATA={0x39, 0x6, "a930c96a6f49a92ec672457f9e8e2956fc46defc99fc3274838c99a70f82b5a566964a3b809483736c6ef5ee8510adca72500feab6"}, @NFTA_TABLE_USERDATA={0xc5, 0x6, "32358088aa7b2a397219a59cfc0ea0c5db4fe205953b54e221150e7499c6f9be7c14e7713a2f7c8c2a5f605efe28e65166991fc25d6beca210e53368cb482be5cb6c2b5c86416fa9057edd9a244268c2b90491c0cccbe19a514339631ea1fbac9d0e4580b981a314eaad4f27912cd5a5c386bada5df4fbe2cfbb75fa03825469ab3d6c4ff5d6636042c000a1e2447e01bb2da0df731d6f570a8abd0f000864eea1cf35e12840079dd01e63b7ef088765935e39af06e78888e50eaba7c2b584582f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 567.274046ms ago: executing program 1 (id=2657): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@debug}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mm_page_free\x00', r2, 0x0, 0x49}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') sendfile(r4, r4, 0x0, 0x80000000) 566.683816ms ago: executing program 7 (id=2658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43fffffc, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r5, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) shutdown(r3, 0x0) 497.098126ms ago: executing program 5 (id=2659): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x60c100, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 471.065287ms ago: executing program 7 (id=2660): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) 359.742187ms ago: executing program 5 (id=2661): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001) r3 = socket$netlink(0x10, 0x3, 0x14) sendfile(r3, r2, 0x0, 0x17) 325.159217ms ago: executing program 0 (id=2663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}}, 0x5094) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 324.859528ms ago: executing program 1 (id=2664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 305.115738ms ago: executing program 6 (id=2665): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$ppp(r1, &(0x7f0000004800)="c021d0de7e85", 0x6) 285.158068ms ago: executing program 7 (id=2666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 264.155358ms ago: executing program 6 (id=2667): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) 230.135768ms ago: executing program 5 (id=2668): socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b220c65367}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 203.191998ms ago: executing program 1 (id=2669): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000000180)='./file0\x00', 0x0) 199.074128ms ago: executing program 0 (id=2670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x2008002, &(0x7f00000009c0)={[{@auto_da_alloc}], [{@permit_directio}, {@subj_user}, {@dont_hash}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, 'map_files\x00'}}, {@flag='mand'}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x64, 0x4f, 0x30, 0x66, 0x30, 0x38, 0x61], 0x2d, [0x31, 0x30, 0x66, 0x61], 0x2d, [0x65, 0x35, 0x64, 0x39], 0x2d, [0x62, 0x39, 0x63, 0x63], 0x2d, [0x9, 0x66, 0x33, 0x62, 0x62, 0x34, 0x32, 0x30]}}}, {@obj_type}]}, 0x1, 0x549, &(0x7f0000001800)="$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") prlimit64(0x0, 0x7, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0) tee(r1, r5, 0xf3a, 0x0) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[], 0x18c6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0xa0) 188.556148ms ago: executing program 6 (id=2671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x48) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)="5e993c9d0939fcbaa1e7968ee755062b608b5b2ea6f9955dce0d7c83e75bcd5c1a10e69637c7b47e29c86d4f4e0d25ed2fc04dcb0bb82954076a7bece21688fdbcd7289297936da71e1f97fcde129fe3159b37e688c398186db4006fcad92c677068bc9e009ab44ef3677592d64df77a1e3233b59421ffe8a3f48fe47c1e7a41ca235e45668689e2d950aced4739148bbbe18e2e", 0x94}, {&(0x7f0000000340)="fc", 0x1}, {&(0x7f00000003c0)="e01d97cb566a685fd08b5b996bc025e9574983d367cf4b2af8c81fcacb9bd829e4ec261ed1dacc73295fa44617ba1791b79a19c04df6847c5668afac7e1ca72b35c0992fe17004a47892910ce4688114a653dab0de80be38737c16108736b192d0ca34c27ca1236b2c8b12d96ec39e2918f4afe768273f35623fe9a08f996309fb5bd5941e0b8072572ba373dd763e33b8bdec892dd053093b2cc4872dc115c7fe58bd9b5f4b318a99a9b11f6fc782d1d61ba6d5ba89409fbf58082741", 0xbd}, {&(0x7f0000000480)="349478e0e78046db655a2e1f1c12ef5d491b21e0b759c9e541b55d6b01fe6c442ae2798072b8a7d2849eb71de8e2038922d17c81169db7c134e1fc1f1b1b9f565b5d4f4e6ac535779c8a5f", 0x4b}, {&(0x7f0000000500)="96b57639e6e7877da7f31f5a5ea03868402b0383", 0x14}, {&(0x7f0000000540)="9fd23a981ead57cecc6bf5fac33a00450b7802384dc80701ece092584870b6319334ce853cf2c41d5c400a7f82f6fcc417cdf33c8cb5c8385dc245ab9d4e1c3e806bfe7882124899abc6164114e036b0cee5ba11c0dcc8889b2d8acec0f6b29a766a2f9d98bd0cd075ff4cc49e9914c5127ae83ff4641a5eed", 0x79}], 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r3) 158.280779ms ago: executing program 6 (id=2672): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000001c0)='./file0\x00', 0x108) 153.045189ms ago: executing program 7 (id=2673): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 128.981909ms ago: executing program 7 (id=2674): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) close(r4) 71.59206ms ago: executing program 7 (id=2675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x1, 0x237}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 70.922989ms ago: executing program 6 (id=2676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000900), 0x953, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x103) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 53.19782ms ago: executing program 1 (id=2677): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) 52.56268ms ago: executing program 0 (id=2678): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x0, 0x8, 0x3) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x24, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) syz_clone(0x40005080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x2, 0x0, 0x12, 0x2, [{0xe, 0x5}, {0x2, 0x4}]}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200083, 0x0) ioctl$int_in(r3, 0x5452, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn79Nivjb4uiTidUOPlmt9rm6cu1qSifDJTaEdRmKiKy7RmrjfyyGotF5Y/Hap6U2DthQ1VyXwxerwF0sibJbAJSj+KDP7n+LbfNmH+W7+nL9BiiL+3q+1Y8MR5qXGWm7v+2niYg4dvHfr7ItNuY5BABAi++z+c+zneZ/aTzQVO6efG1oPF9L2R0R90XEnoi4P6JW9sGIeGid9bcvktw8/0mv9BTYGmXzv5fyta3W+V8x+4vxoTy3qxb/SHL8ZGXxUP6aTMbI1iw/s0odP7z62xfdjjXP/7Itq7+YC+btuDK8tfWchbmVuduJudnVTyL2DXeKP7mxEpBExN6I2NdjHSef/uZAt2O3jn8VfVhnqn4d8VS9/y9GW/yFZPX1yeltUVk8NF1cFTf75ddLb3Wr/7bi74Os/7d3vP5vxD+eNK/XLq+/jkt/fN71nmaqp+u/sWNL/vfDuZWVszMRW5I36o1u3j/bOLfIF+Wz+CcPdh7/u6PxSuyPiOwifjgiHomIR/O+eywiHo+Ig53Dy24d46dXnnivW/x3Qv8vtPX/eGuRtv5vJLZE+57OiaFTP37X+j82kmt7/ztSS03me9by/reWdvV2NQMAAMD/TxoROyNJp26kR9Opqfp3+PfE9rSytLzyzPGlD84s1H8jMB4jafGka6zpeehMfltf5Gfb8ofz58ZfDo3W8lPzS5WFsoOHAbfjpvGf1sZ/5s+hslsHbDi/14LB1TT+kzLbAWw+n/8wuIx/GFwdxv9oGe0ANl+nz/+PS2gHsPnaxr9lPxgg7v9hcBn/MLiax78vAMDAWB6NW/9IvlNiW/RylsRdk4j0jmhGfxJJj6NgrYmdZQe4/kTZ70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD///Mv57k=") kernel console output (not intermixed with test programs): syz.5.1664:8216 failed to unregister, leaking uprobe [ 128.020629][ T8218] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #15: comm syz.3.1668: inline data xattr refers to an external xattr inode [ 128.048426][ T8218] EXT4-fs (loop3): Remounting filesystem read-only [ 128.056569][ T8218] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 128.248930][ T8226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8226 comm=syz.4.1670 [ 128.328129][ T8229] netlink: 'syz.4.1672': attribute type 4 has an invalid length. [ 128.385889][ T3376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.393991][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.402542][ T3376] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.476717][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.563212][ T8252] uprobe: syz.0.1682:8252 failed to unregister, leaking uprobe [ 128.650952][ T8258] all: renamed from bridge_slave_0 [ 128.792413][ T8266] loop3: detected capacity change from 0 to 512 [ 128.800723][ T8266] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1688: bg 0: block 35: padding at end of block bitmap is not set [ 128.815312][ T8266] EXT4-fs (loop3): Remounting filesystem read-only [ 128.822079][ T8266] EXT4-fs (loop3): 1 truncate cleaned up [ 128.828239][ T8266] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 128.880941][ T8272] loop3: detected capacity change from 0 to 2048 [ 128.907631][ T8272] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.103431][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 129.118629][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 129.131356][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.131356][ T37] [ 129.161132][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 129.174079][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.174079][ T37] [ 129.183777][ T37] EXT4-fs (loop3): Total free blocks count 0 [ 129.189878][ T37] EXT4-fs (loop3): Free/Dirty block details [ 129.195823][ T37] EXT4-fs (loop3): free_blocks=0 [ 129.200783][ T37] EXT4-fs (loop3): dirty_blocks=2048 [ 129.206145][ T37] EXT4-fs (loop3): Block reservation details [ 129.212142][ T37] EXT4-fs (loop3): i_reserved_data_blocks=128 [ 129.447601][ T8292] program syz.4.1699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.474109][ T8293] loop3: detected capacity change from 0 to 256 [ 129.480716][ T8293] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 129.506619][ T8295] loop4: detected capacity change from 0 to 512 [ 129.518124][ T8295] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1700: bg 0: block 35: padding at end of block bitmap is not set [ 129.535467][ T8295] EXT4-fs (loop4): Remounting filesystem read-only [ 129.542471][ T8295] EXT4-fs (loop4): 1 truncate cleaned up [ 129.548710][ T8295] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 129.721376][ T8315] netlink: 'syz.1.1707': attribute type 10 has an invalid length. [ 129.732733][ T8315] hsr_slave_0: left promiscuous mode [ 129.764706][ T8315] hsr_slave_1: left promiscuous mode [ 129.871271][ T8322] loop3: detected capacity change from 0 to 512 [ 129.878549][ T8322] EXT4-fs: Ignoring removed i_version option [ 129.908708][ T8322] ext4 filesystem being mounted at /378/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.910436][ T8321] SELinux: failed to load policy [ 129.942416][ T8322] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #4: comm syz.3.1709: corrupted inode contents [ 129.954562][ T8322] EXT4-fs (loop3): Remounting filesystem read-only [ 129.964037][ T8328] atomic_op ffff888119148d28 conn xmit_atomic 0000000000000000 [ 131.270881][ T8336] loop5: detected capacity change from 0 to 512 [ 131.279927][ T8337] ref_ctr increment failed for inode: 0x69e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005dd80 [ 131.293808][ T8337] uprobe: syz.1.1726:8337 failed to unregister, leaking uprobe [ 131.316731][ T8336] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1715: bg 0: block 35: padding at end of block bitmap is not set [ 131.338816][ T8336] EXT4-fs (loop5): Remounting filesystem read-only [ 131.345505][ T8336] EXT4-fs (loop5): 1 truncate cleaned up [ 131.351681][ T8336] EXT4-fs mount: 27 callbacks suppressed [ 131.351694][ T8336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.370099][ T8336] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 131.377093][ T8336] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.389335][ T8349] netlink: 'syz.3.1721': attribute type 4 has an invalid length. [ 131.483490][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 131.491518][ T25] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.601797][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.627319][ T8363] all: renamed from bridge_slave_0 [ 131.632987][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.687119][ T8367] atomic_op ffff88811c939128 conn xmit_atomic 0000000000000000 [ 131.897447][ T3376] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 131.907767][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.916493][ T3376] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.982529][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.225695][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'. [ 132.517566][ T8400] loop5: detected capacity change from 0 to 512 [ 132.540727][ T8400] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1742: bg 0: block 35: padding at end of block bitmap is not set [ 132.573156][ T8400] EXT4-fs (loop5): Remounting filesystem read-only [ 132.582942][ T8400] EXT4-fs (loop5): 1 truncate cleaned up [ 132.591412][ T8400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.604592][ T8400] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 132.611636][ T8400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.719588][ T8409] ref_ctr increment failed for inode: 0x808 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005b700 [ 132.748107][ T8409] uprobe: syz.3.1747:8409 failed to unregister, leaking uprobe [ 132.929670][ T8420] SELinux: failed to load policy [ 133.555139][ T8435] SELinux: failed to load policy [ 133.601944][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 133.601961][ T30] audit: type=1326 audit(1741484571.235:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.1.1757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a2fa9d169 code=0x0 [ 133.703951][ T30] audit: type=1400 audit(1741484571.335:5682): avc: denied { setopt } for pid=8441 comm="syz.1.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 133.704083][ T8448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8448 comm=syz.1.1757 [ 133.737190][ T8448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=8448 comm=syz.1.1757 [ 134.458842][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 134.755571][ T8461] ref_ctr increment failed for inode: 0x7b7 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005cd00 [ 134.817705][ T8461] uprobe: syz.4.1762:8461 failed to unregister, leaking uprobe [ 134.848638][ T30] audit: type=1400 audit(1741484572.485:5683): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 134.870790][ T30] audit: type=1400 audit(1741484572.485:5684): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.892395][ T30] audit: type=1400 audit(1741484572.485:5685): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.915050][ T30] audit: type=1400 audit(1741484572.485:5686): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.916510][ T8467] loop0: detected capacity change from 0 to 256 [ 134.937672][ T30] audit: type=1400 audit(1741484572.485:5687): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.945773][ T8467] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 134.991901][ T30] audit: type=1326 audit(1741484572.625:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92106dd169 code=0x7ffc0000 [ 135.016645][ T30] audit: type=1326 audit(1741484572.655:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92106dd169 code=0x7ffc0000 [ 135.040708][ T30] audit: type=1326 audit(1741484572.655:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92106dd169 code=0x7ffc0000 [ 135.323383][ T8477] loop3: detected capacity change from 0 to 512 [ 135.332209][ T8477] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 135.345568][ T8477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 135.354278][ T8477] System zones: 1-12 [ 135.364150][ T8477] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1768: corrupted in-inode xattr: e_value size too large [ 135.383674][ T8477] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1768: couldn't read orphan inode 15 (err -117) [ 135.398556][ T8477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.414995][ T8477] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1768: Unrecognised inode hash code 4 [ 135.426516][ T8477] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1768: Corrupt directory, running e2fsck is recommended [ 135.465475][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.483460][ T8490] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1786'. [ 135.502498][ T8492] pim6reg1: entered promiscuous mode [ 135.508220][ T8492] pim6reg1: entered allmulticast mode [ 135.528796][ T8495] loop5: detected capacity change from 0 to 1024 [ 135.536158][ T8495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.545126][ T8495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.556700][ T8495] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 135.564909][ T8495] System zones: 0-1, 3-36 [ 135.570277][ T8495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.620118][ T6030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.638923][ T8505] pim6reg1: entered promiscuous mode [ 135.644358][ T8505] pim6reg1: entered allmulticast mode [ 135.795135][ T3376] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 135.804756][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.806202][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 135.813661][ T3376] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.822217][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.854980][ T8516] netlink: 'syz.0.1781': attribute type 12 has an invalid length. [ 135.897065][ T8520] loop0: detected capacity change from 0 to 128 [ 135.933398][ T121] bio_check_eod: 18251 callbacks suppressed [ 135.933423][ T121] kworker/u8:4: attempt to access beyond end of device [ 135.933423][ T121] loop0: rw=1, sector=145, nr_sectors = 488 limit=128 [ 135.954721][ T121] kworker/u8:4: attempt to access beyond end of device [ 135.954721][ T121] loop0: rw=1, sector=641, nr_sectors = 8 limit=128 [ 135.987221][ T8521] syz.0.1783: attempt to access beyond end of device [ 135.987221][ T8521] loop0: rw=524288, sector=145, nr_sectors = 488 limit=128 [ 136.001462][ T8521] syz.0.1783: attempt to access beyond end of device [ 136.001462][ T8521] loop0: rw=524288, sector=641, nr_sectors = 8 limit=128 [ 136.247743][ T8524] loop0: detected capacity change from 0 to 512 [ 136.257586][ T8524] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #15: comm syz.0.1784: inline data xattr refers to an external xattr inode [ 136.273027][ T8524] EXT4-fs (loop0): Remounting filesystem read-only [ 136.280293][ T8524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.292898][ T8524] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 136.300128][ T8524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.570540][ T8534] ref_ctr increment failed for inode: 0x7db offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881036ca100 [ 136.584849][ T8534] uprobe: syz.4.1793:8534 failed to unregister, leaking uprobe [ 136.628167][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1795'. [ 136.894919][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 136.951568][ T8573] pim6reg1: entered promiscuous mode [ 136.957054][ T8573] pim6reg1: entered allmulticast mode [ 137.059812][ T8588] loop5: detected capacity change from 0 to 512 [ 137.089436][ T8588] EXT4-fs (loop5): too many log groups per flexible block group [ 137.097317][ T8588] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 137.114764][ T8588] EXT4-fs (loop5): mount failed [ 137.140888][ T8599] tipc: New replicast peer: 255.0.0.255 [ 137.146579][ T8599] tipc: Enabled bearer , priority 10 [ 137.173327][ T8601] loop4: detected capacity change from 0 to 512 [ 137.182643][ T8601] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1822: corrupted in-inode xattr: invalid ea_ino [ 137.197754][ T8601] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1822: couldn't read orphan inode 15 (err -117) [ 137.210302][ T8601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.265902][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.287850][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1823'. [ 137.432439][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1826'. [ 137.693337][ T8624] pim6reg1: entered promiscuous mode [ 137.698832][ T8624] pim6reg1: entered allmulticast mode [ 137.951400][ T8641] loop3: detected capacity change from 0 to 512 [ 137.977745][ T8641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.990723][ T8648] loop0: detected capacity change from 0 to 128 [ 137.991784][ T8641] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.017025][ T8648] syz.0.1841: attempt to access beyond end of device [ 138.017025][ T8648] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 138.043386][ T8648] syz.0.1841: attempt to access beyond end of device [ 138.043386][ T8648] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 138.058482][ T8648] syz.0.1841: attempt to access beyond end of device [ 138.058482][ T8648] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 138.072235][ T8648] syz.0.1841: attempt to access beyond end of device [ 138.072235][ T8648] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 138.086721][ T8648] syz.0.1841: attempt to access beyond end of device [ 138.086721][ T8648] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 138.101107][ T8648] syz.0.1841: attempt to access beyond end of device [ 138.101107][ T8648] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 138.126347][ T8652] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1843'. [ 138.135479][ T8652] unsupported nla_type 65024 [ 138.208289][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.340079][ T8660] pim6reg: entered allmulticast mode [ 138.347373][ T8660] pim6reg: left allmulticast mode [ 138.597242][ T8662] Set syz1 is full, maxelem 65536 reached [ 138.799943][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 138.799958][ T30] audit: type=1326 audit(1741484576.435:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 138.837134][ T8681] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1 [ 138.845913][ T8681] ref_ctr increment failed for inode: 0x3cf offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8881036ce300 [ 138.878592][ T30] audit: type=1326 audit(1741484576.465:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 138.902090][ T30] audit: type=1326 audit(1741484576.465:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 138.925687][ T30] audit: type=1326 audit(1741484576.475:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 138.949200][ T30] audit: type=1326 audit(1741484576.475:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 138.972893][ T30] audit: type=1326 audit(1741484576.475:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 138.996392][ T30] audit: type=1326 audit(1741484576.495:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 139.019821][ T30] audit: type=1326 audit(1741484576.505:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 139.043371][ T30] audit: type=1326 audit(1741484576.505:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 139.067106][ T30] audit: type=1326 audit(1741484576.505:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.1.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2fa9d169 code=0x7ffc0000 [ 139.187853][ T8695] ip6gre1: entered allmulticast mode [ 139.248650][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1868'. [ 139.456097][ T8725] loop4: detected capacity change from 0 to 512 [ 139.461866][ T8725] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.497540][ T8725] EXT4-fs (loop4): 1 truncate cleaned up [ 139.497926][ T8725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.513560][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 139.633166][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.729663][ T8746] loop0: detected capacity change from 0 to 1024 [ 139.777273][ T8746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.793247][ T8746] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 139.793323][ T8746] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 139.793351][ T8746] EXT4-fs (loop0): This should not happen!! Data will be lost [ 139.793351][ T8746] [ 139.793366][ T8746] EXT4-fs (loop0): Total free blocks count 0 [ 139.793443][ T8746] EXT4-fs (loop0): Free/Dirty block details [ 139.793456][ T8746] EXT4-fs (loop0): free_blocks=68451041280 [ 139.793471][ T8746] EXT4-fs (loop0): dirty_blocks=16 [ 139.793485][ T8746] EXT4-fs (loop0): Block reservation details [ 139.793498][ T8746] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 139.799947][ T8746] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 42 with error 28 [ 139.825637][ T8757] loop3: detected capacity change from 0 to 512 [ 139.886377][ T8757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.912937][ T8757] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.930055][ T8758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8758 comm=syz.4.1890 [ 139.974150][ T8757] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1889: corrupted inode contents [ 140.000397][ T8757] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.1889: mark_inode_dirty error [ 140.004590][ T8757] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1889: corrupted inode contents [ 140.038524][ T8757] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.1889: mark_inode_dirty error [ 140.056378][ T8757] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.1889: mark inode dirty (error -117) [ 140.069190][ T8757] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 140.136250][ T8774] loop0: detected capacity change from 0 to 1024 [ 140.147818][ T8774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.162601][ T8774] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.1894: Allocating blocks 385-513 which overlap fs metadata [ 140.179481][ T8773] EXT4-fs (loop0): pa ffff88810704f930: logic 16, phys. 129, len 24 [ 140.179513][ T8773] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 140.206864][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.225906][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'. [ 140.257753][ T8780] SELinux: failed to load policy [ 140.270808][ T8782] loop5: detected capacity change from 0 to 2048 [ 140.287313][ T8782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.299781][ T8782] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.447044][ T8788] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1900: bg 0: block 345: padding at end of block bitmap is not set [ 140.465450][ T8788] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 140.478153][ T8788] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.478153][ T8788] [ 140.514241][ T315] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 140.526965][ T315] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.526965][ T315] [ 140.561080][ T315] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 140.573940][ T315] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.573940][ T315] [ 140.583686][ T315] EXT4-fs (loop5): Total free blocks count 0 [ 140.589708][ T315] EXT4-fs (loop5): Free/Dirty block details [ 140.595657][ T315] EXT4-fs (loop5): free_blocks=0 [ 140.613035][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.655001][ T8791] netlink: 'syz.3.1903': attribute type 4 has an invalid length. [ 140.690442][ T8793] loop5: detected capacity change from 0 to 1024 [ 140.708274][ T8793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.741905][ T6030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.795019][ T8802] loop3: detected capacity change from 0 to 512 [ 140.814122][ T8802] journal_path: Non-blockdev passed as './bus' [ 140.820401][ T8802] EXT4-fs: error: could not find journal device path [ 140.896816][ T8809] bond_slave_1: entered promiscuous mode [ 140.926246][ T8809] bond_slave_1: left promiscuous mode [ 141.027686][ T8821] ÿÿÿÿÿÿ: renamed from vlan1 [ 141.082005][ T8825] 0: reclassify loop, rule prio 0, protocol 800 [ 141.100773][ T8827] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1917'. [ 141.262184][ T8841] loop1: detected capacity change from 0 to 2048 [ 141.289595][ T8841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.306852][ T8841] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.342880][ T8848] loop4: detected capacity change from 0 to 256 [ 141.363910][ T8848] vfat: Unknown parameter 'shortnUme' [ 141.426451][ T8853] netlink: 'syz.4.1927': attribute type 4 has an invalid length. [ 141.465167][ T8856] loop4: detected capacity change from 0 to 2048 [ 141.477828][ T8856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.515819][ T3301] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.532006][ T8851] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1923: bg 0: block 345: padding at end of block bitmap is not set [ 141.553234][ T8851] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 141.566021][ T8851] EXT4-fs (loop1): This should not happen!! Data will be lost [ 141.566021][ T8851] [ 141.605371][ T121] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 141.618856][ T121] EXT4-fs (loop1): This should not happen!! Data will be lost [ 141.618856][ T121] [ 141.631282][ T8859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.658176][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 141.670973][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 141.670973][ T51] [ 141.680734][ T51] EXT4-fs (loop1): Total free blocks count 0 [ 141.686889][ T51] EXT4-fs (loop1): Free/Dirty block details [ 141.692809][ T51] EXT4-fs (loop1): free_blocks=0 [ 141.717581][ T121] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.767367][ T121] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.866702][ T121] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.928226][ T8861] chnl_net:caif_netlink_parms(): no params data found [ 141.943184][ T121] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.996494][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.003573][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.011004][ T8861] bridge_slave_0: entered allmulticast mode [ 142.017906][ T8861] bridge_slave_0: entered promiscuous mode [ 142.024926][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.032076][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.041226][ T8861] bridge_slave_1: entered allmulticast mode [ 142.048103][ T8861] bridge_slave_1: entered promiscuous mode [ 142.099168][ T121] bond1 (unregistering): (slave gretap0): Releasing active interface [ 142.107370][ T121] bond1 (unregistering): (slave gretap0): the permanent HWaddr of slave - e6:73:1f:32:25:48 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 142.131832][ T121] team0: Port device geneve1 removed [ 142.189189][ T121] bond1 (unregistering): (slave bridge1): Releasing active interface [ 142.272578][ T8897] loop0: detected capacity change from 0 to 512 [ 142.279764][ T8897] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.291004][ T8897] EXT4-fs (loop0): 1 truncate cleaned up [ 142.297395][ T121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.297654][ T8897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.306069][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 142.325357][ T121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.334755][ T121] bond0 (unregistering): Released all slaves [ 142.338369][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'. [ 142.343901][ T121] bond1 (unregistering): Released all slaves [ 142.358479][ T121] bond2 (unregistering): Released all slaves [ 142.378259][ T8861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.398615][ T8861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.409570][ T121] tipc: Disabling bearer [ 142.417892][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.419028][ T121] tipc: Disabling bearer [ 142.432058][ T121] tipc: Left network mode [ 142.443572][ T121] hsr_slave_0: left promiscuous mode [ 142.449653][ T121] hsr_slave_1: left promiscuous mode [ 142.455420][ T121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.464955][ T121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.510266][ T121] team0 (unregistering): Port device team_slave_1 removed [ 142.520836][ T121] team0 (unregistering): Port device Cà removed [ 142.562632][ T8861] team0: Port device team_slave_0 added [ 142.579848][ T8861] team0: Port device team_slave_1 added [ 142.615878][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.622873][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.648876][ T8861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.663466][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.670486][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.696997][ T8861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.712526][ T8911] serio: Serial port ptm0 [ 142.724584][ T8861] hsr_slave_0: entered promiscuous mode [ 142.730765][ T8861] hsr_slave_1: entered promiscuous mode [ 142.838620][ T8861] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 142.850589][ T8861] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 142.882653][ T8861] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 142.895596][ T8861] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.926489][ T121] IPVS: stop unused estimator thread 0... [ 142.960416][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.974434][ T8861] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.984463][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.991640][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.015009][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.022131][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.046091][ T8924] ÿÿÿÿÿÿ: renamed from vlan1 [ 143.082660][ T8926] loop5: detected capacity change from 0 to 512 [ 143.110512][ T8929] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 143.118709][ T8926] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 143.131208][ T8926] EXT4-fs (loop5): 1 truncate cleaned up [ 143.137790][ T8926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.175107][ T8861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.182062][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1952'. [ 143.346179][ T6030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.467567][ T8954] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1958'. [ 143.516558][ T8861] veth0_vlan: entered promiscuous mode [ 143.544883][ T8861] veth1_vlan: entered promiscuous mode [ 143.668201][ T8861] veth0_macvtap: entered promiscuous mode [ 143.675472][ T8861] veth1_macvtap: entered promiscuous mode [ 143.686804][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.696338][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.710214][ T8861] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.719256][ T8861] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.727998][ T8861] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.736808][ T8861] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.845797][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 143.845814][ T30] audit: type=1400 audit(1741484581.435:6004): avc: denied { create } for pid=8961 comm="syz.0.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.871501][ T30] audit: type=1400 audit(1741484581.435:6005): avc: denied { getopt } for pid=8961 comm="syz.0.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.960158][ T8972] netlink: 'syz.1.1963': attribute type 1 has an invalid length. [ 144.168879][ T8979] loop1: detected capacity change from 0 to 512 [ 144.177195][ T8979] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.188504][ T8979] EXT4-fs (loop1): 1 truncate cleaned up [ 144.194528][ T8979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.221031][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1966'. [ 144.252517][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.294947][ T8985] loop5: detected capacity change from 0 to 512 [ 144.329730][ T8985] EXT4-fs (loop5): blocks per group (71) and clusters per group (32768) inconsistent [ 144.411609][ T8990] netlink: 'syz.3.1969': attribute type 4 has an invalid length. [ 144.419445][ T8990] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1969'. [ 144.483330][ T8995] pim6reg1: entered promiscuous mode [ 144.488740][ T8995] pim6reg1: entered allmulticast mode [ 144.525601][ T9001] loop0: detected capacity change from 0 to 512 [ 144.533072][ T9001] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 144.544508][ T9001] EXT4-fs (loop0): 1 truncate cleaned up [ 144.553588][ T9001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.571044][ T30] audit: type=1400 audit(1741484582.205:6006): avc: denied { rename } for pid=9000 comm="syz.0.1973" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.600700][ T30] audit: type=1400 audit(1741484582.235:6007): avc: denied { read } for pid=9005 comm="syz.6.1975" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 144.624484][ T30] audit: type=1400 audit(1741484582.235:6008): avc: denied { open } for pid=9005 comm="syz.6.1975" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 144.648781][ T30] audit: type=1400 audit(1741484582.235:6009): avc: denied { ioctl } for pid=9005 comm="syz.6.1975" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 144.680823][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.713322][ T9010] loop0: detected capacity change from 0 to 512 [ 144.747886][ T9010] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1976: bg 0: block 35: padding at end of block bitmap is not set [ 144.764657][ T9010] EXT4-fs (loop0): Remounting filesystem read-only [ 144.771414][ T9010] EXT4-fs (loop0): 1 truncate cleaned up [ 144.778722][ T9010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.791204][ T9010] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 144.798137][ T9010] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.821424][ T9010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9010 comm=syz.0.1976 [ 144.834002][ T9010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9010 comm=syz.0.1976 [ 145.032645][ T30] audit: type=1326 audit(1741484582.665:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 145.056205][ T30] audit: type=1326 audit(1741484582.665:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 145.100343][ T30] audit: type=1326 audit(1741484582.715:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 145.123836][ T30] audit: type=1326 audit(1741484582.715:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 145.159384][ T9025] loop6: detected capacity change from 0 to 256 [ 145.166670][ T9025] vfat: Unknown parameter 'shortnUme' [ 145.203513][ T9031] loop6: detected capacity change from 0 to 1024 [ 145.210549][ T9031] EXT4-fs: Ignoring removed bh option [ 145.216362][ T9031] EXT4-fs: inline encryption not supported [ 145.223646][ T9031] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.248916][ T9031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 145.282984][ T9031] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 2: comm syz.6.1983: lblock 2 mapped to illegal pblock 2 (length 1) [ 145.297393][ T9031] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.1983: lblock 0 mapped to illegal pblock 48 (length 1) [ 145.311767][ T9031] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1983: Failed to acquire dquot type 0 [ 145.325148][ T9031] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 145.337347][ T9031] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #11: comm syz.6.1983: mark_inode_dirty error [ 145.350480][ T9031] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 145.375909][ T9031] EXT4-fs (loop6): 1 orphan inode deleted [ 145.382048][ T9031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.395857][ T51] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 145.431034][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 145.474190][ T8861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.484272][ T8861] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 145.498442][ T8861] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 145.508676][ T8861] EXT4-fs error (device loop6): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 145.544714][ T9055] loop6: detected capacity change from 0 to 512 [ 145.557445][ T9055] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 145.576696][ T9055] EXT4-fs (loop6): 1 truncate cleaned up [ 145.582713][ T9057] loop3: detected capacity change from 0 to 2048 [ 145.582933][ T9055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.617494][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1991'. [ 145.645005][ T8861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.662776][ T9057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.778028][ T3306] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.888868][ T9078] loop5: detected capacity change from 0 to 1024 [ 145.940557][ T9078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.965795][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1999'. [ 146.011900][ T9078] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 146.066180][ T9082] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9082 comm=syz.1.1999 [ 146.077221][ T9078] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 146.091172][ T9078] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.091172][ T9078] [ 146.101004][ T9078] EXT4-fs (loop5): Total free blocks count 0 [ 146.107208][ T9078] EXT4-fs (loop5): Free/Dirty block details [ 146.113205][ T9078] EXT4-fs (loop5): free_blocks=68451041280 [ 146.119168][ T9078] EXT4-fs (loop5): dirty_blocks=16 [ 146.124310][ T9078] EXT4-fs (loop5): Block reservation details [ 146.130478][ T9078] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 146.210492][ T9078] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 42 with error 28 [ 146.345992][ T6257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.452409][ T9100] loop5: detected capacity change from 0 to 128 [ 146.462771][ T9100] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.480830][ T9100] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.496300][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 146.563559][ T9112] loop0: detected capacity change from 0 to 128 [ 146.632682][ T6030] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.653518][ T9104] chnl_net:caif_netlink_parms(): no params data found [ 146.709490][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.716672][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.726469][ T9104] bridge_slave_0: entered allmulticast mode [ 146.733130][ T9104] bridge_slave_0: entered promiscuous mode [ 146.748815][ T9125] loop5: detected capacity change from 0 to 512 [ 146.757647][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.764761][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.773890][ T9104] bridge_slave_1: entered allmulticast mode [ 146.778226][ T9125] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2015: bg 0: block 35: padding at end of block bitmap is not set [ 146.780712][ T9104] bridge_slave_1: entered promiscuous mode [ 146.803950][ T9125] EXT4-fs (loop5): Remounting filesystem read-only [ 146.811744][ T9125] EXT4-fs (loop5): 1 truncate cleaned up [ 146.819730][ T9125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.826014][ T51] bridge_slave_1: left allmulticast mode [ 146.837522][ T51] bridge_slave_1: left promiscuous mode [ 146.843251][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.851178][ T9125] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 146.858618][ T9125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.875857][ T51] bridge_slave_0: left allmulticast mode [ 146.881614][ T51] bridge_slave_0: left promiscuous mode [ 146.887417][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.924629][ T9125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9125 comm=syz.5.2015 [ 146.937273][ T9125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9125 comm=syz.5.2015 [ 147.078367][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.089146][ T51] bond0 (unregistering): Released all slaves [ 147.098389][ T51] bond1 (unregistering): Released all slaves [ 147.128652][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.147543][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.157391][ T51] tipc: Disabling bearer [ 147.163093][ T51] tipc: Disabling bearer [ 147.168245][ T51] tipc: Left network mode [ 147.190913][ T51] hsr_slave_0: left promiscuous mode [ 147.200734][ T51] hsr_slave_1: left promiscuous mode [ 147.217791][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.251723][ T9132] loop6: detected capacity change from 0 to 1024 [ 147.276265][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.293117][ T9132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.308037][ T9139] loop1: detected capacity change from 0 to 512 [ 147.318934][ T9139] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.340848][ T9132] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 147.361218][ T9132] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 147.373536][ T9132] EXT4-fs (loop6): This should not happen!! Data will be lost [ 147.373536][ T9132] [ 147.383343][ T9132] EXT4-fs (loop6): Total free blocks count 0 [ 147.389416][ T9132] EXT4-fs (loop6): Free/Dirty block details [ 147.395318][ T9132] EXT4-fs (loop6): free_blocks=68451041280 [ 147.401204][ T9132] EXT4-fs (loop6): dirty_blocks=16 [ 147.404696][ T9139] EXT4-fs (loop1): 1 truncate cleaned up [ 147.406356][ T9132] EXT4-fs (loop6): Block reservation details [ 147.412334][ T9139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.418145][ T9132] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 147.588518][ T51] team0 (unregistering): Port device team_slave_0 removed [ 147.614919][ T9144] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 42 with error 28 [ 147.691442][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.761704][ T9104] team0: Port device team_slave_0 added [ 147.800068][ T9104] team0: Port device team_slave_1 added [ 147.873427][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.880533][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.906656][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.961895][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.969054][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.995162][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.091985][ T9104] hsr_slave_0: entered promiscuous mode [ 148.098330][ T9104] hsr_slave_1: entered promiscuous mode [ 148.104369][ T9104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.111968][ T9104] Cannot create hsr debugfs directory [ 148.163607][ T9156] loop0: detected capacity change from 0 to 1024 [ 148.170949][ T9156] EXT4-fs: Ignoring removed bh option [ 148.171599][ T9158] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.176575][ T9156] EXT4-fs: inline encryption not supported [ 148.193038][ T9156] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.230156][ T9104] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 148.241399][ T9104] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 148.250115][ T9156] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 148.259629][ T9156] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.2035: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.274629][ T9104] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 148.282710][ T9156] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.2035: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.297679][ T9156] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.2035: Failed to acquire dquot type 0 [ 148.303062][ T9104] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 148.316981][ T9156] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 148.326662][ T9156] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.2035: mark_inode_dirty error [ 148.339248][ T9156] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 148.349618][ T9156] EXT4-fs (loop0): 1 orphan inode deleted [ 148.350547][ T9158] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.357317][ T9156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.378699][ T37] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.395792][ T9167] loop5: detected capacity change from 0 to 512 [ 148.404135][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 0 [ 148.431235][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.440843][ T9167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.444427][ T9104] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.456827][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.469508][ T9167] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.482131][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.487228][ T3310] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 148.489245][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.503067][ T3310] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 148.511304][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.519366][ T3310] EXT4-fs error (device loop0): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 148.525798][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.559724][ T9158] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.579759][ T9167] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #19: comm syz.5.2028: corrupted inode contents [ 148.592596][ T9167] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #19: comm syz.5.2028: mark_inode_dirty error [ 148.604486][ T9167] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #19: comm syz.5.2028: corrupted inode contents [ 148.618477][ T9167] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #19: comm syz.5.2028: mark_inode_dirty error [ 148.631571][ T9167] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #19: comm syz.5.2028: mark inode dirty (error -117) [ 148.645232][ T9167] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 148.647445][ T9158] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.666830][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.714467][ T9158] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.726393][ T9158] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.738301][ T9158] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.750728][ T9158] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.813672][ T9104] veth0_vlan: entered promiscuous mode [ 148.822089][ T9104] veth1_vlan: entered promiscuous mode [ 148.830369][ T9190] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.853102][ T9104] veth0_macvtap: entered promiscuous mode [ 148.860822][ T9104] veth1_macvtap: entered promiscuous mode [ 148.873531][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.884134][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.888335][ T9192] loop1: detected capacity change from 0 to 512 [ 148.902198][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.902478][ T9192] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2031: bg 0: block 35: padding at end of block bitmap is not set [ 148.914070][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.925646][ T9192] EXT4-fs (loop1): Remounting filesystem read-only [ 148.934376][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.951195][ T9192] EXT4-fs (loop1): 1 truncate cleaned up [ 148.952249][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.964769][ T9192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.977026][ T9192] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 148.978154][ T9190] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.984167][ T9192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.004082][ T9104] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.013006][ T9104] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.021885][ T9104] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.030643][ T9104] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.034165][ T9192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9192 comm=syz.1.2031 [ 149.052144][ T9192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9192 comm=syz.1.2031 [ 149.084281][ T9190] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.127553][ T9190] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.163528][ T6030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.186541][ T9203] loop5: detected capacity change from 0 to 512 [ 149.193639][ T9203] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 149.205406][ T9203] EXT4-fs (loop5): 1 truncate cleaned up [ 149.212306][ T9203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.242597][ T6030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.303197][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 149.303215][ T30] audit: type=1400 audit(1741484586.935:6140): avc: denied { connect } for pid=9209 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.340830][ T9212] loop5: detected capacity change from 0 to 1024 [ 149.355342][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2048'. [ 149.361697][ T9212] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.2037: Allocating blocks 385-513 which overlap fs metadata [ 149.366758][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.387020][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.397946][ T9211] EXT4-fs (loop5): pa ffff8881070b0310: logic 16, phys. 129, len 24 [ 149.406121][ T9211] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 149.438534][ T30] audit: type=1326 audit(1741484587.075:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895a72d169 code=0x7ffc0000 [ 149.462031][ T30] audit: type=1326 audit(1741484587.075:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895a72d169 code=0x7ffc0000 [ 149.494112][ T9223] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2040'. [ 149.514993][ T30] audit: type=1326 audit(1741484587.125:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f895a72d169 code=0x7ffc0000 [ 149.538589][ T30] audit: type=1326 audit(1741484587.145:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895a72d169 code=0x7ffc0000 [ 149.562367][ T30] audit: type=1326 audit(1741484587.145:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895a72d169 code=0x7ffc0000 [ 149.586471][ T30] audit: type=1326 audit(1741484587.195:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f895a72d169 code=0x7ffc0000 [ 149.610587][ T30] audit: type=1326 audit(1741484587.245:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f895a72d1a3 code=0x7ffc0000 [ 149.633980][ T30] audit: type=1326 audit(1741484587.245:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f895a72d1a3 code=0x7ffc0000 [ 149.657269][ T30] audit: type=1326 audit(1741484587.245:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895a72d169 code=0x7ffc0000 [ 149.803278][ T9233] geneve0: entered allmulticast mode [ 149.913020][ T9236] loop0: detected capacity change from 0 to 512 [ 149.932103][ T9236] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.972526][ T9239] loop7: detected capacity change from 0 to 512 [ 149.974359][ T9236] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.2046: corrupted inode contents [ 149.979883][ T9239] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 149.992740][ T9236] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.2046: mark_inode_dirty error [ 150.007149][ T9239] EXT4-fs (loop7): 1 truncate cleaned up [ 150.012907][ T9236] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.2046: corrupted inode contents [ 150.031039][ T9236] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.2046: mark_inode_dirty error [ 150.043478][ T9236] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.2046: mark inode dirty (error -117) [ 150.056640][ T9236] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 150.136976][ T9248] loop7: detected capacity change from 0 to 128 [ 150.164463][ T9248] bio_check_eod: 19619 callbacks suppressed [ 150.164483][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.164483][ T9248] loop7: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 150.192753][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.192753][ T9248] loop7: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 150.206711][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.206711][ T9248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.219966][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.219966][ T9248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.233280][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.233280][ T9248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.246674][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.246674][ T9248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.259977][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.259977][ T9248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.273295][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.273295][ T9248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.286601][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.286601][ T9248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.299830][ T9248] syz.7.2052: attempt to access beyond end of device [ 150.299830][ T9248] loop7: rw=0, sector=145, nr_sectors = 8 limit=128 [ 151.232762][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2060'. [ 151.259048][ T9269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.290020][ T9274] loop7: detected capacity change from 0 to 2048 [ 151.299177][ T9269] macvlan2: entered promiscuous mode [ 151.304575][ T9269] macvlan2: entered allmulticast mode [ 151.317328][ T9269] bond0: entered allmulticast mode [ 151.322500][ T9269] bond_slave_0: entered allmulticast mode [ 151.328278][ T9269] bond_slave_1: entered allmulticast mode [ 151.334025][ T9269] bond0: entered promiscuous mode [ 151.339122][ T9269] bond_slave_0: entered promiscuous mode [ 151.344914][ T9269] bond_slave_1: entered promiscuous mode [ 151.360536][ T9269] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.369408][ T9269] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 151.384605][ T9274] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.546936][ T9287] geneve0: entered allmulticast mode [ 151.558523][ T9280] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2061: bg 0: block 345: padding at end of block bitmap is not set [ 151.590081][ T9280] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 151.602660][ T9280] EXT4-fs (loop7): This should not happen!! Data will be lost [ 151.602660][ T9280] [ 151.638743][ T9289] loop0: detected capacity change from 0 to 512 [ 151.647411][ T9289] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2077: corrupted in-inode xattr: invalid ea_ino [ 151.662417][ T9289] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2077: couldn't read orphan inode 15 (err -117) [ 151.675686][ T9292] loop5: detected capacity change from 0 to 128 [ 151.685588][ T315] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 151.698300][ T315] EXT4-fs (loop7): This should not happen!! Data will be lost [ 151.698300][ T315] [ 151.730857][ T37] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 151.743713][ T37] EXT4-fs (loop7): This should not happen!! Data will be lost [ 151.743713][ T37] [ 151.753507][ T37] EXT4-fs (loop7): Total free blocks count 0 [ 151.759566][ T37] EXT4-fs (loop7): Free/Dirty block details [ 151.765663][ T37] EXT4-fs (loop7): free_blocks=0 [ 151.770662][ T37] EXT4-fs (loop7): dirty_blocks=2032 [ 152.640670][ T9190] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.651799][ T9190] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.662679][ T9190] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.673722][ T9190] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.706076][ T9298] loop1: detected capacity change from 0 to 128 [ 153.567986][ T9340] loop5: detected capacity change from 0 to 512 [ 153.578754][ T9340] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 153.658229][ T9346] syz.5.2090: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 153.673054][ T9346] CPU: 1 UID: 0 PID: 9346 Comm: syz.5.2090 Tainted: G W 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 153.673164][ T9346] Tainted: [W]=WARN [ 153.673173][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.673188][ T9346] Call Trace: [ 153.673195][ T9346] [ 153.673205][ T9346] dump_stack_lvl+0xf2/0x150 [ 153.673263][ T9346] dump_stack+0x15/0x1a [ 153.673290][ T9346] warn_alloc+0x145/0x1b0 [ 153.673342][ T9346] ? dev_map_hash_lookup_elem+0xa9/0xd0 [ 153.673372][ T9346] ? __vmalloc_node_range_noprof+0x88/0xe70 [ 153.673405][ T9346] ? __rcu_read_unlock+0x4e/0x70 [ 153.673479][ T9346] ? audit_log_end+0x1d0/0x1e0 [ 153.673498][ T9346] __vmalloc_node_range_noprof+0xaa/0xe70 [ 153.673536][ T9346] ? kmem_cache_free+0xdc/0x2d0 [ 153.673608][ T9346] ? __rcu_read_unlock+0x4e/0x70 [ 153.673630][ T9346] ? avc_has_perm_noaudit+0x1cc/0x210 [ 153.673700][ T9346] ? should_fail_ex+0x31/0x260 [ 153.673736][ T9346] ? xskq_create+0x36/0xd0 [ 153.673768][ T9346] ? should_failslab+0x8f/0xb0 [ 153.673894][ T9346] vmalloc_user_noprof+0x59/0x70 [ 153.673931][ T9346] ? xskq_create+0x79/0xd0 [ 153.673974][ T9346] xskq_create+0x79/0xd0 [ 153.674012][ T9346] xsk_init_queue+0x82/0xd0 [ 153.674049][ T9346] xsk_setsockopt+0x388/0x520 [ 153.674081][ T9346] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.674119][ T9346] __sys_setsockopt+0x187/0x200 [ 153.674149][ T9346] __x64_sys_setsockopt+0x66/0x80 [ 153.674179][ T9346] x64_sys_call+0x282e/0x2dc0 [ 153.674212][ T9346] do_syscall_64+0xc9/0x1c0 [ 153.674269][ T9346] ? clear_bhb_loop+0x55/0xb0 [ 153.674301][ T9346] ? clear_bhb_loop+0x55/0xb0 [ 153.674400][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.674433][ T9346] RIP: 0033:0x7f895a72d169 [ 153.674449][ T9346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.674502][ T9346] RSP: 002b:00007f8958d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.674526][ T9346] RAX: ffffffffffffffda RBX: 00007f895a945fa0 RCX: 00007f895a72d169 [ 153.674541][ T9346] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 153.674554][ T9346] RBP: 00007f895a7ae2a0 R08: 0000000000000004 R09: 0000000000000000 [ 153.674567][ T9346] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.674578][ T9346] R13: 0000000000000000 R14: 00007f895a945fa0 R15: 00007ffce2a3cbb8 [ 153.674646][ T9346] [ 153.674654][ T9346] Mem-Info: [ 153.784870][ T9353] loop1: detected capacity change from 0 to 512 [ 153.786277][ T9346] active_anon:13942 inactive_anon:11 isolated_anon:0 [ 153.786277][ T9346] active_file:6902 inactive_file:3807 isolated_file:0 [ 153.786277][ T9346] unevictable:11 dirty:139 writeback:0 [ 153.786277][ T9346] slab_reclaimable:3000 slab_unreclaimable:80200 [ 153.786277][ T9346] mapped:28233 shmem:882 pagetables:1063 [ 153.786277][ T9346] sec_pagetables:0 bounce:0 [ 153.786277][ T9346] kernel_misc_reclaimable:0 [ 153.786277][ T9346] free:1827944 free_pcp:4222 free_cma:0 [ 153.898571][ T9353] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.2091: inline data xattr refers to an external xattr inode [ 153.904578][ T9346] Node 0 active_anon:55768kB inactive_anon:44kB active_file:27608kB inactive_file:15228kB unevictable:44kB isolated(anon):0kB isolated(file):0kB mapped:112932kB dirty:556kB writeback:0kB shmem:3528kB writeback_tmp:0kB kernel_stack:2976kB pagetables:4368kB sec_pagetables:0kB all_unreclaimable? no [ 153.999095][ T9353] EXT4-fs (loop1): Remounting filesystem read-only [ 154.013305][ T9346] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.021353][ T9353] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 154.046867][ T9346] lowmem_reserve[]: 0 2885 7863 0 [ 154.046908][ T9346] Node 0 DMA32 free:2950736kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954368kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 154.087581][ T9346] lowmem_reserve[]: 0 0 4978 0 [ 154.092483][ T9346] Node 0 Normal free:4349368kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:55768kB inactive_anon:44kB active_file:27608kB inactive_file:15228kB unevictable:44kB writepending:556kB present:5242880kB managed:5098208kB mlocked:44kB bounce:0kB free_pcp:13096kB local_pcp:12168kB free_cma:0kB [ 154.123321][ T9346] lowmem_reserve[]: 0 0 0 0 [ 154.127916][ T9346] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.140659][ T9346] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950736kB [ 154.157013][ T9346] Node 0 Normal: 675*4kB (ME) 721*8kB (ME) 673*16kB (UME) 848*32kB (UME) 551*64kB (UME) 230*128kB (UME) 116*256kB (UME) 116*512kB (UME) 84*1024kB (UME) 46*2048kB (UM) 969*4096kB (UM) = 4349412kB [ 154.176503][ T9346] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 154.185913][ T9346] 11597 total pagecache pages [ 154.190627][ T9346] 13 pages in swap cache [ 154.194860][ T9346] Free swap = 124256kB [ 154.199037][ T9346] Total swap = 124996kB [ 154.203193][ T9346] 2097051 pages RAM [ 154.207055][ T9346] 0 pages HighMem/MovableOnly [ 154.211799][ T9346] 80067 pages reserved [ 154.226502][ T9358] netlink: 'syz.7.2094': attribute type 7 has an invalid length. [ 154.234315][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2094'. [ 154.300971][ T9365] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.382923][ T9365] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.400123][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 154.400141][ T30] audit: type=1400 audit(1741484592.035:6325): avc: denied { mount } for pid=9375 comm="syz.5.2101" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 154.410480][ T9378] loop1: detected capacity change from 0 to 512 [ 154.436496][ T9378] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 154.449798][ T9365] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.461530][ T9380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.468795][ T9380] IPv6: NLM_F_CREATE should be set when creating new route [ 154.518661][ T9365] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.575375][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2106'. [ 154.593773][ T9365] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.621701][ T9365] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.636830][ T9365] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.648775][ T9365] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.722872][ T9395] syzkaller0: entered promiscuous mode [ 154.728448][ T9395] syzkaller0: entered allmulticast mode [ 154.761666][ T30] audit: type=1400 audit(1741484592.395:6326): avc: denied { wake_alarm } for pid=9405 comm="syz.7.2115" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.856882][ T9412] loop1: detected capacity change from 0 to 512 [ 154.858829][ T9414] loop0: detected capacity change from 0 to 512 [ 154.870678][ T9414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.881987][ T9414] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 154.882971][ T9412] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.898119][ T9414] EXT4-fs (loop0): 1 truncate cleaned up [ 154.949718][ T9421] vlan1: entered allmulticast mode [ 154.964928][ T9420] pim6reg1: entered promiscuous mode [ 154.970364][ T9420] pim6reg1: entered allmulticast mode [ 154.976137][ T30] audit: type=1400 audit(1741484592.595:6327): avc: denied { listen } for pid=9422 comm="syz.5.2120" lport=59647 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.999230][ T30] audit: type=1400 audit(1741484592.595:6328): avc: denied { write } for pid=9422 comm="syz.5.2120" lport=59647 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.023245][ T30] audit: type=1400 audit(1741484592.595:6329): avc: denied { setopt } for pid=9422 comm="syz.5.2120" lport=59647 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.545800][ T30] audit: type=1400 audit(1741484593.175:6330): avc: denied { read } for pid=9443 comm="syz.6.2127" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.570336][ T30] audit: type=1400 audit(1741484593.175:6331): avc: denied { open } for pid=9443 comm="syz.6.2127" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.595144][ T30] audit: type=1400 audit(1741484593.175:6332): avc: denied { ioctl } for pid=9443 comm="syz.6.2127" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.695100][ T9450] macsec0: entered promiscuous mode [ 155.700579][ T9450] macsec0: entered allmulticast mode [ 155.706027][ T9450] veth1_macvtap: entered allmulticast mode [ 155.799675][ T9455] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.847837][ T9455] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.887440][ T9457] loop5: detected capacity change from 0 to 2048 [ 155.916953][ T9457] Alternate GPT is invalid, using primary GPT. [ 155.923391][ T9457] loop5: p1 p2 p3 [ 155.932503][ T30] audit: type=1400 audit(1741484593.565:6333): avc: denied { connect } for pid=9456 comm="syz.5.2134" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.028050][ T9461] pim6reg1: entered promiscuous mode [ 156.033426][ T9461] pim6reg1: entered allmulticast mode [ 156.049434][ T9455] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.189395][ T9455] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.526151][ T9486] bridge0: port 1(syz_tun) entered blocking state [ 156.532633][ T9486] bridge0: port 1(syz_tun) entered disabled state [ 156.539683][ T9486] syz_tun: entered allmulticast mode [ 156.545858][ T9486] syz_tun: entered promiscuous mode [ 157.091171][ T9515] vlan3: entered allmulticast mode [ 157.096352][ T9515] bridge_slave_0: entered allmulticast mode [ 157.102994][ T9515] bridge_slave_0: left allmulticast mode [ 157.224662][ T9521] loop1: detected capacity change from 0 to 512 [ 157.232006][ T9521] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 157.475386][ T9529] loop5: detected capacity change from 0 to 512 [ 157.482281][ T9529] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.494156][ T9529] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 157.508809][ T9529] EXT4-fs (loop5): 1 truncate cleaned up [ 157.879505][ T30] audit: type=1326 audit(1741484595.515:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9546 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 157.981083][ T9550] vlan2: entered allmulticast mode [ 158.218974][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 158.257368][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'. [ 158.327005][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2177'. [ 158.336183][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2177'. [ 158.345584][ T9565] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2177'. [ 158.356658][ T9565] netem: change failed [ 158.395010][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'. [ 158.404047][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'. [ 158.413330][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'. [ 158.444557][ T9572] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2180'. [ 158.946284][ T9595] loop6: detected capacity change from 0 to 164 [ 158.953522][ T9595] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.966036][ T9595] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.227481][ T9609] xt_hashlimit: max too large, truncated to 1048576 [ 159.254301][ T9613] loop6: detected capacity change from 0 to 512 [ 159.260735][ T9611] loop5: detected capacity change from 0 to 512 [ 159.268156][ T9611] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 159.285592][ T9455] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.298608][ T9455] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.308980][ T9611] EXT4-fs (loop5): 1 truncate cleaned up [ 159.319356][ T9613] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.348576][ T9455] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.357666][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 159.372590][ T9455] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.471751][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 159.471769][ T30] audit: type=1400 audit(1741484597.105:6374): avc: denied { ioctl } for pid=9612 comm="syz.6.2198" path="/43/file0/file2" dev="loop6" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.534563][ T9625] loop7: detected capacity change from 0 to 2048 [ 159.562091][ T9629] team1: entered promiscuous mode [ 159.567919][ T9629] 8021q: adding VLAN 0 to HW filter on device team1 [ 159.627340][ T9635] loop5: detected capacity change from 0 to 1024 [ 159.634448][ T9635] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.657869][ T9635] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 159.673852][ T9637] block device autoloading is deprecated and will be removed. [ 159.712392][ T9635] EXT4-fs (loop5): orphan cleanup on readonly fs [ 159.722827][ T9635] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 159.748142][ T9635] EXT4-fs (loop5): Remounting filesystem read-only [ 159.769837][ T30] audit: type=1400 audit(1741484597.405:6375): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.770722][ T9635] Quota error (device loop5): write_blk: dquota write failed [ 159.793120][ T30] audit: type=1400 audit(1741484597.405:6376): avc: denied { open } for pid=3310 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.793155][ T30] audit: type=1400 audit(1741484597.405:6377): avc: denied { ioctl } for pid=3310 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=578 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.800570][ T9635] Quota error (device loop5): write_blk: dquota write failed [ 159.856158][ T9635] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 159.867244][ T9635] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 159.876374][ T9635] EXT4-fs (loop5): 1 orphan inode deleted [ 159.882873][ T9635] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 160.024587][ T30] audit: type=1400 audit(1741484597.655:6378): avc: denied { ioctl } for pid=9658 comm="syz.0.2216" path="socket:[29796]" dev="sockfs" ino=29796 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.159431][ T30] audit: type=1400 audit(1741484597.785:6379): avc: denied { write } for pid=9656 comm="syz.6.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.254229][ T9670] bridge_slave_0: left allmulticast mode [ 160.260002][ T9670] bridge_slave_0: left promiscuous mode [ 160.265698][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.275056][ T9670] bridge_slave_1: left allmulticast mode [ 160.280899][ T9670] bridge_slave_1: left promiscuous mode [ 160.286613][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.297961][ T9670] bond0: (slave bond_slave_0): Releasing backup interface [ 160.317749][ T9670] bond0: (slave bond_slave_1): Releasing backup interface [ 160.355468][ T9670] team0: Failed to send options change via netlink (err -105) [ 160.364775][ T9670] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 160.374697][ T9670] team0: Port device team_slave_0 removed [ 160.401699][ T9670] team0: Failed to send options change via netlink (err -105) [ 160.409649][ T9670] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 160.420240][ T9670] team0: Port device team_slave_1 removed [ 160.427544][ T9670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.435052][ T9670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.445096][ T9670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.452672][ T9670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.552641][ T9680] $Hÿ: renamed from bond0 (while UP) [ 160.562405][ T9680] $Hÿ: entered promiscuous mode [ 160.567641][ T9680] bond_slave_0: entered promiscuous mode [ 160.573520][ T9680] bond_slave_1: entered promiscuous mode [ 160.598031][ T9682] loop6: detected capacity change from 0 to 8192 [ 160.793355][ T9693] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.851612][ T9693] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.882380][ T9701] loop1: detected capacity change from 0 to 1024 [ 160.889908][ T9701] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 160.900928][ T9701] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 160.915870][ T9701] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 160.928983][ T9693] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.939692][ T9701] EXT4-fs (loop1): invalid journal inode [ 160.958480][ T9687] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 160.965036][ T9687] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.972703][ T9687] vhci_hcd vhci_hcd.0: Device attached [ 161.024301][ T9693] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.045903][ T9701] EXT4-fs (loop1): can't get journal size [ 161.052064][ T9701] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.2232: blocks 2-2 from inode overlap system zone [ 161.066783][ T9701] EXT4-fs (loop1): failed to initialize system zone (-117) [ 161.074141][ T9701] EXT4-fs (loop1): mount failed [ 161.109577][ T9707] bridge_slave_0: left allmulticast mode [ 161.115319][ T9707] bridge_slave_0: left promiscuous mode [ 161.121216][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.129028][ T9707] bridge_slave_1: left allmulticast mode [ 161.134808][ T9707] bridge_slave_1: left promiscuous mode [ 161.140713][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.149074][ T9707] bond0: (slave bond_slave_0): Releasing backup interface [ 161.157520][ T9707] bond0: (slave bond_slave_1): Releasing backup interface [ 161.166968][ T9707] team0: Port device team_slave_0 removed [ 161.173507][ T9707] team0: Port device team_slave_1 removed [ 161.190543][ T9693] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.202619][ T9693] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.214540][ T9693] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.216106][ T1039] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 161.226985][ T9693] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.298413][ T9714] loop1: detected capacity change from 0 to 1024 [ 161.305273][ T9714] EXT4-fs: Ignoring removed orlov option [ 161.311637][ T9714] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 161.371033][ T9711] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.378705][ T9711] vhci_hcd: invalid port number 253 [ 161.383936][ T9711] vhci_hcd: default hub control req: 6011 v8001 i00fd l0 [ 161.407268][ T3302] EXT4-fs unmount: 27 callbacks suppressed [ 161.407286][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.437661][ T9723] loop1: detected capacity change from 0 to 512 [ 161.445612][ T9723] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2239: corrupted in-inode xattr: invalid ea_ino [ 161.459454][ T9723] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2239: couldn't read orphan inode 15 (err -117) [ 161.473733][ T9723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.547450][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.573020][ T9703] vhci_hcd: connection reset by peer [ 161.587626][ T315] vhci_hcd: stop threads [ 161.591919][ T315] vhci_hcd: release socket [ 161.596507][ T315] vhci_hcd: disconnect device [ 161.704123][ T9736] loop7: detected capacity change from 0 to 128 [ 161.738988][ T9740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.748980][ T9740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.761278][ T9740] loop1: detected capacity change from 0 to 512 [ 161.774239][ T9740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.805103][ T9736] bio_check_eod: 64343 callbacks suppressed [ 161.805122][ T9736] syz.7.2244: attempt to access beyond end of device [ 161.805122][ T9736] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 162.133911][ T9749] futex_wake_op: syz.0.2249 tries to shift op by -1; fix this program [ 162.219356][ T9760] tc_dump_action: action bad kind [ 162.301798][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.324882][ T25] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 162.332425][ T25] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 162.339881][ T25] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 162.349311][ T25] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 162.874808][ T9788] $Hÿ: renamed from bond0 [ 162.935862][ T9791] lo speed is unknown, defaulting to 1000 [ 162.941767][ T9791] lo speed is unknown, defaulting to 1000 [ 162.947827][ T9791] lo speed is unknown, defaulting to 1000 [ 162.954096][ T9791] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.961993][ T9791] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 162.971524][ T9791] lo speed is unknown, defaulting to 1000 [ 162.977751][ T9791] lo speed is unknown, defaulting to 1000 [ 162.984024][ T9791] lo speed is unknown, defaulting to 1000 [ 162.990195][ T9791] lo speed is unknown, defaulting to 1000 [ 162.990902][ T9792] netlink: 'syz.5.2265': attribute type 16 has an invalid length. [ 162.996365][ T9791] lo speed is unknown, defaulting to 1000 [ 163.003842][ T9792] netlink: 'syz.5.2265': attribute type 17 has an invalid length. [ 163.009935][ T9791] lo speed is unknown, defaulting to 1000 [ 163.038637][ T9792] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 163.046919][ T9792] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.058273][ T9792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.108228][ T9798] loop6: detected capacity change from 0 to 512 [ 163.128415][ T9798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.141440][ T9798] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.167107][ T8861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.184824][ T9805] syz_tun: entered allmulticast mode [ 163.192382][ T9804] syz_tun: left allmulticast mode [ 163.220133][ T9808] netlink: 'syz.6.2272': attribute type 1 has an invalid length. [ 163.235558][ T9808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.261650][ T9808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.269339][ T9808] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 163.281743][ T9808] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 163.424439][ T9816] pim6reg: entered allmulticast mode [ 163.435292][ T9816] pim6reg: left allmulticast mode [ 163.502299][ T9822] 9pnet_fd: p9_fd_create_tcp (9822): problem connecting socket to 127.0.0.1 [ 163.599392][ T9830] xt_hashlimit: max too large, truncated to 1048576 [ 163.651993][ T9834] loop6: detected capacity change from 0 to 1024 [ 163.683855][ T9834] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 163.694853][ T9834] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 163.718917][ T9834] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 163.742819][ T9834] EXT4-fs (loop6): invalid journal inode [ 163.748805][ T9834] EXT4-fs (loop6): can't get journal size [ 163.755141][ T9834] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.2282: blocks 2-2 from inode overlap system zone [ 163.769462][ T9834] EXT4-fs (loop6): failed to initialize system zone (-117) [ 163.776742][ T9834] EXT4-fs (loop6): mount failed [ 163.849694][ T9846] __nla_validate_parse: 5 callbacks suppressed [ 163.849714][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2287'. [ 163.882903][ T9848] loop5: detected capacity change from 0 to 128 [ 163.903503][ T9848] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.931974][ T29] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.022336][ T9850] loop6: detected capacity change from 0 to 8192 [ 164.086052][ T9850] loop6: p1 p3 p4 [ 164.089855][ T9850] loop6: p1 size 3506438656 extends beyond EOD, truncated [ 164.106008][ T9850] loop6: p3 start 218103808 is beyond EOD, truncated [ 164.112839][ T9850] loop6: p4 size 50331648 extends beyond EOD, truncated [ 164.249688][ T9874] loop6: detected capacity change from 0 to 1024 [ 164.263108][ T9874] EXT4-fs: Ignoring removed orlov option [ 164.268886][ T9874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.315179][ T9874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.378402][ T8861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.441566][ T9888] loop6: detected capacity change from 0 to 128 [ 164.477012][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 164.477029][ T30] audit: type=1326 audit(1741484602.115:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.506705][ T30] audit: type=1326 audit(1741484602.115:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.530136][ T30] audit: type=1326 audit(1741484602.115:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.555151][ T30] audit: type=1326 audit(1741484602.185:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.578778][ T30] audit: type=1326 audit(1741484602.185:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.602368][ T30] audit: type=1326 audit(1741484602.185:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.628755][ T9888] futex_wake_op: syz.6.2303 tries to shift op by -1; fix this program [ 164.629504][ T30] audit: type=1326 audit(1741484602.265:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.660603][ T30] audit: type=1326 audit(1741484602.275:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.684191][ T30] audit: type=1326 audit(1741484602.275:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.707876][ T30] audit: type=1326 audit(1741484602.275:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 164.980378][ T9904] netlink: 'syz.1.2309': attribute type 4 has an invalid length. [ 166.214109][ T9961] loop7: detected capacity change from 0 to 128 [ 166.306269][ T1039] usb 15-1: enqueue for inactive port 0 [ 166.311866][ T1039] usb 15-1: enqueue for inactive port 0 [ 166.406046][ T1039] vhci_hcd: vhci_device speed not set [ 166.676810][ T9985] ip6gre1: entered allmulticast mode [ 166.786262][ T9997] netlink: 'syz.6.2345': attribute type 10 has an invalid length. [ 166.804530][ T9997] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 167.057925][T10026] xt_hashlimit: max too large, truncated to 1048576 [ 167.067341][T10026] Cannot find set identified by id 0 to match [ 167.132120][T10032] netlink: 1312 bytes leftover after parsing attributes in process `syz.0.2356'. [ 167.146927][T10033] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.201535][T10041] netlink: 'syz.5.2364': attribute type 1 has an invalid length. [ 167.215608][T10041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.253062][T10041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.261547][T10041] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 167.273147][T10041] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 167.285639][T10033] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.359144][T10033] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.430236][T10033] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.543762][T10033] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.557044][T10033] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.569937][T10033] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.582325][T10033] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.923241][T10080] xt_hashlimit: size too large, truncated to 1048576 [ 168.552407][T10096] netlink: 'syz.6.2382': attribute type 1 has an invalid length. [ 168.566766][T10096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.584805][T10096] gretap1: entered promiscuous mode [ 168.593096][T10096] bond2: (slave gretap1): making interface the new active one [ 168.601182][T10096] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 168.617284][ T10] kernel write not supported for file /user (pid: 10 comm: kworker/0:1) [ 168.625432][T10096] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 168.689200][T10101] xt_hashlimit: max too large, truncated to 1048576 [ 168.777784][T10115] netlink: 'syz.5.2391': attribute type 4 has an invalid length. [ 168.815595][T10115] netlink: 'syz.5.2391': attribute type 4 has an invalid length. [ 169.063945][T10127] syz.0.2394: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 169.078658][T10127] CPU: 1 UID: 0 PID: 10127 Comm: syz.0.2394 Tainted: G W 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 169.078703][T10127] Tainted: [W]=WARN [ 169.078712][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.078755][T10127] Call Trace: [ 169.078762][T10127] [ 169.078771][T10127] dump_stack_lvl+0xf2/0x150 [ 169.078801][T10127] dump_stack+0x15/0x1a [ 169.078827][T10127] warn_alloc+0x145/0x1b0 [ 169.078857][T10127] ? __rcu_read_unlock+0x4e/0x70 [ 169.078956][T10127] ? __vmalloc_node_range_noprof+0x88/0xe70 [ 169.078991][T10127] ? audit_log_end+0x1d0/0x1e0 [ 169.079088][T10127] __vmalloc_node_range_noprof+0xaa/0xe70 [ 169.079201][T10127] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 169.079235][T10127] ? xfd_validate_state+0x46/0xf0 [ 169.079264][T10127] ? save_fpregs_to_fpstate+0x102/0x160 [ 169.079299][T10127] ? should_fail_ex+0x31/0x260 [ 169.079354][T10127] ? xskq_create+0x36/0xd0 [ 169.079440][T10127] ? should_failslab+0x8f/0xb0 [ 169.079525][T10127] vmalloc_user_noprof+0x59/0x70 [ 169.079555][T10127] ? xskq_create+0x79/0xd0 [ 169.079592][T10127] xskq_create+0x79/0xd0 [ 169.079630][T10127] xsk_init_queue+0x82/0xd0 [ 169.079686][T10127] xsk_setsockopt+0x388/0x520 [ 169.079735][T10127] ? __pfx_xsk_setsockopt+0x10/0x10 [ 169.079772][T10127] __sys_setsockopt+0x187/0x200 [ 169.079802][T10127] __x64_sys_setsockopt+0x66/0x80 [ 169.079842][T10127] x64_sys_call+0x282e/0x2dc0 [ 169.079878][T10127] do_syscall_64+0xc9/0x1c0 [ 169.079915][T10127] ? clear_bhb_loop+0x55/0xb0 [ 169.080073][T10127] ? clear_bhb_loop+0x55/0xb0 [ 169.080104][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.080134][T10127] RIP: 0033:0x7f381f73d169 [ 169.080153][T10127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.080174][T10127] RSP: 002b:00007f381dda7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 169.080245][T10127] RAX: ffffffffffffffda RBX: 00007f381f955fa0 RCX: 00007f381f73d169 [ 169.080258][T10127] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 169.080270][T10127] RBP: 00007f381f7be2a0 R08: 0000000000000004 R09: 0000000000000000 [ 169.080282][T10127] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.080294][T10127] R13: 0000000000000000 R14: 00007f381f955fa0 R15: 00007ffd9ebcc958 [ 169.080314][T10127] [ 169.080320][T10127] Mem-Info: [ 169.320239][T10127] active_anon:64425 inactive_anon:12 isolated_anon:0 [ 169.320239][T10127] active_file:19666 inactive_file:3813 isolated_file:0 [ 169.320239][T10127] unevictable:0 dirty:310 writeback:0 [ 169.320239][T10127] slab_reclaimable:3084 slab_unreclaimable:74424 [ 169.320239][T10127] mapped:29264 shmem:51378 pagetables:1109 [ 169.320239][T10127] sec_pagetables:0 bounce:0 [ 169.320239][T10127] kernel_misc_reclaimable:0 [ 169.320239][T10127] free:1766320 free_pcp:6479 free_cma:0 [ 169.365591][T10127] Node 0 active_anon:257700kB inactive_anon:48kB active_file:78664kB inactive_file:15252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117056kB dirty:1240kB writeback:0kB shmem:205512kB writeback_tmp:0kB kernel_stack:2976kB pagetables:4436kB sec_pagetables:0kB all_unreclaimable? no [ 169.393890][T10127] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.420758][T10127] lowmem_reserve[]: 0 2885 7863 0 [ 169.425858][T10127] Node 0 DMA32 free:2950736kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954368kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 169.448324][T10140] 9pnet_fd: p9_fd_create_unix (10140): problem connecting socket: ./file0: -2 [ 169.454507][T10127] lowmem_reserve[]: 0 0 4978 0 [ 169.468249][T10127] Node 0 Normal free:4098472kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:257584kB inactive_anon:48kB active_file:78664kB inactive_file:15252kB unevictable:0kB writepending:1240kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:22704kB local_pcp:21724kB free_cma:0kB [ 169.498941][T10127] lowmem_reserve[]: 0 0 0 0 [ 169.503585][T10127] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.516474][T10127] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950736kB [ 169.532685][T10127] Node 0 Normal: 133*4kB (UME) 91*8kB (UM) 28*16kB (UME) 22*32kB (UME) 14*64kB (UME) 15*128kB (UME) 32*256kB (UME) 52*512kB (UE) 67*1024kB (UME) 44*2048kB (U) 952*4096kB (UM) = 4098156kB [ 169.551373][T10127] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 169.560708][T10127] 74869 total pagecache pages [ 169.565531][T10127] 19 pages in swap cache [ 169.569828][T10127] Free swap = 124112kB [ 169.573983][T10127] Total swap = 124996kB [ 169.578147][T10127] 2097051 pages RAM [ 169.582016][T10127] 0 pages HighMem/MovableOnly [ 169.586713][T10127] 80067 pages reserved [ 169.590962][ T30] kauditd_printk_skb: 452 callbacks suppressed [ 169.590980][ T30] audit: type=1326 audit(1741484607.225:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381f73d169 code=0x7ffc0000 [ 169.670348][T10149] loop7: detected capacity change from 0 to 512 [ 169.691451][T10149] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 169.705652][T10149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 169.714800][ T30] audit: type=1326 audit(1741484607.255:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381f73d169 code=0x7ffc0000 [ 169.742476][T10149] System zones: 1-12 [ 169.746640][T10157] syz_tun: left allmulticast mode [ 169.751699][T10157] syz_tun: left promiscuous mode [ 169.756847][T10157] bridge0: port 1(syz_tun) entered disabled state [ 169.797178][T10149] EXT4-fs (loop7): 1 truncate cleaned up [ 169.807178][T10149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.825786][ T36] page_pool_release_retry() stalled pool shutdown: id 58, 1 inflight 60 sec [ 169.876502][ T9104] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.887831][ T30] audit: type=1326 audit(1741484607.525:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381f73d169 code=0x7ffc0000 [ 169.968330][ T30] audit: type=1326 audit(1741484607.525:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381f73d169 code=0x7ffc0000 [ 169.991982][ T30] audit: type=1326 audit(1741484607.525:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f381f73d169 code=0x7ffc0000 [ 170.015454][ T30] audit: type=1326 audit(1741484607.525:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381f73d169 code=0x7ffc0000 [ 170.039083][ T30] audit: type=1326 audit(1741484607.525:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10165 comm="syz.0.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f381f73d169 code=0x7ffc0000 [ 170.062777][ T30] audit: type=1400 audit(1741484607.555:6916): avc: denied { getopt } for pid=10171 comm="syz.7.2412" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.083189][ T30] audit: type=1326 audit(1741484607.565:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.7.2412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3af0bd169 code=0x0 [ 170.106157][ T30] audit: type=1400 audit(1741484607.565:6918): avc: denied { read } for pid=10169 comm="syz.1.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 170.361279][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'. [ 170.405016][T10192] bond_slave_1: entered promiscuous mode [ 170.411947][T10192] bond_slave_1: left promiscuous mode [ 170.418706][T10191] xt_hashlimit: size too large, truncated to 1048576 [ 170.437008][T10196] syz_tun: entered allmulticast mode [ 170.443959][T10195] syz_tun: left allmulticast mode [ 170.484404][T10194] infiniband syz!: set down [ 170.489084][T10194] infiniband syz!: added team_slave_0 [ 170.518304][T10194] RDS/IB: syz!: added [ 170.522363][T10194] smc: adding ib device syz! with port count 1 [ 170.528806][T10194] smc: ib device syz! port 1 has pnetid [ 170.695145][T10206] bridge_slave_0: left allmulticast mode [ 170.700920][T10206] bridge_slave_0: left promiscuous mode [ 170.706796][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.714701][T10206] bridge_slave_1: left allmulticast mode [ 170.720474][T10206] bridge_slave_1: left promiscuous mode [ 170.726293][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.735397][T10206] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 170.743184][T10206] bond_slave_0: left promiscuous mode [ 170.748739][T10206] bond_slave_0: left allmulticast mode [ 170.755061][T10206] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 170.764659][T10206] bond_slave_1: left promiscuous mode [ 170.770295][T10206] bond_slave_1: left allmulticast mode [ 170.777910][T10206] team0: Failed to send options change via netlink (err -105) [ 170.785555][T10206] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 170.795256][T10206] team0: Port device team_slave_0 removed [ 170.805169][T10206] team0: Failed to send options change via netlink (err -105) [ 170.813228][T10206] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 170.822821][T10206] team0: Port device team_slave_1 removed [ 170.829200][T10206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.836790][T10206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.845483][T10206] bond2: (slave macvlan2): Releasing backup interface [ 170.853852][T10206] $Hÿ: left allmulticast mode [ 170.973199][T10223] netlink: 'syz.7.2430': attribute type 7 has an invalid length. [ 170.981097][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2430'. [ 171.915778][ T36] page_pool_release_retry() stalled pool shutdown: id 59, 1 inflight 60 sec [ 172.151416][T10277] syz_tun: entered allmulticast mode [ 172.161479][T10275] syz_tun: left allmulticast mode [ 172.467375][T10308] 9pnet_fd: p9_fd_create_unix (10308): problem connecting socket: ./file0: -2 [ 172.694728][T10324] netlink: 'syz.7.2474': attribute type 1 has an invalid length. [ 172.709030][T10324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.727974][T10324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.735338][T10324] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 172.766913][T10324] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 173.241846][T10334] loop7: detected capacity change from 0 to 764 [ 173.250985][T10334] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 173.348153][T10346] loop7: detected capacity change from 0 to 1024 [ 173.357717][T10346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.395323][T10353] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2482'. [ 173.435460][ T9104] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.562182][T10375] netlink: 'syz.7.2484': attribute type 1 has an invalid length. [ 173.593776][T10375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.621584][T10382] bond1: (slave gretap1): making interface the new active one [ 173.630351][T10382] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 173.681835][T10386] xt_hashlimit: max too large, truncated to 1048576 [ 173.747148][ T36] page_pool_release_retry() stalled pool shutdown: id 60, 1 inflight 60 sec [ 173.882205][T10407] bond1: entered promiscuous mode [ 173.887484][T10407] bond1: entered allmulticast mode [ 173.892937][T10407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.906730][T10407] bond1 (unregistering): Released all slaves [ 173.993610][T10416] loop7: detected capacity change from 0 to 1024 [ 174.000478][T10416] EXT4-fs: Ignoring removed bh option [ 174.007230][T10416] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 174.010292][T10410] Illegal XDP return value 4294967274 on prog (id 2294) dev syz_tun, expect packet loss! [ 174.018131][T10416] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 174.048529][T10416] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 174.059639][T10416] EXT4-fs (loop7): invalid journal inode [ 174.155220][T10425] netlink: 3 bytes leftover after parsing attributes in process `+}[@'. [ 174.178501][T10425] 0ªX¹¦À: renamed from caif0 [ 174.193331][T10425] 0ªX¹¦À: entered allmulticast mode [ 174.198678][T10425] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 174.238032][T10428] syz_tun: entered allmulticast mode [ 174.247597][T10427] syz_tun: left allmulticast mode [ 174.440554][T10444] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.488170][T10444] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.549144][T10444] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.599482][ T30] kauditd_printk_skb: 303 callbacks suppressed [ 174.599496][ T30] audit: type=1326 audit(1741484612.235:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f895a724127 code=0x7ffc0000 [ 174.637287][T10444] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.657513][ T30] audit: type=1326 audit(1741484612.265:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f895a6c9359 code=0x7ffc0000 [ 174.681162][ T30] audit: type=1326 audit(1741484612.265:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f895a724127 code=0x7ffc0000 [ 174.704730][ T30] audit: type=1326 audit(1741484612.265:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f895a6c9359 code=0x7ffc0000 [ 174.728481][ T30] audit: type=1326 audit(1741484612.265:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f895a72d169 code=0x7ffc0000 [ 174.752075][ T30] audit: type=1326 audit(1741484612.285:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f895a724127 code=0x7ffc0000 [ 174.775645][ T30] audit: type=1326 audit(1741484612.285:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f895a6c9359 code=0x7ffc0000 [ 174.799172][ T30] audit: type=1326 audit(1741484612.285:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f895a72d169 code=0x7ffc0000 [ 174.822956][ T30] audit: type=1326 audit(1741484612.285:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f895a724127 code=0x7ffc0000 [ 174.846477][ T30] audit: type=1326 audit(1741484612.285:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10404 comm="syz.5.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f895a6c9359 code=0x7ffc0000 [ 174.896465][T10444] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.916746][T10444] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.939683][T10444] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.969215][T10444] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.082655][T10457] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2524'. [ 175.189263][T10461] loop7: detected capacity change from 0 to 736 [ 175.213138][T10461] Symlink component flag not implemented [ 175.220934][T10461] Symlink component flag not implemented (122) [ 175.378470][T10473] netlink: 'syz.6.2531': attribute type 30 has an invalid length. [ 175.509833][T10491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10491 comm=syz.5.2539 [ 175.543422][T10495] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 175.586757][T10495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.616764][T10495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.625315][T10495] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 175.637011][T10495] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 175.646016][T10510] loop7: detected capacity change from 0 to 128 [ 175.742083][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 175.770145][T10493] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 175.862365][T10533] netlink: 'syz.6.2556': attribute type 1 has an invalid length. [ 175.888658][T10533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.912957][T10533] bond3: (slave gretap2): making interface the new active one [ 175.921668][T10533] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 175.934094][T10542] 8021q: VLANs not supported on ip6gre0 [ 176.311235][T10569] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2567'. [ 176.330970][T10569] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 176.346770][T10569] bond0 (unregistering): Released all slaves [ 176.496040][T10581] netlink: 'syz.5.2571': attribute type 1 has an invalid length. [ 176.509605][T10581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.526451][T10581] bond3: (slave gretap0): making interface the new active one [ 176.534694][T10581] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 176.963312][T10596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=10596 comm=syz.1.2576 [ 177.190699][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'. [ 177.927857][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 177.936876][T10677] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 178.150452][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2616'. [ 178.425387][T10723] netlink: 'syz.7.2627': attribute type 30 has an invalid length. [ 179.611154][ T30] kauditd_printk_skb: 488 callbacks suppressed [ 179.611172][ T30] audit: type=1326 audit(1741484617.245:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42e4cc4127 code=0x7ffc0000 [ 179.641136][ T30] audit: type=1326 audit(1741484617.245:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42e4c69359 code=0x7ffc0000 [ 179.664755][ T30] audit: type=1326 audit(1741484617.245:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 179.748976][ T30] audit: type=1326 audit(1741484617.325:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42e4cc4127 code=0x7ffc0000 [ 179.772569][ T30] audit: type=1326 audit(1741484617.325:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42e4c69359 code=0x7ffc0000 [ 179.796054][ T30] audit: type=1326 audit(1741484617.325:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 179.819624][ T30] audit: type=1400 audit(1741484617.345:7726): avc: denied { compute_member } for pid=10776 comm="syz.7.2650" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 179.840326][ T30] audit: type=1326 audit(1741484617.345:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42e4cc4127 code=0x7ffc0000 [ 179.863868][ T30] audit: type=1326 audit(1741484617.345:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42e4c69359 code=0x7ffc0000 [ 179.887391][ T30] audit: type=1326 audit(1741484617.345:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10760 comm="syz.6.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f42e4ccd169 code=0x7ffc0000 [ 180.083068][T10795] loop7: detected capacity change from 0 to 128 [ 180.091561][T10795] vfat: Unknown parameter '' [ 180.384433][T10812] pim6reg1: entered promiscuous mode [ 180.389841][T10812] pim6reg1: entered allmulticast mode [ 180.459974][T10825] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.545381][T10837] loop7: detected capacity change from 0 to 1024 [ 180.555513][T10837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.654397][T10837] ================================================================== [ 180.662628][T10837] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 180.670929][T10837] [ 180.673263][T10837] write to 0xffff888107193338 of 4 bytes by task 10850 on cpu 0: [ 180.681003][T10837] writeback_single_inode+0x14f/0x3f0 [ 180.686417][T10837] sync_inode_metadata+0x5c/0x90 [ 180.691385][T10837] generic_buffers_fsync_noflush+0xd8/0x120 [ 180.697308][T10837] ext4_sync_file+0x1ff/0x6c0 [ 180.702034][T10837] vfs_fsync_range+0x116/0x130 [ 180.707005][T10837] ext4_buffered_write_iter+0x358/0x3c0 [ 180.712589][T10837] ext4_file_write_iter+0x383/0xf20 [ 180.717832][T10837] iter_file_splice_write+0x5f1/0x980 [ 180.723231][T10837] direct_splice_actor+0x160/0x2c0 [ 180.728388][T10837] splice_direct_to_actor+0x302/0x670 [ 180.733803][T10837] do_splice_direct+0xd7/0x150 [ 180.738691][T10837] do_sendfile+0x398/0x660 [ 180.743216][T10837] __x64_sys_sendfile64+0x110/0x150 [ 180.748878][T10837] x64_sys_call+0xfbd/0x2dc0 [ 180.753486][T10837] do_syscall_64+0xc9/0x1c0 [ 180.758025][T10837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.764018][T10837] [ 180.766347][T10837] read to 0xffff888107193338 of 4 bytes by task 10837 on cpu 1: [ 180.773989][T10837] __mark_inode_dirty+0x58/0x7e0 [ 180.778947][T10837] ext4_write_inline_data_end+0x3c4/0x5d0 [ 180.784681][T10837] ext4_write_end+0x3eb/0x770 [ 180.789408][T10837] generic_perform_write+0x33c/0x4a0 [ 180.794704][T10837] ext4_buffered_write_iter+0x1ed/0x3c0 [ 180.800278][T10837] ext4_file_write_iter+0x383/0xf20 [ 180.805495][T10837] iter_file_splice_write+0x5f1/0x980 [ 180.810877][T10837] direct_splice_actor+0x160/0x2c0 [ 180.815995][T10837] splice_direct_to_actor+0x302/0x670 [ 180.821378][T10837] do_splice_direct+0xd7/0x150 [ 180.826150][T10837] do_sendfile+0x398/0x660 [ 180.830581][T10837] __x64_sys_sendfile64+0x110/0x150 [ 180.835804][T10837] x64_sys_call+0xfbd/0x2dc0 [ 180.840412][T10837] do_syscall_64+0xc9/0x1c0 [ 180.844935][T10837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.850838][T10837] [ 180.853159][T10837] value changed: 0x00000038 -> 0x00000002 [ 180.858873][T10837] [ 180.861196][T10837] Reported by Kernel Concurrency Sanitizer on: [ 180.867347][T10837] CPU: 1 UID: 0 PID: 10837 Comm: syz.7.2675 Tainted: G W 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 180.879592][T10837] Tainted: [W]=WARN [ 180.883396][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.893455][T10837] ================================================================== [ 181.222528][T10850] ================================================================== [ 181.230754][T10850] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 181.238112][T10850] [ 181.240443][T10850] write to 0xffff888107193424 of 4 bytes by task 10837 on cpu 1: [ 181.248175][T10850] xas_set_mark+0x131/0x150 [ 181.252721][T10850] __folio_start_writeback+0x1e8/0x430 [ 181.258215][T10850] ext4_bio_write_folio+0x591/0x9d0 [ 181.263463][T10850] mpage_process_page_bufs+0x486/0x5d0 [ 181.268962][T10850] mpage_prepare_extent_to_map+0x788/0xb80 [ 181.274807][T10850] ext4_do_writepages+0xa20/0x2130 [ 181.279966][T10850] ext4_writepages+0x159/0x2e0 [ 181.284763][T10850] do_writepages+0x1d8/0x480 [ 181.289397][T10850] file_write_and_wait_range+0x168/0x2f0 [ 181.295092][T10850] generic_buffers_fsync_noflush+0x46/0x120 [ 181.301028][T10850] ext4_sync_file+0x1ff/0x6c0 [ 181.305856][T10850] vfs_fsync_range+0x116/0x130 [ 181.310649][T10850] ext4_buffered_write_iter+0x358/0x3c0 [ 181.316223][T10850] ext4_file_write_iter+0x383/0xf20 [ 181.321445][T10850] iter_file_splice_write+0x5f1/0x980 [ 181.326839][T10850] direct_splice_actor+0x160/0x2c0 [ 181.331964][T10850] splice_direct_to_actor+0x302/0x670 [ 181.337348][T10850] do_splice_direct+0xd7/0x150 [ 181.342129][T10850] do_sendfile+0x398/0x660 [ 181.346560][T10850] __x64_sys_sendfile64+0x110/0x150 [ 181.351795][T10850] x64_sys_call+0xfbd/0x2dc0 [ 181.356403][T10850] do_syscall_64+0xc9/0x1c0 [ 181.360933][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.366851][T10850] [ 181.369178][T10850] read to 0xffff888107193424 of 4 bytes by task 10850 on cpu 0: [ 181.376844][T10850] xas_find_marked+0x608/0x650 [ 181.381645][T10850] find_get_entry+0x54/0x390 [ 181.386279][T10850] filemap_get_folios_tag+0x9e/0x210 [ 181.391595][T10850] mpage_prepare_extent_to_map+0x329/0xb80 [ 181.397425][T10850] ext4_do_writepages+0xa20/0x2130 [ 181.402561][T10850] ext4_writepages+0x159/0x2e0 [ 181.407330][T10850] do_writepages+0x1d8/0x480 [ 181.411960][T10850] file_write_and_wait_range+0x168/0x2f0 [ 181.417612][T10850] generic_buffers_fsync_noflush+0x46/0x120 [ 181.423522][T10850] ext4_sync_file+0x1ff/0x6c0 [ 181.428222][T10850] vfs_fsync_range+0x116/0x130 [ 181.433002][T10850] ext4_buffered_write_iter+0x358/0x3c0 [ 181.438567][T10850] ext4_file_write_iter+0x383/0xf20 [ 181.443786][T10850] iter_file_splice_write+0x5f1/0x980 [ 181.449179][T10850] direct_splice_actor+0x160/0x2c0 [ 181.454305][T10850] splice_direct_to_actor+0x302/0x670 [ 181.459689][T10850] do_splice_direct+0xd7/0x150 [ 181.464462][T10850] do_sendfile+0x398/0x660 [ 181.468883][T10850] __x64_sys_sendfile64+0x110/0x150 [ 181.474102][T10850] x64_sys_call+0xfbd/0x2dc0 [ 181.478706][T10850] do_syscall_64+0xc9/0x1c0 [ 181.483227][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.489160][T10850] [ 181.491484][T10850] value changed: 0x0a000021 -> 0x04000021 [ 181.497200][T10850] [ 181.499521][T10850] Reported by Kernel Concurrency Sanitizer on: [ 181.505676][T10850] CPU: 0 UID: 0 PID: 10850 Comm: syz.7.2675 Tainted: G W 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 181.517926][T10850] Tainted: [W]=WARN [ 181.521728][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.531785][T10850] ================================================================== [ 181.625400][ T9104] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.