last executing test programs: 1m24.310093948s ago: executing program 32 (id=129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="000202"], 0x18) 1m11.173029486s ago: executing program 33 (id=632): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1m10.590453347s ago: executing program 4 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 1m10.446276479s ago: executing program 4 (id=648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB='('], 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1m10.274021542s ago: executing program 4 (id=649): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1m10.208727543s ago: executing program 4 (id=650): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) pread64(r0, &(0x7f0000000080)=""/196, 0xc4, 0x3) 1m9.566738654s ago: executing program 34 (id=664): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xcc38b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 1m9.525422605s ago: executing program 35 (id=633): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe0000000) 1m9.136980431s ago: executing program 4 (id=667): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@empty, @in=@multicast2, 0x4e21, 0x9, 0x4e20, 0x40, 0xa, 0xc0, 0x80, 0x3a, r2}, {0xf, 0x7ff, 0x4, 0x80000000, 0x6, 0x3, 0x0, 0xfffffffffffffbf2}, {0x6, 0x1, 0x9b1, 0x7fc}, 0x4, 0x6e6bb0, 0x0, 0x1, 0x3, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0xff}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3501, 0x3, 0x1, 0x2, 0x638, 0x3, 0x9}}, 0xe8) 1m8.901375735s ago: executing program 4 (id=668): r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 1m8.901192266s ago: executing program 36 (id=668): r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 1m1.885078398s ago: executing program 7 (id=817): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.832416078s ago: executing program 7 (id=820): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000004280)=""/4091, &(0x7f00000000c0)=0xffb) 1m1.808553969s ago: executing program 7 (id=821): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="9a"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, &(0x7f0000000000)) 1m1.76435098s ago: executing program 7 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201) 1m1.690057421s ago: executing program 7 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) nanosleep(&(0x7f0000000040), 0x0) 1m1.449705325s ago: executing program 7 (id=831): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "802d68cff22fc976402b0c42e8a765aceb45480cac4c18c0a073a53ed5ac7354892a0ec2c069322a300df206851dea396f0dff6d365010aaad759226ac707e25c5892909da448bad3967190377f5d419304b8ab1cd507e0433fc1b1e36829b429972f04bd729abee06b1a5f0565b8ad769b28ac34a28e720e0"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 1m1.449445215s ago: executing program 37 (id=831): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "802d68cff22fc976402b0c42e8a765aceb45480cac4c18c0a073a53ed5ac7354892a0ec2c069322a300df206851dea396f0dff6d365010aaad759226ac707e25c5892909da448bad3967190377f5d419304b8ab1cd507e0433fc1b1e36829b429972f04bd729abee06b1a5f0565b8ad769b28ac34a28e720e0"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 31.596933872s ago: executing program 2 (id=1836): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x2556, 0x1000, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 31.587397913s ago: executing program 2 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001480)={'filter\x00', 0x7, 0x4, 0x4c8, 0x110, 0x1f8, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@empty, @multicast2, 0xffffff00, 0x0, 0x5, 0xc, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x3ff, 0x8, 0x1, 0x80b9, 0x1, 0x3, 'geneve1\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @private=0xa010101, @multicast1, 0x8, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0x0, 0xff000000, 0x7, 0xe, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, 0x10, 0x550a, 0xfffc, 0x6, 0xfffe, 0x0, 'hsr0\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0xa}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9c, 'system_u:object_r:hald_log_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) 31.532475304s ago: executing program 2 (id=1843): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000004}) 31.465132555s ago: executing program 2 (id=1846): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$eJzs3c9rHOUbAPBnNkl/f79NoRT1IIEerNRumsQfFYTWo2ixoPe6JNNQsumW7KY0sdD2YC9epAgiFsQ/wLvH4j8gePVc0EKREvTgJTKb2XabzSabZHW37ucD077vzGSfeXfmffd5d3bZAAbWWPZPIeLFiPgiiTjctG048o1ja/utPL4xnS1JrK5+9HsSSb6usX+S/38wr7wQET9+FnGy0Bq3urQ8VyqX04W8Pl6bvzpeXVo+dXm+NJvOplcmp6bOvDE1+fZbb3atra9e+PPrD++/d+bz4ytfff/wyN0kzsWhfFtzO3bhVnNlLMby52Qkzq3bcaILwfpJ0usDYEeG8n4+EtkYcDiG8l4P/PfdjIhVYEAl+j8MqEYe0Jjbd2ke/Nx49O7aBKi1/cNr743Evvrc6MBK8szMKJvvjnYhfhbjh9/u3c2W2OJ9iJtdiAfQcOt2RJweHm4d/5J8/Nu50/U3jze3Psagvf5AL93P8p/XNsp/Ck/yn2jJf36uZ467HR+io/5feNiFMG1l+d87G+a/T4au0aG89r96zjeSXLpcTk9HxP8j4kSM7M3qm93PObPyYLXdtub8L1uy+I1cMD+Oh8N7n/2bmVKttJs2N3t0O+Klp/lvEi3j/756rrs+/82ejwsdxjiW3nu53bat29+s+xnw6ncRr2x4/p/e0Uo2vz85Xr8exhtXRas/7hz7qV387bW/+7Lzf2Dz9o8mzfdrq9uP8e2+v9J223Z6/e9JPq6X9+TrrpdqtYWJiD3JB63rJ5/+baPe2D9r/4njm49/G13/+yPikw7bf+fonba79sP5n9nW+d9+4cH7n37TLn5n5//1eulEvqaT8a/TA9zNcwcAAAAAAAD9phARhyIpFJ+UC4Vice07vEfjQKFcqdZOXqosXpmJ+ndlR2Ok0LjTfbjp8xAT+edhG/XJdfWpiDgSEV8O7a/Xi9OV8kyvGw8AAAAAAAAAAAAAAAAAAAB94mCb7/9nfh3q9dEB/zg/+Q2Da8v+341fegL6ktd/GFz6Pwwu/R8GV4f9/5ctf80deO54/YfBpf/D4NL/YXBt3P/N9gEAAAAAAAAAAAAAAAAAAAAAAAAAAGCHLpw/ny2rK49vTGf1mWtLi3OVa6dm0upccX5xujhdWbhanK1UZstpcboyv9XjlSuVqxOTsXh9vJZWa+PVpeWL85XFK7WLl+dLs+nFdORfaRUAAAAAAAAAAAAAAAAAAAA8X6pLy3OlcjldUGhbOBt9cRg7LiRbneWz+cWwoxDDm+2zfzePrNDLQg8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY5+8AAAD//5d3NP0=") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 31.297206118s ago: executing program 2 (id=1858): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 30.60120974s ago: executing program 2 (id=1874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 30.60078741s ago: executing program 38 (id=1874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffd7, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 16.546071753s ago: executing program 1 (id=2356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4, 0x7, @private2={0xfc, 0x2, '\x00', 0xfe}, 0xffff}, {0xa, 0xfffe, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, r3, 0x2}}, 0x48) 16.511468654s ago: executing program 1 (id=2359): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 16.459346275s ago: executing program 1 (id=2360): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0) 16.422025515s ago: executing program 1 (id=2361): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 16.278453368s ago: executing program 1 (id=2368): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 16.024381403s ago: executing program 1 (id=2375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) 15.991190873s ago: executing program 39 (id=2375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) 15.670332959s ago: executing program 5 (id=2386): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 15.61799237s ago: executing program 5 (id=2388): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0xee, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="000000002000000000000000010000e201000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x0) 15.447119743s ago: executing program 5 (id=2391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 15.422991303s ago: executing program 5 (id=2393): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 15.345355944s ago: executing program 5 (id=2394): socket$nl_audit(0x10, 0x3, 0x9) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) unshare(0x22020400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 15.01372258s ago: executing program 5 (id=2395): r0 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20004, 0x3}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 15.01305564s ago: executing program 40 (id=2395): r0 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20004, 0x3}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 3.185113255s ago: executing program 8 (id=2727): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, 0x701}}, 0x24) 3.112221847s ago: executing program 8 (id=2732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) close(r1) 2.977117049s ago: executing program 8 (id=2734): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local}) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.709222044s ago: executing program 8 (id=2740): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.589598216s ago: executing program 8 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) 1.972464886s ago: executing program 6 (id=2755): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000500), 0x66) 1.869668008s ago: executing program 6 (id=2757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 1.114550711s ago: executing program 3 (id=2764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x42b00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d0e, 0x0) 1.084139112s ago: executing program 0 (id=2765): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000003000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021d88400000c0a01010000000000000000070000000900020073797a31000000003400038030000080080003400000000224000b80100001800c000100636f756e74657200100001800c000100636f756e746572000900010073797a30"], 0x855c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.047728822s ago: executing program 9 (id=2767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 1.045253302s ago: executing program 3 (id=2768): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) 1.020871503s ago: executing program 6 (id=2770): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 973.049774ms ago: executing program 6 (id=2771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) 944.072544ms ago: executing program 0 (id=2772): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r1) 943.842694ms ago: executing program 3 (id=2774): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x4040000) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 892.849305ms ago: executing program 9 (id=2775): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000001}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x84) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) 875.050485ms ago: executing program 3 (id=2776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r3, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 861.938386ms ago: executing program 9 (id=2777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 841.728686ms ago: executing program 3 (id=2778): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write$binfmt_misc(r0, &(0x7f0000001400)="4ae318", 0x3) r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x4) write(r0, &(0x7f0000002200)="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", 0x3fe) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000003000)=0x1) 841.044256ms ago: executing program 0 (id=2788): unshare(0x62011600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r0, 0x0) 801.611416ms ago: executing program 6 (id=2779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 727.098438ms ago: executing program 0 (id=2780): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x4) 701.281269ms ago: executing program 3 (id=2781): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 694.005178ms ago: executing program 9 (id=2782): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x20040000}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r4, 0x0, 0x39000, 0x0) 688.557109ms ago: executing program 6 (id=2783): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) 67.099299ms ago: executing program 8 (id=2784): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 66.823169ms ago: executing program 9 (id=2785): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000180)="88e47fb64c743ac4", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 64.516039ms ago: executing program 0 (id=2795): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 32.41449ms ago: executing program 0 (id=2786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 0s ago: executing program 9 (id=2787): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) time(0x0) kernel console output (not intermixed with test programs): 'syz.1.1449': attribute type 1 has an invalid length. [ 82.824978][ T6977] openvswitch: netlink: Message has 6 unknown bytes. [ 82.969790][ T6997] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 83.014394][ T7000] loop8: detected capacity change from 0 to 256 [ 83.184673][ T7011] loop9: detected capacity change from 0 to 128 [ 83.191534][ T7011] vfat: Unknown parameter '' [ 83.666114][ T7005] Set syz1 is full, maxelem 65536 reached [ 83.672734][ T7027] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 83.909744][ T7067] __nla_validate_parse: 3 callbacks suppressed [ 83.909759][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1484'. [ 84.002867][ T7082] xt_hashlimit: size too large, truncated to 1048576 [ 84.343214][ T7118] loop2: detected capacity change from 0 to 512 [ 84.365321][ T7118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.383600][ T7118] ext4 filesystem being mounted at /142/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.418253][ T7118] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1507: corrupted xattr block 32: bad e_name length [ 84.465188][ T7118] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 84.474576][ T7118] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1507: corrupted xattr block 32: bad e_name length [ 84.494457][ T7118] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 84.519863][ T7118] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.1507: corrupted xattr block 32: bad e_name length [ 84.535294][ T7118] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 84.550701][ T7141] netlink: 'syz.8.1517': attribute type 21 has an invalid length. [ 84.558674][ T7141] netlink: 'syz.8.1517': attribute type 1 has an invalid length. [ 84.566485][ T7141] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1517'. [ 84.576661][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.587686][ T7144] netlink: 'syz.9.1520': attribute type 21 has an invalid length. [ 84.597276][ T7144] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1520'. [ 84.606419][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1520'. [ 84.678284][ T7152] loop2: detected capacity change from 0 to 512 [ 84.712903][ T7152] EXT4-fs (loop2): 1 orphan inode deleted [ 84.719564][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1528'. [ 84.724872][ T7152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.741945][ T3681] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 1 [ 84.748422][ T7162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.774325][ T7152] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.819078][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.909659][ T7185] netlink: 'syz.9.1536': attribute type 21 has an invalid length. [ 84.917563][ T7185] netlink: 'syz.9.1536': attribute type 1 has an invalid length. [ 84.921307][ T7188] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1537'. [ 84.925349][ T7185] netlink: 144 bytes leftover after parsing attributes in process `syz.9.1536'. [ 84.992896][ T7192] loop8: detected capacity change from 0 to 512 [ 85.011610][ T7192] EXT4-fs: Ignoring removed orlov option [ 85.042616][ T7192] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.064697][ T7192] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.094289][ T5129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.136443][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 85.154281][ T7205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.266509][ T7228] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1555'. [ 85.344189][ T7233] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 85.464643][ T7253] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1565'. [ 85.594895][ T7274] xt_hashlimit: size too large, truncated to 1048576 [ 85.669225][ T7280] loop2: detected capacity change from 0 to 1024 [ 85.700378][ T7280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.755180][ T7280] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1578: Allocating blocks 497-513 which overlap fs metadata [ 85.772454][ T7280] EXT4-fs (loop2): pa ffff888106a16690: logic 256, phys. 385, len 8 [ 85.780588][ T7280] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 85.802589][ T7287] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 85.851987][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.881110][ T7289] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7289 comm=syz.0.1581 [ 85.893841][ T7289] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7289 comm=syz.0.1581 [ 85.910499][ T7286] loop1: detected capacity change from 0 to 8192 [ 85.949209][ T7286] loop1: p1 p2 p4 [ 85.953374][ T7286] loop1: p1 size 108920841 extends beyond EOD, truncated [ 85.963555][ T7286] loop1: p2 start 861536256 is beyond EOD, truncated [ 85.970431][ T7286] loop1: p4 size 65536 extends beyond EOD, truncated [ 86.091145][ T7313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.097927][ T7316] loop2: detected capacity change from 0 to 128 [ 86.103982][ T7313] bridge0: port 4(bond2) entered blocking state [ 86.110600][ T7313] bridge0: port 4(bond2) entered disabled state [ 86.119312][ T7313] bond2: entered allmulticast mode [ 86.124369][ T7316] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.127909][ T7313] bond2: entered promiscuous mode [ 86.142665][ T7313] bridge0: port 4(bond2) entered blocking state [ 86.148988][ T7313] bridge0: port 4(bond2) entered forwarding state [ 86.155666][ T7313] bridge0: mtu less than device minimum [ 86.165085][ T7316] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.230606][ T5577] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.343912][ T7347] loop2: detected capacity change from 0 to 512 [ 86.392257][ T7347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.413673][ T7347] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.425529][ T7359] loop9: detected capacity change from 0 to 128 [ 86.435928][ T7359] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.451561][ T7359] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.468656][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 86.468675][ T29] audit: type=1400 audit(1749058848.179:1812): avc: denied { remove_name } for pid=7344 comm="syz.2.1607" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.497936][ T29] audit: type=1400 audit(1749058848.179:1813): avc: denied { rename } for pid=7344 comm="syz.2.1607" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.520190][ T29] audit: type=1400 audit(1749058848.179:1814): avc: denied { reparent } for pid=7344 comm="syz.2.1607" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.542792][ T29] audit: type=1400 audit(1749058848.189:1815): avc: denied { add_name } for pid=7344 comm="syz.2.1607" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.563233][ T29] audit: type=1400 audit(1749058848.189:1816): avc: denied { remount } for pid=7344 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.583556][ T29] audit: type=1400 audit(1749058848.259:1817): avc: denied { execmem } for pid=7367 comm="syz.1.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.604873][ T7347] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.617444][ T5130] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.645807][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.772456][ T7375] loop9: detected capacity change from 0 to 8192 [ 86.782399][ T3644] bridge0: port 4(bond2) entered disabled state [ 86.792542][ T29] audit: type=1400 audit(1749058848.509:1818): avc: denied { ioctl } for pid=7386 comm="syz.1.1621" path="socket:[18719]" dev="sockfs" ino=18719 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.792584][ T7388] syzkaller1: entered promiscuous mode [ 86.823392][ T7388] syzkaller1: entered allmulticast mode [ 86.879028][ T7375] loop9: p1 p2 p4 [ 86.882854][ T7375] loop9: p1 size 108920841 extends beyond EOD, truncated [ 86.891870][ T7375] loop9: p2 start 861536256 is beyond EOD, truncated [ 86.898764][ T7375] loop9: p4 size 65536 extends beyond EOD, truncated [ 86.990447][ T29] audit: type=1400 audit(1749058848.699:1819): avc: denied { create } for pid=7400 comm="syz.1.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.178673][ T29] audit: type=1326 audit(1749058848.889:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.8.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315c4ae929 code=0x7ffc0000 [ 87.202340][ T29] audit: type=1326 audit(1749058848.889:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7417 comm="syz.8.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315c4ae929 code=0x7ffc0000 [ 87.302097][ T7424] loop0: detected capacity change from 0 to 1024 [ 87.342267][ T7424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.404658][ T7421] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 87.506951][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.545996][ T7444] sd 0:0:1:0: device reset [ 87.559000][ T7437] Falling back ldisc for ttyS3. [ 87.637418][ T7455] loop9: detected capacity change from 0 to 1024 [ 87.650403][ T7455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.757178][ T7467] loop8: detected capacity change from 0 to 1024 [ 87.771495][ T7467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.784892][ T5130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.799346][ T7467] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.1655: Allocating blocks 497-513 which overlap fs metadata [ 87.813611][ T7467] EXT4-fs (loop8): pa ffff8881006451c0: logic 256, phys. 385, len 8 [ 87.821826][ T7467] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 87.844337][ T7467] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 87.875809][ T5129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.007066][ T7474] loop8: detected capacity change from 0 to 256 [ 88.510063][ T7505] loop1: detected capacity change from 0 to 1024 [ 88.532292][ T7507] syzkaller1: entered promiscuous mode [ 88.535321][ T7505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.537809][ T7507] syzkaller1: entered allmulticast mode [ 88.550142][ T7505] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.586211][ T7505] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 88.627760][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.694855][ T7514] vlan2: entered allmulticast mode [ 88.715806][ T7516] loop1: detected capacity change from 0 to 512 [ 88.750949][ T7516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.763722][ T7516] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.826659][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.984857][ T7548] loop1: detected capacity change from 0 to 1024 [ 88.996663][ T3392] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 89.004331][ T3392] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0 [ 89.010107][ T7548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.015873][ T3392] hid-generic 0000:0003:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 89.040482][ T7548] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1690: Allocating blocks 497-513 which overlap fs metadata [ 89.054984][ T7548] EXT4-fs (loop1): pa ffff888106a16700: logic 256, phys. 385, len 8 [ 89.063157][ T7548] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 89.110437][ T7548] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 89.152226][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.328946][ T7578] __nla_validate_parse: 7 callbacks suppressed [ 89.328966][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1699'. [ 89.356148][ T7581] ref_ctr_offset mismatch. inode: 0x3fd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 89.377085][ T7585] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 89.414664][ T7589] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 89.414664][ T7589] program syz.9.1707 not setting count and/or reply_len properly [ 89.559948][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1714'. [ 89.576065][ T7614] vxlan1: entered promiscuous mode [ 89.601494][ T7618] bond0: entered promiscuous mode [ 89.606631][ T7618] bond_slave_0: entered promiscuous mode [ 89.612431][ T7618] bond_slave_1: entered promiscuous mode [ 89.641189][ T7623] netlink: 236 bytes leftover after parsing attributes in process `syz.8.1722'. [ 89.655153][ T7624] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.692482][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1726'. [ 89.708927][ T7630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1726'. [ 89.740548][ T7638] loop0: detected capacity change from 0 to 128 [ 89.749035][ T7638] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 89.775302][ T7638] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.804352][ T7641] sd 0:0:1:0: device reset [ 89.818239][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.945340][ T7657] loop1: detected capacity change from 0 to 512 [ 89.948108][ T7655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.959276][ T7657] EXT4-fs: Ignoring removed orlov option [ 89.962353][ T7655] bridge0: port 3(bond1) entered blocking state [ 89.971511][ T7655] bridge0: port 3(bond1) entered disabled state [ 89.978043][ T7655] bond1: entered allmulticast mode [ 89.986420][ T7655] bond1: entered promiscuous mode [ 89.986588][ T7657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.992395][ T7655] bridge0: port 3(bond1) entered blocking state [ 90.005003][ T7657] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.011021][ T7655] bridge0: port 3(bond1) entered forwarding state [ 90.055438][ T7661] netlink: 'syz.8.1737': attribute type 10 has an invalid length. [ 90.063517][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1737'. [ 90.072616][ T7661] dummy0: entered promiscuous mode [ 90.075181][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.078577][ T7661] bridge0: port 4(dummy0) entered blocking state [ 90.093241][ T7661] bridge0: port 4(dummy0) entered disabled state [ 90.099845][ T7661] dummy0: entered allmulticast mode [ 90.106442][ T7661] bridge0: port 4(dummy0) entered blocking state [ 90.113010][ T7661] bridge0: port 4(dummy0) entered forwarding state [ 90.950697][ T3703] bridge0: port 3(bond1) entered disabled state [ 92.696916][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 92.696934][ T29] audit: type=1326 audit(1749058854.409:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.726765][ T29] audit: type=1326 audit(1749058854.439:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.750361][ T29] audit: type=1326 audit(1749058854.439:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.773868][ T29] audit: type=1326 audit(1749058854.439:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.797321][ T29] audit: type=1326 audit(1749058854.439:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.821000][ T29] audit: type=1326 audit(1749058854.439:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.844467][ T29] audit: type=1326 audit(1749058854.439:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.867915][ T29] audit: type=1326 audit(1749058854.439:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.891505][ T29] audit: type=1326 audit(1749058854.439:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.915138][ T29] audit: type=1326 audit(1749058854.439:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb719e929 code=0x7ffc0000 [ 92.993960][ T7680] SELinux: failed to load policy [ 93.107719][ T7692] loop8: detected capacity change from 0 to 8192 [ 93.115548][ T7701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1755'. [ 93.124593][ T7701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1755'. [ 93.234849][ T7717] 9pnet_fd: Insufficient options for proto=fd [ 93.432691][ T7744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1771'. [ 93.441767][ T7744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1771'. [ 93.695202][ T7789] netlink: 'syz.8.1791': attribute type 1 has an invalid length. [ 93.703073][ T7789] netlink: 'syz.8.1791': attribute type 2 has an invalid length. [ 93.765800][ T7796] vlan2: entered allmulticast mode [ 93.839070][ T7802] loop9: detected capacity change from 0 to 8192 [ 93.936756][ T7807] loop8: detected capacity change from 0 to 512 [ 94.010865][ T7811] SELinux: syz.1.1799 (7811) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 94.039221][ T7807] EXT4-fs: Ignoring removed oldalloc option [ 94.057735][ T7807] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.065773][ T7807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.082258][ T7807] EXT4-fs (loop8): orphan cleanup on readonly fs [ 94.089395][ T7807] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.1798: Failed to acquire dquot type 1 [ 94.102756][ T7807] EXT4-fs (loop8): 1 truncate cleaned up [ 94.109025][ T7807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.159234][ T5129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.267480][ T7831] vlan2: entered allmulticast mode [ 94.274652][ T7832] loop8: detected capacity change from 0 to 1024 [ 94.286035][ T7832] EXT4-fs: Ignoring removed i_version option [ 94.297176][ T7832] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.305487][ T7832] EXT4-fs: Ignoring removed nobh option [ 94.311184][ T7832] EXT4-fs: Ignoring removed bh option [ 94.331314][ T7832] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.366240][ T5129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.399677][ T7839] vhci_hcd: invalid port number 96 [ 94.404895][ T7839] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 95.316593][ T7872] vlan2: entered allmulticast mode [ 95.352084][ T7878] __nla_validate_parse: 4 callbacks suppressed [ 95.352181][ T7878] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1824'. [ 95.544893][ T7901] x_tables: duplicate underflow at hook 1 [ 95.609297][ T7903] vhci_hcd: default hub control req: 600c v0001 i0008 l0 [ 95.633751][ T7917] loop0: detected capacity change from 0 to 1024 [ 95.681020][ T7929] loop2: detected capacity change from 0 to 1024 [ 95.697534][ T7929] EXT4-fs: Ignoring removed nobh option [ 95.703456][ T7929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.720120][ T7917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.744812][ T7929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.760491][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.815965][ T5577] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 95.853267][ T7953] ipvlan2: entered promiscuous mode [ 95.858519][ T5577] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 95.860272][ T7953] bridge0: port 3(ipvlan2) entered blocking state [ 95.883147][ T7953] bridge0: port 3(ipvlan2) entered disabled state [ 95.889842][ T7953] ipvlan2: entered allmulticast mode [ 95.895195][ T7953] bridge0: entered allmulticast mode [ 95.901163][ T7953] ipvlan2: left allmulticast mode [ 95.906211][ T7953] bridge0: left allmulticast mode [ 95.919012][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.926650][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.934265][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.941904][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.949371][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.956993][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.964518][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.972222][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.979690][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.987117][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.994716][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.002247][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.009852][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.017266][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.024718][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.032145][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.039586][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.046994][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.054524][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.062053][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.069511][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.076901][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.084324][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.091761][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.099166][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.106629][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.114061][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.121510][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.128939][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.136334][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.143762][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.151188][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.158589][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.166019][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.173432][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.180910][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.188337][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.195787][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.203219][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.210638][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.218028][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.225568][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.232981][ T3374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 96.241547][ T3374] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 96.307688][ T7969] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 96.422324][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.437430][ T3703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.501229][ T7991] 9pnet_fd: Insufficient options for proto=fd [ 96.513525][ T3703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.592036][ T3703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.758557][ T3703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.915743][ T3703] bridge_slave_1: left allmulticast mode [ 96.921644][ T3703] bridge_slave_1: left promiscuous mode [ 96.927346][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.948390][ T3703] bridge_slave_0: left promiscuous mode [ 96.954443][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.068410][ T8020] netlink: 'syz.1.1882': attribute type 11 has an invalid length. [ 97.126329][ T8020] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1882'. [ 97.384546][ T3703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.421323][ T3703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.437502][ T3703] bond0 (unregistering): Released all slaves [ 97.566188][ T8040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1887'. [ 97.575367][ T8040] netem: unknown loss type 13 [ 97.604091][ T3703] tipc: Left network mode [ 97.628658][ T3703] hsr_slave_0: left promiscuous mode [ 97.636776][ T3703] hsr_slave_1: left promiscuous mode [ 97.644516][ T8051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8051 comm=syz.1.1892 [ 97.659879][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.667532][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.701654][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.709296][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.710996][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 97.711012][ T29] audit: type=1400 audit(1749058859.429:2696): avc: denied { bind } for pid=8055 comm="syz.1.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.742810][ T29] audit: type=1400 audit(1749058859.429:2697): avc: denied { name_bind } for pid=8055 comm="syz.1.1893" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.764606][ T29] audit: type=1400 audit(1749058859.429:2698): avc: denied { node_bind } for pid=8055 comm="syz.1.1893" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 97.799863][ T3703] veth1_macvtap: left promiscuous mode [ 97.815795][ T3703] veth1_vlan: left promiscuous mode [ 97.830147][ T3703] veth0_vlan: left promiscuous mode [ 97.852313][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1899'. [ 97.927723][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1904'. [ 97.949646][ T3703] team0 (unregistering): Port device team_slave_1 removed [ 97.972191][ T3703] team0 (unregistering): Port device team_slave_0 removed [ 97.981189][ T8080] loop8: detected capacity change from 0 to 128 [ 97.992861][ T8080] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.006673][ T29] audit: type=1400 audit(1749058859.719:2699): avc: denied { tracepoint } for pid=8081 comm="syz.0.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.042346][ T8062] gretap0: entered promiscuous mode [ 98.047669][ T8062] macsec1: entered promiscuous mode [ 98.054674][ T8062] gretap0: left promiscuous mode [ 98.079604][ T8000] chnl_net:caif_netlink_parms(): no params data found [ 98.092289][ T29] audit: type=1400 audit(1749058859.809:2700): avc: denied { connect } for pid=8083 comm="syz.0.1908" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.114243][ T8080] tipc: New replicast peer: 255.255.255.255 [ 98.120414][ T8080] tipc: Enabled bearer , priority 10 [ 98.166386][ T29] audit: type=1326 audit(1749058859.869:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809ddee929 code=0x7ffc0000 [ 98.189972][ T29] audit: type=1326 audit(1749058859.869:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809ddee929 code=0x7ffc0000 [ 98.213533][ T29] audit: type=1326 audit(1749058859.869:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f809ddee929 code=0x7ffc0000 [ 98.237217][ T29] audit: type=1326 audit(1749058859.869:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809ddee929 code=0x7ffc0000 [ 98.260817][ T29] audit: type=1326 audit(1749058859.869:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.1.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809ddee929 code=0x7ffc0000 [ 98.301393][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1913'. [ 98.347032][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.354369][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.379193][ T8000] bridge_slave_0: entered allmulticast mode [ 98.388750][ T8000] bridge_slave_0: entered promiscuous mode [ 98.400503][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.407658][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.421610][ T8000] bridge_slave_1: entered allmulticast mode [ 98.428143][ T8000] bridge_slave_1: entered promiscuous mode [ 98.440412][ T8109] loop0: detected capacity change from 0 to 164 [ 98.450858][ T8109] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 98.451224][ T8110] loop1: detected capacity change from 0 to 256 [ 98.476598][ T8111] bond_slave_1: entered promiscuous mode [ 98.482616][ T8110] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.494646][ T8106] bond_slave_1: left promiscuous mode [ 98.502554][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.529122][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.565579][ T8118] Cannot find set identified by id 65534 to match [ 98.575537][ T8122] loop1: detected capacity change from 0 to 128 [ 98.586717][ T8000] team0: Port device team_slave_0 added [ 98.599256][ T8000] team0: Port device team_slave_1 added [ 98.611575][ T8125] loop9: detected capacity change from 0 to 512 [ 98.635416][ T8125] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.653804][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.660924][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.687006][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.698941][ T8125] EXT4-fs (loop9): mount failed [ 98.707257][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.714324][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.740364][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.797798][ T8000] hsr_slave_0: entered promiscuous mode [ 98.809319][ T8000] hsr_slave_1: entered promiscuous mode [ 98.854820][ T8136] SELinux: failed to load policy [ 98.968411][ T8151] SELinux: syz.0.1936 (8151) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 98.993186][ T8153] netlink: 260 bytes leftover after parsing attributes in process `syz.9.1937'. [ 99.002467][ T8153] netlink: 260 bytes leftover after parsing attributes in process `syz.9.1937'. [ 99.170089][ T8176] netem: incorrect gi model size [ 99.177942][ T8000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.208325][ T8000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.237044][ T8000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.262163][ T8000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.331391][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.345583][ T8000] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.378092][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.385264][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.402239][ T3719] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.409465][ T3719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.412721][ T8202] hub 9-0:1.0: USB hub found [ 99.438566][ T8202] hub 9-0:1.0: 8 ports detected [ 99.549352][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.587798][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 99.658364][ T8245] atomic_op ffff888129e8ad28 conn xmit_atomic 0000000000000000 [ 99.699439][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1977'. [ 99.794919][ T8000] veth0_vlan: entered promiscuous mode [ 99.804980][ T8000] veth1_vlan: entered promiscuous mode [ 99.833811][ T8000] veth0_macvtap: entered promiscuous mode [ 99.841516][ T8272] SELinux: syz.0.1985 (8272) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 99.843062][ T8000] veth1_macvtap: entered promiscuous mode [ 99.901710][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.931369][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.947330][ T8283] loop0: detected capacity change from 0 to 512 [ 100.006148][ T8000] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.015113][ T8000] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.018749][ T8283] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 100.023896][ T8000] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.047157][ T8000] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.062369][ T8283] EXT4-fs (loop0): mount failed [ 100.126992][ T8301] loop8: detected capacity change from 0 to 1024 [ 100.167915][ T8301] EXT4-fs: Ignoring removed orlov option [ 100.204990][ T8301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.211159][ T8316] loop1: detected capacity change from 0 to 1024 [ 100.223954][ T8301] ext4: Unknown parameter 'ext4' [ 100.242832][ T5129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.243005][ T8318] netlink: 'syz.9.2002': attribute type 10 has an invalid length. [ 100.260139][ T8316] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 100.263952][ T8318] veth0_vlan: entered allmulticast mode [ 100.269948][ T8316] EXT4-fs (loop1): group descriptors corrupted! [ 100.311874][ T8318] veth0_vlan: left promiscuous mode [ 100.319104][ T8318] veth0_vlan: entered promiscuous mode [ 100.327907][ T8318] team0: Device veth0_vlan failed to register rx_handler [ 100.837731][ T8357] loop9: detected capacity change from 0 to 128 [ 100.933550][ T8365] loop0: detected capacity change from 0 to 1024 [ 100.982625][ T8365] EXT4-fs: Ignoring removed i_version option [ 100.993871][ T8365] EXT4-fs: Ignoring removed nobh option [ 101.024397][ T8371] loop9: detected capacity change from 0 to 512 [ 101.035405][ T8365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.056836][ T8371] EXT4-fs (loop9): too many log groups per flexible block group [ 101.064714][ T8371] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 101.076103][ T8371] EXT4-fs (loop9): mount failed [ 101.098717][ T8365] EXT4-fs warning (device loop0): ext4_rename_delete:3726: inode #12: comm syz.0.2026: Deleting old file: nlink 2, error=-2 [ 101.186430][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.282117][ T8390] __nla_validate_parse: 2 callbacks suppressed [ 101.282135][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2036'. [ 101.333120][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2036'. [ 101.427726][ T8397] program syz.8.2040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.450103][ T8398] loop9: detected capacity change from 0 to 2048 [ 101.467431][ T8400] netlink: 'syz.0.2041': attribute type 39 has an invalid length. [ 101.591099][ T8417] netlink: 'syz.9.2048': attribute type 4 has an invalid length. [ 101.640522][ T8417] netlink: 'syz.9.2048': attribute type 4 has an invalid length. [ 101.744905][ T8446] Cannot find add_set index 0 as target [ 101.811046][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.818613][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.826355][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.840634][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2067'. [ 101.841364][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2068'. [ 101.850006][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.866341][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.873858][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.881325][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.888848][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.896276][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.903800][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.911289][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.918778][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.926217][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.933687][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.942204][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.949716][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.957164][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.964808][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.972267][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.979764][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.987200][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.994793][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.002265][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.009805][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.017224][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.024798][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.032314][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.039771][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.061661][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 102.113088][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2071'. [ 102.124252][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2071'. [ 102.135298][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2071'. [ 102.145067][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2071'. [ 102.162328][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2071'. [ 102.392602][ T24] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 102.516901][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 102.624284][ T8526] loop1: detected capacity change from 0 to 128 [ 102.635826][ T8526] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.796629][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 102.796650][ T29] audit: type=1400 audit(1749058864.509:2896): avc: denied { read } for pid=8550 comm="syz.0.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.893079][ T29] audit: type=1400 audit(1749058864.609:2897): avc: denied { create } for pid=8555 comm="syz.5.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.919270][ T29] audit: type=1400 audit(1749058864.609:2898): avc: denied { connect } for pid=8555 comm="syz.5.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.097743][ T8578] syzkaller0: refused to change device tx_queue_len [ 103.176820][ T29] audit: type=1400 audit(1749058864.889:2899): avc: denied { mount } for pid=8588 comm="syz.8.2103" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 103.234999][ T29] audit: type=1400 audit(1749058864.919:2900): avc: denied { unmount } for pid=8588 comm="syz.8.2103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 103.255201][ T29] audit: type=1400 audit(1749058864.949:2901): avc: denied { read } for pid=8592 comm="syz.0.2104" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.278589][ T29] audit: type=1400 audit(1749058864.949:2902): avc: denied { ioctl } for pid=8592 comm="syz.0.2104" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.398269][ T8609] rdma_op ffff888111935d80 conn xmit_rdma 0000000000000000 [ 103.593591][ T8633] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 104.015941][ T8690] netlink: 'syz.1.2123': attribute type 29 has an invalid length. [ 104.038919][ T8690] netlink: 'syz.1.2123': attribute type 29 has an invalid length. [ 104.092639][ T29] audit: type=1326 audit(1749058865.809:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8701 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809ddee929 code=0x7ffc0000 [ 104.116434][ T29] audit: type=1326 audit(1749058865.809:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8701 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f809ddee929 code=0x7ffc0000 [ 104.151026][ T29] audit: type=1326 audit(1749058865.809:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8701 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f809ddee929 code=0x7ffc0000 [ 104.742338][ T8733] loop9: detected capacity change from 0 to 1024 [ 104.798257][ T8733] EXT4-fs mount: 4 callbacks suppressed [ 104.798280][ T8733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.859358][ T1053] kernel write not supported for file bpf-prog (pid: 1053 comm: kworker/0:2) [ 104.956802][ T8743] loop5: detected capacity change from 0 to 1024 [ 105.003488][ T8743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.121250][ T8743] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2140: Allocating blocks 385-513 which overlap fs metadata [ 105.249750][ T8742] EXT4-fs (loop5): pa ffff888106a16770: logic 16, phys. 129, len 24 [ 105.257910][ T8742] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 105.367156][ T8000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.544757][ T8757] loop8: detected capacity change from 0 to 8192 [ 105.680748][ T8768] loop8: detected capacity change from 0 to 1024 [ 105.729085][ T8744] syz.9.2136 (8744) used greatest stack depth: 9288 bytes left [ 105.745462][ T8768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.760337][ T5130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.784043][ T5129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.850038][ T8782] netlink: 'syz.0.2156': attribute type 1 has an invalid length. [ 105.903900][ T8792] loop0: detected capacity change from 0 to 1024 [ 105.939401][ T8792] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.956387][ T8792] EXT4-fs: Ignoring removed nobh option [ 105.962106][ T8792] EXT4-fs: Ignoring removed bh option [ 105.995023][ T8801] loop9: detected capacity change from 0 to 1024 [ 106.003054][ T8792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.025182][ T8801] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.053372][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.084935][ T8801] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.2164: Allocating blocks 449-513 which overlap fs metadata [ 106.149174][ T8800] EXT4-fs (loop9): pa ffff888106a167e0: logic 48, phys. 177, len 21 [ 106.157270][ T8800] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 106.246205][ T5130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.335776][ T8842] ip6gretap1: entered allmulticast mode [ 106.341532][ T8838] loop1: detected capacity change from 0 to 2048 [ 106.474755][ T8858] __nla_validate_parse: 9 callbacks suppressed [ 106.474853][ T8858] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2190'. [ 106.546870][ T8868] unsupported nlmsg_type 40 [ 106.775948][ T8899] loop5: detected capacity change from 0 to 512 [ 106.786267][ T8899] EXT4-fs (loop5): orphan cleanup on readonly fs [ 106.815381][ T8899] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2208: bg 0: block 248: padding at end of block bitmap is not set [ 106.850475][ T8899] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2208: Failed to acquire dquot type 1 [ 106.904089][ T8899] EXT4-fs (loop5): 1 truncate cleaned up [ 106.914723][ T8899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.940940][ T8916] loop1: detected capacity change from 0 to 1024 [ 106.952432][ T8916] EXT4-fs: inline encryption not supported [ 106.974673][ T8916] EXT4-fs: Ignoring removed bh option [ 107.001339][ T8000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.018090][ T8919] loop8: detected capacity change from 0 to 1024 [ 107.027940][ T8919] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.038918][ T8919] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 107.051488][ T8919] JBD2: no valid journal superblock found [ 107.057300][ T8919] EXT4-fs (loop8): Could not load journal inode [ 107.110009][ T8916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.133964][ T8919] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 107.186155][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.202599][ T8930] loop5: detected capacity change from 0 to 164 [ 107.273998][ T8933] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 107.386535][ T8939] loop1: detected capacity change from 0 to 164 [ 107.469410][ T8952] 9pnet: p9_errstr2errno: server reported unknown error @ [ 107.487209][ T8955] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 107.583787][ T8970] loop0: detected capacity change from 0 to 512 [ 107.593329][ T8970] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.600228][ T8970] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2243: bg 0: block 248: padding at end of block bitmap is not set [ 107.616373][ T8970] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2243: Failed to acquire dquot type 1 [ 107.637284][ T8970] EXT4-fs (loop0): 1 truncate cleaned up [ 107.709302][ T8970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.709860][ T8966] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 107.747636][ T8980] loop9: detected capacity change from 0 to 164 [ 107.786388][ T8988] loop8: detected capacity change from 0 to 164 [ 107.818572][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 107.818588][ T29] audit: type=1326 audit(1749058869.529:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8984 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963741e929 code=0x7ffc0000 [ 107.848313][ T29] audit: type=1326 audit(1749058869.529:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8984 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963741e929 code=0x7ffc0000 [ 107.871896][ T29] audit: type=1326 audit(1749058869.529:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8984 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f963741e929 code=0x7ffc0000 [ 107.895246][ T29] audit: type=1326 audit(1749058869.529:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8984 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963741e929 code=0x7ffc0000 [ 107.918812][ T29] audit: type=1326 audit(1749058869.529:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8984 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963741e929 code=0x7ffc0000 [ 107.944642][ T29] audit: type=1326 audit(1749058869.539:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.9.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054d68e929 code=0x7ffc0000 [ 107.968220][ T29] audit: type=1326 audit(1749058869.539:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.9.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f054d68e929 code=0x7ffc0000 [ 107.991869][ T29] audit: type=1326 audit(1749058869.539:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.9.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054d68e929 code=0x7ffc0000 [ 108.015314][ T29] audit: type=1326 audit(1749058869.539:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.9.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054d68e929 code=0x7ffc0000 [ 108.038946][ T29] audit: type=1326 audit(1749058869.539:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8991 comm="syz.9.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f054d68e929 code=0x7ffc0000 [ 108.106519][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.127214][ T8996] loop5: detected capacity change from 0 to 1024 [ 108.134212][ T8996] EXT4-fs: inline encryption not supported [ 108.140522][ T8996] EXT4-fs: Ignoring removed bh option [ 108.189242][ T8996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.240995][ T8000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.344152][ T9016] netlink: 'syz.8.2259': attribute type 1 has an invalid length. [ 108.394580][ T9022] loop5: detected capacity change from 0 to 1024 [ 108.411748][ T9022] EXT4-fs: Ignoring removed i_version option [ 108.424419][ T9022] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.451520][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2267'. [ 108.455827][ T9022] EXT4-fs: Ignoring removed nobh option [ 108.466460][ T9022] EXT4-fs: Ignoring removed bh option [ 108.491225][ T9022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.577870][ T8000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.591791][ T9041] vhci_hcd: invalid port number 96 [ 108.597033][ T9041] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 108.630395][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2277'. [ 108.693993][ T9063] SELinux: syz.9.2284 (9063) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 108.758587][ T9070] loop1: detected capacity change from 0 to 512 [ 108.766737][ T9070] EXT4-fs: Ignoring removed oldalloc option [ 108.774604][ T9070] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.782249][ T9070] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.793031][ T9070] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.800849][ T9070] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2285: Failed to acquire dquot type 1 [ 108.814373][ T9070] EXT4-fs (loop1): 1 truncate cleaned up [ 108.820989][ T9070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.848878][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.922097][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2291'. [ 109.020490][ T9094] loop1: detected capacity change from 0 to 1024 [ 109.043775][ T9094] EXT4-fs: Ignoring removed i_version option [ 109.046199][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2295'. [ 109.063683][ T9094] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.063683][ T9099] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.079060][ T9099] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.087977][ T9099] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.096779][ T9099] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.107946][ T9099] vxlan0: entered promiscuous mode [ 109.107942][ T9094] EXT4-fs: Ignoring removed nobh option [ 109.118857][ T9094] EXT4-fs: Ignoring removed bh option [ 109.142951][ T9094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.176657][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.216924][ T9113] loop8: detected capacity change from 0 to 1024 [ 109.240847][ T9113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.274651][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'. [ 109.275820][ T9127] loop9: detected capacity change from 0 to 512 [ 109.302003][ T5129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.304643][ T9127] EXT4-fs (loop9): orphan cleanup on readonly fs [ 109.319455][ T9127] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2309: bg 0: block 248: padding at end of block bitmap is not set [ 109.341185][ T9127] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2309: Failed to acquire dquot type 1 [ 109.356286][ T9127] EXT4-fs (loop9): 1 truncate cleaned up [ 109.364076][ T9127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.384681][ T3392] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 109.392572][ T3392] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 109.400773][ T3392] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 109.409027][ T3392] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 109.431892][ T5130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.494089][ T9142] loop9: detected capacity change from 0 to 1024 [ 109.501544][ T9142] EXT4-fs: Ignoring removed i_version option [ 109.507633][ T9142] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.514202][ T9142] EXT4-fs: Ignoring removed nobh option [ 109.519960][ T9142] EXT4-fs: Ignoring removed bh option [ 109.531521][ T9142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.565118][ T5130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.578569][ T9149] netlink: 'syz.0.2315': attribute type 1 has an invalid length. [ 109.664869][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2325'. [ 109.685502][ T9165] loop0: detected capacity change from 0 to 512 [ 109.692783][ T9165] EXT4-fs: Ignoring removed oldalloc option [ 109.699079][ T9165] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.718710][ T9165] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.732005][ T9165] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.739019][ T9165] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2326: Failed to acquire dquot type 1 [ 109.752439][ T9165] EXT4-fs (loop0): 1 truncate cleaned up [ 109.759201][ T9165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.787503][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.825464][ T9179] loop0: detected capacity change from 0 to 1024 [ 109.833273][ T9179] EXT4-fs: Ignoring removed i_version option [ 109.853366][ T9179] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.868786][ T9179] EXT4-fs: Ignoring removed nobh option [ 109.874460][ T9179] EXT4-fs: Ignoring removed bh option [ 109.914611][ T9179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.973818][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.135232][ T9221] x_tables: duplicate underflow at hook 1 [ 110.143595][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.151300][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.158962][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.159850][ T9219] vhci_hcd: default hub control req: 600c v0001 i0008 l0 [ 110.166362][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.181069][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.188490][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.195949][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.203460][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.210937][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.218479][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.225944][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.233417][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.241194][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.248784][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.256197][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.263823][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.271519][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.279335][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.286774][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.294202][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.301665][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.309139][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.316539][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.324024][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.331450][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.338867][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.346294][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.353834][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.361250][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.368715][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.376126][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.383574][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.390997][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.398492][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.405939][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.413356][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.420765][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.428159][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.435634][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.443068][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.450508][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.457938][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.465453][ T3392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 110.475966][ T3392] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 110.501706][ T9226] vhci_hcd: invalid port number 96 [ 110.506949][ T9226] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 110.621882][ T9247] loop5: detected capacity change from 0 to 512 [ 110.646777][ T9247] EXT4-fs: Ignoring removed oldalloc option [ 110.659512][ T9247] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.679704][ T9247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.695447][ T9247] EXT4-fs (loop5): orphan cleanup on readonly fs [ 110.707937][ T9247] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2357: Failed to acquire dquot type 1 [ 110.731399][ T9262] loop1: detected capacity change from 0 to 1024 [ 110.744139][ T9262] EXT4-fs: Ignoring removed nobh option [ 110.750174][ T9262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.750718][ T9247] EXT4-fs (loop5): 1 truncate cleaned up [ 110.765354][ T9247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.783013][ T9262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.812466][ T3318] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 110.833226][ T3318] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 110.835322][ T8000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.898733][ T9277] netlink: 'syz.9.2369': attribute type 11 has an invalid length. [ 110.906737][ T9277] netlink: 448 bytes leftover after parsing attributes in process `syz.9.2369'. [ 110.912365][ T9275] vhci_hcd: invalid port number 96 [ 110.920994][ T9275] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 111.030891][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.043744][ T3661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.105748][ T3661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.124544][ T9288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9288 comm=syz.9.2376 [ 111.150467][ T9291] loop0: detected capacity change from 0 to 1024 [ 111.157573][ T9291] EXT4-fs: Ignoring removed nobh option [ 111.163238][ T9291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.180420][ T3661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.202264][ T9291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.231820][ T3661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.265173][ T9302] loop9: detected capacity change from 0 to 512 [ 111.272085][ T9302] EXT4-fs: Ignoring removed oldalloc option [ 111.278277][ T9302] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.286731][ T3317] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 111.305388][ T9302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.315912][ T9302] EXT4-fs (loop9): orphan cleanup on readonly fs [ 111.321660][ T3317] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 111.323370][ T9302] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2380: Failed to acquire dquot type 1 [ 111.363876][ T9302] EXT4-fs (loop9): 1 truncate cleaned up [ 111.379543][ T9302] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.425078][ T3661] bond2: left allmulticast mode [ 111.430195][ T3661] bond2: left promiscuous mode [ 111.435169][ T3661] bridge0: port 4(bond2) entered disabled state [ 111.456957][ T5130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.467362][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.481035][ T3661] vlan2: left promiscuous mode [ 111.486087][ T3661] bridge0: port 3(vlan2) entered disabled state [ 111.514338][ T3661] bridge_slave_1: left allmulticast mode [ 111.520233][ T3661] bridge_slave_1: left promiscuous mode [ 111.526120][ T3661] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.567205][ T3661] bridge_slave_0: left promiscuous mode [ 111.573029][ T3661] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.701827][ T9337] loop5: detected capacity change from 0 to 1024 [ 111.708742][ T9337] EXT4-fs: Ignoring removed nobh option [ 111.714433][ T9337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.730325][ T9337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.744726][ T3661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.753608][ T3661] bond_slave_0: left promiscuous mode [ 111.760975][ T3661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.768309][ T8000] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 111.788190][ T8000] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 111.788339][ T3661] bond_slave_1: left promiscuous mode [ 111.813110][ T3661] bond0 (unregistering): Released all slaves [ 111.824299][ T3661] bond1 (unregistering): Released all slaves [ 111.833346][ T3661] bond2 (unregistering): Released all slaves [ 111.841114][ T8476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.896662][ T3661] hsr_slave_0: left promiscuous mode [ 111.902534][ T3661] hsr_slave_1: left promiscuous mode [ 111.908262][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.915764][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.923591][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.931052][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.941997][ T3661] veth1_macvtap: left promiscuous mode [ 111.947519][ T3661] veth0_macvtap: left promiscuous mode [ 111.953423][ T3661] veth1_vlan: left promiscuous mode [ 111.958846][ T3661] veth0_vlan: left promiscuous mode [ 112.023887][ T3661] team0 (unregistering): Port device team_slave_1 removed [ 112.034893][ T3661] team0 (unregistering): Port device team_slave_0 removed [ 112.152732][ T9292] chnl_net:caif_netlink_parms(): no params data found [ 112.231697][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.239058][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.246457][ T9292] bridge_slave_0: entered allmulticast mode [ 112.253182][ T9292] bridge_slave_0: entered promiscuous mode [ 112.262052][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.269477][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.276825][ T9292] bridge_slave_1: entered allmulticast mode [ 112.283568][ T9292] bridge_slave_1: entered promiscuous mode [ 112.303876][ T9292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.314709][ T9292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.341294][ T3661] IPVS: stop unused estimator thread 0... [ 112.347990][ T9292] team0: Port device team_slave_0 added [ 112.354986][ T9292] team0: Port device team_slave_1 added [ 112.384770][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.391796][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.417902][ T9292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.431238][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.438260][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.464503][ T9292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.496381][ T9326] chnl_net:caif_netlink_parms(): no params data found [ 112.531533][ T9292] hsr_slave_0: entered promiscuous mode [ 112.537624][ T9292] hsr_slave_1: entered promiscuous mode [ 112.543678][ T9292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.551482][ T9292] Cannot create hsr debugfs directory [ 112.572569][ T3661] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.582983][ T3661] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.644971][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.652161][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.659393][ T9326] bridge_slave_0: entered allmulticast mode [ 112.665854][ T9326] bridge_slave_0: entered promiscuous mode [ 112.672805][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.680062][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.687379][ T9326] bridge_slave_1: entered allmulticast mode [ 112.693959][ T9326] bridge_slave_1: entered promiscuous mode [ 112.702421][ T3661] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.712775][ T3661] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.750960][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.768755][ T9353] chnl_net:caif_netlink_parms(): no params data found [ 112.782263][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.793922][ T3661] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.804394][ T3661] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.837058][ T9326] team0: Port device team_slave_0 added [ 112.843892][ T9326] team0: Port device team_slave_1 added [ 112.870978][ T3661] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.881448][ T3661] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.902284][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.909268][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.935462][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.949322][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.956329][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.982447][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.012905][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.020723][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.028065][ T9353] bridge_slave_0: entered allmulticast mode [ 113.034111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.043198][ T9353] bridge_slave_0: entered promiscuous mode [ 113.050111][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.057298][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.064676][ T9353] bridge_slave_1: entered allmulticast mode [ 113.071304][ T9353] bridge_slave_1: entered promiscuous mode [ 113.089781][ T9326] hsr_slave_0: entered promiscuous mode [ 113.095940][ T9326] hsr_slave_1: entered promiscuous mode [ 113.101953][ T9326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.109573][ T9326] Cannot create hsr debugfs directory [ 113.138243][ T9353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.161656][ T9353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.195137][ T9353] team0: Port device team_slave_0 added [ 113.202211][ T9353] team0: Port device team_slave_1 added [ 113.230387][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.237424][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.263480][ T9353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.275215][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.282216][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.308357][ T9353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.349046][ T9353] hsr_slave_0: entered promiscuous mode [ 113.355234][ T9353] hsr_slave_1: entered promiscuous mode [ 113.361245][ T9353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.368837][ T9353] Cannot create hsr debugfs directory [ 113.391668][ T9292] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.406380][ T9292] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.417900][ T9292] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.431993][ T9292] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.493055][ T9292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.508862][ T9292] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.518770][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.525885][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.540709][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.547886][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.575568][ T3661] bridge_slave_1: left allmulticast mode [ 113.581302][ T3661] bridge_slave_1: left promiscuous mode [ 113.587069][ T3661] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.595294][ T3661] bridge_slave_0: left allmulticast mode [ 113.601120][ T3661] bridge_slave_0: left promiscuous mode [ 113.606911][ T3661] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.615261][ T3661] bridge_slave_1: left allmulticast mode [ 113.621079][ T3661] bridge_slave_1: left promiscuous mode [ 113.626741][ T3661] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.634549][ T3661] bridge_slave_0: left promiscuous mode [ 113.640352][ T3661] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.731167][ T3661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.741331][ T3661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.750922][ T3661] bond0 (unregistering): Released all slaves [ 113.900937][ T3661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.910622][ T3661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.919836][ T3661] bond0 (unregistering): Released all slaves [ 113.965003][ T3661] hsr_slave_0: left promiscuous mode [ 113.971376][ T3661] hsr_slave_1: left promiscuous mode [ 113.977051][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.984608][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.992540][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.000046][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.009921][ T3661] hsr_slave_0: left promiscuous mode [ 114.015566][ T3661] hsr_slave_1: left promiscuous mode [ 114.021226][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.028790][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.039943][ T3661] veth1_macvtap: left promiscuous mode [ 114.045467][ T3661] veth0_macvtap: left promiscuous mode [ 114.051093][ T3661] veth1_vlan: left promiscuous mode [ 114.056310][ T3661] veth0_vlan: left promiscuous mode [ 114.120978][ T3661] team0 (unregistering): Port device team_slave_1 removed [ 114.131189][ T3661] team0 (unregistering): Port device team_slave_0 removed [ 114.185628][ T3661] team0 (unregistering): Port device team_slave_1 removed [ 114.195033][ T3661] team0 (unregistering): Port device team_slave_0 removed [ 114.233274][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.296835][ T9292] veth0_vlan: entered promiscuous mode [ 114.306628][ T9292] veth1_vlan: entered promiscuous mode [ 114.320866][ T9292] veth0_macvtap: entered promiscuous mode [ 114.327825][ T9292] veth1_macvtap: entered promiscuous mode [ 114.338032][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.347305][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.359115][ T9292] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.367874][ T9292] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.376678][ T9292] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.385472][ T9292] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.422999][ T9326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.434444][ T9326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.452106][ T9396] loop9: detected capacity change from 0 to 128 [ 114.464007][ T9326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.500603][ T9326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.501855][ T9399] loop3: detected capacity change from 0 to 512 [ 114.514706][ T9399] EXT4-fs: Ignoring removed oldalloc option [ 114.522855][ T9399] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.523703][ T9353] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.536346][ T9399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.549045][ T9399] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.556001][ T9399] __quota_error: 272 callbacks suppressed [ 114.556030][ T9399] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 114.558183][ T9353] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.561940][ T9399] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 114.587603][ T9399] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2400: Failed to acquire dquot type 1 [ 114.599590][ T9399] EXT4-fs (loop3): 1 truncate cleaned up [ 114.606194][ T9399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.626301][ T9353] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.637617][ T9353] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.655321][ T9292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.681693][ T9403] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2414'. [ 114.681862][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.690914][ T9403] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2414'. [ 114.706464][ T9326] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.723824][ T9353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.735142][ T9353] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.752935][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.760179][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.773580][ T29] audit: type=1326 audit(1749058876.489:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 114.775973][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.804244][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.804506][ T29] audit: type=1326 audit(1749058876.519:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 114.835069][ T29] audit: type=1326 audit(1749058876.519:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 114.850097][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.858420][ T29] audit: type=1326 audit(1749058876.519:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 114.865524][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.888922][ T29] audit: type=1326 audit(1749058876.519:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 114.911332][ T9353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.919692][ T29] audit: type=1326 audit(1749058876.519:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 114.929953][ T9353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.953373][ T29] audit: type=1326 audit(1749058876.519:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 114.987301][ T29] audit: type=1326 audit(1749058876.519:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 115.015415][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.022561][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.095331][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.102858][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.110476][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.117973][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.125462][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.133263][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.140780][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.148205][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.155726][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.163199][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.168591][ T9326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.170655][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.170687][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.192786][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.200320][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.207784][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.215311][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.221797][ T9353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.222787][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.236969][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.244471][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.252114][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.259587][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.267001][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.274644][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.282121][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.289744][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.297177][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.304710][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.312192][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.319681][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.327143][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.334889][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.342615][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.350125][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.357811][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.365283][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.366744][ T9326] veth0_vlan: entered promiscuous mode [ 115.372720][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.385802][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.393283][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.400743][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.408168][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.409056][ T9326] veth1_vlan: entered promiscuous mode [ 115.415733][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.428704][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.436139][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.448589][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 115.466235][ T9326] veth0_macvtap: entered promiscuous mode [ 115.474076][ T9326] veth1_macvtap: entered promiscuous mode [ 115.484714][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.499128][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.520336][ T9326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.529265][ T9326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.538006][ T9326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.546805][ T9326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.585803][ T9353] veth0_vlan: entered promiscuous mode [ 115.610145][ T9353] veth1_vlan: entered promiscuous mode [ 115.620813][ T9451] SELinux: syz.9.2411 (9451) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 115.668571][ T9353] veth0_macvtap: entered promiscuous mode [ 115.694231][ T9353] veth1_macvtap: entered promiscuous mode [ 115.704902][ T9455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2398'. [ 115.713970][ T9455] netem: unknown loss type 13 [ 115.718698][ T9455] netem: change failed [ 115.728325][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.748431][ T9458] hub 9-0:1.0: USB hub found [ 115.754175][ T9458] hub 9-0:1.0: 8 ports detected [ 115.767927][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.792397][ T9353] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.801294][ T9353] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.810113][ T9353] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.818945][ T9353] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.888855][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 115.902743][ T9465] atomic_op ffff888120da5528 conn xmit_atomic 0000000000000000 [ 115.911035][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2397'. [ 116.000186][ T9475] loop6: detected capacity change from 0 to 512 [ 116.012087][ T9475] EXT4-fs: Ignoring removed oldalloc option [ 116.018229][ T9475] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.027546][ T9475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.037848][ T9475] EXT4-fs (loop6): orphan cleanup on readonly fs [ 116.048100][ T9475] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2415: Failed to acquire dquot type 1 [ 116.103598][ T9475] EXT4-fs (loop6): 1 truncate cleaned up [ 116.118050][ T9475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.131305][ T9481] loop0: detected capacity change from 0 to 128 [ 116.155638][ T9481] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.192523][ T9481] tipc: Started in network mode [ 116.197475][ T9481] tipc: Node identity ac14140f, cluster identity 4711 [ 116.204737][ T9353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.211372][ T9481] tipc: New replicast peer: 255.255.255.255 [ 116.220050][ T9481] tipc: Enabled bearer , priority 10 [ 116.415217][ T9496] SELinux: syz.9.2432 (9496) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 116.428803][ T9497] hub 9-0:1.0: USB hub found [ 116.436686][ T9497] hub 9-0:1.0: 8 ports detected [ 116.527489][ T9512] loop9: detected capacity change from 0 to 512 [ 116.534976][ T9514] loop6: detected capacity change from 0 to 128 [ 116.557336][ T9514] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.570500][ T9512] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 116.583488][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2443'. [ 116.586507][ T9512] EXT4-fs (loop9): mount failed [ 116.594124][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2443'. [ 116.612032][ T9514] tipc: Started in network mode [ 116.616984][ T9514] tipc: Node identity ac14140f, cluster identity 4711 [ 116.638359][ T9514] tipc: New replicast peer: 255.255.255.255 [ 116.644603][ T9514] tipc: Enabled bearer , priority 10 [ 116.692371][ T9532] netlink: 'syz.0.2447': attribute type 10 has an invalid length. [ 116.703141][ T9532] veth0_vlan: entered allmulticast mode [ 116.715252][ T9532] veth0_vlan: left promiscuous mode [ 116.723652][ T9532] veth0_vlan: entered promiscuous mode [ 116.733799][ T9532] team0: Device veth0_vlan failed to register rx_handler [ 116.810205][ T9545] gretap0: entered promiscuous mode [ 116.815402][ T9546] loop0: detected capacity change from 0 to 512 [ 116.815615][ T9545] macsec1: entered promiscuous mode [ 116.832097][ T9546] EXT4-fs: Ignoring removed oldalloc option [ 116.838255][ T9546] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.838504][ T9545] gretap0: left promiscuous mode [ 116.871570][ T9546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.896412][ T9546] EXT4-fs (loop0): orphan cleanup on readonly fs [ 116.918865][ T9546] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2453: Failed to acquire dquot type 1 [ 116.934738][ T9546] EXT4-fs (loop0): 1 truncate cleaned up [ 116.944601][ T9546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.997488][ T9326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.023785][ T9557] hub 9-0:1.0: USB hub found [ 117.041125][ T9557] hub 9-0:1.0: 8 ports detected [ 117.103863][ T9568] loop8: detected capacity change from 0 to 128 [ 117.211181][ T9586] loop8: detected capacity change from 0 to 512 [ 117.222272][ T9586] EXT4-fs: Ignoring removed oldalloc option [ 117.233919][ T9591] netlink: 'syz.3.2475': attribute type 11 has an invalid length. [ 117.241957][ T9586] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.250893][ T9586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.260176][ T9591] netlink: 448 bytes leftover after parsing attributes in process `syz.3.2475'. [ 117.275676][ T9586] EXT4-fs (loop8): orphan cleanup on readonly fs [ 117.293183][ T9586] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2474: Failed to acquire dquot type 1 [ 117.305234][ T9586] EXT4-fs (loop8): 1 truncate cleaned up [ 117.312052][ T9586] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.336764][ T5129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.338712][ T9438] tipc: Node number set to 2886997007 [ 117.372182][ T9602] hub 9-0:1.0: USB hub found [ 117.377042][ T9602] hub 9-0:1.0: 8 ports detected [ 117.425798][ T9604] loop3: detected capacity change from 0 to 1024 [ 117.494517][ T9604] EXT4-fs: Ignoring removed i_version option [ 117.501851][ T9604] EXT4-fs: Ignoring removed nobh option [ 117.547530][ T9604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.611121][ T9627] loop9: detected capacity change from 0 to 512 [ 117.617717][ T9604] EXT4-fs warning (device loop3): ext4_rename_delete:3726: inode #12: comm syz.3.2481: Deleting old file: nlink 2, error=-2 [ 117.619735][ T9627] EXT4-fs: Ignoring removed oldalloc option [ 117.636812][ T9627] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.644991][ T9631] netlink: 'syz.8.2492': attribute type 11 has an invalid length. [ 117.653009][ T36] tipc: Node number set to 2886997007 [ 117.658918][ T9627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.670557][ T9627] EXT4-fs (loop9): orphan cleanup on readonly fs [ 117.674499][ T9631] netlink: 448 bytes leftover after parsing attributes in process `syz.8.2492'. [ 117.694724][ T9627] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2491: Failed to acquire dquot type 1 [ 117.709603][ T9627] EXT4-fs (loop9): 1 truncate cleaned up [ 117.717721][ T9292] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.727341][ T9627] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.792568][ T9642] netlink: 'syz.3.2497': attribute type 39 has an invalid length. [ 117.822486][ T5130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.029621][ T9653] netlink: 'syz.8.2502': attribute type 4 has an invalid length. [ 118.058419][ T9653] netlink: 'syz.8.2502': attribute type 4 has an invalid length. [ 118.066603][ T9648] hub 9-0:1.0: USB hub found [ 118.078907][ T9648] hub 9-0:1.0: 8 ports detected [ 118.124389][ T9660] loop3: detected capacity change from 0 to 512 [ 118.132731][ T9657] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2505'. [ 118.142020][ T9657] netem: unknown loss type 13 [ 118.157554][ T9661] hub 9-0:1.0: USB hub found [ 118.179300][ T9661] hub 9-0:1.0: 8 ports detected [ 118.182393][ T9660] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 118.211313][ T9660] EXT4-fs (loop3): mount failed [ 118.323918][ T9677] Cannot find add_set index 0 as target [ 118.362595][ T9681] SELinux: syz.3.2513 (9681) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.506894][ T9700] loop6: detected capacity change from 0 to 512 [ 118.529536][ T9700] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 118.552897][ T9700] EXT4-fs (loop6): mount failed [ 118.715990][ T9721] loop8: detected capacity change from 0 to 164 [ 118.740074][ T9721] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 118.843421][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.850940][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.858438][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.889635][ T9723] loop0: detected capacity change from 0 to 256 [ 118.891428][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.903433][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.910950][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.918386][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.925830][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.933328][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.941263][ T9723] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.941281][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.959420][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.966876][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.974409][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.981876][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 118.993788][ T9727] SELinux: syz.6.2535 (9727) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 119.018257][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.026041][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.033727][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.041381][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.048931][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.056666][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.064103][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.071604][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.079115][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.086551][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.094089][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.101832][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.109449][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.116905][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 119.125398][ T36] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 119.189230][ T9741] bond_slave_1: entered promiscuous mode [ 119.196151][ T9743] loop8: detected capacity change from 0 to 128 [ 119.203922][ T9740] bond_slave_1: left promiscuous mode [ 119.220315][ T9743] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.233083][ T9743] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.267560][ T5129] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.304086][ T9751] SELinux: failed to load policy [ 119.350237][ T9762] loop8: detected capacity change from 0 to 512 [ 119.361099][ T9765] loop6: detected capacity change from 0 to 164 [ 119.374493][ T9762] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 119.392688][ T9765] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 119.401066][ T9762] EXT4-fs (loop8): mount failed [ 119.534056][ T9787] rdma_op ffff88811520ad80 conn xmit_rdma 0000000000000000 [ 119.581945][ T9791] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 119.760786][ T9812] netlink: 'syz.6.2575': attribute type 29 has an invalid length. [ 119.773686][ T9812] netlink: 'syz.6.2575': attribute type 29 has an invalid length. [ 119.801706][ T9816] loop3: detected capacity change from 0 to 512 [ 119.805937][ T9812] __nla_validate_parse: 7 callbacks suppressed [ 119.805959][ T9812] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2575'. [ 119.833715][ T9816] __quota_error: 155 callbacks suppressed [ 119.833738][ T9816] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 119.850210][ T9816] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 119.866591][ T9816] EXT4-fs (loop3): mount failed [ 119.879346][ T9825] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2589'. [ 119.888512][ T9825] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2589'. [ 119.891404][ T9822] SELinux: failed to load policy [ 119.988043][ T9835] SELinux: syz.3.2583 (9835) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 120.113624][ T9843] loop9: detected capacity change from 0 to 1024 [ 120.132979][ T9843] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 120.143025][ T9843] EXT4-fs (loop9): group descriptors corrupted! [ 120.256633][ T29] audit: type=1326 audit(1749058881.969:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.9.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f054d6858e7 code=0x7ffc0000 [ 120.283891][ T29] audit: type=1326 audit(1749058881.999:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.9.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f054d62ab19 code=0x7ffc0000 [ 120.307741][ T29] audit: type=1326 audit(1749058881.999:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.9.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f054d6858e7 code=0x7ffc0000 [ 120.331303][ T29] audit: type=1326 audit(1749058881.999:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.9.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f054d62ab19 code=0x7ffc0000 [ 120.355097][ T29] audit: type=1326 audit(1749058881.999:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.9.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054d68e929 code=0x7ffc0000 [ 120.378995][ T29] audit: type=1326 audit(1749058881.999:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.9.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054d68e929 code=0x7ffc0000 [ 120.403659][ T29] audit: type=1326 audit(1749058881.999:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.9.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f054d68e929 code=0x7ffc0000 [ 120.427563][ T29] audit: type=1326 audit(1749058881.999:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.9.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f054d6858e7 code=0x7ffc0000 [ 120.451017][ T29] audit: type=1326 audit(1749058881.999:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.9.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f054d62ab19 code=0x7ffc0000 [ 120.512536][ T9864] SELinux: syz.8.2597 (9864) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 120.768076][ T9881] loop8: detected capacity change from 0 to 512 [ 120.793861][ T9881] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.810296][ T9881] EXT4-fs (loop8): mount failed [ 121.175476][ T9926] loop0: detected capacity change from 0 to 1024 [ 121.187600][ T9926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.205616][ T9926] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2625: Allocating blocks 385-513 which overlap fs metadata [ 121.224404][ T9924] EXT4-fs (loop0): pa ffff888100645230: logic 16, phys. 129, len 24 [ 121.232579][ T9924] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 121.261348][ T9326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.375658][ T9941] loop0: detected capacity change from 0 to 1024 [ 121.395826][ T9941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.436063][ T9945] loop9: detected capacity change from 0 to 8192 [ 121.981913][ T9955] atomic_op ffff88810d10b528 conn xmit_atomic 0000000000000000 [ 122.323758][ T9326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.514387][T10009] loop8: detected capacity change from 0 to 1024 [ 122.551953][T10009] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.602286][T10020] netlink: 'syz.6.2666': attribute type 10 has an invalid length. [ 122.614756][T10020] veth0_vlan: entered allmulticast mode [ 122.641484][T10009] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.2662: Allocating blocks 449-513 which overlap fs metadata [ 122.650603][T10020] veth0_vlan: left promiscuous mode [ 122.679868][T10020] veth0_vlan: entered promiscuous mode [ 122.701262][T10020] team0: Device veth0_vlan failed to register rx_handler [ 122.741281][T10008] EXT4-fs (loop8): pa ffff888106a16770: logic 48, phys. 177, len 21 [ 122.749455][T10008] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 122.834771][ T5129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.859679][T10036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2671'. [ 122.874600][T10038] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2683'. [ 122.982399][T10052] ip6gretap1: entered allmulticast mode [ 123.399612][T10088] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2693'. [ 123.482203][T10104] loop9: detected capacity change from 0 to 1024 [ 123.499896][T10105] loop0: detected capacity change from 0 to 128 [ 123.508820][T10104] EXT4-fs: Ignoring removed i_version option [ 123.514944][T10104] EXT4-fs: Ignoring removed nobh option [ 123.544822][T10104] EXT4-fs warning (device loop9): ext4_rename_delete:3726: inode #12: comm syz.9.2701: Deleting old file: nlink 2, error=-2 [ 123.700018][T10134] netlink: 'syz.6.2716': attribute type 39 has an invalid length. [ 123.716338][T10130] loop0: detected capacity change from 0 to 2048 [ 123.869201][T10149] loop6: detected capacity change from 0 to 128 [ 123.953216][T10155] loop6: detected capacity change from 0 to 1024 [ 123.969799][T10155] EXT4-fs: Ignoring removed i_version option [ 123.976022][T10155] EXT4-fs: Ignoring removed nobh option [ 124.005917][T10163] loop0: detected capacity change from 0 to 512 [ 124.038553][T10163] EXT4-fs (loop0): too many log groups per flexible block group [ 124.046438][T10163] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 124.055751][T10171] Cannot find add_set index 0 as target [ 124.063848][T10163] EXT4-fs (loop0): mount failed [ 124.091392][T10155] EXT4-fs warning (device loop6): ext4_rename_delete:3726: inode #12: comm syz.6.2723: Deleting old file: nlink 2, error=-2 [ 124.112188][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 124.167142][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 124.180102][T10175] netlink: 'syz.8.2734': attribute type 39 has an invalid length. [ 124.624202][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2746'. [ 124.731264][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2746'. [ 124.817126][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.824649][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.832560][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.863501][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.871133][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.878668][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.886112][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.893543][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.900968][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.908381][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.915968][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.923456][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.931063][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.938555][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.949179][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.956655][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.964172][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.971741][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.979168][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.986600][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 124.994130][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 125.001721][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 125.009213][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 125.016641][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 125.024241][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 125.031730][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 125.039239][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 125.046672][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 125.076999][ T36] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 125.092233][T10231] netlink: 'syz.9.2751': attribute type 39 has an invalid length. [ 125.257100][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 125.257129][ T29] audit: type=1326 audit(1749058886.969:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.308787][ T29] audit: type=1326 audit(1749058886.969:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.332462][ T29] audit: type=1326 audit(1749058886.969:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.356389][ T29] audit: type=1326 audit(1749058886.969:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.380151][ T29] audit: type=1326 audit(1749058886.969:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.387941][ T24] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 125.404167][ T29] audit: type=1326 audit(1749058886.969:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.441654][ T29] audit: type=1326 audit(1749058887.079:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.465345][ T29] audit: type=1326 audit(1749058887.079:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.489270][ T29] audit: type=1326 audit(1749058887.099:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.512984][ T29] audit: type=1326 audit(1749058887.099:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10253 comm="syz.3.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a3dae929 code=0x7ffc0000 [ 125.536697][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.544264][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.551864][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.586611][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.594148][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.601751][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.609245][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.616707][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.624321][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.631932][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.639591][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.647114][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.654640][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.662196][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.751635][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.759229][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.766670][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.774186][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.781720][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.789234][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.796675][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.804132][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.811706][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.819521][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.826953][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.834510][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.842060][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.849511][ T3395] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.858182][ T3395] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 125.895213][T10298] __nla_validate_parse: 1 callbacks suppressed [ 125.895234][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 125.917889][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 125.934156][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 125.945488][T10304] loop0: detected capacity change from 0 to 128 [ 125.955526][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 125.968217][T10304] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.106840][T10330] rdma_op ffff8881170a1d80 conn xmit_rdma 0000000000000000 [ 126.119308][T10334] syzkaller0: refused to change device tx_queue_len [ 126.126573][T10325] netlink: 33912 bytes leftover after parsing attributes in process `syz.0.2765'. [ 126.177585][T10343] netlink: 'syz.3.2774': attribute type 29 has an invalid length. [ 126.186865][T10343] netlink: 'syz.3.2774': attribute type 29 has an invalid length. [ 126.196496][T10343] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2774'. [ 126.282939][T10362] loop0: detected capacity change from 0 to 1024 [ 126.290701][T10364] loop3: detected capacity change from 0 to 128 [ 126.313503][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2777'. [ 126.324663][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2777'. [ 126.337176][T10364] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.360217][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2777'. [ 126.369783][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2777'. [ 127.071495][T10407] loop8: detected capacity change from 0 to 1024 [ 127.096246][T10409] syzkaller0: refused to change device tx_queue_len [ 127.165125][T10413] ================================================================== [ 127.173288][T10413] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 127.180461][T10413] [ 127.182812][T10413] write to 0xffff8881087413ec of 4 bytes by task 10407 on cpu 1: [ 127.190571][T10413] xas_set_mark+0x12b/0x140 [ 127.195312][T10413] __folio_start_writeback+0x1dd/0x440 [ 127.200806][T10413] ext4_bio_write_folio+0x5ad/0x9f0 [ 127.206049][T10413] mpage_submit_folio+0xe4/0x170 [ 127.211051][T10413] mpage_process_page_bufs+0x39b/0x4a0 [ 127.216566][T10413] mpage_prepare_extent_to_map+0x741/0xaa0 [ 127.222419][T10413] ext4_do_writepages+0xa1a/0x21c0 [ 127.227567][T10413] ext4_writepages+0x176/0x300 [ 127.232361][T10413] do_writepages+0x1c3/0x310 [ 127.236985][T10413] filemap_write_and_wait_range+0x144/0x340 [ 127.242940][T10413] filemap_invalidate_pages+0xa4/0x1a0 [ 127.248436][T10413] kiocb_invalidate_pages+0x6e/0x80 [ 127.253660][T10413] __iomap_dio_rw+0x5d4/0x1250 [ 127.258457][T10413] iomap_dio_rw+0x40/0x90 [ 127.262836][T10413] ext4_file_write_iter+0xad9/0xf00 [ 127.268064][T10413] iter_file_splice_write+0x5f2/0x970 [ 127.273494][T10413] direct_splice_actor+0x156/0x2a0 [ 127.278654][T10413] splice_direct_to_actor+0x312/0x680 [ 127.284070][T10413] do_splice_direct+0xda/0x150 [ 127.288887][T10413] do_sendfile+0x380/0x650 [ 127.293343][T10413] __x64_sys_sendfile64+0x105/0x150 [ 127.298569][T10413] x64_sys_call+0xb39/0x2fb0 [ 127.303189][T10413] do_syscall_64+0xd2/0x200 [ 127.307715][T10413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.313623][T10413] [ 127.315953][T10413] read to 0xffff8881087413ec of 4 bytes by task 10413 on cpu 0: [ 127.323686][T10413] xas_find_marked+0x5dc/0x620 [ 127.328479][T10413] find_get_entry+0x5d/0x380 [ 127.333094][T10413] filemap_get_folios_tag+0x92/0x210 [ 127.338406][T10413] mpage_prepare_extent_to_map+0x320/0xaa0 [ 127.344235][T10413] ext4_do_writepages+0x6ea/0x21c0 [ 127.349363][T10413] ext4_writepages+0x176/0x300 [ 127.354177][T10413] do_writepages+0x1c3/0x310 [ 127.358787][T10413] file_write_and_wait_range+0x156/0x2c0 [ 127.364445][T10413] generic_buffers_fsync_noflush+0x45/0x120 [ 127.370369][T10413] ext4_sync_file+0x1ab/0x690 [ 127.375066][T10413] vfs_fsync_range+0x10d/0x130 [ 127.379848][T10413] ext4_buffered_write_iter+0x34f/0x3c0 [ 127.385446][T10413] ext4_file_write_iter+0xdbf/0xf00 [ 127.390667][T10413] iter_file_splice_write+0x5f2/0x970 [ 127.396082][T10413] direct_splice_actor+0x156/0x2a0 [ 127.401238][T10413] splice_direct_to_actor+0x312/0x680 [ 127.406638][T10413] do_splice_direct+0xda/0x150 [ 127.411519][T10413] do_sendfile+0x380/0x650 [ 127.416050][T10413] __x64_sys_sendfile64+0x105/0x150 [ 127.421268][T10413] x64_sys_call+0xb39/0x2fb0 [ 127.426048][T10413] do_syscall_64+0xd2/0x200 [ 127.430576][T10413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.436484][T10413] [ 127.438809][T10413] value changed: 0x0a000021 -> 0x00000021 [ 127.444535][T10413] [ 127.446888][T10413] Reported by Kernel Concurrency Sanitizer on: [ 127.453051][T10413] CPU: 0 UID: 0 PID: 10413 Comm: syz.8.2784 Tainted: G W 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 127.466806][T10413] Tainted: [W]=WARN [ 127.470628][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.480722][T10413] ================================================================== [ 127.795032][T10407] ================================================================== [ 127.803175][T10407] BUG: KCSAN: data-race in ext4_do_writepages / xas_set_mark [ 127.810578][T10407] [ 127.812909][T10407] write to 0xffff8881087413ec of 4 bytes by task 10413 on cpu 0: [ 127.820629][T10407] xas_set_mark+0x12b/0x140 [ 127.825153][T10407] __folio_start_writeback+0x1dd/0x440 [ 127.830623][T10407] ext4_bio_write_folio+0x5ad/0x9f0 [ 127.835842][T10407] mpage_submit_folio+0xe4/0x170 [ 127.840830][T10407] mpage_process_page_bufs+0x39b/0x4a0 [ 127.846370][T10407] mpage_prepare_extent_to_map+0x741/0xaa0 [ 127.852208][T10407] ext4_do_writepages+0xa1a/0x21c0 [ 127.857339][T10407] ext4_writepages+0x176/0x300 [ 127.862118][T10407] do_writepages+0x1c3/0x310 [ 127.866722][T10407] file_write_and_wait_range+0x156/0x2c0 [ 127.872368][T10407] generic_buffers_fsync_noflush+0x45/0x120 [ 127.878363][T10407] ext4_sync_file+0x1ab/0x690 [ 127.883054][T10407] vfs_fsync_range+0x10d/0x130 [ 127.887820][T10407] ext4_buffered_write_iter+0x34f/0x3c0 [ 127.893383][T10407] ext4_file_write_iter+0xdbf/0xf00 [ 127.898587][T10407] iter_file_splice_write+0x5f2/0x970 [ 127.903971][T10407] direct_splice_actor+0x156/0x2a0 [ 127.909183][T10407] splice_direct_to_actor+0x312/0x680 [ 127.914568][T10407] do_splice_direct+0xda/0x150 [ 127.919383][T10407] do_sendfile+0x380/0x650 [ 127.923810][T10407] __x64_sys_sendfile64+0x105/0x150 [ 127.929014][T10407] x64_sys_call+0xb39/0x2fb0 [ 127.933606][T10407] do_syscall_64+0xd2/0x200 [ 127.938140][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.944057][T10407] [ 127.946399][T10407] read to 0xffff8881087413ec of 4 bytes by task 10407 on cpu 1: [ 127.954026][T10407] ext4_do_writepages+0xea/0x21c0 [ 127.959058][T10407] ext4_writepages+0x176/0x300 [ 127.963919][T10407] do_writepages+0x1c3/0x310 [ 127.968539][T10407] filemap_write_and_wait_range+0x144/0x340 [ 127.974456][T10407] filemap_invalidate_pages+0xa4/0x1a0 [ 127.979924][T10407] kiocb_invalidate_pages+0x6e/0x80 [ 127.985124][T10407] __iomap_dio_rw+0x5d4/0x1250 [ 127.989900][T10407] iomap_dio_rw+0x40/0x90 [ 127.994245][T10407] ext4_file_write_iter+0xad9/0xf00 [ 127.999460][T10407] iter_file_splice_write+0x5f2/0x970 [ 128.004861][T10407] direct_splice_actor+0x156/0x2a0 [ 128.010000][T10407] splice_direct_to_actor+0x312/0x680 [ 128.015388][T10407] do_splice_direct+0xda/0x150 [ 128.020195][T10407] do_sendfile+0x380/0x650 [ 128.024623][T10407] __x64_sys_sendfile64+0x105/0x150 [ 128.029835][T10407] x64_sys_call+0xb39/0x2fb0 [ 128.034429][T10407] do_syscall_64+0xd2/0x200 [ 128.038943][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.044839][T10407] [ 128.047163][T10407] value changed: 0x0a000021 -> 0x00000021 [ 128.052875][T10407] [ 128.055215][T10407] Reported by Kernel Concurrency Sanitizer on: [ 128.061365][T10407] CPU: 1 UID: 0 PID: 10407 Comm: syz.8.2784 Tainted: G W 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 128.075118][T10407] Tainted: [W]=WARN [ 128.078920][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.088975][T10407] ================================================================== [ 128.167523][T10413] syz.8.2784 (10413) used greatest stack depth: 9080 bytes left