last executing test programs: 2m21.357144789s ago: executing program 4 (id=2085): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "d0ef00009a7f35b6", "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) truncate(&(0x7f0000000300)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001b40)=ANY=[], 0x835, 0x2) 2m20.683646618s ago: executing program 4 (id=2096): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14c}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x20, r1, 0x301, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x29}}}}}, 0x20}}, 0x40) 2m20.644780879s ago: executing program 4 (id=2097): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x90) 2m20.234777505s ago: executing program 4 (id=2108): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 2m20.157582206s ago: executing program 4 (id=2109): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2m20.096775307s ago: executing program 4 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x4e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x6, 0x800, 0x9, 0x800, 0x2c78, 0x0, 0x280, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x7, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0xc0000001}, {0x7, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 2m20.075045777s ago: executing program 32 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x4e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x6, 0x800, 0x9, 0x800, 0x2c78, 0x0, 0x280, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x7, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0xc0000001}, {0x7, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 2.881339141s ago: executing program 3 (id=5490): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.848006471s ago: executing program 3 (id=5491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x28020480) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 2.534197095s ago: executing program 5 (id=5501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.476314696s ago: executing program 5 (id=5504): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000003280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)) creat(0x0, 0x80) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2.311707038s ago: executing program 2 (id=5510): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 2.247272879s ago: executing program 2 (id=5512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 2.22365198s ago: executing program 2 (id=5513): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.147418331s ago: executing program 2 (id=5514): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x740, 0x140) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000000)='./file0\x00', 0x6) 1.982409013s ago: executing program 3 (id=5517): syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000001, 0x12, 0xffffffffffffffff, 0x4ebef000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.972380383s ago: executing program 2 (id=5518): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x1) shutdown(r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.555580549s ago: executing program 3 (id=5519): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.525777199s ago: executing program 5 (id=5520): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) syz_emit_ethernet(0x122d, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, 0x0) r2 = memfd_create(&(0x7f0000001f40)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xfa\xed\x04\x00\x00\x00\xd4N\x12;\x83-j\xa7\x02\x92\xecA\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4\xe1\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\b\x00\x00\x00\x00~\xf3S\x12\"\x00^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x00ZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99Y', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x2) 1.449632811s ago: executing program 3 (id=5521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x2}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 1.390234201s ago: executing program 5 (id=5523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) io_uring_setup(0x1a6d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7905, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.201728934s ago: executing program 1 (id=5524): r0 = syz_io_uring_setup(0x1710, &(0x7f0000000240)={0x0, 0x6201, 0x10, 0x80000, 0x1bb}, &(0x7f00000001c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x4721, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x1000000000000, 0x0, 0x0) 736.49642ms ago: executing program 2 (id=5531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) 686.147741ms ago: executing program 5 (id=5532): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4, 0x1}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 685.765281ms ago: executing program 0 (id=5533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 609.059782ms ago: executing program 0 (id=5536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mlock2(&(0x7f000009e000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r3, 0x4, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x8000, 0x0, 0x0, 0x300}}) 572.304342ms ago: executing program 1 (id=5537): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x85, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) 495.859624ms ago: executing program 3 (id=5538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x800000000000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x100}, 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981"], 0x1000f) 495.464254ms ago: executing program 1 (id=5539): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 494.909444ms ago: executing program 0 (id=5540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 460.955964ms ago: executing program 1 (id=5541): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 337.483376ms ago: executing program 0 (id=5542): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 314.116806ms ago: executing program 1 (id=5543): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 254.172047ms ago: executing program 1 (id=5544): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000140)=0xc, 0x4) lseek(r1, 0x2000, 0x0) 0s ago: executing program 0 (id=5545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) kernel console output (not intermixed with test programs): f45cec4e969 code=0x7ffc0000 [ 174.140418][ T29] audit: type=1326 audit(1746852198.617:17830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.0.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 174.174413][ T29] audit: type=1326 audit(1746852198.667:17831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.0.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 174.198262][ T29] audit: type=1326 audit(1746852198.667:17832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.0.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 174.221918][ T29] audit: type=1326 audit(1746852198.667:17833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.0.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 174.245657][ T29] audit: type=1326 audit(1746852198.747:17834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.0.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 174.269522][ T29] audit: type=1326 audit(1746852198.747:17835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13202 comm="syz.0.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 174.385667][T13218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3677'. [ 174.469997][T13228] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3682'. [ 174.672654][T13252] loop0: detected capacity change from 0 to 1024 [ 174.720128][T13252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.771601][T13252] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3692: Allocating blocks 385-513 which overlap fs metadata [ 174.809436][T13252] EXT4-fs (loop0): pa ffff888106e4b7e0: logic 16, phys. 129, len 24 [ 174.817597][T13252] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 174.881860][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.080190][T13304] loop3: detected capacity change from 0 to 2048 [ 175.139226][T13304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.175325][T13314] loop0: detected capacity change from 0 to 128 [ 175.185190][T13304] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.247043][T13314] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.290676][T13304] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 175.303198][T13304] EXT4-fs (loop3): This should not happen!! Data will be lost [ 175.303198][T13304] [ 175.312926][T13304] EXT4-fs (loop3): Total free blocks count 0 [ 175.318955][T13304] EXT4-fs (loop3): Free/Dirty block details [ 175.324884][T13304] EXT4-fs (loop3): free_blocks=2415919104 [ 175.330657][T13304] EXT4-fs (loop3): dirty_blocks=32 [ 175.335821][T13304] EXT4-fs (loop3): Block reservation details [ 175.341848][T13304] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 175.353143][T13314] ext4 filesystem being mounted at /788/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.395357][T13325] netlink: 'syz.1.3722': attribute type 39 has an invalid length. [ 175.409941][ T6604] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 175.455563][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.629017][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3732'. [ 175.642768][T13350] loop3: detected capacity change from 0 to 1764 [ 175.649928][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 175.702434][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 175.754352][T13369] loop1: detected capacity change from 0 to 512 [ 175.794407][T13369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.816314][T13369] ext4 filesystem being mounted at /735/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.849676][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.036797][T13394] Falling back ldisc for ttyS3. [ 176.096772][T13402] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 176.784822][T13450] netlink: 'syz.0.3775': attribute type 10 has an invalid length. [ 176.792732][T13450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3775'. [ 176.802692][T13450] dummy0: entered promiscuous mode [ 176.808561][T13450] bridge0: port 4(dummy0) entered blocking state [ 176.815062][T13450] bridge0: port 4(dummy0) entered disabled state [ 176.821659][T13450] dummy0: entered allmulticast mode [ 177.249068][T13465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.270164][T13465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.355091][T13477] loop0: detected capacity change from 0 to 512 [ 177.377545][T13477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 177.390542][T13477] ext4 filesystem being mounted at /807/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.466950][T13477] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.3785: corrupted inode contents [ 177.479876][T13477] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #19: comm syz.0.3785: mark_inode_dirty error [ 177.497286][T13477] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.3785: corrupted inode contents [ 177.513610][T13477] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.3785: mark_inode_dirty error [ 177.528124][T13477] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.3785: mark inode dirty (error -117) [ 177.543335][T13477] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 177.576083][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 177.841395][T13523] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3801'. [ 177.877971][T13527] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.3800'. [ 177.887340][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 178.463137][T13560] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.507355][T13560] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.546964][T13560] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.597375][T13560] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.609452][T13565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3817'. [ 178.653952][T13560] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.666065][T13560] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.681671][T13560] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.708126][T13560] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.821983][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 178.833145][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 179.010651][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3837'. [ 179.338633][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 179.338703][ T29] audit: type=1326 audit(1746852203.917:17915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 179.465630][ T29] audit: type=1326 audit(1746852203.947:17916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 179.489372][ T29] audit: type=1326 audit(1746852203.947:17917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 179.512861][ T29] audit: type=1326 audit(1746852203.947:17918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 179.536601][ T29] audit: type=1326 audit(1746852203.947:17919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 179.560174][ T29] audit: type=1326 audit(1746852203.947:17920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 179.583770][ T29] audit: type=1326 audit(1746852203.947:17921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 181.785074][T13642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3853'. [ 181.957031][T13652] Falling back ldisc for ttyS3. [ 181.996290][T13650] lo speed is unknown, defaulting to 1000 [ 182.407118][T13670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13670 comm=syz.1.3863 [ 182.517675][ T29] audit: type=1400 audit(1746852207.097:17922): avc: denied { connect } for pid=13672 comm="syz.3.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.562176][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3870'. [ 182.627334][T13687] vlan2: entered allmulticast mode [ 182.632523][T13687] bond0: entered allmulticast mode [ 182.637765][T13687] bond_slave_0: entered allmulticast mode [ 182.643630][T13687] bond_slave_1: entered allmulticast mode [ 182.661078][ T29] audit: type=1400 audit(1746852207.237:17923): avc: denied { mounton } for pid=13679 comm="syz.1.3869" path="/757/file0" dev="proc" ino=4026532587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 182.721503][ T29] audit: type=1400 audit(1746852207.297:17924): avc: denied { name_bind } for pid=13695 comm="syz.1.3876" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 182.754638][T13694] smc: net device bond0 erased user defined pnetid SYZ2 [ 182.763755][T13694] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 182.828240][T13700] loop0: detected capacity change from 0 to 512 [ 182.883143][T13700] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3877: bg 0: block 35: padding at end of block bitmap is not set [ 182.900638][T13700] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 182.915490][T13700] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3877: invalid indirect mapped block 4294967295 (level 1) [ 182.919475][T13709] syzkaller0: entered promiscuous mode [ 182.935086][T13709] syzkaller0: entered allmulticast mode [ 183.003699][T13700] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3877: invalid indirect mapped block 4294967295 (level 2) [ 183.087837][T13700] EXT4-fs (loop0): 1 truncate cleaned up [ 183.095506][T13700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.110121][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'. [ 183.150529][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.164027][T13721] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3886'. [ 183.447804][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 183.499146][T13762] vlan2: entered allmulticast mode [ 183.660715][T13782] syzkaller0: entered promiscuous mode [ 183.666437][T13782] syzkaller0: entered allmulticast mode [ 183.834698][T13793] netlink: 'syz.0.3919': attribute type 10 has an invalid length. [ 183.882616][T13793] dummy0: left allmulticast mode [ 183.899967][T13793] dummy0: left promiscuous mode [ 183.905130][T13793] bridge0: port 4(dummy0) entered disabled state [ 183.936212][T13793] : (slave dummy0): Enslaving as an active interface with an up link [ 184.092694][T13802] loop3: detected capacity change from 0 to 1024 [ 184.105146][T13802] EXT4-fs: Ignoring removed oldalloc option [ 184.111548][T13802] EXT4-fs: Ignoring removed orlov option [ 184.123533][T13802] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 184.147647][T13802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.192010][T13802] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 184.280341][T13802] EXT4-fs (loop3): Remounting filesystem read-only [ 184.360179][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.655062][T13825] bridge0: entered promiscuous mode [ 184.682066][T13825] macvlan2: entered promiscuous mode [ 184.692282][T13825] bridge0: port 1(macvlan2) entered blocking state [ 184.698892][T13825] bridge0: port 1(macvlan2) entered disabled state [ 184.739161][T13825] macvlan2: entered allmulticast mode [ 184.744591][T13825] bridge0: entered allmulticast mode [ 184.775218][T13825] macvlan2: left allmulticast mode [ 184.780529][T13825] bridge0: left allmulticast mode [ 184.797616][T13825] bridge0: left promiscuous mode [ 184.842904][T13828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3934'. [ 184.970173][T13844] bridge0: port 4(macsec1) entered blocking state [ 184.976809][T13844] bridge0: port 4(macsec1) entered disabled state [ 184.999649][T13844] macsec1: entered allmulticast mode [ 185.005022][T13844] bridge0: entered allmulticast mode [ 185.018266][T13844] macsec1: left allmulticast mode [ 185.023434][T13844] bridge0: left allmulticast mode [ 185.747143][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 185.747160][ T29] audit: type=1400 audit(1746852210.327:18261): avc: denied { create } for pid=13908 comm="syz.5.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.488339][T13934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3972'. [ 186.771046][T13942] lo speed is unknown, defaulting to 1000 [ 187.048882][T13938] loop0: detected capacity change from 0 to 128 [ 187.167957][ T29] audit: type=1326 audit(1746852211.747:18262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 187.253753][ T29] audit: type=1326 audit(1746852211.747:18263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 187.277483][ T29] audit: type=1326 audit(1746852211.747:18264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 187.301276][ T29] audit: type=1326 audit(1746852211.787:18265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 187.324893][ T29] audit: type=1326 audit(1746852211.797:18266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 187.348526][ T29] audit: type=1326 audit(1746852211.797:18267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 187.372235][ T29] audit: type=1326 audit(1746852211.797:18268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 187.395851][ T29] audit: type=1326 audit(1746852211.797:18269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 187.419620][ T29] audit: type=1326 audit(1746852211.797:18270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.0.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 187.714207][T13969] infiniband syz2: set down [ 187.718848][T13969] infiniband syz2: added veth0_to_bond [ 187.750993][T13969] RDS/IB: syz2: added [ 187.755754][T13969] smc: adding ib device syz2 with port count 1 [ 187.768379][T13969] smc: ib device syz2 port 1 has pnetid [ 187.802618][T13986] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 188.394832][T14021] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 188.487802][T14031] netlink: 'syz.2.4005': attribute type 10 has an invalid length. [ 188.735875][T14042] all: renamed from lo [ 188.794452][T14046] macvtap0: entered promiscuous mode [ 188.810105][T14046] macvtap0: left promiscuous mode [ 188.902313][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 189.010096][T14060] loop3: detected capacity change from 0 to 512 [ 189.022444][T14060] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.034631][T14060] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 189.060649][T14060] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.4017: inode #15: comm syz.3.4017: iget: illegal inode # [ 189.083014][T14060] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4017: couldn't read orphan inode 15 (err -117) [ 189.132166][T14060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.154270][T14073] all: renamed from lo [ 189.292296][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.329048][T14085] macvtap0: entered promiscuous mode [ 189.343074][T14085] macvtap0: left promiscuous mode [ 189.443998][T14093] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 189.537501][T14101] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 189.909900][T14127] netlink: 'syz.5.4045': attribute type 10 has an invalid length. [ 189.953797][T14127] team0: Device hsr_slave_0 failed to register rx_handler [ 190.500456][T14165] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.556894][T14165] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.632158][T14169] loop0: detected capacity change from 0 to 512 [ 190.656603][T14165] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.707313][T14165] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.714732][T14169] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.769389][T14169] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 190.774403][T14165] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.799498][T14165] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.819937][T14165] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.832014][T14165] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.901438][T14169] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.4057: inode #15: comm syz.0.4057: iget: illegal inode # [ 190.935570][T14169] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4057: couldn't read orphan inode 15 (err -117) [ 191.034032][T14169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.069146][T14182] tipc: Enabled bearer , priority 0 [ 191.094691][T14182] tipc: Disabling bearer [ 191.145198][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.175201][T14186] bridge0: port 4(macsec1) entered blocking state [ 191.181841][T14186] bridge0: port 4(macsec1) entered disabled state [ 191.202234][T14186] macsec1: entered allmulticast mode [ 191.207730][T14186] bridge0: entered allmulticast mode [ 191.223841][T14186] macsec1: left allmulticast mode [ 191.229026][T14186] bridge0: left allmulticast mode [ 191.269041][T14194] macvlan2: entered promiscuous mode [ 191.274409][T14194] bridge0: entered promiscuous mode [ 191.281592][T14194] bridge0: port 4(macvlan2) entered blocking state [ 191.288306][T14194] bridge0: port 4(macvlan2) entered disabled state [ 191.295082][T14194] macvlan2: entered allmulticast mode [ 191.300566][T14194] bridge0: entered allmulticast mode [ 191.315225][T14194] macvlan2: left allmulticast mode [ 191.320504][T14194] bridge0: left allmulticast mode [ 191.327886][T14194] bridge0: left promiscuous mode [ 191.538749][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 191.538766][ T29] audit: type=1326 audit(1746852216.117:18337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 191.596968][ T29] audit: type=1326 audit(1746852216.147:18338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 191.620681][ T29] audit: type=1326 audit(1746852216.147:18339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 191.644394][ T29] audit: type=1326 audit(1746852216.147:18340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 191.668080][ T29] audit: type=1326 audit(1746852216.147:18341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 191.691705][ T29] audit: type=1326 audit(1746852216.147:18342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 191.715446][ T29] audit: type=1326 audit(1746852216.147:18343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 191.739169][ T29] audit: type=1326 audit(1746852216.147:18344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 191.762935][ T29] audit: type=1326 audit(1746852216.147:18345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 191.786556][ T29] audit: type=1326 audit(1746852216.147:18346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14210 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 192.313998][T14222] rdma_rxe: rxe_newlink: failed to add lo [ 192.339048][T14220] loop0: detected capacity change from 0 to 1024 [ 192.363642][T14220] EXT4-fs: Ignoring removed oldalloc option [ 192.394489][T14220] EXT4-fs: Ignoring removed orlov option [ 192.420876][T14220] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 192.477793][T14220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.611231][T14220] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 192.660153][T14220] EXT4-fs (loop0): Remounting filesystem read-only [ 192.718060][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.124665][T14256] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4093'. [ 193.348032][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4101'. [ 193.376242][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4101'. [ 193.583425][T14298] bio_check_eod: 8 callbacks suppressed [ 193.583547][T14298] syz.3.4110: attempt to access beyond end of device [ 193.583547][T14298] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 193.704730][T14302] xt_hashlimit: max too large, truncated to 1048576 [ 194.154728][T14319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4119'. [ 194.436196][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4131'. [ 194.466280][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4131'. [ 194.746990][T14338] rdma_rxe: rxe_newlink: failed to add lo [ 194.908020][T14351] netlink: 'syz.0.4132': attribute type 1 has an invalid length. [ 194.945240][T14351] bond2: entered promiscuous mode [ 194.955763][T14351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.980747][T14351] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4132'. [ 195.001063][T14356] netlink: 'syz.5.4134': attribute type 10 has an invalid length. [ 195.058176][T14351] batadv6: entered promiscuous mode [ 195.063507][T14351] batadv6: entered allmulticast mode [ 195.069877][T14351] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 195.078075][T14351] bond2: (slave batadv6): making interface the new active one [ 195.086907][T14351] bond2: (slave batadv6): Enslaving as an active interface with an up link [ 195.097403][T14356] dummy0: entered allmulticast mode [ 195.113275][T14356] : (slave dummy0): Enslaving as an active interface with an up link [ 195.242818][T14367] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4139'. [ 195.513815][T14384] vlan2: entered allmulticast mode [ 195.610090][T14390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4143'. [ 196.017102][T14425] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.098523][T14429] loop3: detected capacity change from 0 to 512 [ 196.109122][T14425] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.119632][T14429] EXT4-fs (loop3): orphan cleanup on readonly fs [ 196.129739][T14429] EXT4-fs (loop3): 1 orphan inode deleted [ 196.138369][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 196.168474][T14429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.181909][T14425] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.232878][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.287622][T14425] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.369884][T14425] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.410065][T14425] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.433808][T14425] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.455091][T14425] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.536843][T14454] netlink: 'syz.2.4175': attribute type 1 has an invalid length. [ 196.567926][T14454] bond2: entered promiscuous mode [ 196.573158][T14454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.587542][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4184'. [ 196.617832][T14454] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4175'. [ 196.623097][T14466] loop0: detected capacity change from 0 to 1024 [ 196.630481][T14454] batadv4: entered promiscuous mode [ 196.638534][T14454] batadv4: entered allmulticast mode [ 196.645054][T14454] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 196.653653][T14454] bond2: (slave batadv4): making interface the new active one [ 196.662136][T14454] bond2: (slave batadv4): Enslaving as an active interface with an up link [ 196.680837][T14466] EXT4-fs: Ignoring removed oldalloc option [ 196.686830][T14466] EXT4-fs: Ignoring removed i_version option [ 196.729272][T14472] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4180'. [ 196.742696][T14466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.774134][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.022762][T14508] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 197.150990][T14516] macvlan3: entered promiscuous mode [ 197.156381][T14516] bridge0: entered promiscuous mode [ 197.164481][T14516] bridge0: port 4(macvlan3) entered blocking state [ 197.171331][T14516] bridge0: port 4(macvlan3) entered disabled state [ 197.184861][T14516] macvlan3: entered allmulticast mode [ 197.190333][T14516] bridge0: entered allmulticast mode [ 197.205917][T14516] macvlan3: left allmulticast mode [ 197.211131][T14516] bridge0: left allmulticast mode [ 197.230142][T14516] bridge0: left promiscuous mode [ 197.385354][T14531] loop0: detected capacity change from 0 to 8192 [ 197.478687][T14549] loop1: detected capacity change from 0 to 512 [ 197.510532][T14549] EXT4-fs (loop1): orphan cleanup on readonly fs [ 197.519108][T14549] EXT4-fs (loop1): 1 orphan inode deleted [ 197.525210][ T6562] __quota_error: 32 callbacks suppressed [ 197.525225][ T6562] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 197.540811][ T6562] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:30: Failed to release dquot type 1 [ 197.564000][T14549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.670251][ T29] audit: type=1400 audit(1746852222.247:18378): avc: denied { module_load } for pid=14563 comm="syz.3.4221" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 197.704622][T14566] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 197.706309][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.853610][ T29] audit: type=1326 audit(1746852222.427:18379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.5.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 197.922991][T14595] loop3: detected capacity change from 0 to 1024 [ 197.929503][ T29] audit: type=1326 audit(1746852222.467:18380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.5.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 197.953329][ T29] audit: type=1326 audit(1746852222.467:18381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.5.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 197.977003][ T29] audit: type=1326 audit(1746852222.467:18382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.5.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 198.000664][ T29] audit: type=1326 audit(1746852222.467:18383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.5.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 198.024514][ T29] audit: type=1326 audit(1746852222.467:18384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.5.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 198.048209][ T29] audit: type=1326 audit(1746852222.467:18385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.5.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 198.071961][ T29] audit: type=1326 audit(1746852222.467:18386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.5.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 198.116587][T14595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.223192][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.971956][T14635] loop1: detected capacity change from 0 to 1024 [ 198.987020][T14635] EXT4-fs: Ignoring removed oldalloc option [ 198.993010][T14635] EXT4-fs: Ignoring removed i_version option [ 199.022584][T14635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.059658][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.097109][T14649] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 199.142051][T14654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4258'. [ 199.178624][T14658] netlink: 'syz.3.4260': attribute type 21 has an invalid length. [ 199.265344][T14666] macvlan2: entered promiscuous mode [ 199.270782][T14666] bridge0: entered promiscuous mode [ 199.277968][T14666] bridge0: port 3(macvlan2) entered blocking state [ 199.284560][T14666] bridge0: port 3(macvlan2) entered disabled state [ 199.336045][T14668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14668 comm=syz.3.4266 [ 199.424033][T14666] macvlan2: entered allmulticast mode [ 199.429508][T14666] bridge0: entered allmulticast mode [ 199.446482][T14666] macvlan2: left allmulticast mode [ 199.451754][T14666] bridge0: left allmulticast mode [ 199.466332][T14666] bridge0: left promiscuous mode [ 199.931431][T14685] lo speed is unknown, defaulting to 1000 [ 200.016625][T14702] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4276'. [ 200.038335][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4282'. [ 200.121619][T14718] macvlan2: entered promiscuous mode [ 200.127124][T14718] bridge0: entered promiscuous mode [ 200.135927][T14718] bridge0: port 4(macvlan2) entered blocking state [ 200.142530][T14718] bridge0: port 4(macvlan2) entered disabled state [ 200.158520][T14718] macvlan2: entered allmulticast mode [ 200.164028][T14718] bridge0: entered allmulticast mode [ 200.173878][T14718] macvlan2: left allmulticast mode [ 200.179071][T14718] bridge0: left allmulticast mode [ 200.186463][T14718] bridge0: left promiscuous mode [ 200.206541][T14725] loop3: detected capacity change from 0 to 256 [ 200.278313][T14729] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14729 comm=syz.2.4289 [ 200.311230][T14731] loop0: detected capacity change from 0 to 1024 [ 200.347587][T14731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.419500][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.561104][T14753] macvlan2: entered promiscuous mode [ 200.566521][T14753] bridge0: entered promiscuous mode [ 200.578329][T14753] bridge0: port 3(macvlan2) entered blocking state [ 200.584905][T14753] bridge0: port 3(macvlan2) entered disabled state [ 200.595487][T14753] macvlan2: entered allmulticast mode [ 200.600976][T14753] bridge0: entered allmulticast mode [ 200.613240][T14753] macvlan2: left allmulticast mode [ 200.618486][T14753] bridge0: left allmulticast mode [ 200.624188][T14753] bridge0: left promiscuous mode [ 200.719133][T14763] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4305'. [ 200.756278][T14767] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 200.762832][T14767] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.770374][T14767] vhci_hcd vhci_hcd.0: Device attached [ 200.780706][T14768] vhci_hcd: connection closed [ 200.780894][ T31] vhci_hcd: stop threads [ 200.789986][ T31] vhci_hcd: release socket [ 200.794426][ T31] vhci_hcd: disconnect device [ 200.799345][ T10] page_pool_release_retry() stalled pool shutdown: id 80, 1 inflight 60 sec [ 201.165155][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4316'. [ 201.308695][T14796] macvlan2: entered promiscuous mode [ 201.314171][T14796] bridge0: entered promiscuous mode [ 201.333378][T14796] bridge0: port 3(macvlan2) entered blocking state [ 201.339986][T14796] bridge0: port 3(macvlan2) entered disabled state [ 201.346963][T14796] macvlan2: entered allmulticast mode [ 201.352367][T14796] bridge0: entered allmulticast mode [ 201.359710][T14796] macvlan2: left allmulticast mode [ 201.364859][T14796] bridge0: left allmulticast mode [ 201.370502][T14796] bridge0: left promiscuous mode [ 202.368629][T14834] bridge0: entered promiscuous mode [ 202.373916][T14834] macvlan2: entered promiscuous mode [ 202.376629][T14832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4336'. [ 202.379715][T14834] bridge0: port 1(macvlan2) entered blocking state [ 202.394849][T14834] bridge0: port 1(macvlan2) entered disabled state [ 202.416151][T14834] macvlan2: entered allmulticast mode [ 202.421643][T14834] bridge0: entered allmulticast mode [ 202.445786][T14834] macvlan2: left allmulticast mode [ 202.451034][T14834] bridge0: left allmulticast mode [ 202.456799][T14834] bridge0: left promiscuous mode [ 202.514722][T14826] Set syz1 is full, maxelem 65536 reached [ 202.685469][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 202.685488][ T29] audit: type=1326 audit(1746852227.257:19065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 202.734269][ T29] audit: type=1326 audit(1746852227.297:19066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 202.758098][ T29] audit: type=1326 audit(1746852227.297:19067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 202.781909][ T29] audit: type=1326 audit(1746852227.297:19068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 202.805595][ T29] audit: type=1326 audit(1746852227.297:19069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 202.829519][ T29] audit: type=1326 audit(1746852227.297:19070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 202.853193][ T29] audit: type=1326 audit(1746852227.297:19071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 202.876915][ T29] audit: type=1326 audit(1746852227.297:19072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 202.900595][ T29] audit: type=1326 audit(1746852227.297:19073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 202.924294][ T29] audit: type=1326 audit(1746852227.297:19074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14855 comm="syz.0.4345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 203.267020][T14881] loop3: detected capacity change from 0 to 8192 [ 203.346098][T14881] loop3: p1 p2[DM] p4 [ 203.350283][T14881] loop3: p1 size 196608 extends beyond EOD, truncated [ 203.378040][T14881] loop3: p2 start 4292936063 is beyond EOD, truncated [ 203.384920][T14881] loop3: p4 size 50331648 extends beyond EOD, truncated [ 203.404303][T14891] loop1: detected capacity change from 0 to 128 [ 203.412073][T14891] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.466087][T14891] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.563049][T14893] lo speed is unknown, defaulting to 1000 [ 204.146595][T14934] SELinux: syz.0.4382 (14934) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 204.198145][T14939] loop0: detected capacity change from 0 to 512 [ 204.201319][T14928] lo speed is unknown, defaulting to 1000 [ 204.226501][T14939] EXT4-fs: Ignoring removed oldalloc option [ 204.245643][T14939] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.343030][T14939] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.4384: invalid indirect mapped block 4294967295 (level 0) [ 204.372881][T14939] EXT4-fs (loop0): Remounting filesystem read-only [ 204.382949][T14939] EXT4-fs (loop0): 1 orphan inode deleted [ 204.388784][T14939] EXT4-fs (loop0): 1 truncate cleaned up [ 204.415118][T14939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.440888][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.461191][T14945] IPv6: Can't replace route, no match found [ 204.598825][T14948] Process accounting resumed [ 204.791985][T14973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14973 comm=syz.0.4399 [ 204.864724][T14977] loop0: detected capacity change from 0 to 512 [ 204.884830][T14977] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.895762][T14980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.909226][T14980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.934394][T14977] EXT4-fs (loop0): 1 truncate cleaned up [ 204.967965][T14977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.048968][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.132499][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4413'. [ 205.148113][T15007] netlink: 'syz.2.4414': attribute type 4 has an invalid length. [ 205.513439][T15030] loop0: detected capacity change from 0 to 2048 [ 205.574903][T15030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.651956][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.689352][T15047] SELinux: syz.3.4430 (15047) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 205.691072][T15049] loop0: detected capacity change from 0 to 2048 [ 205.741664][T15051] loop3: detected capacity change from 0 to 512 [ 205.764700][T15055] pim6reg1: entered promiscuous mode [ 205.770452][T15055] pim6reg1: entered allmulticast mode [ 205.777399][T15049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.797806][T15051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 205.817520][T15051] ext4 filesystem being mounted at /872/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.915669][T15059] 9pnet: p9_errstr2errno: server reported unknown error [ 206.057679][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 206.160878][T15068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15068 comm=syz.3.4437 [ 206.722352][ T6562] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 206.786261][T15078] program syz.3.4443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.815691][ T6562] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 206.828270][ T6562] EXT4-fs (loop0): This should not happen!! Data will be lost [ 206.828270][ T6562] [ 206.837970][ T6562] EXT4-fs (loop0): Total free blocks count 0 [ 206.843962][ T6562] EXT4-fs (loop0): Free/Dirty block details [ 206.850017][ T6562] EXT4-fs (loop0): free_blocks=2415919504 [ 206.855801][ T6562] EXT4-fs (loop0): dirty_blocks=16400 [ 206.861179][ T6562] EXT4-fs (loop0): Block reservation details [ 206.867202][ T6562] EXT4-fs (loop0): i_reserved_data_blocks=1025 [ 206.915746][T15080] ref_ctr_offset mismatch. inode: 0x11f4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 206.983371][ T6562] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 207.075757][T15074] Set syz1 is full, maxelem 65536 reached [ 207.128732][T15088] lo speed is unknown, defaulting to 1000 [ 207.137360][T15091] loop1: detected capacity change from 0 to 512 [ 207.143867][T15091] EXT4-fs: Ignoring removed oldalloc option [ 207.187970][T15091] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 207.214282][T15091] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.4449: invalid indirect mapped block 4294967295 (level 0) [ 207.240416][T15091] EXT4-fs (loop1): Remounting filesystem read-only [ 207.254786][T15091] EXT4-fs (loop1): 1 orphan inode deleted [ 207.260757][T15091] EXT4-fs (loop1): 1 truncate cleaned up [ 207.269078][T15091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.314229][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.322044][T15101] macsec0: entered allmulticast mode [ 207.337321][T15101] veth1_macvtap: entered allmulticast mode [ 207.343755][T15101] macsec0: entered promiscuous mode [ 207.360958][T15097] lo speed is unknown, defaulting to 1000 [ 207.476800][T15109] loop1: detected capacity change from 0 to 512 [ 207.518358][T15109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 207.535347][T15109] ext4 filesystem being mounted at /868/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.687226][T15107] netlink: 'syz.3.4455': attribute type 4 has an invalid length. [ 207.728170][T15119] ip6gre1: entered allmulticast mode [ 207.768863][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 207.856214][T15128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4462'. [ 208.039620][T15140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.058040][T15140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.081603][T15138] loop1: detected capacity change from 0 to 2048 [ 208.134944][T15138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.273207][T15149] ip6gre1: entered allmulticast mode [ 208.732978][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4478'. [ 208.836796][T15179] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 208.925824][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4482'. [ 208.992917][T15188] sch_tbf: burst 3092 is lower than device lo mtu (39799) ! [ 209.064768][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4486'. [ 209.069953][ T6604] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 209.084381][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4486'. [ 209.109648][ T6604] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 209.122237][ T6604] EXT4-fs (loop1): This should not happen!! Data will be lost [ 209.122237][ T6604] [ 209.131978][ T6604] EXT4-fs (loop1): Total free blocks count 0 [ 209.138051][ T6604] EXT4-fs (loop1): Free/Dirty block details [ 209.144032][ T6604] EXT4-fs (loop1): free_blocks=2415919504 [ 209.149836][ T6604] EXT4-fs (loop1): dirty_blocks=12976 [ 209.155253][ T6604] EXT4-fs (loop1): Block reservation details [ 209.161392][ T6604] EXT4-fs (loop1): i_reserved_data_blocks=811 [ 209.211092][ T6538] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 209.226143][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 209.226156][ T29] audit: type=1326 audit(1746852233.807:19176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 209.325642][ T29] audit: type=1326 audit(1746852233.837:19177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 209.349354][ T29] audit: type=1326 audit(1746852233.837:19178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 209.372957][ T29] audit: type=1326 audit(1746852233.837:19179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 209.396690][ T29] audit: type=1326 audit(1746852233.837:19180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 209.420294][ T29] audit: type=1326 audit(1746852233.837:19181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 209.443938][ T29] audit: type=1326 audit(1746852233.837:19182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 209.467537][ T29] audit: type=1326 audit(1746852233.837:19183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 209.491322][ T29] audit: type=1326 audit(1746852233.847:19184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92b60a0887 code=0x7ffc0000 [ 209.514898][ T29] audit: type=1326 audit(1746852233.847:19185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15202 comm="syz.5.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 209.667390][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4498'. [ 209.793571][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4503'. [ 209.803655][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4503'. [ 210.073977][T15244] lo speed is unknown, defaulting to 1000 [ 210.518410][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.563551][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.733794][T15287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4527'. [ 210.736400][T15276] lo speed is unknown, defaulting to 1000 [ 212.560945][T15381] loop0: detected capacity change from 0 to 1024 [ 212.592259][T15381] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 212.627318][T15381] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 212.870046][T15381] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 212.884621][T15381] EXT4-fs (loop0): orphan cleanup on readonly fs [ 212.901491][T15381] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.4563: Inode bitmap for bg 0 marked uninitialized [ 212.928703][T15381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.958132][T15380] EXT4-fs error (device loop0): ext4_search_dir:1476: inode #2: block 16: comm syz.0.4563: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 213.051909][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.153293][T15396] bridge: RTM_NEWNEIGH with invalid ether address [ 213.313861][T15407] loop3: detected capacity change from 0 to 512 [ 213.358894][T15407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.408126][T15407] ext4 filesystem being mounted at /905/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.495397][T15419] netlink: 'syz.1.4576': attribute type 1 has an invalid length. [ 213.512180][T15419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.526661][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.532749][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4576'. [ 213.561737][T15419] bond3 (unregistering): Released all slaves [ 213.831007][T15448] loop1: detected capacity change from 0 to 512 [ 213.868931][T15448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.886905][T15448] ext4 filesystem being mounted at /891/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.024247][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.061109][T15457] smc: net device bond0 applied user defined pnetid SYZ0 [ 214.070487][T15457] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 214.085005][T15457] smc: net device bond0 erased user defined pnetid SYZ0 [ 214.092072][T15457] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 214.328881][T15470] loop1: detected capacity change from 0 to 256 [ 214.341087][T15470] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.355158][T15470] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.425650][T15485] smc: net device bond0 applied user defined pnetid SYZ0 [ 214.433323][T15485] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 214.441560][T15485] smc: net device bond0 erased user defined pnetid SYZ0 [ 214.449810][T15485] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 215.286532][T15517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4617'. [ 215.324780][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4617'. [ 215.444694][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4630'. [ 215.459516][T15526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.951511][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 215.951593][ T29] audit: type=1400 audit(1746852240.527:19207): avc: denied { map } for pid=15551 comm="syz.5.4629" path="socket:[40601]" dev="sockfs" ino=40601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 215.994430][T15550] loop3: detected capacity change from 0 to 2048 [ 216.024568][T15554] syz.5.4632: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 216.039382][T15554] CPU: 0 UID: 0 PID: 15554 Comm: syz.5.4632 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 216.039420][T15554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 216.039434][T15554] Call Trace: [ 216.039441][T15554] [ 216.039450][T15554] __dump_stack+0x1d/0x30 [ 216.039508][T15554] dump_stack_lvl+0xe8/0x140 [ 216.039561][T15554] dump_stack+0x15/0x1b [ 216.039577][T15554] warn_alloc+0x12b/0x1a0 [ 216.039600][T15554] ? schedule+0x5f/0xd0 [ 216.039697][T15554] ? futex_unqueue+0xb9/0xf0 [ 216.039726][T15554] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 216.039757][T15554] ? __pfx_futex_wake_mark+0x10/0x10 [ 216.039814][T15554] ? __rcu_read_unlock+0x4f/0x70 [ 216.039841][T15554] ? avc_has_perm_noaudit+0x1b1/0x200 [ 216.039887][T15554] ? should_fail_ex+0x30/0x280 [ 216.039928][T15554] ? xskq_create+0x36/0xe0 [ 216.039968][T15554] ? should_failslab+0x8c/0xb0 [ 216.039997][T15554] vmalloc_user_noprof+0x59/0x70 [ 216.040081][T15554] ? xskq_create+0x80/0xe0 [ 216.040115][T15554] xskq_create+0x80/0xe0 [ 216.040174][T15554] xsk_init_queue+0x95/0xf0 [ 216.040202][T15554] xsk_setsockopt+0x3de/0x510 [ 216.040314][T15554] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.040346][T15554] __sys_setsockopt+0x181/0x200 [ 216.040384][T15554] __x64_sys_setsockopt+0x64/0x80 [ 216.040432][T15554] x64_sys_call+0x2bd5/0x2fb0 [ 216.040488][T15554] do_syscall_64+0xd0/0x1a0 [ 216.040516][T15554] ? clear_bhb_loop+0x25/0x80 [ 216.040545][T15554] ? clear_bhb_loop+0x25/0x80 [ 216.040574][T15554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.040630][T15554] RIP: 0033:0x7f92b609e969 [ 216.040692][T15554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.040785][T15554] RSP: 002b:00007f92b4707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.040809][T15554] RAX: ffffffffffffffda RBX: 00007f92b62c5fa0 RCX: 00007f92b609e969 [ 216.040822][T15554] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 216.040837][T15554] RBP: 00007f92b6120ab1 R08: 0000000000000004 R09: 0000000000000000 [ 216.040854][T15554] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 216.040904][T15554] R13: 0000000000000000 R14: 00007f92b62c5fa0 R15: 00007ffe7ac912a8 [ 216.040945][T15554] [ 216.041015][T15554] Mem-Info: [ 216.273425][T15554] active_anon:25622 inactive_anon:178 isolated_anon:0 [ 216.273425][T15554] active_file:9873 inactive_file:13145 isolated_file:0 [ 216.273425][T15554] unevictable:3 dirty:91 writeback:0 [ 216.273425][T15554] slab_reclaimable:3325 slab_unreclaimable:46553 [ 216.273425][T15554] mapped:28929 shmem:17335 pagetables:785 [ 216.273425][T15554] sec_pagetables:0 bounce:0 [ 216.273425][T15554] kernel_misc_reclaimable:0 [ 216.273425][T15554] free:1568884 free_pcp:7352 free_cma:0 [ 216.318538][T15554] Node 0 active_anon:102488kB inactive_anon:712kB active_file:39492kB inactive_file:52580kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:115716kB dirty:364kB writeback:0kB shmem:69340kB writeback_tmp:0kB kernel_stack:4320kB pagetables:3140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.347874][T15554] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.374772][T15554] lowmem_reserve[]: 0 2884 7863 7863 [ 216.380129][T15554] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 216.408882][T15554] lowmem_reserve[]: 0 0 4978 4978 [ 216.414060][T15554] Node 0 Normal free:3310140kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:102488kB inactive_anon:712kB active_file:39492kB inactive_file:52580kB unevictable:12kB writepending:364kB present:5242880kB managed:5098244kB mlocked:12kB bounce:0kB free_pcp:25876kB local_pcp:11352kB free_cma:0kB [ 216.444882][T15554] lowmem_reserve[]: 0 0 0 0 [ 216.449532][T15554] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.462471][T15554] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 216.478723][T15554] Node 0 Normal: 105*4kB (ME) 721*8kB (UME) 550*16kB (UME) 525*32kB (UME) 314*64kB (UME) 158*128kB (UME) 154*256kB (UME) 117*512kB (UME) 121*1024kB (UME) 30*2048kB (UM) 721*4096kB (UM) = 3309996kB [ 216.498323][T15554] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 216.507679][T15554] 40511 total pagecache pages [ 216.512407][T15554] 174 pages in swap cache [ 216.516799][T15554] Free swap = 124108kB [ 216.521062][T15554] Total swap = 124996kB [ 216.525237][T15554] 2097051 pages RAM [ 216.529104][T15554] 0 pages HighMem/MovableOnly [ 216.533793][T15554] 80258 pages reserved [ 216.539212][T15550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.613958][T15550] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4631: bg 0: block 234: padding at end of block bitmap is not set [ 216.685704][T15550] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 117 [ 216.698066][T15550] EXT4-fs (loop3): This should not happen!! Data will be lost [ 216.698066][T15550] [ 216.813088][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.943616][T15578] loop3: detected capacity change from 0 to 1024 [ 216.964096][T15578] EXT4-fs: Ignoring removed orlov option [ 216.987440][T15578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.003854][T15578] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 217.146241][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.266678][T15595] loop3: detected capacity change from 0 to 1024 [ 217.309895][T15595] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 217.329861][ T29] audit: type=1326 audit(1746852241.907:19208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.0.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 217.353724][ T29] audit: type=1326 audit(1746852241.907:19209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.0.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 217.385632][ T29] audit: type=1326 audit(1746852241.907:19210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.0.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 217.385658][T15595] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 217.409500][ T29] audit: type=1326 audit(1746852241.907:19211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.0.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 217.409542][ T29] audit: type=1326 audit(1746852241.907:19212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.0.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 217.455965][T15599] loop0: detected capacity change from 0 to 512 [ 217.467311][ T29] audit: type=1326 audit(1746852241.917:19213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.0.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 217.494336][T15599] EXT4-fs: Ignoring removed oldalloc option [ 217.497198][ T29] audit: type=1326 audit(1746852241.917:19214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.0.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 217.526893][ T29] audit: type=1326 audit(1746852241.917:19215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.0.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 217.550515][ T29] audit: type=1326 audit(1746852241.917:19216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15598 comm="syz.0.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 217.573878][T15599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.577144][T15595] EXT4-fs (loop3): invalid journal inode [ 217.589816][T15595] EXT4-fs (loop3): can't get journal size [ 217.607868][T15599] EXT4-fs (loop0): 1 truncate cleaned up [ 217.613953][T15599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.615844][T15595] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 17104912: comm syz.3.4646: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 217.672777][T15595] EXT4-fs (loop3): failed to initialize system zone (-117) [ 217.712861][T15595] EXT4-fs (loop3): mount failed [ 217.769604][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.410354][T15661] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4672'. [ 218.835991][T15704] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4689'. [ 219.385494][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4711'. [ 219.546263][T15748] !: renamed from dummy0 (while UP) [ 219.595758][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4710'. [ 219.619146][T15756] SELinux: failed to load policy [ 219.672323][T15758] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4714'. [ 219.681573][ T10] page_pool_release_retry() stalled pool shutdown: id 89, 1 inflight 60 sec [ 219.899844][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4731'. [ 219.931896][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4731'. [ 220.148694][T15813] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.334278][T15828] loop0: detected capacity change from 0 to 8192 [ 220.352955][T15828] loop8: detected capacity change from 0 to 1 [ 220.362647][T15828] buffer_io_error: 2 callbacks suppressed [ 220.362661][T15828] Buffer I/O error on dev loop8, logical block 0, async page read [ 220.377719][T15828] Buffer I/O error on dev loop8, logical block 0, async page read [ 220.385681][T15828] loop8: unable to read partition table [ 220.392966][T15828] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 220.715698][ T36] page_pool_release_retry() stalled pool shutdown: id 92, 1 inflight 60 sec [ 220.773885][T15841] netlink: 'syz.5.4750': attribute type 39 has an invalid length. [ 220.859679][T15859] loop0: detected capacity change from 0 to 512 [ 220.881721][T15859] EXT4-fs: Ignoring removed bh option [ 220.890940][T15859] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 220.918617][T15859] EXT4-fs (loop0): 1 truncate cleaned up [ 220.927910][T15865] wireguard0: entered promiscuous mode [ 220.933428][T15865] wireguard0: entered allmulticast mode [ 220.958959][T15859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.064700][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 221.064715][ T29] audit: type=1400 audit(1746852245.637:19546): avc: denied { ioctl } for pid=15858 comm="syz.0.4758" path="socket:[43034]" dev="sockfs" ino=43034 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.188288][T15894] SELinux: ebitmap: truncated map [ 221.202460][T15894] SELinux: failed to load policy [ 221.322392][T15897] infiniband syz!: set down [ 221.327286][T15897] infiniband syz!: added team_slave_0 [ 221.332862][ T29] audit: type=1400 audit(1746852245.907:19547): avc: denied { rename } for pid=15898 comm="syz.3.4774" name="file0" dev="tmpfs" ino=4922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.394437][T15897] RDS/IB: syz!: added [ 221.401062][T15897] smc: adding ib device syz! with port count 1 [ 221.411284][T15897] smc: ib device syz! port 1 has pnetid [ 221.484636][T15874] Set syz1 is full, maxelem 65536 reached [ 221.694558][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.755826][ T10] page_pool_release_retry() stalled pool shutdown: id 93, 1 inflight 60 sec [ 221.773449][T15924] 9pnet_fd: Insufficient options for proto=fd [ 222.205393][T15963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4801'. [ 222.732140][T15991] 9pnet: p9_errstr2errno: server reported unknown error [ 222.796062][ T10] page_pool_release_retry() stalled pool shutdown: id 94, 1 inflight 60 sec [ 222.905480][T16002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4817'. [ 223.061986][T16010] loop3: detected capacity change from 0 to 512 [ 223.100997][T16010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.113707][T16010] ext4 filesystem being mounted at /952/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.134483][ T29] audit: type=1400 audit(1746852247.707:19548): avc: denied { write } for pid=16011 comm="syz.5.4821" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 223.185550][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.237564][ T29] audit: type=1326 audit(1746852247.817:19549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16019 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 223.261348][ T29] audit: type=1326 audit(1746852247.817:19550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16019 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 223.299826][T16023] bridge0: port 1(gretap0) entered blocking state [ 223.306360][T16023] bridge0: port 1(gretap0) entered disabled state [ 223.323148][T16023] gretap0: entered allmulticast mode [ 223.346196][T16023] gretap0: entered promiscuous mode [ 223.376067][T16023] bridge0: port 1(gretap0) entered blocking state [ 223.382604][T16023] bridge0: port 1(gretap0) entered forwarding state [ 223.413140][ T29] audit: type=1326 audit(1746852247.817:19551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16019 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6875c4d2d0 code=0x7ffc0000 [ 223.436818][ T29] audit: type=1326 audit(1746852247.817:19552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16019 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 223.460540][ T29] audit: type=1326 audit(1746852247.817:19553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16019 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 223.484198][ T29] audit: type=1326 audit(1746852247.867:19554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16019 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 223.520532][T16026] gretap0: left allmulticast mode [ 223.525897][T16026] gretap0: left promiscuous mode [ 223.531037][T16026] bridge0: port 1(gretap0) entered disabled state [ 223.548501][ T29] audit: type=1326 audit(1746852248.127:19555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16019 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 223.802048][T16050] IPv4: Oversized IP packet from 127.202.26.0 [ 223.979168][T16060] loop3: detected capacity change from 0 to 512 [ 224.031726][T16060] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 224.055675][T16060] System zones: 0-2, 18-18, 34-34 [ 224.078253][T16060] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4839: bg 0: block 248: padding at end of block bitmap is not set [ 224.118601][T16060] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4839: Failed to acquire dquot type 1 [ 224.140816][T16060] EXT4-fs (loop3): 1 truncate cleaned up [ 224.175307][T16060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.198997][T16060] ext4 filesystem being mounted at /958/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.253611][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.514616][T16081] loop1: detected capacity change from 0 to 512 [ 224.558229][T16081] EXT4-fs (loop1): orphan cleanup on readonly fs [ 224.607262][T16081] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4850: bg 0: block 248: padding at end of block bitmap is not set [ 224.669383][T16081] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4850: Failed to acquire dquot type 1 [ 224.693114][T16081] EXT4-fs (loop1): 1 truncate cleaned up [ 224.705332][T16081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.795763][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.905222][T16109] ref_ctr_offset mismatch. inode: 0x13b0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000040 [ 225.313452][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4870'. [ 225.494751][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4877'. [ 225.664972][T16154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4881'. [ 225.674050][T16154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4881'. [ 225.906546][T16169] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4885'. [ 225.934623][T16172] loop3: detected capacity change from 0 to 512 [ 225.980624][T16172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.995729][T16172] ext4 filesystem being mounted at /968/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.231602][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.256644][T16184] ------------[ cut here ]------------ [ 226.262216][T16184] WARNING: CPU: 1 PID: 16184 at mm/page_alloc.c:4946 __alloc_frozen_pages_noprof+0x218/0x360 [ 226.272463][T16184] Modules linked in: [ 226.276487][T16184] CPU: 1 UID: 0 PID: 16184 Comm: syz.0.4892 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 226.289058][T16184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 226.299241][T16184] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 226.305912][T16184] Code: 83 3d 53 b5 50 05 02 72 0e 48 83 b8 a0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 42 b2 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 226.325723][T16184] RSP: 0018:ffffc900018f39e8 EFLAGS: 00010246 [ 226.331857][T16184] RAX: 254504b9e9664700 RBX: 000000000000000d RCX: 0000000000000000 [ 226.340030][T16184] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000040dc0 [ 226.348054][T16184] RBP: 0000000000000dc0 R08: ffff88812c179b18 R09: 0000000000000000 [ 226.356208][T16184] R10: ffff88812fc91f78 R11: 000188812fc91f78 R12: ffffc900018f3d38 [ 226.364269][T16184] R13: ffff88812fc91f78 R14: 0000000000040dc0 R15: 0000000000000000 [ 226.372286][T16184] FS: 00007f45cd2b76c0(0000) GS:ffff8882aef50000(0000) knlGS:0000000000000000 [ 226.381261][T16184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.387969][T16184] CR2: 0000200000001000 CR3: 00000001268b6000 CR4: 00000000003506f0 [ 226.395983][T16184] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.404002][T16184] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 226.412107][T16184] Call Trace: [ 226.415402][T16184] [ 226.418376][T16184] __alloc_pages_noprof+0x9/0x20 [ 226.423397][T16184] ___kmalloc_large_node+0x73/0x130 [ 226.428664][T16184] __kmalloc_large_node_noprof+0x16/0xa0 [ 226.434333][T16184] __kmalloc_noprof+0x2ab/0x3e0 [ 226.439238][T16184] ? hashtab_init+0x9b/0xe0 [ 226.443865][T16184] ? class_read+0x6a/0x6d0 [ 226.448337][T16184] hashtab_init+0x9b/0xe0 [ 226.452758][T16184] symtab_init+0x2c/0x40 [ 226.457077][T16184] class_read+0x154/0x6d0 [ 226.461549][T16184] ? should_failslab+0x8c/0xb0 [ 226.466423][T16184] ? __kmalloc_noprof+0x1dd/0x3e0 [ 226.471616][T16184] ? hashtab_init+0xbc/0xe0 [ 226.476180][T16184] ? __pfx_class_read+0x10/0x10 [ 226.481054][T16184] policydb_read+0x64f/0x1330 [ 226.485830][T16184] ? security_load_policy+0x90/0x890 [ 226.491215][T16184] security_load_policy+0xba/0x890 [ 226.496398][T16184] ? rep_movs_alternative+0x4a/0x90 [ 226.501690][T16184] sel_write_load+0x1d4/0x380 [ 226.506484][T16184] ? __pfx_sel_write_load+0x10/0x10 [ 226.511778][T16184] vfs_write+0x266/0x8d0 [ 226.516282][T16184] ? __rcu_read_unlock+0x4f/0x70 [ 226.521239][T16184] ? __fget_files+0x184/0x1c0 [ 226.525972][T16184] ksys_write+0xda/0x1a0 [ 226.530380][T16184] __x64_sys_write+0x40/0x50 [ 226.535327][T16184] x64_sys_call+0x2cdd/0x2fb0 [ 226.540142][T16184] do_syscall_64+0xd0/0x1a0 [ 226.544682][T16184] ? clear_bhb_loop+0x25/0x80 [ 226.549462][T16184] ? clear_bhb_loop+0x25/0x80 [ 226.554224][T16184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.560192][T16184] RIP: 0033:0x7f45cec4e969 [ 226.564686][T16184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.584385][T16184] RSP: 002b:00007f45cd2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.592868][T16184] RAX: ffffffffffffffda RBX: 00007f45cee75fa0 RCX: 00007f45cec4e969 [ 226.600964][T16184] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 226.608985][T16184] RBP: 00007f45cecd0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 226.617055][T16184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.625052][T16184] R13: 0000000000000000 R14: 00007f45cee75fa0 R15: 00007ffde179be38 [ 226.633114][T16184] [ 226.636290][T16184] ---[ end trace 0000000000000000 ]--- [ 226.641982][T16184] SELinux: failed to load policy [ 226.816758][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 226.816812][ T29] audit: type=1326 audit(1746852251.397:19561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 226.873267][ T29] audit: type=1326 audit(1746852251.427:19562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 226.897067][ T29] audit: type=1326 audit(1746852251.427:19563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 226.920709][ T29] audit: type=1326 audit(1746852251.427:19564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 226.944388][ T29] audit: type=1326 audit(1746852251.427:19565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 226.968009][ T29] audit: type=1326 audit(1746852251.427:19566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 226.991715][ T29] audit: type=1326 audit(1746852251.427:19567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 227.015461][ T29] audit: type=1326 audit(1746852251.427:19568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 227.039094][ T29] audit: type=1326 audit(1746852251.427:19569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 227.062727][ T29] audit: type=1326 audit(1746852251.427:19570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16206 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed326de969 code=0x7ffc0000 [ 227.313328][ T5395] Process accounting resumed [ 227.639999][T16152] syz.2.4880 (16152) used greatest stack depth: 6904 bytes left [ 227.649658][T16259] pim6reg: entered allmulticast mode [ 227.677530][T16259] pim6reg: left allmulticast mode [ 228.099635][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4924'. [ 228.108619][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4924'. [ 228.117513][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4924'. [ 228.126429][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4924'. [ 228.470048][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4930'. [ 228.703706][T16370] netlink: 'syz.0.4935': attribute type 5 has an invalid length. [ 230.409997][T16496] __nla_validate_parse: 6 callbacks suppressed [ 230.410015][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4977'. [ 230.519395][T16497] loop0: detected capacity change from 0 to 8192 [ 230.545567][T16497] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 231.385375][T16527] netlink: 'syz.2.4986': attribute type 4 has an invalid length. [ 231.827181][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4992'. [ 232.247877][T16488] syz.5.4976 (16488) used greatest stack depth: 6208 bytes left [ 232.429905][T16568] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 232.486386][ T5395] page_pool_release_retry() stalled pool shutdown: id 101, 1 inflight 60 sec [ 232.561569][T16581] netlink: 'syz.5.5009': attribute type 39 has an invalid length. [ 232.595766][T16586] netlink: 'syz.3.5010': attribute type 8 has an invalid length. [ 232.637366][T16594] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 232.839750][T16614] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5023'. [ 233.028338][T16622] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 233.072283][T16628] : entered promiscuous mode [ 233.077861][T16628] bond_slave_0: entered promiscuous mode [ 233.088833][T16628] !: entered promiscuous mode [ 233.113610][T16628] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5029'. [ 233.200975][T16641] netlink: 'syz.3.5034': attribute type 4 has an invalid length. [ 233.370013][T16645] loop3: detected capacity change from 0 to 8192 [ 233.406081][T16645] loop8: detected capacity change from 0 to 1 [ 233.412343][T16645] Buffer I/O error on dev loop8, logical block 0, async page read [ 233.425746][T16645] Buffer I/O error on dev loop8, logical block 0, async page read [ 233.433599][T16645] loop8: unable to read partition table [ 233.444693][T16645] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 233.544924][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5038'. [ 233.633091][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5047'. [ 233.642063][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5047'. [ 233.796601][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 233.796617][ T29] audit: type=1400 audit(1746852258.377:19874): avc: denied { setopt } for pid=16663 comm="syz.1.5044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 233.914445][T16679] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5046'. [ 233.943007][T16670] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5046'. [ 234.085372][T16690] netlink: 'syz.1.5053': attribute type 39 has an invalid length. [ 234.343119][T16714] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.393988][T16709] lo speed is unknown, defaulting to 1000 [ 234.436901][T16714] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.502155][T16714] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.584041][T16714] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.673821][T16714] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.769554][T16714] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.811629][T16714] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.833281][T16714] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.925102][T16732] IPv6: sit1: Disabled Multicast RS [ 234.951623][T16736] netlink: 'syz.3.5073': attribute type 39 has an invalid length. [ 234.955749][ T29] audit: type=1400 audit(1746852259.527:19875): avc: denied { append } for pid=16734 comm="syz.1.5083" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.022601][T16745] netlink: 'syz.5.5077': attribute type 4 has an invalid length. [ 235.031944][T16745] netlink: 'syz.5.5077': attribute type 4 has an invalid length. [ 235.096607][ T29] audit: type=1400 audit(1746852259.677:19876): avc: denied { read } for pid=16750 comm="syz.3.5080" path="socket:[45432]" dev="sockfs" ino=45432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.145701][T16752] 9pnet: p9_errstr2errno: server reported unknown error [ 235.153965][ T29] audit: type=1400 audit(1746852259.727:19877): avc: denied { connect } for pid=16750 comm="syz.3.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 235.222046][T16753] lo speed is unknown, defaulting to 1000 [ 235.282855][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5082'. [ 235.513779][T16766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.522470][T16766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.871123][ T29] audit: type=1326 audit(1746852260.447:19878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.2.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 235.895497][ T29] audit: type=1326 audit(1746852260.447:19879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.2.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 235.930676][ T29] audit: type=1326 audit(1746852260.507:19880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.2.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 235.955006][ T29] audit: type=1326 audit(1746852260.507:19881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.2.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 235.979245][ T29] audit: type=1326 audit(1746852260.507:19882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.2.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 236.002995][ T29] audit: type=1326 audit(1746852260.507:19883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.2.5096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 236.141956][T16797] pim6reg1: entered promiscuous mode [ 236.147357][T16797] pim6reg1: entered allmulticast mode [ 236.192656][T16805] ref_ctr_offset mismatch. inode: 0x146b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 236.202226][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5106'. [ 237.258215][T16845] loop1: detected capacity change from 0 to 1024 [ 237.288227][T16845] EXT4-fs: Ignoring removed bh option [ 237.294726][T16845] EXT4-fs: inline encryption not supported [ 237.301658][T16845] EXT4-fs: Ignoring removed i_version option [ 237.318860][T16847] lo speed is unknown, defaulting to 1000 [ 237.406885][T16845] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.475880][T16845] EXT4-fs error (device loop1): ext4_map_blocks:709: inode #3: block 1: comm syz.1.5120: lblock 1 mapped to illegal pblock 1 (length 1) [ 237.492590][T16845] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5120: Failed to acquire dquot type 0 [ 237.525029][T16845] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.5120: Freeing blocks not in datazone - block = 0, count = 4096 [ 237.563839][T16845] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.5120: Invalid inode bitmap blk 0 in block_group 0 [ 237.578928][ T6577] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 237.586122][T16845] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 237.601203][ T6577] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:42: Failed to release dquot type 0 [ 237.637125][T16845] EXT4-fs (loop1): 1 orphan inode deleted [ 237.652376][T16867] netlink: 'syz.2.5127': attribute type 1 has an invalid length. [ 237.673607][T16870] 9pnet: p9_errstr2errno: server reported unknown error [ 237.678098][T16867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.695014][T16845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.757585][T16867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.765071][T16867] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 237.780641][T16845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.795548][T16867] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 237.814069][T16872] ip6erspan0: entered promiscuous mode [ 237.821572][T16872] bond3: (slave ip6erspan0): making interface the new active one [ 237.830052][T16872] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 238.113470][T16891] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 238.148448][T16891] SELinux: failed to load policy [ 238.319432][T16915] loop0: detected capacity change from 0 to 2048 [ 238.327067][T16915] EXT4-fs: Ignoring removed bh option [ 238.349725][T16918] tipc: Enabled bearer , priority 0 [ 238.358780][T16915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.371820][T16917] tipc: Resetting bearer [ 238.387643][T16917] tipc: Disabling bearer [ 238.550081][T16930] lo speed is unknown, defaulting to 1000 [ 238.615144][T16942] : left promiscuous mode [ 238.619737][T16942] bond_slave_0: left promiscuous mode [ 238.634510][T16942] !: left promiscuous mode [ 238.656990][T16942] bond0: left promiscuous mode [ 238.669325][T16942] batadv1: left promiscuous mode [ 238.674327][T16942] batadv1: left allmulticast mode [ 238.699283][T16942] batadv2: left promiscuous mode [ 238.704298][T16942] batadv2: left allmulticast mode [ 238.712593][T16942] bond1: left promiscuous mode [ 238.718246][T16942] batadv3: left promiscuous mode [ 238.723233][T16942] batadv3: left allmulticast mode [ 238.734329][T16942] batadv4: left promiscuous mode [ 238.739383][T16942] batadv4: left allmulticast mode [ 238.757332][T16942] ip6gre1: left allmulticast mode [ 238.941536][T16931] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 239.006932][T16931] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 239.019384][T16931] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.019384][T16931] [ 239.029099][T16931] EXT4-fs (loop0): Total free blocks count 0 [ 239.035139][T16931] EXT4-fs (loop0): Free/Dirty block details [ 239.041738][T16931] EXT4-fs (loop0): free_blocks=2415919104 [ 239.047514][T16931] EXT4-fs (loop0): dirty_blocks=8224 [ 239.052844][T16931] EXT4-fs (loop0): Block reservation details [ 239.058905][T16931] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 239.064084][T16960] lo speed is unknown, defaulting to 1000 [ 239.109266][ T6592] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 239.166920][T16967] serio: Serial port pts0 [ 239.313986][T16974] lo speed is unknown, defaulting to 1000 [ 239.546165][T16993] bond2: (slave erspan0): Releasing active interface [ 239.562222][T16993] bridge_slave_0: left allmulticast mode [ 239.568593][T16993] bridge_slave_0: left promiscuous mode [ 239.574253][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.612260][T16993] bridge_slave_1: left allmulticast mode [ 239.618065][T16993] bridge_slave_1: left promiscuous mode [ 239.623799][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.639459][T16993] bond0: (slave bond_slave_0): Releasing backup interface [ 239.649981][T16993] bond_slave_0: left allmulticast mode [ 239.658477][T16993] bond0: (slave bond_slave_1): Releasing backup interface [ 239.666199][T16993] bond_slave_1: left allmulticast mode [ 239.672520][T16993] team0: Port device team_slave_0 removed [ 239.679324][T16993] team0: Port device team_slave_1 removed [ 239.685290][T16993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.693157][T16993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.702670][T16993] bond3: (slave batadv1): Releasing active interface [ 239.709488][T16993] bond3: (slave batadv1): the permanent HWaddr of slave - 9a:7f:21:8c:f8:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 239.726896][T16993] bond3: (slave batadv2): making interface the new active one [ 239.736696][T16993] bond3: (slave batadv2): Releasing active interface [ 239.745243][T16993] batadv3: left promiscuous mode [ 239.750458][T16993] bridge0: port 3(batadv3) entered disabled state [ 239.761262][T16993] bond4: (slave batadv4): Releasing active interface [ 239.768591][T16993] bond4: (slave batadv4): the permanent HWaddr of slave - 76:1e:71:d9:f2:21 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 239.785897][T16993] bond4: (slave batadv5): making interface the new active one [ 239.795331][T16993] bond4: (slave batadv5): Releasing active interface [ 239.852740][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 239.852766][ T29] audit: type=1326 audit(1746852264.427:20188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 239.920233][T16989] lo speed is unknown, defaulting to 1000 [ 239.942914][ T29] audit: type=1326 audit(1746852264.457:20189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 239.967422][ T29] audit: type=1326 audit(1746852264.457:20190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 239.968117][T17005] gretap0: entered promiscuous mode [ 239.991013][ T29] audit: type=1326 audit(1746852264.457:20191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 240.020740][ T29] audit: type=1326 audit(1746852264.457:20192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 240.031153][T17008] gretap0: left promiscuous mode [ 240.045107][ T29] audit: type=1326 audit(1746852264.457:20193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 240.073639][ T29] audit: type=1326 audit(1746852264.457:20194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 240.098012][ T29] audit: type=1326 audit(1746852264.457:20195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 240.121616][ T29] audit: type=1326 audit(1746852264.457:20196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 240.145905][ T29] audit: type=1326 audit(1746852264.457:20197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 240.205021][T17011] bridge_slave_0: left allmulticast mode [ 240.210879][T17011] bridge_slave_0: left promiscuous mode [ 240.216691][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.232331][T17011] bridge_slave_1: left allmulticast mode [ 240.238255][T17011] bridge_slave_1: left promiscuous mode [ 240.244188][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.254762][ T10] IPVS: starting estimator thread 0... [ 240.262374][T17011] : (slave bond_slave_0): Releasing backup interface [ 240.269877][T17011] bond_slave_0: left allmulticast mode [ 240.283286][T17011] : (slave bond_slave_1): Releasing backup interface [ 240.290729][T17011] bond_slave_1: left allmulticast mode [ 240.308203][T17011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.333562][T17020] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 240.346000][T17018] IPVS: using max 2400 ests per chain, 120000 per kthread [ 240.357002][T17011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.365219][T17020] SELinux: failed to load policy [ 240.373389][T17011] bond0: (slave batadv1): Releasing active interface [ 240.380300][T17011] bond0: (slave batadv1): the permanent HWaddr of slave - 9e:06:63:35:62:14 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 240.400142][T17011] bond0: (slave batadv2): making interface the new active one [ 240.417991][T17011] bond0: (slave batadv2): Releasing active interface [ 240.426695][T17011] batadv3: left promiscuous mode [ 240.431818][T17011] bridge0: port 3(batadv3) entered disabled state [ 240.439768][T17011] batman_adv: batadv1: Interface deactivated: bond1 [ 240.446497][T17011] batman_adv: batadv1: Removing interface: bond1 [ 240.455327][T17011] bond2: (slave batadv4): Releasing active interface [ 240.464978][T17011] bond3: (slave ip6erspan0): Releasing active interface [ 240.484125][T17015] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5180'. [ 240.564355][T17025] lo speed is unknown, defaulting to 1000 [ 241.008501][T17057] Invalid ELF header len 6 [ 241.271860][T17065] lo speed is unknown, defaulting to 1000 [ 241.387577][T17068] lo speed is unknown, defaulting to 1000 [ 241.800140][T17087] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 241.808658][T17087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.817141][T17087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.558362][T17126] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5217'. [ 242.569611][T17129] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5224'. [ 242.778665][T17159] : (slave 0!): Releasing backup interface [ 242.785177][T17159] !: left allmulticast mode [ 242.791999][T17159] bridge_slave_0: left promiscuous mode [ 242.798280][T17159] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.811863][T17159] bridge_slave_1: left allmulticast mode [ 242.817626][T17159] bridge_slave_1: left promiscuous mode [ 242.823548][T17159] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.835378][T17159] : (slave bond_slave_0): Releasing backup interface [ 242.842663][T17159] bond_slave_0: left allmulticast mode [ 242.850367][T17159] team0: Port device team_slave_0 removed [ 242.857326][T17159] team0: Port device team_slave_1 removed [ 242.863736][T17159] bond0: (slave batadv1): Releasing active interface [ 242.870585][T17159] bond0: (slave batadv1): the permanent HWaddr of slave - 82:31:6f:69:a9:39 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 242.892229][T17159] bond0: (slave batadv2): making interface the new active one [ 242.905055][T17159] bond0: (slave batadv2): Releasing active interface [ 242.912810][T17159] bond1: (slave batadv3): Releasing active interface [ 242.919682][T17159] bond1: (slave batadv3): the permanent HWaddr of slave - 2e:c0:49:65:30:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 242.936896][T17159] bond1: (slave batadv4): making interface the new active one [ 242.945743][T17159] bond1: (slave batadv4): Releasing active interface [ 242.953453][T17159] bond2: (slave gretap1): Releasing active interface [ 242.967273][T17162] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5237'. [ 243.581717][T17192] bridge_slave_1: left allmulticast mode [ 243.588335][T17192] bridge_slave_1: left promiscuous mode [ 243.594046][T17192] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.602224][T17192] : (slave bond_slave_1): Releasing backup interface [ 243.612822][T17192] team0: Port device team_slave_0 removed [ 243.620697][T17192] team0: Port device team_slave_1 removed [ 243.627203][T17192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.634856][T17192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.646700][T17192] bond1: (slave batadv1): Releasing active interface [ 243.653558][T17192] bond1: (slave batadv1): the permanent HWaddr of slave - 96:41:1c:35:8c:df - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 243.671941][T17192] bond1: (slave batadv2): making interface the new active one [ 243.681988][T17192] bond1: (slave batadv2): Releasing active interface [ 243.695821][T17192] bond0: (slave batadv3): Releasing active interface [ 243.702705][T17192] bond0: (slave batadv3): the permanent HWaddr of slave - 2e:0a:73:be:44:20 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 243.721000][T17192] bond0: (slave batadv4): making interface the new active one [ 243.731152][T17192] bond0: (slave batadv4): Releasing active interface [ 243.740602][T17192] bond2: (slave gretap1): Releasing active interface [ 243.943635][T17211] loop1: detected capacity change from 0 to 512 [ 243.950521][T17211] EXT4-fs: Ignoring removed i_version option [ 243.957614][T17211] EXT4-fs: Ignoring removed nobh option [ 243.963346][T17211] ext4: Unknown parameter 'fowner' [ 244.254137][T17226] loop1: detected capacity change from 0 to 512 [ 244.268314][T17226] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 244.286268][T17226] EXT4-fs (loop1): mount failed [ 244.425170][T17245] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 244.594442][T17248] lo speed is unknown, defaulting to 1000 [ 244.881867][T17285] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 245.018217][T17291] lo speed is unknown, defaulting to 1000 [ 245.143472][T17306] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 245.172433][T17306] syzkaller0: entered promiscuous mode [ 245.178017][T17306] syzkaller0: entered allmulticast mode [ 245.248296][T17310] loop1: detected capacity change from 0 to 2048 [ 245.593597][T17319] lo speed is unknown, defaulting to 1000 [ 245.713958][T17323] loop3: detected capacity change from 0 to 1024 [ 245.731427][T17323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.767819][T17323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.793541][T17323] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 245.833177][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 245.833192][ T29] audit: type=1326 audit(1746852270.407:20546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 245.863094][ T29] audit: type=1326 audit(1746852270.407:20547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 245.886770][ T29] audit: type=1326 audit(1746852270.407:20548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 245.910447][ T29] audit: type=1326 audit(1746852270.407:20549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 245.934229][ T29] audit: type=1326 audit(1746852270.407:20550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 245.957884][ T29] audit: type=1326 audit(1746852270.407:20551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 245.981744][ T29] audit: type=1326 audit(1746852270.407:20552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 246.005452][ T29] audit: type=1326 audit(1746852270.407:20553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 246.029122][ T29] audit: type=1326 audit(1746852270.407:20554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 246.054758][ T29] audit: type=1326 audit(1746852270.587:20555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17335 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6875c4e969 code=0x7ffc0000 [ 246.102647][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.201097][T17338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5306'. [ 246.210186][T17338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5306'. [ 246.220035][T17338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5306'. [ 246.261976][T17338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5306'. [ 246.271107][T17338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5306'. [ 246.362681][T17360] loop3: detected capacity change from 0 to 2048 [ 246.372533][T17360] EXT4-fs: Ignoring removed bh option [ 246.390578][T17360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.731167][T17386] lo speed is unknown, defaulting to 1000 [ 246.782782][T17371] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 246.806861][T17371] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 246.819230][T17371] EXT4-fs (loop3): This should not happen!! Data will be lost [ 246.819230][T17371] [ 246.829853][T17371] EXT4-fs (loop3): Total free blocks count 0 [ 246.835896][T17371] EXT4-fs (loop3): Free/Dirty block details [ 246.841846][T17371] EXT4-fs (loop3): free_blocks=2415919104 [ 246.847738][T17371] EXT4-fs (loop3): dirty_blocks=8224 [ 246.853086][T17371] EXT4-fs (loop3): Block reservation details [ 246.859776][T17371] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 246.870749][T17391] __nla_validate_parse: 5 callbacks suppressed [ 246.870765][T17391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5326'. [ 246.955489][ T6577] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 247.063079][T17404] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 247.316454][T17425] $Hÿ: renamed from  [ 247.333058][T17425] $Hÿ: entered promiscuous mode [ 247.338251][T17425] bond_slave_0: entered promiscuous mode [ 247.344081][T17425] bond_slave_1: entered promiscuous mode [ 247.350379][T17425] dummy0: entered promiscuous mode [ 247.458708][T17448] syzkaller0: refused to change device tx_queue_len [ 247.517143][T17441] lo speed is unknown, defaulting to 1000 [ 248.151735][T17482] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 248.454818][T17493] lo speed is unknown, defaulting to 1000 [ 248.614973][T17508] loop1: detected capacity change from 0 to 1024 [ 248.651266][T17508] EXT4-fs: Ignoring removed nobh option [ 248.670755][T17505] lo speed is unknown, defaulting to 1000 [ 248.699483][T17508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.747947][T17508] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.5374: Allocating blocks 385-513 which overlap fs metadata [ 248.909060][T17508] EXT4-fs (loop1): pa ffff888106e4b930: logic 16, phys. 129, len 24 [ 248.917155][T17508] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 249.066357][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.716901][T17555] loop0: detected capacity change from 0 to 128 [ 249.772174][T17555] syz.0.5391: attempt to access beyond end of device [ 249.772174][T17555] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 249.786432][T17555] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 249.998293][T17571] pim6reg1: entered promiscuous mode [ 250.003775][T17571] pim6reg1: entered allmulticast mode [ 250.075858][T17577] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 250.566317][T17604] xt_hashlimit: size too large, truncated to 1048576 [ 250.878100][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 250.878116][ T29] audit: type=1400 audit(1746852275.457:20942): avc: denied { write } for pid=17611 comm="syz.0.5416" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.960315][ T29] audit: type=1400 audit(1746852275.457:20943): avc: denied { open } for pid=17611 comm="syz.0.5416" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.020255][T17579] lo speed is unknown, defaulting to 1000 [ 251.136388][ T29] audit: type=1400 audit(1746852275.707:20944): avc: denied { read } for pid=17615 comm="syz.2.5418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 251.854295][T17622] lo speed is unknown, defaulting to 1000 [ 252.011880][T17643] pim6reg1: entered promiscuous mode [ 252.017292][T17643] pim6reg1: entered allmulticast mode [ 252.317821][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5439'. [ 252.450238][T17667] IPVS: Error joining to the multicast group [ 253.197157][ T29] audit: type=1400 audit(1746852277.777:20945): avc: denied { bind } for pid=17690 comm="syz.1.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.291910][T17705] loop3: detected capacity change from 0 to 128 [ 253.337691][T17705] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.356413][T17709] tipc: New replicast peer: 255.255.255.223 [ 253.362443][T17709] tipc: Enabled bearer , priority 10 [ 253.370923][T17705] ext4 filesystem being mounted at /1060/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.495228][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.516906][T17714] random: crng reseeded on system resumption [ 253.567973][T17649] lo speed is unknown, defaulting to 1000 [ 253.660296][T17716] loop1: detected capacity change from 0 to 1024 [ 253.679804][T17716] EXT4-fs: Ignoring removed nobh option [ 253.685502][T17716] EXT4-fs: Ignoring removed nobh option [ 253.719782][T17716] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 253.747413][ T29] audit: type=1326 audit(1746852278.327:20946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.5471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x0 [ 253.770639][T17716] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.5460: inode #4294967295: comm syz.1.5460: iget: illegal inode # [ 253.785639][T17716] EXT4-fs (loop1): no journal found [ 253.790962][T17716] EXT4-fs (loop1): can't get journal size [ 253.901222][T17716] EXT4-fs (loop1): failed to initialize system zone (-22) [ 253.943607][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 253.952766][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 253.966345][T17716] EXT4-fs (loop1): mount failed [ 253.996714][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 254.014932][ T29] audit: type=1326 audit(1746852278.587:20947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.0.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 254.083365][ T29] audit: type=1326 audit(1746852278.617:20948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.0.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 254.107192][ T29] audit: type=1326 audit(1746852278.627:20949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17726 comm="syz.0.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f45cec81225 code=0x7ffc0000 [ 254.130836][ T29] audit: type=1326 audit(1746852278.627:20950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.0.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 254.154665][ T29] audit: type=1326 audit(1746852278.627:20951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17723 comm="syz.0.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f45cec4e969 code=0x7ffc0000 [ 254.258304][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 254.267371][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 254.291791][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 254.470379][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 254.479534][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 254.526257][T17724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'. [ 255.120780][T17761] netlink: 'syz.3.5474': attribute type 1 has an invalid length. [ 255.321987][T17761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.362816][T17767] bond5 (unregistering): Released all slaves [ 255.505907][T17774] 0ªX¹¦D: renamed from gretap0 [ 255.517791][T17774] 0ªX¹¦D: entered allmulticast mode [ 255.528932][T17774] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 255.661253][T17777] random: crng reseeded on system resumption [ 255.994812][T17784] ref_ctr_offset mismatch. inode: 0x15a3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 256.022752][T17784] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 256.031197][T17784] ref_ctr decrement failed for inode: 0x15a3 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8881025e6300 [ 256.043078][T17784] uprobe: syz.1.5494:17784 failed to unregister, leaking uprobe [ 256.233559][T17792] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 256.243410][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 256.243425][ T29] audit: type=1400 audit(1746852280.817:20970): avc: denied { relabelto } for pid=17791 comm="syz.5.5488" name="766" dev="tmpfs" ino=3995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 256.277421][ T29] audit: type=1400 audit(1746852280.817:20971): avc: denied { associate } for pid=17791 comm="syz.5.5488" name="766" dev="tmpfs" ino=3995 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 256.372210][ T29] audit: type=1400 audit(1746852280.907:20972): avc: denied { write } for pid=9213 comm="syz-executor" name="766" dev="tmpfs" ino=3995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 256.399137][ T29] audit: type=1400 audit(1746852280.907:20973): avc: denied { remove_name } for pid=9213 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 256.427025][ T29] audit: type=1400 audit(1746852280.907:20974): avc: denied { rmdir } for pid=9213 comm="syz-executor" name="766" dev="tmpfs" ino=3995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 256.495966][T17796] netlink: 'syz.2.5486': attribute type 1 has an invalid length. [ 256.607018][ T29] audit: type=1400 audit(1746852281.187:20975): avc: denied { create } for pid=17805 comm="syz.2.5495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 256.750417][T17815] ref_ctr_offset mismatch. inode: 0x15b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 256.767331][T17815] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 256.776631][T17815] ref_ctr decrement failed for inode: 0x15b1 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8881025e3180 [ 256.788487][T17815] uprobe: syz.2.5498:17815 failed to unregister, leaking uprobe [ 256.987525][T17832] netlink: 'syz.1.5506': attribute type 7 has an invalid length. [ 257.091459][T17843] 0ªX¹¦D: renamed from gretap0 [ 257.098672][T17843] 0ªX¹¦D: entered allmulticast mode [ 257.104800][T17843] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 257.809830][ T29] audit: type=1400 audit(1746852282.387:20976): avc: denied { shutdown } for pid=17859 comm="syz.2.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.880781][ T29] audit: type=1326 audit(1746852282.447:20977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17867 comm="syz.5.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 257.905093][ T29] audit: type=1326 audit(1746852282.457:20978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17867 comm="syz.5.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 257.998011][ T29] audit: type=1326 audit(1746852282.457:20979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17867 comm="syz.5.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f92b609e969 code=0x7ffc0000 [ 258.054303][T17871] tipc: Enabled bearer , priority 0 [ 258.075819][T17869] tipc: Resetting bearer [ 258.103115][T17869] tipc: Disabling bearer [ 259.415401][T17927] hub 9-0:1.0: USB hub found [ 259.421902][T17927] hub 9-0:1.0: 8 ports detected [ 259.444780][T17898] ================================================================== [ 259.452931][T17898] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 259.461561][T17898] [ 259.463897][T17898] write to 0xffff8881158fa6a8 of 8 bytes by task 17903 on cpu 0: [ 259.471624][T17898] shmem_file_splice_read+0x444/0x5d0 [ 259.477022][T17898] splice_direct_to_actor+0x26c/0x680 [ 259.482417][T17898] do_splice_direct+0xda/0x150 [ 259.487194][T17898] do_sendfile+0x380/0x640 [ 259.491650][T17898] __x64_sys_sendfile64+0x105/0x150 [ 259.496876][T17898] x64_sys_call+0xb39/0x2fb0 [ 259.501478][T17898] do_syscall_64+0xd0/0x1a0 [ 259.505996][T17898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.511911][T17898] [ 259.514250][T17898] write to 0xffff8881158fa6a8 of 8 bytes by task 17898 on cpu 1: [ 259.521979][T17898] shmem_file_splice_read+0x444/0x5d0 [ 259.527383][T17898] splice_direct_to_actor+0x26c/0x680 [ 259.532766][T17898] do_splice_direct+0xda/0x150 [ 259.537545][T17898] do_sendfile+0x380/0x640 [ 259.541991][T17898] __x64_sys_sendfile64+0x105/0x150 [ 259.547231][T17898] x64_sys_call+0xb39/0x2fb0 [ 259.551848][T17898] do_syscall_64+0xd0/0x1a0 [ 259.556380][T17898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.562314][T17898] [ 259.564652][T17898] value changed: 0x0000000000008a85 -> 0x0000000000008a86 [ 259.571774][T17898] [ 259.574107][T17898] Reported by Kernel Concurrency Sanitizer on: [ 259.580276][T17898] CPU: 1 UID: 0 PID: 17898 Comm: syz.5.5534 Tainted: G W 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 259.594379][T17898] Tainted: [W]=WARN [ 259.598198][T17898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 259.608292][T17898] ==================================================================