last executing test programs: 3.403882932s ago: executing program 2 (id=4615): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = memfd_create(0x0, 0x0) fstatfs(r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, 0x0, 0xa2) readv(r4, &(0x7f0000000480)=[{&(0x7f00000025c0)=""/4101, 0x1005}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x2) 3.398065102s ago: executing program 4 (id=4616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 3.368952192s ago: executing program 4 (id=4617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='thermal_power_allocator\x00', r1, 0x0, 0x400004}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x4c) bpf$MAP_CREATE(0x0, 0x0, 0x48) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r3, 0x0, 0x0, 0x1, 0x3000) msgrcv(r3, 0x0, 0x0, 0x1, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="01005d"], 0x8, 0x0) r4 = semget(0x2, 0x1, 0x88) semctl$IPC_INFO(r4, 0x0, 0x3, &(0x7f0000000480)=""/157) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x3000) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = gettid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10b, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000100)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) 2.540533829s ago: executing program 2 (id=4627): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="160a0000000000006110ac000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x80, 0x1, 0x28, 0xffffffffffffffff, 0xffffeffe}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000002c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.49940291s ago: executing program 4 (id=4628): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) dup(r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6) pipe2$9p(&(0x7f0000000240), 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x4f0082, 0x194, 0x29}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f100000000b00000003000000090008000000002e0061"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) 2.070880288s ago: executing program 4 (id=4637): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = memfd_create(0x0, 0x0) fstatfs(r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, 0x0, 0xa2) readv(r4, &(0x7f0000000480)=[{&(0x7f00000025c0)=""/4101, 0x1005}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x2) 2.004394159s ago: executing program 0 (id=4638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='thermal_power_allocator\x00', r1, 0x0, 0x400004}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x4c) bpf$MAP_CREATE(0x0, 0x0, 0x48) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r3, 0x0, 0x0, 0x1, 0x3000) msgrcv(r3, 0x0, 0x0, 0x1, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="01005d"], 0x8, 0x0) r4 = semget(0x2, 0x1, 0x88) semctl$IPC_INFO(r4, 0x0, 0x3, &(0x7f0000000480)=""/157) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x3000) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = gettid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10b, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000100)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) 1.297045544s ago: executing program 1 (id=4640): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0xfa, @private2, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4, 0x25, 0x0, @void}, 0x10) 1.270436494s ago: executing program 1 (id=4641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 1.250452485s ago: executing program 1 (id=4642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 1.165077486s ago: executing program 4 (id=4643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='rxrpc_timer\x00', r0, 0x0, 0x3}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8020, 0xb0000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x9}, 0x8224, 0x2, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10804, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000b6e0176698a8f1fe903a20", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000020000f5850000008600000300"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x2008042, &(0x7f0000000380)={[{@data_ordered}, {@sb}, {@nobh}]}, 0x1, 0x57d, &(0x7f00000015c0)="$eJzs3c9vHFcdAPDvjH/mR+sEeoAKSIBCQFHW8aaNql4aLiBUVUJUHBCH1Ngby2SdDbFdahMJ928ACSRO8CdwQOKA1BMHbhyROACiHJAKRKAEicOgmf3htbNrb7LrXbL7+UiTeTNvZr7vrT3z3r519gUwsS5GxF5EzEbE2xGx0NifNJa4UV/y4x4+uL/y6MH9lSSy7K1/JEV+vi/azsmdaVxzPiK+/pWIbyePx93c2b29XK1W7jW2F7c27i5u7uxeWd9YXqusVe6Uy9eXrl999dor5YHV9cLGLz788vob3/j1rz75we/2vvj9vFhnG3nt9RiketVnWnFy0xHxxkkEG4Gpxnp2xOXg6aQR8ZGI+Exx/y/EVPHbCQCMsyxbiGyhfRsAGHdpMQaWpKWISNNGJ6BUH8N7IU6n1drm1uVbte07q/WxsnMxk95ar1aunp/7w3eLg2eSfHupyCvyi+3yoe1rEXE+In40d6rYLq3Uqquj6fIAwMQ7097+R8S/59K0VOrp1A6f6gEAz4z5URcAABg67T8ATB7tPwBMnh7a/8aH/XsnXhYAYDi8/weAyaP9B4DJo/0HgInytTffzJfsUeP7r1ff2dm+XXvnympl83ZpY3ultFK7d7e0VqutFd/Zs3Hc9aq12t2ll2P73cWtyubW4ubO7s2N2vadrZvF93rfrMwMpVYAwFHOX3j/90lE7L12qliibS4HbTWMt3SARwHPlql+TtZBgGea2b5gcvXUhBedhN+eeFmA0ej4Zd7zHZMH/eQJgvg7I/i/cunjvY//m+MZxouRfZhcTzf+//rAywEM31OP//9psOUAhi/LksNz/s+2sgCAsdTHn/CZ/xfGxHE380A+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAxczYivhNJWirmAk/zf9NSKeK5iDgXM8mt9WrlakQ8HxciYmYu314adaEBgD6lf0sa839dWnjpbH3fVCt3NvnPXLGOiO/99K0fv7u8tXVvKd//z9b+ueb0YeX9q/YxryAA0Lu/9HJQ0X6XG+u2N/IPH9xfaS4nWMbHfPil1uSjK48e3C+Wes50ZFmWRcwXfYnT/0piunHOfES8eKCX8vT23ouIj3Wqf1KMjZxrzHzaHj8asZ8bdPwbcUT89ED8tMirr/OX76MDKAtMmvfz58+Nw/f/VHFnXSyO6Hz/zxdPqP4Vz7/5iOazb//517zf54vSHI6f3/MXe43x8m++2ky3rpEt1PPei3hxulP8pBU/6RL/pR7j//ETn/rh613ysp9FXIrO8dtjLW5t3F3c3Nm9sr6xvFZZq9wpl68vXb/66rVXyovFGPVic6T6cX9/7fLz3cqW1/90l/j1n/yZQ/WfbZ37uR7r//P/vv2tT+9vzh2O/4XPdv75v1CsO7/+eZv4+R7jL5/+Zdfpu/P4q13qf9zP/3KP8T/46+5qj4cCAEOwubN7e7lardzrK5G/C33ys7Is+0FehiOOybN7u2Czu9hfdf4cRWL/ZUkiif5fn4OJvDPW3HPqiINn+q7OgURzuGTQ1emQmG71FY85OH2yK3/z6N+WbonZfqqTHl+LISTiXCPxcFhBR/I4AoZo/6YfdUkAAAAAAAAAAAAAAIBuhvF/mEZdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMbX/wIAAP//t0e6tg==") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) gettid() newfstatat(0xffffffffffffff9c, &(0x7f00000086c0)='./file0\x00', 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 1.155764837s ago: executing program 0 (id=4644): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = gettid() fcntl$setown(r0, 0x8, r5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.072899158s ago: executing program 0 (id=4646): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @empty, @broadcast}, &(0x7f00000006c0)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x2f, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000940)={&(0x7f00000004c0), 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x16c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8c000}, 0x14) sendfile(r0, r0, 0x0, 0x453) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005a, 0x1) 1.027612409s ago: executing program 0 (id=4649): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="160a0000000000006110ac000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x80, 0x1, 0x28, 0xffffffffffffffff, 0xffffeffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 876.516382ms ago: executing program 0 (id=4653): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) 841.497653ms ago: executing program 0 (id=4654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='thermal_power_allocator\x00', r1, 0x0, 0x400004}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x4c) bpf$MAP_CREATE(0x0, 0x0, 0x48) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r3, 0x0, 0x0, 0x1, 0x3000) msgrcv(r3, 0x0, 0x0, 0x1, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="01005d"], 0x8, 0x0) r4 = semget(0x2, 0x1, 0x88) semctl$IPC_INFO(r4, 0x0, 0x3, &(0x7f0000000480)=""/157) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x3000) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = gettid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10b, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000100)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) 826.837353ms ago: executing program 2 (id=4655): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) dup(r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6) pipe2$9p(&(0x7f0000000240), 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x4f0082, 0x194, 0x29}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f100000000b00000003000000090008000000002e0061"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) 672.420406ms ago: executing program 1 (id=4657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000006852854ee07ff9d22782db980106732de11082eb4edb48d2f7b2e9b7e5651301d36843128589663219235a90b7a0eb90054f7ce5c1c90c2135c5c8", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fddbdf252b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100000018000000"], 0x28}}, 0x44000) 661.408017ms ago: executing program 2 (id=4658): r0 = socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xa55c}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) fdatasync(0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r4, 0x25, 0x8, @void}, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r10, 0x0, 0x9}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 624.921737ms ago: executing program 1 (id=4659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) unlink(&(0x7f0000000480)='./bus\x00') socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="34005085c8657b841647054af35133ad5e0000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) accept$unix(r1, &(0x7f00000007c0)=@abs, &(0x7f0000000740)=0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xa, 0xc, &(0x7f0000001d80)=ANY=[], 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x800, 0x190) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) mlock(&(0x7f00004bc000/0x4000)=nil, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) read(0xffffffffffffffff, &(0x7f0000000600)=""/93, 0x5d) 624.481047ms ago: executing program 3 (id=4660): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={0x0, @empty, @broadcast}, &(0x7f00000006c0)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x2f, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000940)={&(0x7f00000004c0), 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x16c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8c000}, 0x14) sendfile(r0, r0, 0x0, 0x453) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005a, 0x1) 559.553378ms ago: executing program 1 (id=4661): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44040) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000040)={[{@usrquota}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) writev(r5, &(0x7f0000000580)=[{0x0}, {&(0x7f00000001c0)="3f6dcb066da1be05ff", 0x9}, {0x0}, {&(0x7f0000000480)}], 0x4) sendfile(r5, r4, 0x0, 0x3ffff) 559.297389ms ago: executing program 3 (id=4662): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 531.773769ms ago: executing program 3 (id=4663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 488.28757ms ago: executing program 3 (id=4664): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone3(0x0, 0x0) tgkill(r1, r1, 0x21) 487.95726ms ago: executing program 3 (id=4665): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 464.37902ms ago: executing program 3 (id=4666): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000080)=""/67}, 0x20) r2 = msgget$private(0x0, 0x524) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) fstat(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400, 0x80, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x1}, [{0x2, 0x1, r8}], {0x4, 0x1}}, 0x2c, 0x1) r10 = getpgid(0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000800)={{0x1, r3, r4, r5, r9, 0x44, 0x1}, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x9, 0xffffffffffffffff, 0x10, 0x0, 0x3, r10, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x4010, r0, 0xffffd000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r11, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xa0) sendfile(r11, r1, 0x0, 0x3ffff) sendfile(r11, r1, 0x0, 0x7fffeffd) 336.527633ms ago: executing program 4 (id=4667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x1) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 295.089224ms ago: executing program 2 (id=4668): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) dup(r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6) pipe2$9p(&(0x7f0000000240), 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x4f0082, 0x194, 0x29}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f100000000b00000003000000090008000000002e0061"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) 0s ago: executing program 2 (id=4669): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000000480000000000000000000000006754454a0bd34d16c5c46c771488b9f31f9e0e64d5491efe013a7aa8d1e885bcaa37357a98c91baea40ad23e838021e047a4db58aa7f89f8ca50c57676e6", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@resuid={'resuid', 0x3d, 0xee00}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) kernel console output (not intermixed with test programs): [ 375.998270][ T5557] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.099212][ T5557] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.119733][ T5557] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.151715][ T5557] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.578963][T14233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14233 comm=syz.4.3619 [ 377.139159][T14241] bridge0: entered promiscuous mode [ 377.169930][T14241] macsec1: entered promiscuous mode [ 377.176202][T14241] bridge0: port 3(macsec1) entered blocking state [ 377.182968][T14241] bridge0: port 3(macsec1) entered disabled state [ 377.222198][T14241] macsec1: entered allmulticast mode [ 377.227650][T14241] bridge0: entered allmulticast mode [ 377.282814][T14241] macsec1: left allmulticast mode [ 377.287945][T14241] bridge0: left allmulticast mode [ 377.315869][T14241] bridge0: left promiscuous mode [ 377.557589][T14249] loop1: detected capacity change from 0 to 512 [ 377.582733][T14249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.605659][T14249] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.682823][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 377.682865][ T29] audit: type=1326 audit(1759202556.897:33834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 377.788011][ T29] audit: type=1326 audit(1759202556.927:33835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa71d65d710 code=0x7ffc0000 [ 377.811751][ T29] audit: type=1326 audit(1759202556.927:33836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 377.835370][ T29] audit: type=1326 audit(1759202556.927:33837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 377.859020][ T29] audit: type=1326 audit(1759202556.927:33838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 377.882645][ T29] audit: type=1326 audit(1759202556.927:33839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 377.906430][ T29] audit: type=1326 audit(1759202556.927:33840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 377.930184][ T29] audit: type=1326 audit(1759202556.927:33841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 377.953887][ T29] audit: type=1326 audit(1759202556.937:33842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 377.977792][ T29] audit: type=1326 audit(1759202556.937:33843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 378.030817][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.072916][T14259] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 378.079501][T14259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.087303][T14259] vhci_hcd vhci_hcd.0: Device attached [ 378.131546][T14260] vhci_hcd: connection closed [ 378.131732][ T5554] vhci_hcd: stop threads [ 378.140776][ T5554] vhci_hcd: release socket [ 378.145217][ T5554] vhci_hcd: disconnect device [ 378.447450][T14271] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 378.524311][T14276] loop3: detected capacity change from 0 to 1024 [ 378.550118][T14276] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 378.567633][T14276] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3633: Invalid block bitmap block 0 in block_group 0 [ 378.595768][T14276] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.3633: Failed to acquire dquot type 0 [ 378.621133][T14276] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.3633: Freeing blocks not in datazone - block = 0, count = 4096 [ 378.652302][T14276] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3633: Invalid inode bitmap blk 0 in block_group 0 [ 378.677680][T14276] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 378.687937][T14276] EXT4-fs (loop3): 1 orphan inode deleted [ 378.697491][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 378.729777][T14276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.757669][ T802] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 378.767002][ T802] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.778138][T14276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.804216][T14301] loop2: detected capacity change from 0 to 512 [ 378.826467][T14301] EXT4-fs: Ignoring removed nobh option [ 378.836212][T14301] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3638'. [ 378.853491][T14308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3642'. [ 378.867850][T14299] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 378.921222][T14305] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 379.047352][T14321] bridge0: entered promiscuous mode [ 379.056117][T14321] macsec1: entered promiscuous mode [ 379.070758][T14321] bridge0: port 3(macsec1) entered blocking state [ 379.077265][T14321] bridge0: port 3(macsec1) entered disabled state [ 379.096085][T14321] macsec1: entered allmulticast mode [ 379.101431][T14321] bridge0: entered allmulticast mode [ 379.111946][T14321] macsec1: left allmulticast mode [ 379.117123][T14321] bridge0: left allmulticast mode [ 379.131620][T14321] bridge0: left promiscuous mode [ 379.159709][ T802] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 379.168066][ T802] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 379.199761][T14335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14335 comm=syz.1.3655 [ 379.212411][T14335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14335 comm=syz.1.3655 [ 379.235703][T14335] loop1: detected capacity change from 0 to 1024 [ 379.256717][T14335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.294714][T14335] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3655: Allocating blocks 449-513 which overlap fs metadata [ 379.317394][T14334] EXT4-fs (loop1): pa ffff888106e0db60: logic 48, phys. 177, len 21 [ 379.325475][T14334] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 379.374832][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.383518][ T802] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 380.406182][ T802] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.643185][T14378] tipc: Started in network mode [ 380.648112][T14378] tipc: Node identity ac14140f, cluster identity 4711 [ 380.679987][T14378] tipc: New replicast peer: 255.255.255.83 [ 380.685880][T14378] tipc: Enabled bearer , priority 10 [ 380.732158][T14386] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 380.733446][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3669'. [ 380.738778][T14386] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 380.755400][T14386] vhci_hcd vhci_hcd.0: Device attached [ 380.769723][T14389] loop4: detected capacity change from 0 to 512 [ 380.776595][T14389] EXT4-fs: Ignoring removed nobh option [ 380.787326][T14389] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3671'. [ 380.798577][T14387] vhci_hcd: connection closed [ 380.798664][ T31] vhci_hcd: stop threads [ 380.807673][ T31] vhci_hcd: release socket [ 380.812227][ T31] vhci_hcd: disconnect device [ 380.987759][T14397] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 381.438062][T14405] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 381.513400][T14413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14413 comm=syz.1.3681 [ 381.575570][ T3394] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 381.584896][ T3394] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 381.715625][T14426] loop1: detected capacity change from 0 to 1024 [ 381.741162][T14426] EXT4-fs: Ignoring removed bh option [ 381.751995][T14426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.800597][ T23] tipc: Node number set to 2886997007 [ 381.807730][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.898675][T14436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14436 comm=syz.0.3690 [ 381.994993][T14440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14440 comm=syz.4.3692 [ 382.194028][T14451] loop3: detected capacity change from 0 to 1024 [ 382.212401][T14451] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 382.235822][T14452] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3694'. [ 382.255074][T14451] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3696: Invalid block bitmap block 0 in block_group 0 [ 382.285711][T14451] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.3696: Failed to acquire dquot type 0 [ 382.297627][T14451] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.3696: Freeing blocks not in datazone - block = 0, count = 4096 [ 382.317245][T14451] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3696: Invalid inode bitmap blk 0 in block_group 0 [ 382.331149][T14451] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 382.339996][ T5557] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:11: Failed to release dquot type 0 [ 382.340598][T14451] EXT4-fs (loop3): 1 orphan inode deleted [ 382.357842][T14451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.378096][T14451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.445325][ T802] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 382.460213][ T802] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 382.689938][T14469] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 382.944381][ T29] kauditd_printk_skb: 1203 callbacks suppressed [ 382.944399][ T29] audit: type=1326 audit(1759202562.157:35041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 382.984543][ T29] audit: type=1326 audit(1759202562.157:35042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 383.008316][ T29] audit: type=1326 audit(1759202562.157:35043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 383.031930][ T29] audit: type=1326 audit(1759202562.157:35044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 383.055719][ T29] audit: type=1326 audit(1759202562.157:35045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 383.079716][ T29] audit: type=1326 audit(1759202562.157:35046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 383.103423][ T29] audit: type=1326 audit(1759202562.157:35047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 383.127242][ T29] audit: type=1326 audit(1759202562.187:35048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 383.150922][ T29] audit: type=1326 audit(1759202562.187:35049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 383.174731][ T29] audit: type=1326 audit(1759202562.197:35050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.3.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 383.206783][T14478] netlink: 'syz.4.3703': attribute type 4 has an invalid length. [ 383.216480][T14478] netlink: 'syz.4.3703': attribute type 4 has an invalid length. [ 383.273936][T14487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14487 comm=syz.2.3706 [ 383.345631][T14481] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.398573][T14498] loop2: detected capacity change from 0 to 1024 [ 383.407243][T14498] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 383.409789][T14481] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.435135][T14498] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3710: Invalid block bitmap block 0 in block_group 0 [ 383.457144][T14498] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.3710: Failed to acquire dquot type 0 [ 383.472218][T14498] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.3710: Freeing blocks not in datazone - block = 0, count = 4096 [ 383.501913][T14481] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.512273][T14498] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3710: Invalid inode bitmap blk 0 in block_group 0 [ 383.540438][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 383.552572][T14498] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 383.566605][T14498] EXT4-fs (loop2): 1 orphan inode deleted [ 383.573038][T14498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.591940][T14498] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.612268][T14481] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.624144][T14507] loop1: detected capacity change from 0 to 512 [ 383.635831][T14507] EXT4-fs: Ignoring removed nobh option [ 383.703720][T14507] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3714'. [ 383.722217][ T1731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.733266][T14513] bridge0: entered promiscuous mode [ 383.754317][T14513] macsec1: entered promiscuous mode [ 383.768834][T14513] bridge0: port 1(macsec1) entered blocking state [ 383.775424][T14513] bridge0: port 1(macsec1) entered disabled state [ 383.795546][T14513] macsec1: entered allmulticast mode [ 383.800914][T14513] bridge0: entered allmulticast mode [ 383.819628][T14513] macsec1: left allmulticast mode [ 383.824731][T14513] bridge0: left allmulticast mode [ 383.842449][T14513] bridge0: left promiscuous mode [ 383.863457][ T1731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.875177][T14518] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.911976][ T1731] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.954508][ T1731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.963949][T14518] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.039138][T14518] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.041935][T14526] FAULT_INJECTION: forcing a failure. [ 384.041935][T14526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.062004][T14526] CPU: 1 UID: 0 PID: 14526 Comm: syz.1.3721 Not tainted syzkaller #0 PREEMPT(voluntary) [ 384.062029][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.062042][T14526] Call Trace: [ 384.062048][T14526] [ 384.062055][T14526] __dump_stack+0x1d/0x30 [ 384.062075][T14526] dump_stack_lvl+0xe8/0x140 [ 384.062174][T14526] dump_stack+0x15/0x1b [ 384.062195][T14526] should_fail_ex+0x265/0x280 [ 384.062232][T14526] should_fail+0xb/0x20 [ 384.062260][T14526] should_fail_usercopy+0x1a/0x20 [ 384.062335][T14526] strncpy_from_user+0x25/0x230 [ 384.062385][T14526] ? __kmalloc_cache_noprof+0x189/0x320 [ 384.062535][T14526] __se_sys_memfd_create+0x1ff/0x590 [ 384.062639][T14526] __x64_sys_memfd_create+0x31/0x40 [ 384.062731][T14526] x64_sys_call+0x2abe/0x2ff0 [ 384.062757][T14526] do_syscall_64+0xd2/0x200 [ 384.062777][T14526] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 384.062883][T14526] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 384.062991][T14526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.063012][T14526] RIP: 0033:0x7f6b1291eec9 [ 384.063031][T14526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.063052][T14526] RSP: 002b:00007f6b11386e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 384.063075][T14526] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007f6b1291eec9 [ 384.063090][T14526] RDX: 00007f6b11386ef0 RSI: 0000000000000000 RDI: 00007f6b129a2960 [ 384.063150][T14526] RBP: 0000200000000600 R08: 00007f6b11386bb7 R09: 00007f6b11386e40 [ 384.063161][T14526] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 384.063173][T14526] R13: 00007f6b11386ef0 R14: 00007f6b11386eb0 R15: 0000200000000300 [ 384.063195][T14526] [ 384.282979][T14529] loop1: detected capacity change from 0 to 512 [ 384.291570][T14518] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.332013][T14529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.363786][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.395773][T14529] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.422174][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.458527][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.525087][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.786506][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.984150][T14544] bridge0: entered promiscuous mode [ 385.010830][T14544] macsec1: entered promiscuous mode [ 385.016465][T14544] bridge0: port 1(macsec1) entered blocking state [ 385.023051][T14544] bridge0: port 1(macsec1) entered disabled state [ 385.050194][T14544] macsec1: entered allmulticast mode [ 385.055620][T14544] bridge0: entered allmulticast mode [ 385.062951][T14550] loop4: detected capacity change from 0 to 512 [ 385.069802][T14550] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.076645][T14550] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 385.086856][T14544] macsec1: left allmulticast mode [ 385.088813][T14550] EXT4-fs (loop4): 1 truncate cleaned up [ 385.091948][T14544] bridge0: left allmulticast mode [ 385.098164][T14550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.130462][T14544] bridge0: left promiscuous mode [ 385.165243][T14555] loop3: detected capacity change from 0 to 512 [ 385.189734][T14555] EXT4-fs (loop3): too many log groups per flexible block group [ 385.204782][T14555] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 385.225664][T14555] EXT4-fs (loop3): mount failed [ 385.250466][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.315026][T14568] loop2: detected capacity change from 0 to 1024 [ 385.322588][T14568] EXT4-fs: Ignoring removed orlov option [ 385.329157][T14568] ext4: Unknown parameter 'nouser_xattr' [ 385.345829][T14568] loop2: detected capacity change from 0 to 512 [ 385.362061][T14568] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 385.372616][T14568] EXT4-fs (loop2): orphan cleanup on readonly fs [ 385.382090][T14568] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3734: corrupted inode contents [ 385.399292][T14568] EXT4-fs (loop2): Remounting filesystem read-only [ 385.412299][T14568] EXT4-fs (loop2): 1 truncate cleaned up [ 385.418175][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.428902][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 385.475092][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 385.488486][T14568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.509460][T14568] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 385.515996][T14568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.523627][T14568] vhci_hcd vhci_hcd.0: Device attached [ 385.659931][T14580] vhci_hcd: connection closed [ 385.680382][ T1731] vhci_hcd: stop threads [ 385.689368][ T1731] vhci_hcd: release socket [ 385.693934][ T1731] vhci_hcd: disconnect device [ 385.711374][ T802] vhci_hcd: vhci_device speed not set [ 385.750257][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.291431][T14593] syz.0.3743 uses obsolete (PF_INET,SOCK_PACKET) [ 386.579704][T14620] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.655479][T14620] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.702460][T14620] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.826035][T14620] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.888732][ T5557] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.903579][ T1731] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.919873][ T1731] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.932819][ T1731] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.052661][T14666] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14666 comm=syz.4.3766 [ 387.065449][T14666] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14666 comm=syz.4.3766 [ 387.091060][T14666] loop4: detected capacity change from 0 to 1024 [ 387.196347][T14666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.341934][T14666] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3766: Allocating blocks 449-513 which overlap fs metadata [ 387.426327][T14665] EXT4-fs (loop4): pa ffff888106e0db60: logic 48, phys. 177, len 21 [ 387.434519][T14665] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 387.507338][T14677] loop3: detected capacity change from 0 to 512 [ 387.550824][T14677] EXT4-fs: Ignoring removed mblk_io_submit option [ 387.557692][T14677] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 387.575246][T14677] EXT4-fs (loop3): 1 truncate cleaned up [ 387.587935][T14677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.603330][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.689262][T14688] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.855877][T14688] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.916169][T14688] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.972490][T14688] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.080270][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.098193][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.115541][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.133034][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.179367][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 388.236511][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 388.258019][T14727] FAULT_INJECTION: forcing a failure. [ 388.258019][T14727] name failslab, interval 1, probability 0, space 0, times 0 [ 388.270839][T14727] CPU: 0 UID: 0 PID: 14727 Comm: syz.1.3790 Not tainted syzkaller #0 PREEMPT(voluntary) [ 388.270868][T14727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.270883][T14727] Call Trace: [ 388.270890][T14727] [ 388.270897][T14727] __dump_stack+0x1d/0x30 [ 388.270917][T14727] dump_stack_lvl+0xe8/0x140 [ 388.270937][T14727] dump_stack+0x15/0x1b [ 388.270985][T14727] should_fail_ex+0x265/0x280 [ 388.271016][T14727] should_failslab+0x8c/0xb0 [ 388.271076][T14727] kmem_cache_alloc_node_noprof+0x57/0x320 [ 388.271108][T14727] ? __alloc_skb+0x101/0x320 [ 388.271139][T14727] __alloc_skb+0x101/0x320 [ 388.271171][T14727] netlink_alloc_large_skb+0xba/0xf0 [ 388.271261][T14727] netlink_sendmsg+0x3cf/0x6b0 [ 388.271293][T14727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.271335][T14727] __sock_sendmsg+0x145/0x180 [ 388.271475][T14727] ____sys_sendmsg+0x31e/0x4e0 [ 388.271563][T14727] ___sys_sendmsg+0x17b/0x1d0 [ 388.271605][T14727] __x64_sys_sendmsg+0xd4/0x160 [ 388.271642][T14727] x64_sys_call+0x191e/0x2ff0 [ 388.271675][T14727] do_syscall_64+0xd2/0x200 [ 388.271693][T14727] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 388.271714][T14727] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 388.271746][T14727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.271782][T14727] RIP: 0033:0x7f6b1291eec9 [ 388.271801][T14727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.271823][T14727] RSP: 002b:00007f6b11387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.271865][T14727] RAX: ffffffffffffffda RBX: 00007f6b12b75fa0 RCX: 00007f6b1291eec9 [ 388.271879][T14727] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000005 [ 388.271893][T14727] RBP: 00007f6b11387090 R08: 0000000000000000 R09: 0000000000000000 [ 388.271907][T14727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.271978][T14727] R13: 00007f6b12b76038 R14: 00007f6b12b75fa0 R15: 00007ffd93aa8738 [ 388.272017][T14727] [ 388.514654][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.597428][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 389.597446][ T29] audit: type=1326 audit(1759202568.807:35703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 389.627339][ T29] audit: type=1326 audit(1759202568.807:35704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 389.767756][ T29] audit: type=1326 audit(1759202568.907:35705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 389.791300][ T29] audit: type=1326 audit(1759202568.907:35706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 389.814976][ T29] audit: type=1326 audit(1759202568.907:35707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 389.838699][ T29] audit: type=1326 audit(1759202568.927:35708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 389.862263][ T29] audit: type=1326 audit(1759202568.927:35709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 389.885860][ T29] audit: type=1326 audit(1759202568.927:35710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 389.909442][ T29] audit: type=1326 audit(1759202568.937:35711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 389.933146][ T29] audit: type=1326 audit(1759202568.937:35712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14751 comm="syz.2.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 390.160001][T14780] loop2: detected capacity change from 0 to 1024 [ 390.187236][T14780] EXT4-fs: Ignoring removed bh option [ 390.213194][T14780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.322439][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.394399][T14798] bridge0: entered promiscuous mode [ 390.402723][T14798] macsec1: entered promiscuous mode [ 390.408476][T14798] bridge0: port 1(macsec1) entered blocking state [ 390.415090][T14798] bridge0: port 1(macsec1) entered disabled state [ 390.879939][T14798] macsec1: entered allmulticast mode [ 390.885288][T14798] bridge0: entered allmulticast mode [ 390.951554][T14798] macsec1: left allmulticast mode [ 390.956661][T14798] bridge0: left allmulticast mode [ 390.972176][T14798] bridge0: left promiscuous mode [ 392.004113][T14846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14846 comm=syz.0.3824 [ 392.016895][T14846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14846 comm=syz.0.3824 [ 392.222224][T14861] netlink: 'syz.2.3830': attribute type 4 has an invalid length. [ 392.231615][T14861] netlink: 'syz.2.3830': attribute type 4 has an invalid length. [ 392.272090][T14863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14863 comm=syz.1.3831 [ 392.284725][T14863] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14863 comm=syz.1.3831 [ 392.354255][T14867] loop1: detected capacity change from 0 to 1024 [ 392.394830][T14867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.429006][T14863] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3831: Allocating blocks 449-513 which overlap fs metadata [ 392.453079][T14862] EXT4-fs (loop1): pa ffff888106e4a700: logic 48, phys. 177, len 21 [ 392.461241][T14862] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 392.538567][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.599739][T14873] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 392.620376][T14886] Driver unsupported XDP return value 0 on prog (id 2171) dev N/A, expect packet loss! [ 392.799859][T14898] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14898 comm=syz.1.3844 [ 392.812533][T14898] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14898 comm=syz.1.3844 [ 392.852111][T14898] loop1: detected capacity change from 0 to 1024 [ 392.893250][T14898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.954891][T14914] FAULT_INJECTION: forcing a failure. [ 392.954891][T14914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.968167][T14914] CPU: 0 UID: 0 PID: 14914 Comm: syz.3.3850 Not tainted syzkaller #0 PREEMPT(voluntary) [ 392.968200][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.968215][T14914] Call Trace: [ 392.968222][T14914] [ 392.968230][T14914] __dump_stack+0x1d/0x30 [ 392.968255][T14914] dump_stack_lvl+0xe8/0x140 [ 392.968318][T14914] dump_stack+0x15/0x1b [ 392.968334][T14914] should_fail_ex+0x265/0x280 [ 392.968447][T14914] should_fail+0xb/0x20 [ 392.968479][T14914] should_fail_usercopy+0x1a/0x20 [ 392.968511][T14914] _copy_to_user+0x20/0xa0 [ 392.968531][T14914] simple_read_from_buffer+0xb5/0x130 [ 392.968663][T14914] proc_fail_nth_read+0x10e/0x150 [ 392.968693][T14914] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.968722][T14914] vfs_read+0x1a5/0x770 [ 392.968744][T14914] ? __rcu_read_unlock+0x4f/0x70 [ 392.968765][T14914] ? __fget_files+0x184/0x1c0 [ 392.968815][T14914] ksys_read+0xda/0x1a0 [ 392.968839][T14914] __x64_sys_read+0x40/0x50 [ 392.968862][T14914] x64_sys_call+0x27bc/0x2ff0 [ 392.968884][T14914] do_syscall_64+0xd2/0x200 [ 392.968924][T14914] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 392.968950][T14914] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 392.968984][T14914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.969006][T14914] RIP: 0033:0x7ff3a3ead8dc [ 392.969021][T14914] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 392.969081][T14914] RSP: 002b:00007ff3a2917030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.969099][T14914] RAX: ffffffffffffffda RBX: 00007ff3a4105fa0 RCX: 00007ff3a3ead8dc [ 392.969111][T14914] RDX: 000000000000000f RSI: 00007ff3a29170a0 RDI: 0000000000000004 [ 392.969123][T14914] RBP: 00007ff3a2917090 R08: 0000000000000000 R09: 0000000000000000 [ 392.969134][T14914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.969193][T14914] R13: 00007ff3a4106038 R14: 00007ff3a4105fa0 R15: 00007ffca153e108 [ 392.969212][T14914] [ 392.988666][T14898] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3844: Allocating blocks 449-513 which overlap fs metadata [ 393.190750][T14897] EXT4-fs (loop1): pa ffff888106e0daf0: logic 48, phys. 177, len 21 [ 393.198920][T14897] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 393.318466][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.385356][T14944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14944 comm=syz.1.3861 [ 393.398003][T14944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14944 comm=syz.1.3861 [ 393.446224][T14934] loop3: detected capacity change from 0 to 32768 [ 393.452672][T14944] loop1: detected capacity change from 0 to 1024 [ 393.486595][T14944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.534354][T14944] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3861: Allocating blocks 449-513 which overlap fs metadata [ 393.558232][T14943] EXT4-fs (loop1): pa ffff888106e4a5b0: logic 48, phys. 177, len 21 [ 393.566343][T14943] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 393.691402][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.712089][T14967] loop1: detected capacity change from 0 to 128 [ 393.718911][T14967] EXT4-fs: Ignoring removed nobh option [ 393.726640][T14967] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.740062][T14967] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 394.056265][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 394.281181][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3877'. [ 394.304313][T14997] netlink: 'syz.2.3881': attribute type 4 has an invalid length. [ 394.315340][T14997] netlink: 'syz.2.3881': attribute type 4 has an invalid length. [ 394.561164][T11954] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.603001][ T29] kauditd_printk_skb: 877 callbacks suppressed [ 394.603019][ T29] audit: type=1326 audit(1759202573.817:36590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.635755][ T29] audit: type=1326 audit(1759202573.817:36591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.659526][ T29] audit: type=1326 audit(1759202573.817:36592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.675573][T15030] loop2: detected capacity change from 0 to 128 [ 394.683226][ T29] audit: type=1326 audit(1759202573.847:36593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.683509][ T29] audit: type=1326 audit(1759202573.867:36594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.703931][T15030] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 394.713153][ T29] audit: type=1326 audit(1759202573.867:36595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.772787][ T29] audit: type=1326 audit(1759202573.897:36596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.773344][T15030] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 394.796602][ T29] audit: type=1326 audit(1759202573.897:36597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.796645][ T29] audit: type=1326 audit(1759202573.947:36598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.852871][ T29] audit: type=1326 audit(1759202573.957:36599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.0.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 394.922561][ T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 395.024049][T15037] bridge0: entered promiscuous mode [ 395.029314][T15037] macsec1: entered promiscuous mode [ 395.035994][T15037] bridge0: port 1(macsec1) entered blocking state [ 395.042570][T15037] bridge0: port 1(macsec1) entered disabled state [ 395.049555][T15037] macsec1: entered allmulticast mode [ 395.054921][T15037] bridge0: entered allmulticast mode [ 395.061885][T15037] macsec1: left allmulticast mode [ 395.066919][T15037] bridge0: left allmulticast mode [ 395.072668][T15037] bridge0: left promiscuous mode [ 395.386596][T15039] loop3: detected capacity change from 0 to 1024 [ 395.393747][T15039] EXT4-fs: Ignoring removed orlov option [ 395.418536][T15039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.077819][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.407729][T15070] bridge0: entered promiscuous mode [ 396.423341][T15070] macsec1: entered promiscuous mode [ 396.435515][T15070] bridge0: port 3(macsec1) entered blocking state [ 396.441992][T15070] bridge0: port 3(macsec1) entered disabled state [ 396.457976][T15072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3907'. [ 396.463589][T15070] macsec1: entered allmulticast mode [ 396.472301][T15070] bridge0: entered allmulticast mode [ 396.484906][T15070] macsec1: left allmulticast mode [ 396.490075][T15070] bridge0: left allmulticast mode [ 396.506002][T15070] bridge0: left promiscuous mode [ 397.398292][T15091] netlink: 'syz.4.3913': attribute type 4 has an invalid length. [ 397.422026][T15091] netlink: 'syz.4.3913': attribute type 4 has an invalid length. [ 397.586523][T15092] loop2: detected capacity change from 0 to 1024 [ 397.600845][T15092] EXT4-fs: Ignoring removed bh option [ 397.632345][T15092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.788704][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.874969][T15113] netlink: 'syz.2.3921': attribute type 4 has an invalid length. [ 397.903940][T15113] netlink: 'syz.2.3921': attribute type 4 has an invalid length. [ 398.061075][T15122] bridge0: entered promiscuous mode [ 398.076160][T15122] macsec1: entered promiscuous mode [ 398.097554][T15122] bridge0: port 1(macsec1) entered blocking state [ 398.104149][T15122] bridge0: port 1(macsec1) entered disabled state [ 398.111391][T15122] macsec1: entered allmulticast mode [ 398.116718][T15122] bridge0: entered allmulticast mode [ 398.180438][T15122] macsec1: left allmulticast mode [ 398.185593][T15122] bridge0: left allmulticast mode [ 398.206451][T15122] bridge0: left promiscuous mode [ 398.369734][T15136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15136 comm=syz.2.3929 [ 398.382445][T15136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15136 comm=syz.2.3929 [ 398.496721][T15136] loop2: detected capacity change from 0 to 1024 [ 398.522122][T15136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.580626][T15143] loop4: detected capacity change from 0 to 512 [ 398.593738][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.610272][T15143] EXT4-fs: Ignoring removed nobh option [ 398.633011][T15143] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3930'. [ 398.824023][T15156] bridge0: entered promiscuous mode [ 398.850211][T15156] macsec1: entered promiscuous mode [ 398.862496][T15156] bridge0: port 3(macsec1) entered blocking state [ 398.869118][T15156] bridge0: port 3(macsec1) entered disabled state [ 398.892564][T15156] macsec1: entered allmulticast mode [ 398.897906][T15156] bridge0: entered allmulticast mode [ 398.930075][T15156] macsec1: left allmulticast mode [ 398.935154][T15156] bridge0: left allmulticast mode [ 398.944970][T15156] bridge0: left promiscuous mode [ 399.024457][T15168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15168 comm=syz.0.3940 [ 399.037089][T15168] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15168 comm=syz.0.3940 [ 399.623734][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 399.623753][ T29] audit: type=1326 audit(1759202578.837:37205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 399.819019][ T29] audit: type=1326 audit(1759202578.837:37206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 399.842657][ T29] audit: type=1326 audit(1759202578.837:37207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 399.866250][ T29] audit: type=1326 audit(1759202578.837:37208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 399.889966][ T29] audit: type=1326 audit(1759202578.837:37209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 399.913575][ T29] audit: type=1326 audit(1759202578.837:37210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 399.937192][ T29] audit: type=1326 audit(1759202578.837:37211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 399.960785][ T29] audit: type=1326 audit(1759202578.867:37212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 399.984763][ T29] audit: type=1326 audit(1759202578.867:37213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 400.008344][ T29] audit: type=1326 audit(1759202578.867:37214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.0.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71d65eec9 code=0x7ffc0000 [ 400.139217][T15197] loop2: detected capacity change from 0 to 512 [ 400.147235][T15197] EXT4-fs: Ignoring removed mblk_io_submit option [ 400.154108][T15197] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 400.182733][T15197] EXT4-fs (loop2): 1 truncate cleaned up [ 400.189072][T15197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.241157][T15202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15202 comm=syz.1.3952 [ 400.253848][T15202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15202 comm=syz.1.3952 [ 400.309741][T15205] loop1: detected capacity change from 0 to 1024 [ 400.322426][T15205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.461822][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.560980][T15213] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.613077][T15213] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.314163][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.512301][T15213] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.643202][T15213] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.788676][T15250] bridge0: entered promiscuous mode [ 401.810411][T15250] macsec1: entered promiscuous mode [ 401.816106][T15250] bridge0: port 1(macsec1) entered blocking state [ 401.822849][T15250] bridge0: port 1(macsec1) entered disabled state [ 401.844462][T15242] loop1: detected capacity change from 0 to 1024 [ 401.852199][T15250] macsec1: entered allmulticast mode [ 401.857601][T15250] bridge0: entered allmulticast mode [ 401.868913][T15242] EXT4-fs: Ignoring removed bh option [ 401.877802][T15250] macsec1: left allmulticast mode [ 401.882882][T15250] bridge0: left allmulticast mode [ 401.893248][T15242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.906257][T15250] bridge0: left promiscuous mode [ 401.931778][ T2697] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.009720][ T2697] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.027315][T15213] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.062123][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.111381][T15213] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.255454][T15270] 9pnet_fd: Insufficient options for proto=fd [ 402.435954][T15274] loop4: detected capacity change from 0 to 1024 [ 402.450677][T15274] EXT4-fs: Ignoring removed bh option [ 402.475092][T15274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.576033][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.199741][T15302] bridge0: entered promiscuous mode [ 403.221230][T15302] macsec1: entered promiscuous mode [ 403.243523][T15302] bridge0: port 1(macsec1) entered blocking state [ 403.250102][T15302] bridge0: port 1(macsec1) entered disabled state [ 403.288780][T15302] macsec1: entered allmulticast mode [ 403.294195][T15302] bridge0: entered allmulticast mode [ 403.313796][T15302] macsec1: left allmulticast mode [ 403.318885][T15302] bridge0: left allmulticast mode [ 403.343833][T15302] bridge0: left promiscuous mode [ 403.513276][T15306] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15306 comm=syz.4.3985 [ 403.525899][T15306] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15306 comm=syz.4.3985 [ 403.607163][T15304] 9pnet_fd: Insufficient options for proto=fd [ 403.708794][T15311] netlink: 'syz.2.3987': attribute type 4 has an invalid length. [ 403.730581][T15311] netlink: 'syz.2.3987': attribute type 4 has an invalid length. [ 404.002153][T15331] loop2: detected capacity change from 0 to 128 [ 404.028766][T15331] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 404.050944][T15331] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 404.128468][ T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 404.161583][T15337] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 404.168229][T15337] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 404.175803][T15337] vhci_hcd vhci_hcd.0: Device attached [ 404.222553][T15338] vhci_hcd: connection closed [ 404.223067][ T31] vhci_hcd: stop threads [ 404.232125][ T31] vhci_hcd: release socket [ 404.236598][ T31] vhci_hcd: disconnect device [ 404.310771][T15345] 9pnet_fd: Insufficient options for proto=fd [ 404.411552][T15349] netlink: 'syz.4.4001': attribute type 4 has an invalid length. [ 404.427480][T15349] netlink: 'syz.4.4001': attribute type 4 has an invalid length. [ 404.543801][T15360] netlink: 'syz.1.4006': attribute type 4 has an invalid length. [ 404.553756][T15360] netlink: 'syz.1.4006': attribute type 4 has an invalid length. [ 404.653333][T15366] loop4: detected capacity change from 0 to 512 [ 404.660199][T15366] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.666658][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 404.666670][ T29] audit: type=1326 audit(1759202583.877:37654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 404.679480][T15366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 404.696482][ T29] audit: type=1326 audit(1759202583.877:37655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 404.696554][ T29] audit: type=1326 audit(1759202583.877:37656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 404.709185][T15366] EXT4-fs (loop4): 1 truncate cleaned up [ 404.729963][ T29] audit: type=1326 audit(1759202583.877:37657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 404.756120][T15366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.759150][ T29] audit: type=1326 audit(1759202583.877:37658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 404.818438][ T29] audit: type=1326 audit(1759202583.877:37659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 404.842221][ T29] audit: type=1326 audit(1759202583.877:37660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 404.865911][ T29] audit: type=1326 audit(1759202583.877:37661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 404.889531][ T29] audit: type=1326 audit(1759202583.877:37662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 404.913752][ T29] audit: type=1326 audit(1759202583.887:37663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.1.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 405.006837][T15377] netlink: 'syz.2.4013': attribute type 4 has an invalid length. [ 405.057748][T15383] netlink: 'syz.2.4013': attribute type 4 has an invalid length. [ 405.572958][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.682308][T15434] loop4: detected capacity change from 0 to 1024 [ 406.700665][T15434] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 406.731138][T15434] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4033: Invalid block bitmap block 0 in block_group 0 [ 406.750257][T15434] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.4033: Failed to acquire dquot type 0 [ 406.778801][T15434] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.4033: Freeing blocks not in datazone - block = 0, count = 4096 [ 406.885980][T15434] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4033: Invalid inode bitmap blk 0 in block_group 0 [ 406.900182][ T246] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 406.929350][T15434] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 406.943800][T15434] EXT4-fs (loop4): 1 orphan inode deleted [ 406.952397][T15434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.975597][T15434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.028588][T15449] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15449 comm=syz.2.4038 [ 407.041337][T15449] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15449 comm=syz.2.4038 [ 407.446589][T15475] loop4: detected capacity change from 0 to 1024 [ 407.453836][T15475] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 407.469261][T15475] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4050: Invalid block bitmap block 0 in block_group 0 [ 407.485485][T15475] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.4050: Failed to acquire dquot type 0 [ 407.497084][T15475] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.4050: Freeing blocks not in datazone - block = 0, count = 4096 [ 407.514033][T15475] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4050: Invalid inode bitmap blk 0 in block_group 0 [ 407.527086][T15475] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 407.535849][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 407.547435][T15475] EXT4-fs (loop4): 1 orphan inode deleted [ 407.557925][T15475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.578664][T15475] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.593111][T15484] loop1: detected capacity change from 0 to 512 [ 407.600161][T15484] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.609359][T15484] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 407.643926][T15484] EXT4-fs (loop1): 1 truncate cleaned up [ 407.658269][T15484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.225113][T15512] loop4: detected capacity change from 0 to 512 [ 408.251650][T15512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.272254][T15512] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.612684][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.735633][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.758684][ T5557] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.784612][ T5557] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.807199][ T5557] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.831366][ T5557] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.861825][T15541] loop4: detected capacity change from 0 to 512 [ 408.883000][T15541] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.903393][T15541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 408.932844][T15541] EXT4-fs (loop4): 1 truncate cleaned up [ 408.959169][T15541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.083401][T15555] bridge0: entered promiscuous mode [ 409.104168][T15555] macsec1: entered promiscuous mode [ 409.131002][T15555] bridge0: port 3(macsec1) entered blocking state [ 409.137583][T15555] bridge0: port 3(macsec1) entered disabled state [ 409.184988][T15555] macsec1: entered allmulticast mode [ 409.190454][T15555] bridge0: entered allmulticast mode [ 409.202310][T15555] macsec1: left allmulticast mode [ 409.207400][T15555] bridge0: left allmulticast mode [ 409.213948][T15555] bridge0: left promiscuous mode [ 409.520051][T15575] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.586113][T15575] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.653487][T15575] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.675258][ T29] kauditd_printk_skb: 959 callbacks suppressed [ 409.675277][ T29] audit: type=1326 audit(1759202588.887:38617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.745214][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.751280][ T29] audit: type=1326 audit(1759202588.887:38618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.777855][ T29] audit: type=1326 audit(1759202588.887:38619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.801431][ T29] audit: type=1326 audit(1759202588.887:38620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.825065][ T29] audit: type=1326 audit(1759202588.887:38621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.848699][ T29] audit: type=1326 audit(1759202588.887:38622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.872433][ T29] audit: type=1326 audit(1759202588.887:38623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.896306][ T29] audit: type=1326 audit(1759202588.887:38624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.919847][ T29] audit: type=1326 audit(1759202588.887:38625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.943554][ T29] audit: type=1326 audit(1759202588.887:38626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.2.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 409.968323][T15575] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.062522][ T5554] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.095352][ T5554] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.131014][ T5554] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.170210][ T2697] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.301657][T15621] 9pnet_fd: Insufficient options for proto=fd [ 410.401876][T15628] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4107'. [ 410.429727][T15630] loop2: detected capacity change from 0 to 1024 [ 410.450521][T15630] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 410.464586][T15630] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4110: Invalid block bitmap block 0 in block_group 0 [ 410.478439][T15630] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.4110: Failed to acquire dquot type 0 [ 410.491542][T15630] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.4110: Freeing blocks not in datazone - block = 0, count = 4096 [ 410.505812][T15630] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4110: Invalid inode bitmap blk 0 in block_group 0 [ 410.520873][ T2697] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 0 [ 410.542575][T15630] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 410.565326][T15630] EXT4-fs (loop2): 1 orphan inode deleted [ 410.575073][T15641] loop3: detected capacity change from 0 to 512 [ 410.581839][T15630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.595984][T15641] EXT4-fs: Ignoring removed mblk_io_submit option [ 410.608223][T15641] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 410.629414][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.641402][T15641] EXT4-fs (loop3): 1 truncate cleaned up [ 410.648884][T15643] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.659614][T15641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.701293][T15643] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.761588][T15643] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.792029][T15643] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.859068][ T1731] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.878325][ T5557] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.888956][ T5557] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.902012][ T5557] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.826122][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.271624][ T3381] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 412.281411][T15729] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.290899][ T3381] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 412.362072][T15729] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.452304][T15729] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.591613][T15729] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.624035][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 413.641785][ T36] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 413.969786][ T1731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.075345][ T1731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.092706][ T1731] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.101278][ T1731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.175267][T15786] bridge0: entered promiscuous mode [ 414.185808][T15786] macsec1: entered promiscuous mode [ 414.192744][T15786] bridge0: port 1(macsec1) entered blocking state [ 414.199270][T15786] bridge0: port 1(macsec1) entered disabled state [ 414.209228][T15786] macsec1: entered allmulticast mode [ 414.214595][T15786] bridge0: entered allmulticast mode [ 414.222122][T15786] macsec1: left allmulticast mode [ 414.227265][T15786] bridge0: left allmulticast mode [ 414.244388][T15786] bridge0: left promiscuous mode [ 414.273309][T15795] loop1: detected capacity change from 0 to 1024 [ 414.293342][T15795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.328794][T15795] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4167: Allocating blocks 449-513 which overlap fs metadata [ 414.346059][T15793] EXT4-fs (loop1): pa ffff888106e4ac40: logic 48, phys. 177, len 21 [ 414.354206][T15793] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 414.404887][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.498739][T15816] bridge0: entered promiscuous mode [ 414.511278][T15816] macsec1: entered promiscuous mode [ 414.529542][T15816] bridge0: port 3(macsec1) entered blocking state [ 414.536180][T15816] bridge0: port 3(macsec1) entered disabled state [ 414.556445][T15816] macsec1: entered allmulticast mode [ 414.561871][T15816] bridge0: entered allmulticast mode [ 414.583468][T15816] macsec1: left allmulticast mode [ 414.588682][T15816] bridge0: left allmulticast mode [ 414.604911][T15816] bridge0: left promiscuous mode [ 414.680749][ T3381] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 414.694033][ T3381] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 414.700539][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 414.700582][ T29] audit: type=1326 audit(1759202593.907:39296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.2.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 414.745730][ T29] audit: type=1326 audit(1759202593.947:39297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.2.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 414.769486][ T29] audit: type=1326 audit(1759202593.957:39298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.2.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 414.794908][T15831] loop4: detected capacity change from 0 to 1024 [ 414.815907][T15831] EXT4-fs: Ignoring removed bh option [ 414.817807][ T29] audit: type=1326 audit(1759202594.007:39299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.2.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 414.845053][ T29] audit: type=1326 audit(1759202594.017:39300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.2.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 414.868780][ T29] audit: type=1326 audit(1759202594.027:39301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.2.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 414.892444][ T29] audit: type=1326 audit(1759202594.027:39302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15826 comm="syz.4.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6211eec9 code=0x7ffc0000 [ 414.916044][ T29] audit: type=1326 audit(1759202594.027:39303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15826 comm="syz.4.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6211eec9 code=0x7ffc0000 [ 414.942340][ T29] audit: type=1326 audit(1759202594.157:39304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.2.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 414.967342][ T29] audit: type=1326 audit(1759202594.177:39305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.2.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 414.970918][T15831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.079207][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.107864][T15841] netlink: 'syz.4.4183': attribute type 4 has an invalid length. [ 415.134948][T15841] netlink: 'syz.4.4183': attribute type 4 has an invalid length. [ 415.277861][T15857] loop4: detected capacity change from 0 to 128 [ 415.293970][T15857] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 415.395384][T15857] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 415.716342][T15872] loop1: detected capacity change from 0 to 1024 [ 415.768986][T15872] EXT4-fs: Ignoring removed bh option [ 415.813706][T15872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.892449][T15881] netlink: 'syz.4.4196': attribute type 4 has an invalid length. [ 415.912236][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.924033][T15881] netlink: 'syz.4.4196': attribute type 4 has an invalid length. [ 415.950186][ T23] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 415.963214][ T23] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 416.321712][T15921] netlink: 'syz.0.4210': attribute type 4 has an invalid length. [ 416.331764][T15921] netlink: 'syz.0.4210': attribute type 4 has an invalid length. [ 416.381101][T15925] netlink: 'syz.1.4212': attribute type 4 has an invalid length. [ 416.420985][T15927] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15927 comm=syz.1.4213 [ 416.433645][T15927] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15927 comm=syz.1.4213 [ 416.452046][T15927] loop1: detected capacity change from 0 to 1024 [ 416.497828][T15931] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.512314][T15927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.543242][T15927] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4213: Allocating blocks 449-513 which overlap fs metadata [ 416.568790][T15926] EXT4-fs (loop1): pa ffff888106e4aa80: logic 48, phys. 177, len 21 [ 416.577072][T15926] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 416.597446][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.632174][T15931] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.726564][T15941] loop1: detected capacity change from 0 to 512 [ 416.733778][T15941] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.760685][T15941] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 416.785042][T15931] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.821970][T15941] EXT4-fs (loop1): 1 truncate cleaned up [ 416.838718][T15941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.860679][T15931] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.952649][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 416.988066][ T36] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 417.335053][T15957] netlink: 'syz.4.4221': attribute type 4 has an invalid length. [ 417.345812][T15957] netlink: 'syz.4.4221': attribute type 4 has an invalid length. [ 417.461667][T15955] loop2: detected capacity change from 0 to 1024 [ 417.478311][T15955] EXT4-fs: Ignoring removed bh option [ 417.510170][T15955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.536302][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.574790][T15971] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.591973][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.621785][T15971] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.672012][T15971] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.727771][T15989] netlink: 'syz.2.4234': attribute type 4 has an invalid length. [ 417.742945][T15971] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.900975][ T1731] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.929241][ T1731] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.321490][ T1731] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.338484][ T1731] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.347325][ T1731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.355737][ T1731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.366005][ T1731] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.383504][ T1731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.491897][T16023] bridge0: entered promiscuous mode [ 418.504011][T16023] macsec1: entered promiscuous mode [ 418.517714][T16023] bridge0: port 3(macsec1) entered blocking state [ 418.524251][T16023] bridge0: port 3(macsec1) entered disabled state [ 418.547183][T16023] macsec1: entered allmulticast mode [ 418.552584][T16023] bridge0: entered allmulticast mode [ 418.572221][T16023] macsec1: left allmulticast mode [ 418.577327][T16023] bridge0: left allmulticast mode [ 418.597416][T16023] bridge0: left promiscuous mode [ 418.839769][T16037] loop4: detected capacity change from 0 to 128 [ 418.860271][T16037] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 418.893110][T16037] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 419.232473][T16047] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.281073][T16055] bridge0: entered promiscuous mode [ 419.286405][T16055] macsec1: entered promiscuous mode [ 419.295381][T16055] bridge0: port 3(macsec1) entered blocking state [ 419.301937][T16055] bridge0: port 3(macsec1) entered disabled state [ 419.308860][T16055] macsec1: entered allmulticast mode [ 419.314254][T16055] bridge0: entered allmulticast mode [ 419.321285][T16055] macsec1: left allmulticast mode [ 419.326350][T16055] bridge0: left allmulticast mode [ 419.332462][T16055] bridge0: left promiscuous mode [ 419.342047][T16047] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.431622][T16047] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.491772][T16047] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.550756][ T5554] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.559898][ T5554] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.574481][ T5554] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.587922][ T5554] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.706693][ T29] kauditd_printk_skb: 967 callbacks suppressed [ 419.706744][ T29] audit: type=1326 audit(1759202598.917:40273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 419.737938][ T29] audit: type=1326 audit(1759202598.947:40274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 419.762348][ T29] audit: type=1326 audit(1759202598.977:40275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 419.786239][ T29] audit: type=1326 audit(1759202598.997:40276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 419.810184][ T29] audit: type=1326 audit(1759202599.027:40277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 419.834127][ T29] audit: type=1326 audit(1759202599.047:40278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 419.858351][ T29] audit: type=1326 audit(1759202599.067:40279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 419.882418][ T29] audit: type=1326 audit(1759202599.097:40280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 419.906833][ T29] audit: type=1326 audit(1759202599.117:40281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 419.930748][ T29] audit: type=1326 audit(1759202599.147:40282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.3.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 420.165852][T16081] loop3: detected capacity change from 0 to 1024 [ 420.181573][T16081] EXT4-fs: Ignoring removed bh option [ 420.211073][T16081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.247992][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.384179][T16087] bridge0: entered promiscuous mode [ 420.395240][T16087] macsec1: entered promiscuous mode [ 420.408612][T16087] bridge0: port 3(macsec1) entered blocking state [ 420.415216][T16087] bridge0: port 3(macsec1) entered disabled state [ 420.435463][T16087] macsec1: entered allmulticast mode [ 420.440887][T16087] bridge0: entered allmulticast mode [ 420.461453][T16087] macsec1: left allmulticast mode [ 420.466670][T16087] bridge0: left allmulticast mode [ 420.577758][T16087] bridge0: left promiscuous mode [ 421.102546][T16096] bridge0: entered promiscuous mode [ 421.129154][T16102] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 421.135820][T16102] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 421.143379][T16102] vhci_hcd vhci_hcd.0: Device attached [ 421.149957][T16096] macsec1: entered promiscuous mode [ 421.170651][T16096] bridge0: port 3(macsec1) entered blocking state [ 421.177430][T16096] bridge0: port 3(macsec1) entered disabled state [ 421.198863][T16103] vhci_hcd: connection closed [ 421.199377][ T246] vhci_hcd: stop threads [ 421.208393][ T246] vhci_hcd: release socket [ 421.212833][ T246] vhci_hcd: disconnect device [ 421.219660][T16096] macsec1: entered allmulticast mode [ 421.225032][T16096] bridge0: entered allmulticast mode [ 421.243945][T16096] macsec1: left allmulticast mode [ 421.249031][T16096] bridge0: left allmulticast mode [ 421.267668][T16096] bridge0: left promiscuous mode [ 421.303679][T16105] bridge0: entered promiscuous mode [ 421.325418][T16105] macsec1: entered promiscuous mode [ 421.345479][T16105] bridge0: port 3(macsec1) entered blocking state [ 421.352081][T16105] bridge0: port 3(macsec1) entered disabled state [ 421.381363][T16105] macsec1: entered allmulticast mode [ 421.386730][T16105] bridge0: entered allmulticast mode [ 421.392755][T16105] macsec1: left allmulticast mode [ 421.397809][T16105] bridge0: left allmulticast mode [ 421.421988][T16105] bridge0: left promiscuous mode [ 421.802879][T16116] loop1: detected capacity change from 0 to 512 [ 421.833319][T16116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.859696][T16116] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.061966][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.100108][T16138] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 422.106729][T16138] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.114455][T16138] vhci_hcd vhci_hcd.0: Device attached [ 422.114749][T16140] loop1: detected capacity change from 0 to 1024 [ 422.133989][T16140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.154523][T16141] vhci_hcd: connection closed [ 422.154631][ T246] vhci_hcd: stop threads [ 422.163723][ T246] vhci_hcd: release socket [ 422.168155][ T246] vhci_hcd: disconnect device [ 422.185404][T16140] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4285: Allocating blocks 449-513 which overlap fs metadata [ 422.202865][T16139] EXT4-fs (loop1): pa ffff888106e0d8c0: logic 48, phys. 177, len 21 [ 422.210988][T16139] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 422.234952][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.309465][T16152] bridge0: entered promiscuous mode [ 422.322874][T16152] macsec1: entered promiscuous mode [ 422.333895][T16152] bridge0: port 3(macsec1) entered blocking state [ 422.340426][T16152] bridge0: port 3(macsec1) entered disabled state [ 422.357233][T16152] macsec1: entered allmulticast mode [ 422.362590][T16152] bridge0: entered allmulticast mode [ 422.380883][T16152] macsec1: left allmulticast mode [ 422.385984][T16152] bridge0: left allmulticast mode [ 422.404425][T16152] bridge0: left promiscuous mode [ 422.859077][T16166] loop3: detected capacity change from 0 to 512 [ 422.867286][T16166] EXT4-fs: Ignoring removed nobh option [ 422.888987][T16166] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4294'. [ 423.495513][T16176] validate_nla: 3 callbacks suppressed [ 423.495529][T16176] netlink: 'syz.0.4299': attribute type 4 has an invalid length. [ 423.526255][T16176] netlink: 'syz.0.4299': attribute type 4 has an invalid length. [ 423.659492][T16183] loop3: detected capacity change from 0 to 1024 [ 423.690048][T16183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.737605][T16183] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4302: Allocating blocks 449-513 which overlap fs metadata [ 423.764962][T16181] EXT4-fs (loop3): pa ffff888106e4ac40: logic 48, phys. 177, len 21 [ 423.773074][T16181] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 423.832296][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.023016][T16201] loop2: detected capacity change from 0 to 1024 [ 424.029888][T16201] EXT4-fs: Ignoring removed bh option [ 424.042089][T16201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.085539][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.105400][T16207] netlink: 'syz.2.4310': attribute type 4 has an invalid length. [ 424.115989][T16207] netlink: 'syz.2.4310': attribute type 4 has an invalid length. [ 424.124197][T16208] loop1: detected capacity change from 0 to 512 [ 424.132384][T16208] EXT4-fs: Ignoring removed nobh option [ 424.142021][T16208] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4309'. [ 424.240830][T16216] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4312'. [ 424.296510][T16217] bridge0: entered promiscuous mode [ 424.306589][T16217] macsec1: entered promiscuous mode [ 424.313403][T16217] bridge0: port 1(macsec1) entered blocking state [ 424.319919][T16217] bridge0: port 1(macsec1) entered disabled state [ 424.326791][T16217] macsec1: entered allmulticast mode [ 424.332153][T16217] bridge0: entered allmulticast mode [ 424.339406][T16217] macsec1: left allmulticast mode [ 424.344571][T16217] bridge0: left allmulticast mode [ 424.351852][T16217] bridge0: left promiscuous mode [ 424.733571][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 424.733592][ T29] audit: type=1326 audit(1759202603.947:40843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 424.763568][ T29] audit: type=1326 audit(1759202603.947:40844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 424.803106][ T29] audit: type=1326 audit(1759202603.997:40845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 424.826907][ T29] audit: type=1326 audit(1759202603.997:40846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 424.850576][ T29] audit: type=1326 audit(1759202603.997:40847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 424.874232][ T29] audit: type=1326 audit(1759202603.997:40848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 424.897845][ T29] audit: type=1326 audit(1759202603.997:40849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 424.921727][ T29] audit: type=1326 audit(1759202603.997:40850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 424.945418][ T29] audit: type=1326 audit(1759202603.997:40851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 424.969032][ T29] audit: type=1326 audit(1759202603.997:40852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.3.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a3eaeec9 code=0x7ffc0000 [ 425.141751][T16237] netlink: 'syz.0.4321': attribute type 4 has an invalid length. [ 425.172346][T16237] netlink: 'syz.0.4321': attribute type 4 has an invalid length. [ 426.571229][T16287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 426.577791][T16287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 426.585428][T16287] vhci_hcd vhci_hcd.0: Device attached [ 426.634241][T16288] vhci_hcd: connection closed [ 426.634636][ T2697] vhci_hcd: stop threads [ 426.643643][ T2697] vhci_hcd: release socket [ 426.648081][ T2697] vhci_hcd: disconnect device [ 427.211199][T16307] bridge0: entered promiscuous mode [ 427.223277][T16307] macsec1: entered promiscuous mode [ 427.235320][T16307] bridge0: port 3(macsec1) entered blocking state [ 427.241950][T16307] bridge0: port 3(macsec1) entered disabled state [ 427.255849][T16307] macsec1: entered allmulticast mode [ 427.261263][T16307] bridge0: entered allmulticast mode [ 427.267062][T16307] macsec1: left allmulticast mode [ 427.272147][T16307] bridge0: left allmulticast mode [ 427.278026][T16307] bridge0: left promiscuous mode [ 427.424854][T16315] loop2: detected capacity change from 0 to 512 [ 427.452350][T16315] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.469005][T16315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 427.500174][T16315] EXT4-fs (loop2): 1 truncate cleaned up [ 427.507731][T16315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.934927][T16339] netlink: 'syz.1.4352': attribute type 4 has an invalid length. [ 427.944515][T16339] netlink: 'syz.1.4352': attribute type 4 has an invalid length. [ 428.287645][T16346] loop1: detected capacity change from 0 to 1024 [ 428.307939][T16346] EXT4-fs: Ignoring removed bh option [ 428.434489][T16346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.949673][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.975953][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.985284][T16364] loop3: detected capacity change from 0 to 1024 [ 428.993828][T16364] EXT4-fs: Ignoring removed bh option [ 429.013917][T16364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.050896][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.206848][T16388] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.249524][T16389] bridge0: entered promiscuous mode [ 429.263343][T16389] macsec1: entered promiscuous mode [ 429.276973][T16389] bridge0: port 1(macsec1) entered blocking state [ 429.283628][T16389] bridge0: port 1(macsec1) entered disabled state [ 429.305821][T16389] macsec1: entered allmulticast mode [ 429.311223][T16389] bridge0: entered allmulticast mode [ 429.325777][T16389] macsec1: left allmulticast mode [ 429.330891][T16389] bridge0: left allmulticast mode [ 429.337700][T16389] bridge0: left promiscuous mode [ 429.359317][T16388] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.383001][T16398] loop4: detected capacity change from 0 to 512 [ 429.412425][T16398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.425951][T16398] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.473258][T16388] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.553414][T16388] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.616958][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.665136][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.686900][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.696231][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.717299][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.744027][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 429.744090][ T29] audit: type=1326 audit(1759202608.957:41426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16411 comm="syz.2.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 429.798924][ T29] audit: type=1326 audit(1759202608.967:41427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16411 comm="syz.2.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 429.822656][ T29] audit: type=1326 audit(1759202608.967:41428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16411 comm="syz.2.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 429.846453][ T29] audit: type=1326 audit(1759202608.987:41429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16411 comm="syz.2.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 429.870015][ T29] audit: type=1326 audit(1759202608.987:41430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16411 comm="syz.2.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 429.893722][ T29] audit: type=1326 audit(1759202608.987:41431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16411 comm="syz.2.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 429.917533][ T29] audit: type=1326 audit(1759202608.987:41432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.4.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6211eec9 code=0x7ffc0000 [ 429.941119][ T29] audit: type=1326 audit(1759202608.987:41433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.4.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6211eec9 code=0x7ffc0000 [ 429.964872][ T29] audit: type=1326 audit(1759202608.987:41434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16411 comm="syz.2.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 429.988366][ T29] audit: type=1326 audit(1759202608.997:41435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.4.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e6211d710 code=0x7ffc0000 [ 430.186485][T16433] loop3: detected capacity change from 0 to 512 [ 430.204419][T16433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.225297][T16433] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.646447][T16449] loop4: detected capacity change from 0 to 1024 [ 430.673880][T16449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.703243][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.717023][T16449] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.4390: Allocating blocks 449-513 which overlap fs metadata [ 430.739284][T16448] EXT4-fs (loop4): pa ffff888106e0d690: logic 48, phys. 177, len 21 [ 430.747560][T16448] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 430.805910][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.946802][T16471] 9pnet_fd: Insufficient options for proto=fd [ 431.051935][T16483] loop2: detected capacity change from 0 to 512 [ 431.065892][T16483] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.084487][T16483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 431.104809][T16483] EXT4-fs (loop2): 1 truncate cleaned up [ 431.121434][T16483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.183943][T16494] loop4: detected capacity change from 0 to 1024 [ 431.222797][T16494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.314517][T16494] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.4407: Allocating blocks 449-513 which overlap fs metadata [ 431.384240][T16493] EXT4-fs (loop4): pa ffff888106e0d690: logic 48, phys. 177, len 21 [ 431.392421][T16493] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 431.508816][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.829449][T16533] netlink: 'syz.3.4419': attribute type 4 has an invalid length. [ 431.843112][T16533] netlink: 'syz.3.4419': attribute type 4 has an invalid length. [ 432.033016][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.123014][T16518] 9pnet_fd: Insufficient options for proto=fd [ 432.540673][T16584] loop2: detected capacity change from 0 to 512 [ 432.578689][T16584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.600124][T16584] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.893384][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.308845][T16659] bridge0: entered promiscuous mode [ 433.315364][T16659] macsec1: entered promiscuous mode [ 433.323414][T16659] bridge0: port 3(macsec1) entered blocking state [ 433.330032][T16659] bridge0: port 3(macsec1) entered disabled state [ 433.336728][T16659] macsec1: entered allmulticast mode [ 433.342175][T16659] bridge0: entered allmulticast mode [ 433.350451][T16659] macsec1: left allmulticast mode [ 433.355578][T16659] bridge0: left allmulticast mode [ 433.361483][T16659] bridge0: left promiscuous mode [ 433.443641][T16669] loop4: detected capacity change from 0 to 512 [ 433.476100][T16669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.492045][T16669] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.699526][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.172822][T16693] loop2: detected capacity change from 0 to 1024 [ 434.201725][T16693] EXT4-fs: Ignoring removed bh option [ 434.203268][T16703] loop3: detected capacity change from 0 to 512 [ 434.213989][T16703] EXT4-fs: Ignoring removed mblk_io_submit option [ 434.220926][T16703] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 434.236562][T16693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.236973][T16703] EXT4-fs (loop3): 1 truncate cleaned up [ 434.260903][T16703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.262027][T16705] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.301106][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.343740][T16705] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.482571][T16705] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.562027][T16705] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.648524][ T5554] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.683752][ T5554] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.692492][ T5554] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.701541][ T246] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.733874][T16724] loop2: detected capacity change from 0 to 512 [ 434.751155][T16724] EXT4-fs: Ignoring removed mblk_io_submit option [ 434.768369][T16724] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 434.879114][T16724] EXT4-fs (loop2): 1 truncate cleaned up [ 434.891531][T16724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.421823][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.439849][ T29] kauditd_printk_skb: 1303 callbacks suppressed [ 435.439864][ T29] audit: type=1326 audit(1759202614.647:42739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.469739][ T29] audit: type=1326 audit(1759202614.647:42740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.493497][ T29] audit: type=1326 audit(1759202614.647:42741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.516976][ T29] audit: type=1326 audit(1759202614.647:42742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.540609][ T29] audit: type=1326 audit(1759202614.647:42743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.564305][ T29] audit: type=1326 audit(1759202614.647:42744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.587950][ T29] audit: type=1326 audit(1759202614.647:42745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.611643][ T29] audit: type=1326 audit(1759202614.647:42746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.635232][ T29] audit: type=1326 audit(1759202614.647:42747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.658801][ T29] audit: type=1326 audit(1759202614.647:42748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16737 comm="syz.1.4495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1291eec9 code=0x7ffc0000 [ 435.818904][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.874650][T16756] loop4: detected capacity change from 0 to 512 [ 435.904645][T16757] bridge0: entered promiscuous mode [ 435.924382][T16757] macsec1: entered promiscuous mode [ 435.935204][T16756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.943648][T16757] bridge0: port 3(macsec1) entered blocking state [ 435.954188][T16757] bridge0: port 3(macsec1) entered disabled state [ 435.955033][T16756] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.006001][T16757] macsec1: entered allmulticast mode [ 436.011415][T16757] bridge0: entered allmulticast mode [ 436.043140][T16757] macsec1: left allmulticast mode [ 436.048331][T16757] bridge0: left allmulticast mode [ 436.067896][T16757] bridge0: left promiscuous mode [ 436.498508][T16791] loop2: detected capacity change from 0 to 1024 [ 436.512457][T16791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.577660][T16791] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4516: Allocating blocks 449-513 which overlap fs metadata [ 436.618126][T16790] EXT4-fs (loop2): pa ffff888106e0d620: logic 48, phys. 177, len 21 [ 436.626206][T16790] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 436.686408][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.736433][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.859463][T16806] bridge0: entered promiscuous mode [ 436.873499][T16806] macsec1: entered promiscuous mode [ 436.895882][T16811] loop2: detected capacity change from 0 to 1024 [ 436.908844][T16806] bridge0: port 3(macsec1) entered blocking state [ 436.915392][T16806] bridge0: port 3(macsec1) entered disabled state [ 436.924504][T16811] EXT4-fs: Ignoring removed bh option [ 436.940598][T16806] macsec1: entered allmulticast mode [ 436.946344][T16806] bridge0: entered allmulticast mode [ 436.961632][T16811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.977010][T16806] macsec1: left allmulticast mode [ 436.982104][T16806] bridge0: left allmulticast mode [ 436.990426][T16806] bridge0: left promiscuous mode [ 437.017385][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.070811][T16819] loop1: detected capacity change from 0 to 1024 [ 437.133770][T16819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.183521][T16819] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4527: Allocating blocks 449-513 which overlap fs metadata [ 437.215017][T16818] EXT4-fs (loop1): pa ffff888106e4af50: logic 48, phys. 177, len 21 [ 437.223188][T16818] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 437.260946][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.760142][T16847] bridge0: entered promiscuous mode [ 437.771466][T16847] macsec1: entered promiscuous mode [ 437.783674][T16847] bridge0: port 1(macsec1) entered blocking state [ 437.790270][T16847] bridge0: port 1(macsec1) entered disabled state [ 437.798049][T16848] loop3: detected capacity change from 0 to 1024 [ 437.804702][T16847] macsec1: entered allmulticast mode [ 437.810049][T16847] bridge0: entered allmulticast mode [ 437.813791][T16848] EXT4-fs: Ignoring removed bh option [ 437.827680][T16847] macsec1: left allmulticast mode [ 437.832871][T16847] bridge0: left allmulticast mode [ 437.838742][T16847] bridge0: left promiscuous mode [ 437.845288][T16848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.897833][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.027954][T16856] bridge0: entered promiscuous mode [ 438.034932][T16856] macsec1: entered promiscuous mode [ 438.054508][T16856] bridge0: port 3(macsec1) entered blocking state [ 438.061056][T16856] bridge0: port 3(macsec1) entered disabled state [ 438.062804][T16856] macsec1: entered allmulticast mode [ 438.072939][T16856] bridge0: entered allmulticast mode [ 438.086455][T16856] macsec1: left allmulticast mode [ 438.091757][T16856] bridge0: left allmulticast mode [ 438.105982][T16856] bridge0: left promiscuous mode [ 439.111995][T16896] bridge0: entered promiscuous mode [ 439.117372][T16896] macsec1: entered promiscuous mode [ 439.141848][T16896] bridge0: port 3(macsec1) entered blocking state [ 439.148355][T16896] bridge0: port 3(macsec1) entered disabled state [ 439.172459][T16896] macsec1: entered allmulticast mode [ 439.177809][T16896] bridge0: entered allmulticast mode [ 439.202122][T16896] macsec1: left allmulticast mode [ 439.207274][T16896] bridge0: left allmulticast mode [ 439.277869][T16896] bridge0: left promiscuous mode [ 440.073452][T16936] loop1: detected capacity change from 0 to 512 [ 440.092591][T16936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.105315][T16936] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.347201][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.389891][T16964] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.467553][T16977] bridge0: entered promiscuous mode [ 440.474755][T16977] macsec1: entered promiscuous mode [ 440.481112][T16977] bridge0: port 3(macsec1) entered blocking state [ 440.482885][ T29] kauditd_printk_skb: 964 callbacks suppressed [ 440.482903][ T29] audit: type=1326 audit(1759202619.697:43713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.487666][T16977] bridge0: port 3(macsec1) entered disabled state [ 440.506448][ T29] audit: type=1326 audit(1759202619.707:43714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.533649][T16977] macsec1: entered allmulticast mode [ 440.547735][ T29] audit: type=1326 audit(1759202619.707:43715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.553154][T16977] bridge0: entered allmulticast mode [ 440.576648][ T29] audit: type=1326 audit(1759202619.707:43716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.605514][ T29] audit: type=1326 audit(1759202619.707:43717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.629163][ T29] audit: type=1326 audit(1759202619.707:43718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.652991][ T29] audit: type=1326 audit(1759202619.707:43719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.676689][ T29] audit: type=1326 audit(1759202619.707:43720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.700297][ T29] audit: type=1326 audit(1759202619.707:43721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.723988][ T29] audit: type=1326 audit(1759202619.707:43722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16980 comm="syz.2.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 440.749503][T16977] macsec1: left allmulticast mode [ 440.754803][T16977] bridge0: left allmulticast mode [ 440.760523][T16977] bridge0: left promiscuous mode [ 440.772237][T16964] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.881448][T16964] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.924050][T16964] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.952441][T16989] 9pnet_fd: Insufficient options for proto=fd [ 440.988205][ T1731] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.999031][ T1731] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.011476][ T383] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.029047][ T383] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.352143][T17020] loop4: detected capacity change from 0 to 1024 [ 441.367680][T17020] EXT4-fs: Ignoring removed bh option [ 441.378662][T17021] loop1: detected capacity change from 0 to 1024 [ 441.396782][T17021] EXT4-fs: Ignoring removed bh option [ 441.403738][T17020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.451718][T17021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.477798][T12506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.503586][T17016] 9pnet_fd: Insufficient options for proto=fd [ 441.552910][T17030] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.622713][T17030] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.671769][T17030] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.721406][T17030] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.793786][ T383] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.814051][ T383] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.834560][ T383] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.870081][ T383] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.906650][T17062] 9pnet_fd: Insufficient options for proto=fd [ 442.044628][T17057] 9pnet_fd: Insufficient options for proto=fd [ 442.128275][T17077] netlink: 'syz.3.4620': attribute type 4 has an invalid length. [ 442.139630][T17077] netlink: 'syz.3.4620': attribute type 4 has an invalid length. [ 442.154581][T17079] bridge0: entered promiscuous mode [ 442.161255][T17079] macsec1: entered promiscuous mode [ 442.166893][T17079] bridge0: port 1(macsec1) entered blocking state [ 442.173552][T17079] bridge0: port 1(macsec1) entered disabled state [ 442.181561][T17079] macsec1: entered allmulticast mode [ 442.186907][T17079] bridge0: entered allmulticast mode [ 442.192794][T17079] macsec1: left allmulticast mode [ 442.197856][T17079] bridge0: left allmulticast mode [ 442.205301][T17079] bridge0: left promiscuous mode [ 442.456176][T17094] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 442.462749][T17094] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.470419][T17094] vhci_hcd vhci_hcd.0: Device attached [ 442.487005][T17095] vhci_hcd: connection closed [ 442.487159][ T5554] vhci_hcd: stop threads [ 442.496179][ T5554] vhci_hcd: release socket [ 442.500659][ T5554] vhci_hcd: disconnect device [ 442.802592][T17099] 9pnet_fd: Insufficient options for proto=fd [ 442.927131][T17106] bridge0: entered promiscuous mode [ 442.937696][T17106] macsec1: entered promiscuous mode [ 442.951386][T17106] bridge0: port 1(macsec1) entered blocking state [ 442.957858][T17106] bridge0: port 1(macsec1) entered disabled state [ 442.973780][T17106] macsec1: entered allmulticast mode [ 442.979122][T17106] bridge0: entered allmulticast mode [ 442.985229][T17106] macsec1: left allmulticast mode [ 442.990359][T17106] bridge0: left allmulticast mode [ 443.000255][T17106] bridge0: left promiscuous mode [ 443.015947][T17110] netlink: 'syz.0.4631': attribute type 4 has an invalid length. [ 443.052989][T17110] netlink: 'syz.0.4631': attribute type 4 has an invalid length. [ 444.141992][T17139] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 444.148628][T17139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 444.156204][T17139] vhci_hcd vhci_hcd.0: Device attached [ 444.177911][T17140] vhci_hcd: connection closed [ 444.178154][ T5554] vhci_hcd: stop threads [ 444.187256][ T5554] vhci_hcd: release socket [ 444.191712][ T5554] vhci_hcd: disconnect device [ 444.258219][T17146] loop4: detected capacity change from 0 to 512 [ 444.264863][T17146] EXT4-fs: Ignoring removed nobh option [ 444.274286][T17146] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4643'. [ 444.376505][T17157] bridge0: entered promiscuous mode [ 444.382020][T17157] macsec1: entered promiscuous mode [ 444.388608][T17157] bridge0: port 3(macsec1) entered blocking state [ 444.395210][T17157] bridge0: port 3(macsec1) entered disabled state [ 444.412753][T17157] macsec1: entered allmulticast mode [ 444.418096][T17157] bridge0: entered allmulticast mode [ 444.425168][T17157] macsec1: left allmulticast mode [ 444.430343][T17157] bridge0: left allmulticast mode [ 444.441503][T17157] bridge0: left promiscuous mode [ 444.596076][T17171] loop3: detected capacity change from 0 to 1024 [ 444.610472][T17171] EXT4-fs: Ignoring removed bh option [ 444.632623][T17171] EXT4-fs mount: 1 callbacks suppressed [ 444.632641][T17171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.673562][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.753856][T17183] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.791595][T17183] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.815367][T17196] loop1: detected capacity change from 0 to 512 [ 444.822926][T17183] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.842345][T17196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.855036][T17196] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.871764][T17183] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.925846][T17208] loop3: detected capacity change from 0 to 512 [ 444.933063][T17208] EXT4-fs: Ignoring removed mblk_io_submit option [ 444.940809][T17208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 444.956975][ T2697] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.972596][T17208] EXT4-fs (loop3): 1 truncate cleaned up [ 444.972923][ T2697] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.987845][T17208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.990776][ T2697] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.008297][ T2697] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.054400][T17211] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 445.060973][T17211] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.068623][T17211] vhci_hcd vhci_hcd.0: Device attached [ 445.091601][T17212] vhci_hcd: connection closed [ 445.091921][ T2697] vhci_hcd: stop threads [ 445.100958][ T2697] vhci_hcd: release socket [ 445.105399][ T2697] vhci_hcd: disconnect device [ 445.378839][T17216] ================================================================== [ 445.387002][T17216] BUG: KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra [ 445.394959][T17216] [ 445.397295][T17216] write to 0xffff8881014ea450 of 8 bytes by task 17208 on cpu 0: [ 445.405021][T17216] page_cache_sync_ra+0x434/0x6c0 [ 445.410078][T17216] filemap_get_pages+0x2d0/0x1150 [ 445.415146][T17216] filemap_splice_read+0x3a9/0x740 [ 445.420262][T17216] ext4_file_splice_read+0x8f/0xb0 [ 445.425399][T17216] splice_direct_to_actor+0x26f/0x680 [ 445.430780][T17216] do_splice_direct+0xda/0x150 [ 445.435564][T17216] do_sendfile+0x380/0x650 [ 445.439993][T17216] __x64_sys_sendfile64+0x105/0x150 [ 445.445208][T17216] x64_sys_call+0x2bb0/0x2ff0 [ 445.449894][T17216] do_syscall_64+0xd2/0x200 [ 445.454405][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.460311][T17216] [ 445.462647][T17216] write to 0xffff8881014ea450 of 8 bytes by task 17216 on cpu 1: [ 445.470455][T17216] page_cache_sync_ra+0x434/0x6c0 [ 445.475500][T17216] filemap_get_pages+0x2d0/0x1150 [ 445.480531][T17216] filemap_splice_read+0x3a9/0x740 [ 445.485652][T17216] ext4_file_splice_read+0x8f/0xb0 [ 445.490801][T17216] splice_direct_to_actor+0x26f/0x680 [ 445.496180][T17216] do_splice_direct+0xda/0x150 [ 445.501042][T17216] do_sendfile+0x380/0x650 [ 445.505490][T17216] __x64_sys_sendfile64+0x105/0x150 [ 445.510722][T17216] x64_sys_call+0x2bb0/0x2ff0 [ 445.515426][T17216] do_syscall_64+0xd2/0x200 [ 445.519933][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.525832][T17216] [ 445.528151][T17216] value changed: 0x000000000000000f -> 0x0000000000000010 [ 445.535257][T17216] [ 445.537578][T17216] Reported by Kernel Concurrency Sanitizer on: [ 445.543726][T17216] CPU: 1 UID: 0 PID: 17216 Comm: syz.3.4666 Not tainted syzkaller #0 PREEMPT(voluntary) [ 445.553535][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.563598][T17216] ================================================================== [ 445.572411][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 445.572427][ T29] audit: type=1326 audit(1759202624.787:44407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.629916][ T29] audit: type=1326 audit(1759202624.817:44408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.653754][ T29] audit: type=1326 audit(1759202624.817:44409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.677403][ T29] audit: type=1326 audit(1759202624.817:44410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.701091][ T29] audit: type=1326 audit(1759202624.817:44411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.724829][ T29] audit: type=1326 audit(1759202624.817:44412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.748468][ T29] audit: type=1326 audit(1759202624.817:44413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.772070][ T29] audit: type=1326 audit(1759202624.817:44414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.888470][T17219] loop2: detected capacity change from 0 to 1024 [ 445.895582][T17219] EXT4-fs: Ignoring removed bh option [ 445.902710][ T29] audit: type=1326 audit(1759202625.027:44415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.902742][T11954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.926439][ T29] audit: type=1326 audit(1759202625.027:44416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17218 comm="syz.2.4669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8107e2eec9 code=0x7ffc0000 [ 445.929924][T17219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.937184][T12284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.991319][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.