last executing test programs: 2m27.038874375s ago: executing program 32 (id=461): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1m53.579646428s ago: executing program 33 (id=1536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m51.735241545s ago: executing program 6 (id=1593): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x6c, 0x3}) 1m50.886518598s ago: executing program 6 (id=1597): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40400) read(r1, &(0x7f0000000240)=""/195, 0xc3) 1m50.004608302s ago: executing program 6 (id=1633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m49.404561975s ago: executing program 6 (id=1658): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) 1m49.321859345s ago: executing program 6 (id=1660): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[], 0x1, 0x2a1, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m48.297949109s ago: executing program 6 (id=1682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) syz_read_part_table(0x5e2, &(0x7f0000000b00)="$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") io_setup(0x1, &(0x7f00000004c0)=0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1}]) 1m48.253580109s ago: executing program 34 (id=1682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) syz_read_part_table(0x5e2, &(0x7f0000000b00)="$eJzs3L+rHFUUB/DvndlfD6LPP8DiQRpR8Al24sNY6DNdEO0EbS2eSCzEQnYXFcEff0Ba0cIohFhbKEgQ01mJ8NBCxN7CFIYrOzuzG1CrfSiBz6fYe+6de86Z4U47G+5udT+pJbnZzT5qu2HUJNNV8GvyzjhZvvhkv5CM+8SS5PmrTz198eBSmW7WVquL/up022XSj6Mc9NGXo3x49fjdLl6kZJ4+zPjzSUarvXWdd+XvN32rpO328D8bfVXXBzHJ9/kiyUlpV4c/TZb5JLkvs27fYZK21tod8yLZS9rNW7GDa0c3lk/08V76N228ns3fK/WR/to4tdbaZH5+yGyT+x8/vPxPRbv8Zfd4w1KtdXxuyG22F05uT4bw0W9/nmc521RPbbYlT/eSV0+ffbi7k7KuMd798QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGMPvPbg180wudD9lk38zKdptlsXyZ9DfDA7o/7Xjm7sv/X25SZvHL38wytv/nL8W35P0ubw+Fwy3ex7aT1cf78bRv1qu3P/k9vN5LOPv9nbLPSlS/Ld+R9v1aHDaT++/tgdyUfNzv0BAAAAAAAAAAAAAAAAAABg5XouHlxq8lxS8kK2n/vXzJJShuksqbXWP2pn+Ph/cuXePrr5U8oqKbXcWf1Csn9PUqcfPNT9rcA6sdY66lqU/+YZ+Xd/BQAA//8EFGMK") io_setup(0x1, &(0x7f00000004c0)=0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r1, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1}]) 1m40.014174701s ago: executing program 1 (id=1922): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c327313, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3, 0x0, 0x2, 0x2}}, 0x20) 1m40.013757692s ago: executing program 1 (id=1924): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280", @ANYRES32, @ANYBLOB="14000600"], 0x68}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000007000046009d40edce", @ANYBLOB="c770ee18914110e7c19b01ac"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m39.866256502s ago: executing program 1 (id=1930): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 1m36.028429448s ago: executing program 1 (id=2005): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 1m35.892017778s ago: executing program 1 (id=2008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) dup2(r2, r3) 1m35.637041169s ago: executing program 1 (id=2016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x758a, &(0x7f0000000140)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00', 0x100}) close_range(r2, 0xffffffffffffffff, 0x0) 1m35.636919979s ago: executing program 35 (id=2016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x758a, &(0x7f0000000140)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00', 0x100}) close_range(r2, 0xffffffffffffffff, 0x0) 33.291894238s ago: executing program 8 (id=3922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$cgroup_type(r1, &(0x7f0000000180), 0xfffffe51) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061110c007c00c8488f2f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) 32.7158799s ago: executing program 8 (id=3933): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) 32.520116011s ago: executing program 8 (id=3937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 32.470742971s ago: executing program 8 (id=3940): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0xe77, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 32.015485113s ago: executing program 8 (id=3949): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000a0000000000000000000000030006000000000002004e20e0000009000000000000000002000100000000000005050700000040030005000000000002"], 0x50}}, 0x0) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 31.721187144s ago: executing program 8 (id=3956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 31.700070234s ago: executing program 36 (id=3956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 27.294103842s ago: executing program 7 (id=4065): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0xf18b79d756a9186e) sendmmsg(r2, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000800)="ced1416974595245fdc33577828797958ffd97fd0770516e9dd1ff1c300a893010d901b3617899ed40a6eb7d828ef7ac68929489b24487a0620f89539fd0c91a", 0x40}], 0x2}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001040)="2003d8d1", 0x4}, {&(0x7f0000003840)="e1b25d3c24f84047926f05499342ecc8027a306ddbb8ec14e9c0ba1b00321eccbc6a2d324b99a946dda35040b39544d75eee0519f12ce46eca19cfd4a49694dada98106e407b5aa3022020b5ba92e95112e86fc8b59445d0ecc21cb291cf5d6ef74f70b8b7544fd7520e6990c792ccc29888867e8e2f0bbf4ec714b352a406659036cda374c047825a445d79fbc29332e5fe6ce92ba5aee5c883f835a7a8429853dcbc33b39440f4c1b0d256aa89ead79decdc235627701c8cc581634a6a1e155b573050248baafa639da59a6bb85a39bbe94df1594431b0dc4133a82892d4c77339b43ba0b7b48881e6d434a4d0b2abc0bc4135f7ffb04b0592efc27479ff6ea0fc3d3769ab9d5e0c9823d3cdebbb7a3ba0b8ba87e54e4ccac67ae8cf8419bbc7e0b93f8c90ca89523c6145e13e61800b63249404a108dec62c60478276885850384ba9a8cd60ee2b4191088eeeb9138a1112004a7aa0ef69333c7234620141840890f99574f685e2435a3fbe4063348925aa8cb35dbede0982c551b2bee213837356c42b697fb45fdc59b851e1362f01b844b3d1583a0e636e31896d9089c420d000eb9064136e2d7b0c8d82f7f59bc8109a41382d027b9004ac593207b4c59aed990949ee3f0fffe9e95d736c19cc0b83e7a027b091907e72e9d3c5d69847e5e0fcc3b1d27d4fef1f86e97d7d9ff489b05ca9815e7df639a0ca6a4169a3b5b77fb4a776a61fd989c552eb5b7b8d149742587795c306f32a31a7b2816150bf71f16a24083fa9f193d56f61f40649b9c811d1588c69319727eb3cc1a0f028608df9a1919264192c6b4eae30d9cd864e3684602ef781e7650f2f19634719d59bc5e74e36f88bc1335e6e7ccfb4202b03bcb5756cb18289df469c5e5a71dc0c209eb658f5265da39c8159c278e6f6954001888c47f110d84ace2fb0fe4ee6bb11c81227842e2bfb3c2f8323ec1c57e19cac9098b67fd634ff304a2d9d5de066eceb38c951958705548af99574ebffca4c4e206c273854ae8dd7139c3c0179d1aa02d8275b616e32ecd5dbebe49658097d4651ca286860b845d2e8552d91c015f3d145e30f3ec2523fa70cf774f42c4040a194a30acfe6c3ac9e0b289c567991e86bc8927c0240be6a90d0cc126bdb9a0ba8bfe3c4693aef8633c77e98f4c9cdbcf37d4c721040f2b27efc1fe192539ce91cce2e989042b01fbf5a1023aad93b274b74bbc9da94e0f3fe3303e74e0393103c7ea1d61b46d78cf9d9574c54cddcf3e475f402fd7c0bdc1ca7e23f99d35d1883c34b5c972e3b6ac8e1a144ee6f4ee6794d32341552ff048c5f373fec08f94522da1272ffcf1b646f6bf6584e1d9966a43d892e2a765b16428b89ebdec114ef1295c57cae53650fd64f4b4832ce124dbfa4e59791b8090d6a30ccee1d38a9d262478bf9b49b7d965a076459751f1c294e473c5b8c7ccee5c1df75d825875bdd036b861b3d403de2445366297ca8f2da2e3b9decf90ef5c39588689b096f469c6c5369b92d93d03cdc79a391e903237feca5829597e78adfa5b9b1fb1593be566c4f27ced18e362c524867614a36085468d076a43faf1c39e411466c9e38eed269a4eb518de0870b25a5e684489ec20402a6a3aa15c5386b61693b4c529d87a504b6ce816c2e1433c758698330c133ea112454ddc0b05ba7b877127b1275bd856ad97b29b6fcb80e33a6c27f58c2a4bf2d71100afdc00379d3ec3aaa797a21551b1aaa3bb0b456a1b3a1e5fbc7ebe1b3a66a8bebda52efe66999c7313fc70e14d64cecd6a76a02d73c1b2e1bd4d94971e58accba24afd8ac197ef381b056bcc9b9e6fdbc32c07bff30ef7dd3b98b744616ccbd1ca34394c8dcdac7512947f541fb9a63d541a79ccdd732c56a14da19497494afca285f80a617c75e39eaf28169d1b6ceebf54f2c5dc7fbe643bb2a868f9c505e659023cdde3849bd5b8e8a76aae80bdb468b025cba450cae9ce63021599bfc21ee914b4a18dbf1b8515fe3aa6bc4e56b0ce5054b6b32e0022f1520597a225129dec15fe09230e73afbd6cdaa4fb940bde52071cf1a01c99bbc544d9c08fa26a256bd96f0b642368d1183ecd3e03dcf472c51d54dfc53", 0x5d9}], 0x2, &(0x7f0000001200)}}], 0x7, 0x200040d1) 27.233953632s ago: executing program 7 (id=4066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) 27.193778872s ago: executing program 7 (id=4067): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x104c58, 0x5, 0x80, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYBLOB="fe4cecb210bc091b104f801f21ddeb"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 27.050543433s ago: executing program 7 (id=4068): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0xe77, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 26.616568695s ago: executing program 7 (id=4076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x25dfdbff, {0x0, 0x0, 0x74, r3, {0xd, 0x4}, {}, {0x5, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 25.751050498s ago: executing program 9 (id=4091): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x1000001}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0xd105) 25.722637328s ago: executing program 7 (id=4093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r2, 0x3) 25.680673108s ago: executing program 37 (id=4093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r2, 0x3) 25.630273249s ago: executing program 9 (id=4100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 25.551812769s ago: executing program 9 (id=4103): mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0xf, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_tid_address(0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) 25.502943799s ago: executing program 9 (id=4104): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 25.438305859s ago: executing program 9 (id=4106): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0xfffd, 0x0, {0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 25.22618154s ago: executing program 9 (id=4110): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x10000002}], 0x10, 0x4, @void, @value}, 0xfffffffffffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 25.20320623s ago: executing program 38 (id=4110): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x10000002}], 0x10, 0x4, @void, @value}, 0xfffffffffffffecc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 1.912807453s ago: executing program 2 (id=4737): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x80000001}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x10, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 1.816243183s ago: executing program 3 (id=4742): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.758124304s ago: executing program 3 (id=4747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1.691397284s ago: executing program 3 (id=4748): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d2", 0xc6}, {&(0x7f0000000e80)="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", 0x1d8}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.330591015s ago: executing program 4 (id=4756): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x17) 1.307091705s ago: executing program 4 (id=4757): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x9, 0x1, 0xa, 0x10}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1.226183075s ago: executing program 4 (id=4758): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x0) fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) 1.055522166s ago: executing program 2 (id=4762): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc68625e18b952490, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) keyctl$update(0x2, 0x0, &(0x7f0000000280), 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 962.046757ms ago: executing program 5 (id=4763): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x600, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 934.011757ms ago: executing program 2 (id=4764): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) 881.937067ms ago: executing program 5 (id=4765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fcffffff180100000020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 854.166447ms ago: executing program 3 (id=4766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) close_range(r2, 0xffffffffffffffff, 0x0) 853.679167ms ago: executing program 3 (id=4767): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) syz_io_uring_setup(0xe45, &(0x7f00000002c0)={0x0, 0x5f39, 0x400, 0x0, 0xab4}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) 770.017218ms ago: executing program 5 (id=4768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) 769.729247ms ago: executing program 5 (id=4769): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000500), 0x66) 769.464987ms ago: executing program 2 (id=4770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x3d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 763.565818ms ago: executing program 5 (id=4771): wait4(0x0, 0x0, 0x80000008, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) rt_sigtimedwait(0x0, 0x0, 0x0, 0x8) 759.507548ms ago: executing program 2 (id=4772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000020183e7de22cd4285ba1741da9a0e0404000280"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 718.284107ms ago: executing program 5 (id=4773): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 592.154668ms ago: executing program 2 (id=4777): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) open(0x0, 0x40542, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 580.229008ms ago: executing program 0 (id=4778): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 462.165599ms ago: executing program 0 (id=4779): quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000340), &(0x7f00000004c0)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}, {@access_client}, {@nodevmap}]}}) 416.262079ms ago: executing program 0 (id=4780): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3, 0x42}, &(0x7f00000002c0)=0x8) 404.252529ms ago: executing program 4 (id=4781): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 338.170709ms ago: executing program 0 (id=4782): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0), 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x73, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 337.532989ms ago: executing program 0 (id=4792): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r0, r4, 0x80000) 336.793479ms ago: executing program 4 (id=4793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 917.191µs ago: executing program 3 (id=4783): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r3, 0x0, 0x0, 0x24000080, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 198.14µs ago: executing program 0 (id=4795): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=4784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) mlockall(0x1) kernel console output (not intermixed with test programs): speed: UNKNOWN [ 131.722637][T10880] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 131.729178][T10880] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 131.736694][T10880] vhci_hcd vhci_hcd.0: Device attached [ 131.743846][T10880] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(11) [ 131.750536][T10880] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 131.758232][T10880] vhci_hcd vhci_hcd.0: Device attached [ 131.775369][T10880] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(13) [ 131.782095][T10880] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 131.789740][T10880] vhci_hcd vhci_hcd.0: Device attached [ 131.796848][T10880] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 131.812086][T10880] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(17) [ 131.818724][T10880] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 131.826899][T10880] vhci_hcd vhci_hcd.0: Device attached [ 131.837251][T10899] vhci_hcd: connection closed [ 131.837337][T10893] vhci_hcd: connection closed [ 131.837473][T10887] vhci_hcd: connection closed [ 131.842184][T10889] vhci_hcd: connection closed [ 131.847230][T10883] vhci_hcd: connection closed [ 131.852779][ T3566] vhci_hcd: stop threads [ 131.865541][ T3566] vhci_hcd: release socket [ 131.869968][ T3566] vhci_hcd: disconnect device [ 131.874243][ T2970] vhci_hcd: vhci_device speed not set [ 131.888957][ T3566] vhci_hcd: stop threads [ 131.892079][T10881] vhci_hcd: connection closed [ 131.893249][ T3566] vhci_hcd: release socket [ 131.902463][ T3566] vhci_hcd: disconnect device [ 131.908098][ T3566] vhci_hcd: stop threads [ 131.912431][ T3566] vhci_hcd: release socket [ 131.916967][ T3566] vhci_hcd: disconnect device [ 131.921889][ T3566] vhci_hcd: stop threads [ 131.926263][ T3566] vhci_hcd: release socket [ 131.930715][ T3566] vhci_hcd: disconnect device [ 131.935724][ T2970] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 131.948484][T10882] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 131.956229][ T3566] vhci_hcd: stop threads [ 131.960529][ T3566] vhci_hcd: release socket [ 131.965065][ T3566] vhci_hcd: disconnect device [ 131.984315][ T3566] vhci_hcd: stop threads [ 131.988840][ T3566] vhci_hcd: release socket [ 131.993474][ T3566] vhci_hcd: disconnect device [ 132.286692][T10922] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2982'. [ 132.295775][T10922] netem: unknown loss type 0 [ 132.300404][T10922] netem: change failed [ 132.346457][T10924] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 132.387393][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 132.408633][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 132.895324][T10932] loop5: detected capacity change from 0 to 164 [ 132.995512][T10951] loop7: detected capacity change from 0 to 512 [ 133.015329][T10951] EXT4-fs: Ignoring removed orlov option [ 133.029528][T10951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.043969][T10951] EXT4-fs (loop7): orphan cleanup on readonly fs [ 133.053390][T10951] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2997: bg 0: block 248: padding at end of block bitmap is not set [ 133.099624][T10951] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2997: Failed to acquire dquot type 1 [ 133.134620][T10951] EXT4-fs (loop7): 1 truncate cleaned up [ 133.141226][T10951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.156539][T10951] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.158446][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3001'. [ 133.251289][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3002'. [ 133.268881][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3002'. [ 133.312219][T10967] loop3: detected capacity change from 0 to 1024 [ 133.358884][T10967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.427861][T10967] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 133.440172][T10967] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.440172][T10967] [ 133.449921][T10967] EXT4-fs (loop3): Total free blocks count 0 [ 133.455975][T10967] EXT4-fs (loop3): Free/Dirty block details [ 133.461892][T10967] EXT4-fs (loop3): free_blocks=0 [ 133.467016][T10967] EXT4-fs (loop3): dirty_blocks=0 [ 133.472066][T10967] EXT4-fs (loop3): Block reservation details [ 133.478092][T10967] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 133.519385][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.562530][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 133.562548][ T29] audit: type=1326 audit(133.537:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed78015927 code=0x7ffc0000 [ 133.599950][ T29] audit: type=1326 audit(133.577:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed77fbab39 code=0x7ffc0000 [ 133.622974][ T29] audit: type=1326 audit(133.577:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 133.645929][ T29] audit: type=1326 audit(133.577:8335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 133.668981][ T29] audit: type=1326 audit(133.577:8336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed78015927 code=0x7ffc0000 [ 133.691783][ T29] audit: type=1326 audit(133.577:8337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed77fbab39 code=0x7ffc0000 [ 133.714676][ T29] audit: type=1326 audit(133.577:8338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 133.737874][ T29] audit: type=1326 audit(133.577:8339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 133.761300][ T29] audit: type=1326 audit(133.577:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 133.785754][ T29] audit: type=1326 audit(133.577:8341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10974 comm="syz.3.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 133.931362][T10991] loop5: detected capacity change from 0 to 128 [ 134.282698][T11023] loop3: detected capacity change from 0 to 2048 [ 134.326932][T11023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.371260][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.710953][T11053] sd 0:0:1:0: device reset [ 134.772737][T11056] ip6gre1: entered allmulticast mode [ 134.961936][T11070] net_ratelimit: 24 callbacks suppressed [ 134.961957][T11070] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.087965][T11011] syz.7.3022 (11011) used greatest stack depth: 5880 bytes left [ 135.120211][T11074] loop7: detected capacity change from 0 to 512 [ 135.126931][T11074] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 135.870628][T11153] netlink: 'syz.7.3062': attribute type 13 has an invalid length. [ 136.061842][T11068] syz.5.3046 (11068) used greatest stack depth: 5824 bytes left [ 136.349699][T10999] Set syz1 is full, maxelem 65536 reached [ 136.388273][T11196] macvlan2: entered promiscuous mode [ 136.393639][T11196] bridge0: entered promiscuous mode [ 136.400693][T11196] bridge0: port 3(macvlan2) entered blocking state [ 136.407262][T11196] bridge0: port 3(macvlan2) entered disabled state [ 136.415150][T11196] macvlan2: entered allmulticast mode [ 136.420550][T11196] bridge0: entered allmulticast mode [ 136.444296][T11196] macvlan2: left allmulticast mode [ 136.449512][T11196] bridge0: left allmulticast mode [ 136.473057][T11196] bridge0: left promiscuous mode [ 136.496231][T11201] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 136.503933][T11201] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 136.575018][T11209] netlink: 'syz.8.3081': attribute type 298 has an invalid length. [ 136.605098][T11215] wg2: entered promiscuous mode [ 136.610030][T11215] wg2: entered allmulticast mode [ 136.653644][T11219] __nla_validate_parse: 10 callbacks suppressed [ 136.653662][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3086'. [ 136.674544][T11219] netem: change failed [ 136.843729][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'. [ 136.853338][T11243] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3097'. [ 136.876978][T11245] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3098'. [ 137.016352][ T2970] usb 17-1: enqueue for inactive port 0 [ 137.022184][ T2970] usb 17-1: enqueue for inactive port 0 [ 137.094076][ T2970] vhci_hcd: vhci_device speed not set [ 137.130938][T11270] loop8: detected capacity change from 0 to 1024 [ 137.138955][T11272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3110'. [ 137.139037][T11270] EXT4-fs: Ignoring removed nobh option [ 137.168745][T11272] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 137.169406][T11270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.245696][ T8629] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.329941][T11287] SELinux: failed to load policy [ 137.399716][T11301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3123'. [ 137.471280][T11308] netlink: 'syz.8.3126': attribute type 4 has an invalid length. [ 137.698167][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3131'. [ 137.718193][T11322] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3131'. [ 137.751838][T11320] SELinux: failed to load policy [ 137.916007][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3141'. [ 137.936425][T11345] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3143'. [ 137.955126][T11345] bond0 (unregistering): Released all slaves [ 138.039741][T11354] loop8: detected capacity change from 0 to 128 [ 138.148648][T11366] sd 0:0:1:0: device reset [ 138.175714][T11368] $H: renamed from bond0 [ 138.184032][T11368] $H: entered promiscuous mode [ 138.189236][T11368] bond_slave_0: entered promiscuous mode [ 138.195142][T11368] bond_slave_1: entered promiscuous mode [ 138.267759][T11374] wireguard0: entered promiscuous mode [ 138.273309][T11374] wireguard0: entered allmulticast mode [ 138.615194][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 138.615251][ T29] audit: type=1400 audit(138.597:8550): avc: denied { create } for pid=11398 comm="syz.8.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.640818][ T29] audit: type=1400 audit(138.597:8551): avc: denied { setopt } for pid=11398 comm="syz.8.3166" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.678282][ T29] audit: type=1400 audit(138.657:8552): avc: denied { create } for pid=11400 comm="syz.8.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.698585][ T29] audit: type=1400 audit(138.657:8553): avc: denied { connect } for pid=11400 comm="syz.8.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.724519][ T29] audit: type=1400 audit(138.707:8554): avc: denied { read } for pid=11402 comm="syz.8.3168" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.748220][ T29] audit: type=1400 audit(138.707:8555): avc: denied { open } for pid=11402 comm="syz.8.3168" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.771137][ T29] audit: type=1400 audit(138.707:8556): avc: denied { ioctl } for pid=11402 comm="syz.8.3168" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.881711][ T29] audit: type=1326 audit(138.857:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dff1e969 code=0x7ffc0000 [ 138.881821][T11407] sd 0:0:1:0: device reset [ 138.904803][ T29] audit: type=1326 audit(138.857:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dff1e969 code=0x7ffc0000 [ 138.932144][ T29] audit: type=1326 audit(138.857:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.0.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37dff1d2d0 code=0x7ffc0000 [ 139.577800][T11455] syzkaller0: entered promiscuous mode [ 139.583403][T11455] syzkaller0: entered allmulticast mode [ 139.815614][T11466] macvlan2: entered promiscuous mode [ 139.821146][T11466] bridge0: entered promiscuous mode [ 139.831928][T11466] bridge0: port 1(macvlan2) entered blocking state [ 139.838648][T11466] bridge0: port 1(macvlan2) entered disabled state [ 139.847746][T11466] macvlan2: entered allmulticast mode [ 139.853265][T11466] bridge0: entered allmulticast mode [ 139.865278][T11466] macvlan2: left allmulticast mode [ 139.870535][T11466] bridge0: left allmulticast mode [ 139.882465][T11466] bridge0: left promiscuous mode [ 139.894243][T11469] loop5: detected capacity change from 0 to 1024 [ 139.901113][T11469] EXT4-fs: Ignoring removed bh option [ 139.908713][T11469] EXT4-fs: inline encryption not supported [ 139.921104][T11469] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.934049][T11469] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 139.943105][T11469] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.3194: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.958151][T11469] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.3194: lblock 0 mapped to illegal pblock 48 (length 1) [ 139.979875][T11469] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3194: Failed to acquire dquot type 0 [ 140.041406][T11469] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 140.068478][T11469] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3194: mark_inode_dirty error [ 140.080949][T11483] ALSA: seq fatal error: cannot create timer (-19) [ 140.106009][T11469] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 140.123830][T11487] loop3: detected capacity change from 0 to 512 [ 140.130299][T11469] EXT4-fs (loop5): 1 orphan inode deleted [ 140.137583][T11469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.150539][ T3570] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.166135][T11487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.176167][ T3570] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 0 [ 140.189081][T11469] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.190092][T11487] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 140.198471][T11469] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.3194: Invalid inode table block 1 in block_group 0 [ 140.234068][T11487] EXT4-fs (loop3): 1 truncate cleaned up [ 140.247970][T11487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.296592][T11469] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 140.335556][T11469] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.3194: mark_inode_dirty error [ 140.358463][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.769031][T11508] loop8: detected capacity change from 0 to 1024 [ 140.793880][T11508] EXT4-fs: Ignoring removed oldalloc option [ 140.816351][T11508] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 140.897527][T11508] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.035356][ T8629] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.145921][T11532] ip6gre1: entered allmulticast mode [ 141.229994][T11542] sctp: [Deprecated]: syz.8.3223 (pid 11542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.229994][T11542] Use struct sctp_sack_info instead [ 141.539653][T11559] loop5: detected capacity change from 0 to 512 [ 141.560848][T11559] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.589931][T11559] EXT4-fs (loop5): mount failed [ 141.766011][T11577] __nla_validate_parse: 3 callbacks suppressed [ 141.766030][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3239'. [ 141.813459][T11580] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3240'. [ 141.874851][T11587] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 141.883945][T11587] SELinux: failed to load policy [ 142.257010][T11610] wireguard0: entered promiscuous mode [ 142.263101][T11610] wireguard0: entered allmulticast mode [ 142.359253][T11626] loop8: detected capacity change from 0 to 128 [ 142.369893][T11626] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.519304][ T8629] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.546813][T11647] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3269'. [ 142.647623][T11658] wireguard1: entered promiscuous mode [ 142.653201][T11658] wireguard1: entered allmulticast mode [ 142.772389][T11670] loop3: detected capacity change from 0 to 164 [ 142.789933][T11670] bio_check_eod: 107 callbacks suppressed [ 142.789952][T11670] syz.3.3279: attempt to access beyond end of device [ 142.789952][T11670] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 142.812439][T11670] syz.3.3279: attempt to access beyond end of device [ 142.812439][T11670] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 142.833878][T11674] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 142.942386][T11690] loop3: detected capacity change from 0 to 128 [ 143.218258][T11709] xt_TPROXY: Can be used only with -p tcp or -p udp [ 143.278425][T11739] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.3308'. [ 143.287642][T11739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3308'. [ 143.337332][T11745] loop8: detected capacity change from 0 to 1024 [ 143.356605][T11745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.373481][T11745] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3314: bg 0: block 393: padding at end of block bitmap is not set [ 143.389526][T11745] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 117 [ 143.402044][T11745] EXT4-fs (loop8): This should not happen!! Data will be lost [ 143.402044][T11745] [ 143.425857][ T8629] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.461195][T11759] loop5: detected capacity change from 0 to 164 [ 143.470824][T11759] syz.5.3320: attempt to access beyond end of device [ 143.470824][T11759] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 143.484923][T11759] syz.5.3320: attempt to access beyond end of device [ 143.484923][T11759] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.547410][T11767] loop5: detected capacity change from 0 to 4096 [ 143.556074][T11767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.616921][ T4788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.638461][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 143.638481][ T29] audit: type=1400 audit(143.617:8762): avc: denied { name_bind } for pid=11770 comm="syz.5.3325" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 144.202853][T11785] loop3: detected capacity change from 0 to 1024 [ 144.215963][T11785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.231608][T11785] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3330: bg 0: block 393: padding at end of block bitmap is not set [ 144.246201][T11785] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 117 [ 144.258667][T11785] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.258667][T11785] [ 144.279299][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.358184][T11797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3335'. [ 144.380312][ T29] audit: type=1326 audit(144.357:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.8.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529f2de969 code=0x7ffc0000 [ 144.403355][ T29] audit: type=1326 audit(144.357:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.8.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529f2de969 code=0x7ffc0000 [ 144.442891][ T29] audit: type=1326 audit(144.407:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.8.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f529f2de969 code=0x7ffc0000 [ 144.465936][ T29] audit: type=1326 audit(144.407:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.8.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529f2de969 code=0x7ffc0000 [ 144.489043][ T29] audit: type=1326 audit(144.407:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.8.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529f2de969 code=0x7ffc0000 [ 144.512083][ T29] audit: type=1326 audit(144.407:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.8.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f529f2de969 code=0x7ffc0000 [ 144.535079][ T29] audit: type=1326 audit(144.407:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.8.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529f2de969 code=0x7ffc0000 [ 144.558018][ T29] audit: type=1326 audit(144.407:8770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.8.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529f2de969 code=0x7ffc0000 [ 144.580938][ T29] audit: type=1326 audit(144.407:8771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.8.3336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f529f2de969 code=0x7ffc0000 [ 144.655514][T11814] loop5: detected capacity change from 0 to 164 [ 144.700851][T11814] syz.5.3344: attempt to access beyond end of device [ 144.700851][T11814] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 144.754119][T11814] syz.5.3344: attempt to access beyond end of device [ 144.754119][T11814] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 144.976114][T11842] netlink: 'syz.3.3357': attribute type 39 has an invalid length. [ 145.062730][T11850] loop8: detected capacity change from 0 to 4096 [ 145.103440][T11850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.194121][ T8629] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.264730][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.273294][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.316490][T11875] syzkaller0: entered promiscuous mode [ 145.322254][T11875] syzkaller0: entered allmulticast mode [ 145.331773][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3372'. [ 145.332548][T11875] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 145.352571][T11879] loop5: detected capacity change from 0 to 128 [ 145.365673][T11879] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.422191][ T4788] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.451339][T11888] loop5: detected capacity change from 0 to 128 [ 145.459373][T11888] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 145.468861][T11888] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.500933][ T4788] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.516900][T11896] loop5: detected capacity change from 0 to 256 [ 145.821758][T11920] loop8: detected capacity change from 0 to 512 [ 145.828523][T11920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.835332][T11920] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.843337][T11920] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 145.851567][T11920] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 145.860505][T11920] EXT4-fs (loop8): 1 truncate cleaned up [ 145.866724][T11920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.887301][T11920] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 145.907717][ T8629] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.013016][T11930] loop8: detected capacity change from 0 to 128 [ 146.040624][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3396'. [ 146.296494][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'. [ 146.583920][T11962] syzkaller0: entered promiscuous mode [ 146.589584][T11962] syzkaller0: entered allmulticast mode [ 146.629816][T11967] loop8: detected capacity change from 0 to 256 [ 146.659885][T11967] FAT-fs (loop8): bogus number of FAT sectors [ 146.666118][T11967] FAT-fs (loop8): Can't find a valid FAT filesystem [ 146.813625][T11977] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3414'. [ 146.822802][T11977] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3414'. [ 146.887866][T11984] netlink: 'syz.0.3419': attribute type 39 has an invalid length. [ 147.038194][T11996] wireguard2: entered promiscuous mode [ 147.045115][T11996] wireguard2: entered allmulticast mode [ 147.213436][T12014] syzkaller0: entered promiscuous mode [ 147.219052][T12014] syzkaller0: entered allmulticast mode [ 147.311399][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'. [ 147.341246][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3438'. [ 147.493636][T12038] syzkaller1: entered promiscuous mode [ 147.499402][T12038] syzkaller1: entered allmulticast mode [ 147.607404][T12032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.616209][T12032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.278123][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3463'. [ 148.338749][T12094] loop8: detected capacity change from 0 to 512 [ 148.357570][T12094] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 148.373028][T12094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 148.382023][T12094] System zones: 1-12 [ 148.388378][T12094] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.3467: missing EA_INODE flag [ 148.401458][T12094] EXT4-fs (loop8): Remounting filesystem read-only [ 148.410635][T12094] EXT4-fs (loop8): 1 orphan inode deleted [ 148.421222][T12094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.449689][ T8629] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.468890][T12101] netlink: 'syz.8.3470': attribute type 13 has an invalid length. [ 148.652142][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 148.652161][ T29] audit: type=1326 audit(148.627:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed78015927 code=0x7ffc0000 [ 148.681386][ T29] audit: type=1326 audit(148.627:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed77fbab39 code=0x7ffc0000 [ 148.704231][ T29] audit: type=1326 audit(148.627:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 148.727248][ T29] audit: type=1326 audit(148.637:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed78015927 code=0x7ffc0000 [ 148.750098][ T29] audit: type=1326 audit(148.637:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed77fbab39 code=0x7ffc0000 [ 148.772991][ T29] audit: type=1326 audit(148.637:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 148.795934][ T29] audit: type=1326 audit(148.637:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed78015927 code=0x7ffc0000 [ 148.818796][ T29] audit: type=1326 audit(148.637:9020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed77fbab39 code=0x7ffc0000 [ 148.841760][ T29] audit: type=1326 audit(148.637:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 148.866145][ T29] audit: type=1326 audit(148.657:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12088 comm="syz.3.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed78015927 code=0x7ffc0000 [ 148.871839][T12112] IPVS: Error connecting to the multicast addr [ 148.934439][T12118] loop7: detected capacity change from 0 to 256 [ 149.436258][T12166] ALSA: seq fatal error: cannot create timer (-19) [ 149.553363][T12186] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 149.913764][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3522'. [ 150.000023][T12237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3528'. [ 150.009143][T12237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3528'. [ 150.019408][T12238] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.3523'. [ 150.028650][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3523'. [ 150.374399][T12251] wireguard1: entered promiscuous mode [ 150.382228][T12251] wireguard1: entered allmulticast mode [ 150.889604][T12287] loop7: detected capacity change from 0 to 512 [ 150.907471][T12287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.920443][T12290] loop8: detected capacity change from 0 to 164 [ 150.920708][T12287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.930118][T12290] syz.8.3546: attempt to access beyond end of device [ 150.930118][T12290] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 150.950222][T12290] syz.8.3546: attempt to access beyond end of device [ 150.950222][T12290] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.025665][T12296] wireguard0: entered promiscuous mode [ 151.032856][T12296] wireguard0: entered allmulticast mode [ 151.478131][T12322] netlink: 'syz.8.3559': attribute type 298 has an invalid length. [ 151.840640][T12360] __nla_validate_parse: 1 callbacks suppressed [ 151.840655][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3576'. [ 151.938212][T12377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3583'. [ 151.947313][T12377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3583'. [ 152.141616][T12397] wireguard0: entered promiscuous mode [ 152.148348][T12397] wireguard0: entered allmulticast mode [ 152.178384][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3593'. [ 152.274497][T12411] wireguard2: entered promiscuous mode [ 152.280969][T12411] wireguard2: entered allmulticast mode [ 152.623516][T12452] loop8: detected capacity change from 0 to 1024 [ 152.630563][T12452] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.641706][T12452] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 152.652928][T12454] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3612'. [ 152.652969][T12452] JBD2: no valid journal superblock found [ 152.667997][T12452] EXT4-fs (loop8): Could not load journal inode [ 152.972514][T12466] netlink: 'syz.8.3616': attribute type 4 has an invalid length. [ 153.017167][T12465] wireguard0: entered promiscuous mode [ 153.023707][T12465] wireguard0: entered allmulticast mode [ 153.362417][T12502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3632'. [ 153.389464][T12502] netlink: 'syz.5.3632': attribute type 2 has an invalid length. [ 153.488045][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.525016][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.689214][T12517] wireguard0: entered promiscuous mode [ 153.696436][T12517] wireguard0: entered allmulticast mode [ 153.831274][T12481] syz.8.3623 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 153.845546][T12481] CPU: 1 UID: 0 PID: 12481 Comm: syz.8.3623 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 153.845589][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.845603][T12481] Call Trace: [ 153.845610][T12481] [ 153.845617][T12481] __dump_stack+0x1d/0x30 [ 153.845635][T12481] dump_stack_lvl+0xe8/0x140 [ 153.845716][T12481] dump_stack+0x15/0x1b [ 153.845730][T12481] dump_header+0x81/0x220 [ 153.845759][T12481] oom_kill_process+0x334/0x3f0 [ 153.845788][T12481] out_of_memory+0x979/0xb80 [ 153.845909][T12481] try_charge_memcg+0x5e6/0x9e0 [ 153.845937][T12481] obj_cgroup_charge_pages+0xa6/0x150 [ 153.845979][T12481] __memcg_kmem_charge_page+0x9f/0x170 [ 153.846015][T12481] __alloc_frozen_pages_noprof+0x188/0x360 [ 153.846051][T12481] alloc_pages_mpol+0xb3/0x250 [ 153.846137][T12481] alloc_pages_noprof+0x90/0x130 [ 153.846178][T12481] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 153.846225][T12481] __kvmalloc_node_noprof+0x312/0x4f0 [ 153.846324][T12481] ? ip_set_alloc+0x1f/0x30 [ 153.846348][T12481] ? ip_set_alloc+0x1f/0x30 [ 153.846369][T12481] ? hash_netiface_create+0x21b/0x740 [ 153.846407][T12481] ? __kmalloc_cache_noprof+0x189/0x320 [ 153.846435][T12481] ip_set_alloc+0x1f/0x30 [ 153.846460][T12481] hash_netiface_create+0x282/0x740 [ 153.846527][T12481] ? __pfx_hash_netiface_create+0x10/0x10 [ 153.846553][T12481] ip_set_create+0x3c9/0x960 [ 153.846588][T12481] ? __nla_parse+0x40/0x60 [ 153.846625][T12481] nfnetlink_rcv_msg+0x4c6/0x590 [ 153.846666][T12481] ? selinux_capable+0x1f9/0x270 [ 153.846685][T12481] netlink_rcv_skb+0x123/0x220 [ 153.846715][T12481] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 153.846799][T12481] nfnetlink_rcv+0x16b/0x1690 [ 153.846828][T12481] ? css_rstat_updated+0xcd/0x5b0 [ 153.846855][T12481] ? bpf_perf_event_read+0xe9/0x150 [ 153.846872][T12481] ? __rcu_read_unlock+0x4f/0x70 [ 153.846892][T12481] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 153.846911][T12481] ? xfd_validate_state+0x45/0xf0 [ 153.846937][T12481] ? should_fail_ex+0x30/0x280 [ 153.846964][T12481] ? selinux_nlmsg_lookup+0x99/0x890 [ 153.846992][T12481] ? selinux_netlink_send+0x59f/0x5f0 [ 153.847046][T12481] ? __rcu_read_unlock+0x34/0x70 [ 153.847071][T12481] ? __netlink_lookup+0x266/0x2a0 [ 153.847103][T12481] netlink_unicast+0x59e/0x670 [ 153.847129][T12481] netlink_sendmsg+0x58b/0x6b0 [ 153.847172][T12481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.847201][T12481] __sock_sendmsg+0x145/0x180 [ 153.847239][T12481] ____sys_sendmsg+0x31e/0x4e0 [ 153.847271][T12481] ___sys_sendmsg+0x17b/0x1d0 [ 153.847393][T12481] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 153.847427][T12481] __x64_sys_sendmsg+0xd4/0x160 [ 153.847457][T12481] x64_sys_call+0x2999/0x2fb0 [ 153.847514][T12481] do_syscall_64+0xd2/0x200 [ 153.847540][T12481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.847564][T12481] ? clear_bhb_loop+0x40/0x90 [ 153.847583][T12481] ? clear_bhb_loop+0x40/0x90 [ 153.847678][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.847697][T12481] RIP: 0033:0x7f529f2de969 [ 153.847717][T12481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.847783][T12481] RSP: 002b:00007f529d947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.847800][T12481] RAX: ffffffffffffffda RBX: 00007f529f505fa0 RCX: 00007f529f2de969 [ 153.847812][T12481] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 153.847823][T12481] RBP: 00007f529f360ab1 R08: 0000000000000000 R09: 0000000000000000 [ 153.847876][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.847886][T12481] R13: 0000000000000000 R14: 00007f529f505fa0 R15: 00007ffec53b4048 [ 153.847903][T12481] [ 153.847941][T12481] memory: usage 307200kB, limit 307200kB, failcnt 158 [ 153.965532][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3640'. [ 153.966579][T12481] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 153.966594][T12481] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 153.966606][T12481] Memory cgroup stats for /syz8: [ 153.966905][T12481] cache 0 [ 154.253948][T12481] rss 0 [ 154.256762][T12481] shmem 0 [ 154.259697][T12481] mapped_file 0 [ 154.263147][T12481] dirty 0 [ 154.266117][T12481] writeback 0 [ 154.269399][T12481] workingset_refault_anon 0 [ 154.273958][T12481] workingset_refault_file 0 [ 154.278671][T12481] swap 737280 [ 154.281954][T12481] swapcached 20480 [ 154.285707][T12481] nr_memmap_boot_pages 47020 [ 154.290288][T12481] pgpgin 47014 [ 154.293662][T12481] pglazyfree 79808 [ 154.297394][T12481] pgfault 1 [ 154.300533][T12481] a_other 4096 [ 154.303933][T12481] inactive_anon 16384 [ 154.307929][T12481] active_anon 0 [ 154.311382][T12481] inactive_file 4096 [ 154.315305][T12481] active_file 0 [ 154.318763][T12481] hierarchical_memory_limit 314572800 [ 154.324171][T12481] hierarchical_memsw_limit 9223372036854771712 [ 154.330330][T12481] total_cache 0 [ 154.333841][T12481] total_rss 0 [ 154.337148][T12481] total_shmem 0 [ 154.340599][T12481] total_mapped_file 0 [ 154.344590][T12481] total_dirty 0 [ 154.348132][T12481] total_writeback 0 [ 154.351935][T12481] total_workingset_refault_anon 0 [ 154.357003][T12481] total_workingset_refault_file 0 [ 154.362127][T12481] total_swap 737280 [ 154.366049][T12481] total_swapcached 20480 [ 154.370293][T12481] total_nr_memmap_boot_pages 47020 [ 154.375450][T12481] total_pgpgin 47014 [ 154.379366][T12481] total_pglazyfree 79808 [ 154.383677][T12481] total_pgfault 1 [ 154.387349][T12481] total_a_other 4096 [ 154.391257][T12481] total_inactive_anon 16384 [ 154.395998][T12481] total_active_anon 0 [ 154.399972][T12481] total_inactive_file 4096 [ 154.404474][T12481] total_active_file 0 [ 154.408456][T12481] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3623,pid=12479,uid=0 [ 154.423136][T12481] Memory cgroup out of memory: Killed process 12479 (syz.8.3623) total-vm:93748kB, anon-rss:1064kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 154.528521][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 154.528537][ T29] audit: type=1326 audit(154.507:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.576994][ T29] audit: type=1326 audit(154.537:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.600092][ T29] audit: type=1326 audit(154.537:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.623167][ T29] audit: type=1326 audit(154.537:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.646223][ T29] audit: type=1326 audit(154.537:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.669123][ T29] audit: type=1326 audit(154.537:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.692093][ T29] audit: type=1326 audit(154.537:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.715060][ T29] audit: type=1326 audit(154.537:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.737969][ T29] audit: type=1326 audit(154.537:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.760884][ T29] audit: type=1326 audit(154.537:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.3.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 154.825898][T12541] pimreg: entered allmulticast mode [ 154.834597][T12541] pimreg: left allmulticast mode [ 154.958134][T12561] SELinux: ebitmap: truncated map [ 154.964005][T12561] SELinux: failed to load policy [ 154.978068][T12566] IPVS: Error connecting to the multicast addr [ 154.994715][T12570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12570 comm=syz.0.3662 [ 155.111815][T12577] loop7: detected capacity change from 0 to 8192 [ 155.120558][T12577] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.177568][T12586] loop7: detected capacity change from 0 to 512 [ 155.186868][T12586] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 155.200963][T12586] EXT4-fs (loop7): 1 truncate cleaned up [ 155.207928][T12586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.294056][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.481956][T12615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3679'. [ 155.557194][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3683'. [ 155.944336][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 156.096384][T12653] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.108702][T12653] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 156.443818][T12687] sctp: [Deprecated]: syz.5.3707 (pid 12687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.443818][T12687] Use struct sctp_sack_info instead [ 156.725317][T12691] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.741119][T12691] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 157.069146][T12720] __nla_validate_parse: 1 callbacks suppressed [ 157.069193][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3722'. [ 157.084906][T12720] bond1: left allmulticast mode [ 157.089875][T12720] bond1: left promiscuous mode [ 157.095008][T12720] bridge0: port 3(bond1) entered disabled state [ 157.114675][T12720] bridge_slave_1: left allmulticast mode [ 157.120382][T12720] bridge_slave_1: left promiscuous mode [ 157.126223][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.135255][T12720] bridge_slave_0: left allmulticast mode [ 157.140973][T12720] bridge_slave_0: left promiscuous mode [ 157.146766][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.317490][T12730] loop7: detected capacity change from 0 to 164 [ 157.330627][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3727'. [ 157.340393][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3727'. [ 157.348588][T12730] syz.7.3726: attempt to access beyond end of device [ 157.348588][T12730] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 157.363414][T12730] syz.7.3726: attempt to access beyond end of device [ 157.363414][T12730] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 157.407249][T12739] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 157.511439][ T3391] kernel write not supported for file /1563/attr/exec (pid: 3391 comm: kworker/0:4) [ 157.677047][T12769] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12769 comm=syz.3.3744 [ 157.689764][T12769] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12769 comm=syz.3.3744 [ 158.137146][T12789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.159487][T12789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.290096][T12801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.358307][T12807] pimreg: entered allmulticast mode [ 158.367431][T12807] pimreg: left allmulticast mode [ 158.645230][T12819] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 159.712879][T12897] loop8: detected capacity change from 0 to 8192 [ 159.727711][T12904] netem: change failed [ 159.867890][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 159.867906][ T29] audit: type=1400 audit(159.847:9643): avc: denied { mount } for pid=12911 comm="syz.5.3806" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 159.989492][ T29] audit: type=1326 audit(159.907:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.3.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 160.012522][ T29] audit: type=1326 audit(159.907:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.3.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 160.035586][ T29] audit: type=1326 audit(159.917:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.3.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 160.058537][ T29] audit: type=1326 audit(159.917:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.3.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 160.081456][ T29] audit: type=1326 audit(159.917:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.3.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 160.104400][ T29] audit: type=1326 audit(159.917:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.3.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 160.127627][ T29] audit: type=1326 audit(159.917:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.3.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 160.150539][ T29] audit: type=1326 audit(159.917:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.3.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 160.174783][ T29] audit: type=1326 audit(159.917:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12915 comm="syz.3.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 160.350483][T12943] random: crng reseeded on system resumption [ 160.389622][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3820'. [ 160.418867][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3820'. [ 160.437431][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3822'. [ 160.621065][T12969] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 160.672812][T12973] block device autoloading is deprecated and will be removed. [ 160.812883][T12987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12987 comm=syz.7.3839 [ 161.966150][T13039] 9pnet_fd: Insufficient options for proto=fd [ 162.003312][T13043] netlink: 'syz.5.3863': attribute type 1 has an invalid length. [ 162.011259][T13043] netlink: 'syz.5.3863': attribute type 4 has an invalid length. [ 162.019067][T13043] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3863'. [ 162.063674][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 162.094835][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3866'. [ 162.569598][T13087] SELinux: failed to load policy [ 162.626081][T13093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.634863][T13093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.771265][T13102] netem: change failed [ 162.817092][T13105] bridge0: entered promiscuous mode [ 162.826062][T13105] macvlan2: entered promiscuous mode [ 162.843308][T13105] bridge0: port 1(macvlan2) entered blocking state [ 162.850069][T13105] bridge0: port 1(macvlan2) entered disabled state [ 162.864469][T13105] macvlan2: entered allmulticast mode [ 162.869925][T13105] bridge0: entered allmulticast mode [ 162.884773][T13105] macvlan2: left allmulticast mode [ 162.889974][T13105] bridge0: left allmulticast mode [ 162.934589][T13105] bridge0: left promiscuous mode [ 163.062746][T13115] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.643027][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3910'. [ 164.241237][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 164.324722][T13157] loop8: detected capacity change from 0 to 8192 [ 164.334836][T13141] syz.5.3906 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 164.349035][T13141] CPU: 0 UID: 0 PID: 13141 Comm: syz.5.3906 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 164.349071][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.349088][T13141] Call Trace: [ 164.349161][T13141] [ 164.349172][T13141] __dump_stack+0x1d/0x30 [ 164.349198][T13141] dump_stack_lvl+0xe8/0x140 [ 164.349219][T13141] dump_stack+0x15/0x1b [ 164.349264][T13141] dump_header+0x81/0x220 [ 164.349307][T13141] oom_kill_process+0x334/0x3f0 [ 164.349363][T13141] out_of_memory+0x979/0xb80 [ 164.349400][T13141] try_charge_memcg+0x5e6/0x9e0 [ 164.349427][T13141] obj_cgroup_charge_pages+0xa6/0x150 [ 164.349506][T13141] __memcg_kmem_charge_page+0x9f/0x170 [ 164.349537][T13141] __alloc_frozen_pages_noprof+0x188/0x360 [ 164.349632][T13141] alloc_pages_mpol+0xb3/0x250 [ 164.349667][T13141] alloc_pages_noprof+0x90/0x130 [ 164.349724][T13141] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 164.349806][T13141] __kvmalloc_node_noprof+0x312/0x4f0 [ 164.349837][T13141] ? ip_set_alloc+0x1f/0x30 [ 164.349936][T13141] ? ip_set_alloc+0x1f/0x30 [ 164.349967][T13141] ? __kmalloc_cache_noprof+0x189/0x320 [ 164.350006][T13141] ip_set_alloc+0x1f/0x30 [ 164.350042][T13141] hash_netiface_create+0x282/0x740 [ 164.350070][T13141] ? __pfx_hash_netiface_create+0x10/0x10 [ 164.350153][T13141] ip_set_create+0x3c9/0x960 [ 164.350199][T13141] ? __nla_parse+0x40/0x60 [ 164.350230][T13141] nfnetlink_rcv_msg+0x4c6/0x590 [ 164.350257][T13141] ? __rb_reserve_next+0x43e/0x6f0 [ 164.350318][T13141] ? selinux_capable+0x1f9/0x270 [ 164.350343][T13141] netlink_rcv_skb+0x123/0x220 [ 164.350382][T13141] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 164.350448][T13141] nfnetlink_rcv+0x16b/0x1690 [ 164.350472][T13141] ? __dquot_free_space+0x52d/0x800 [ 164.350496][T13141] ? xas_find+0x15e/0x3e0 [ 164.350532][T13141] ? xas_load+0x405/0x430 [ 164.350661][T13141] ? find_get_entry+0x374/0x380 [ 164.350751][T13141] ? __rcu_read_unlock+0x4f/0x70 [ 164.350846][T13141] ? find_get_entries+0x1ea/0x220 [ 164.350887][T13141] ? percpu_counter_add_batch+0xb6/0x130 [ 164.350924][T13141] ? shmem_recalc_inode+0x19f/0x1c0 [ 164.350956][T13141] ? shmem_undo_range+0xa4b/0xa80 [ 164.351057][T13141] ? should_fail_ex+0x30/0x280 [ 164.351082][T13141] ? selinux_nlmsg_lookup+0x99/0x890 [ 164.351110][T13141] ? selinux_netlink_send+0x59f/0x5f0 [ 164.351141][T13141] ? __rcu_read_unlock+0x34/0x70 [ 164.351196][T13141] ? netlink_unicast+0x339/0x670 [ 164.351222][T13141] netlink_unicast+0x59e/0x670 [ 164.351256][T13141] netlink_sendmsg+0x58b/0x6b0 [ 164.351411][T13141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.351448][T13141] __sock_sendmsg+0x145/0x180 [ 164.351476][T13141] ____sys_sendmsg+0x31e/0x4e0 [ 164.351518][T13141] ___sys_sendmsg+0x17b/0x1d0 [ 164.351596][T13141] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 164.351629][T13141] __x64_sys_sendmsg+0xd4/0x160 [ 164.351668][T13141] x64_sys_call+0x2999/0x2fb0 [ 164.351696][T13141] do_syscall_64+0xd2/0x200 [ 164.351801][T13141] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.351828][T13141] ? clear_bhb_loop+0x40/0x90 [ 164.351911][T13141] ? clear_bhb_loop+0x40/0x90 [ 164.351985][T13141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.352005][T13141] RIP: 0033:0x7f2b88f6e969 [ 164.352020][T13141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.352097][T13141] RSP: 002b:00007f2b875d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.352116][T13141] RAX: ffffffffffffffda RBX: 00007f2b89195fa0 RCX: 00007f2b88f6e969 [ 164.352136][T13141] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 164.352219][T13141] RBP: 00007f2b88ff0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 164.352234][T13141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.352251][T13141] R13: 0000000000000000 R14: 00007f2b89195fa0 R15: 00007fffbb9eeb78 [ 164.352274][T13141] [ 164.352283][T13141] memory: usage 307200kB, limit 307200kB, failcnt 149 [ 164.743324][T13141] memory+swap: usage 362304kB, limit 9007199254740988kB, failcnt 0 [ 164.751255][T13141] kmem: usage 278036kB, limit 9007199254740988kB, failcnt 0 [ 164.758583][T13141] Memory cgroup stats for /syz5: [ 164.759135][T13141] cache 27635712 [ 164.767740][T13141] rss 356352 [ 164.771025][T13141] shmem 27635712 [ 164.774607][T13141] mapped_file 0 [ 164.778089][T13141] dirty 0 [ 164.781044][T13141] writeback 0 [ 164.784424][T13141] workingset_refault_anon 559 [ 164.789123][T13141] workingset_refault_file 0 [ 164.793673][T13141] swap 56426496 [ 164.797175][T13141] swapcached 1818624 [ 164.801138][T13141] nr_memmap_boot_pages 134905 [ 164.805973][T13141] pgpgin 127627 [ 164.809448][T13141] pglazyfree 145332 [ 164.813258][T13141] pgfault 74 [ 164.816501][T13141] a_other 7385088 [ 164.820172][T13141] inactive_anon 22425600 [ 164.824458][T13141] active_anon 0 [ 164.828022][T13141] inactive_file 0 [ 164.831683][T13141] active_file 0 [ 164.835203][T13141] hierarchical_memory_limit 314572800 [ 164.840690][T13141] hierarchical_memsw_limit 9223372036854771712 [ 164.847115][T13141] total_cache 27635712 [ 164.851232][T13141] total_rss 356352 [ 164.854981][T13141] total_shmem 27635712 [ 164.859061][T13141] total_mapped_file 0 [ 164.863061][T13141] total_dirty 0 [ 164.866565][T13141] total_writeback 0 [ 164.870390][T13141] total_workingset_refault_anon 559 [ 164.875622][T13141] total_workingset_refault_file 0 [ 164.880739][T13141] total_swap 56426496 [ 164.884845][T13141] total_swapcached 1818624 [ 164.889386][T13141] total_nr_memmap_boot_pages 134905 [ 164.894658][T13141] total_pgpgin 127627 [ 164.898656][T13141] total_pglazyfree 145332 [ 164.902993][T13141] total_pgfault 74 [ 164.906769][T13141] total_a_other 7385088 [ 164.910939][T13141] total_inactive_anon 22425600 [ 164.915735][T13141] total_active_anon 0 [ 164.919786][T13141] total_inactive_file 0 [ 164.923948][T13141] total_active_file 0 [ 164.927995][T13141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3906,pid=13140,uid=0 [ 164.943044][T13141] Memory cgroup out of memory: Killed process 13141 (syz.5.3906) total-vm:95928kB, anon-rss:1064kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 165.221668][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 165.230641][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 165.293758][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 165.293776][ T29] audit: type=1326 audit(165.267:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.331259][ T29] audit: type=1326 audit(165.307:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.354412][ T29] audit: type=1326 audit(165.307:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.377533][ T29] audit: type=1326 audit(165.307:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.400654][ T29] audit: type=1326 audit(165.307:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.423680][ T29] audit: type=1326 audit(165.307:10012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.446742][ T29] audit: type=1326 audit(165.307:10013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.524079][ T29] audit: type=1326 audit(165.337:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.547270][ T29] audit: type=1326 audit(165.337:10015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.570445][ T29] audit: type=1326 audit(165.337:10016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.7.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed68be969 code=0x7ffc0000 [ 165.593814][T13197] loop7: detected capacity change from 0 to 1024 [ 165.622108][T13197] EXT4-fs: Ignoring removed bh option [ 165.627650][T13197] EXT4-fs: inline encryption not supported [ 165.633504][T13197] EXT4-fs: Ignoring removed i_version option [ 165.652954][T13197] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.708196][T13197] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.3930: lblock 1 mapped to illegal pblock 1 (length 1) [ 165.725025][T13197] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3930: Failed to acquire dquot type 0 [ 165.742587][T13219] loop8: detected capacity change from 0 to 1024 [ 165.749426][T13197] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3930: Freeing blocks not in datazone - block = 0, count = 4096 [ 165.765941][T13197] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3930: Invalid inode bitmap blk 0 in block_group 0 [ 165.787511][T13219] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.799814][ T3548] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 165.819757][ T3548] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 0 [ 165.838189][T13219] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 3: comm syz.8.3940: lblock 3 mapped to illegal pblock 3 (length 1) [ 165.844221][T13197] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 165.868531][T13219] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 165.874936][T13197] EXT4-fs (loop7): 1 orphan inode deleted [ 165.880891][T13219] EXT4-fs (loop8): This should not happen!! Data will be lost [ 165.880891][T13219] [ 165.887283][T13197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.935674][T13228] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13219: lblock 3 mapped to illegal pblock 3 (length 1) [ 165.985163][T13228] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13219: lblock 3 mapped to illegal pblock 3 (length 1) [ 165.994387][T13197] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.012230][T13228] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13219: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.042265][T13233] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 166.063664][T13231] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13219: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.087392][T13228] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13219: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.113118][T13231] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13219: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.177734][ T8629] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /361/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 166.223447][ T8629] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /361/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 166.256682][ T8629] EXT4-fs error (device loop8): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 166.380626][T10521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.595888][T13268] syzkaller1: entered promiscuous mode [ 166.601434][T13268] syzkaller1: entered allmulticast mode [ 166.837780][T13264] chnl_net:caif_netlink_parms(): no params data found [ 166.924465][T13264] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.924496][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.924593][T13264] bridge_slave_0: entered allmulticast mode [ 166.926180][T13264] bridge_slave_0: entered promiscuous mode [ 166.927296][T13264] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.927332][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.927491][T13264] bridge_slave_1: entered allmulticast mode [ 166.928423][T13264] bridge_slave_1: entered promiscuous mode [ 166.959393][T13264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.960886][T13264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.009577][T13264] team0: Port device team_slave_0 added [ 167.046359][T13264] team0: Port device team_slave_1 added [ 167.087587][T13302] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 167.087587][T13302] program syz.7.3970 not setting count and/or reply_len properly [ 167.096711][T13264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.112976][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.139053][T13264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.146773][T13264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.158367][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.158469][T13264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.264993][T13264] hsr_slave_0: entered promiscuous mode [ 167.271316][T13264] hsr_slave_1: entered promiscuous mode [ 167.295365][T13264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.295384][T13264] Cannot create hsr debugfs directory [ 167.583104][T13264] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 167.593404][T13264] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 167.607182][T13264] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 167.609824][T13264] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 167.663356][T13264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.682673][T13264] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.695287][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.702447][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.715038][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.722300][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.977100][T13333] macvlan2: entered promiscuous mode [ 167.982463][T13333] bridge0: entered promiscuous mode [ 167.994788][T13333] bridge0: port 1(macvlan2) entered blocking state [ 168.001526][T13333] bridge0: port 1(macvlan2) entered disabled state [ 168.008432][T13333] macvlan2: entered allmulticast mode [ 168.014038][T13333] bridge0: entered allmulticast mode [ 168.019890][T13333] macvlan2: left allmulticast mode [ 168.025067][T13333] bridge0: left allmulticast mode [ 168.030634][T13333] bridge0: left promiscuous mode [ 168.075798][T13336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13336 comm=syz.5.3983 [ 168.088523][T13336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13336 comm=syz.5.3983 [ 168.097881][T13264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.516560][T13264] veth0_vlan: entered promiscuous mode [ 168.527300][T13264] veth1_vlan: entered promiscuous mode [ 168.562252][T13264] veth0_macvtap: entered promiscuous mode [ 168.580131][T13264] veth1_macvtap: entered promiscuous mode [ 168.609801][T13264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.630561][T13264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.650483][T13264] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.659380][T13264] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.666051][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4003'. [ 168.668283][T13264] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.686015][T13264] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.698653][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4003'. [ 168.862066][T13411] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.994101][T13418] loop7: detected capacity change from 0 to 512 [ 169.026560][T13418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.057781][T13418] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4015'. [ 169.094485][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.296785][T13448] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4020'. [ 169.377916][T13458] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4023'. [ 169.741182][T13487] tipc: Started in network mode [ 169.746320][T13487] tipc: Node identity 7f000001, cluster identity 4711 [ 169.753659][T13487] tipc: Enabled bearer , priority 10 [ 169.779138][T13489] netlink: 'syz.7.4039': attribute type 13 has an invalid length. [ 169.827033][T13489] 8021q: adding VLAN 0 to HW filter on device $H [ 169.854918][T13489] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.875203][T13489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.441058][T13526] pim6reg: entered allmulticast mode [ 170.451778][T13526] pim6reg: left allmulticast mode [ 170.483381][T13528] syzkaller1: entered promiscuous mode [ 170.489158][T13528] syzkaller1: entered allmulticast mode [ 170.599777][T13543] program syz.7.4063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.868717][ T2970] tipc: Node number set to 2130706433 [ 171.025882][T13551] 9pnet: p9_errstr2errno: server reported unknown error L O! [ 171.169534][T13553] loop7: detected capacity change from 0 to 1024 [ 171.210282][T13553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.256693][T13553] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #15: block 3: comm syz.7.4068: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.305346][T13553] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 171.317714][T13553] EXT4-fs (loop7): This should not happen!! Data will be lost [ 171.317714][T13553] [ 171.365586][T13566] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13561: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.380029][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 171.380043][ T29] audit: type=1400 audit(171.347:10169): avc: denied { read write } for pid=13564 comm="syz.0.4072" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 171.409766][ T29] audit: type=1400 audit(171.347:10170): avc: denied { open } for pid=13564 comm="syz.0.4072" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 171.476787][T13566] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13561: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.553466][ T7789] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /396/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 171.604365][ T7789] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /396/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 171.633423][ T7789] EXT4-fs error (device loop7): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 171.653875][ T7789] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /396/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 171.676121][ T7789] EXT4-fs error (device loop7): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 171.696601][ T7789] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /396/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 171.746681][ T7789] EXT4-fs error (device loop7): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 171.775883][ T29] audit: type=1400 audit(171.757:10171): avc: denied { validate_trans } for pid=13580 comm="syz.0.4079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 171.829530][T13585] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 171.845455][ T29] audit: type=1326 audit(171.757:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.9.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794698e969 code=0x7ffc0000 [ 171.868863][ T29] audit: type=1326 audit(171.757:10173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.9.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794698e969 code=0x7ffc0000 [ 171.892160][ T29] audit: type=1326 audit(171.777:10174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.9.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f794698e969 code=0x7ffc0000 [ 171.915617][ T29] audit: type=1326 audit(171.777:10175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.9.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794698e969 code=0x7ffc0000 [ 171.938895][ T29] audit: type=1326 audit(171.777:10176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.9.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794698e969 code=0x7ffc0000 [ 171.961976][ T29] audit: type=1326 audit(171.777:10177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.9.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f794698e969 code=0x7ffc0000 [ 171.984983][ T29] audit: type=1326 audit(171.777:10178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.9.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f794698e969 code=0x7ffc0000 [ 172.157906][T13596] loop9: detected capacity change from 0 to 512 [ 172.202543][T13596] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4085: bg 0: block 248: padding at end of block bitmap is not set [ 172.226027][T13599] netlink: 'syz.0.4086': attribute type 1 has an invalid length. [ 172.255908][T13596] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4085: Failed to acquire dquot type 1 [ 172.283128][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'. [ 172.304761][T13596] EXT4-fs (loop9): 1 truncate cleaned up [ 172.331308][T13604] 9pnet_fd: p9_fd_create_unix (13604): problem connecting socket: ./file0: -2 [ 172.342575][T13596] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.383793][ T3391] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 172.409796][ T3391] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.423701][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.443038][T13264] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.493700][T13613] netem: change failed [ 172.508762][T13615] loop9: detected capacity change from 0 to 128 [ 172.564983][T13626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4099'. [ 172.588292][T13628] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4100'. [ 172.887658][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4108'. [ 172.937874][ T3523] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.016070][ T3523] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.116866][ T3523] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.173375][T13635] chnl_net:caif_netlink_parms(): no params data found [ 173.227413][ T3523] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.623119][T13635] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.630313][T13635] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.663549][T13635] bridge_slave_0: entered allmulticast mode [ 173.679256][T13635] bridge_slave_0: entered promiscuous mode [ 173.704513][T13635] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.711667][T13635] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.734202][T13635] bridge_slave_1: entered allmulticast mode [ 173.740801][T13635] bridge_slave_1: entered promiscuous mode [ 173.942188][ T3523] bridge_slave_1: left allmulticast mode [ 173.948089][ T3523] bridge_slave_1: left promiscuous mode [ 173.953821][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.963445][ T3523] bridge_slave_0: left allmulticast mode [ 173.969232][ T3523] bridge_slave_0: left promiscuous mode [ 173.975026][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.076969][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.088628][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.098444][ T3523] bond0 (unregistering): Released all slaves [ 174.110006][T13635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.129737][T13635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.154278][ T3523] hsr_slave_0: left promiscuous mode [ 174.160841][ T3523] hsr_slave_1: left promiscuous mode [ 174.168127][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.175831][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.183701][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.191325][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.203348][ T3523] veth1_macvtap: left promiscuous mode [ 174.213338][ T3523] veth0_macvtap: left promiscuous mode [ 174.225420][ T3523] veth1_vlan: left promiscuous mode [ 174.230843][ T3523] veth0_vlan: left promiscuous mode [ 174.378200][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 174.391566][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 174.472622][T13635] team0: Port device team_slave_0 added [ 174.487053][T13635] team0: Port device team_slave_1 added [ 174.553682][T13635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.560744][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.586881][T13635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.602260][T13635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.609335][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.635451][T13635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.647852][T13708] veth0_to_bond: entered allmulticast mode [ 174.657131][T13665] chnl_net:caif_netlink_parms(): no params data found [ 174.712062][T13635] hsr_slave_0: entered promiscuous mode [ 174.719734][T13635] hsr_slave_1: entered promiscuous mode [ 174.725952][T13635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.733562][T13635] Cannot create hsr debugfs directory [ 174.740693][T13708] veth0_to_bond: left allmulticast mode [ 174.822599][T13665] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.829785][T13665] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.840589][T13665] bridge_slave_0: entered allmulticast mode [ 174.847355][T13665] bridge_slave_0: entered promiscuous mode [ 174.855163][T13665] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.862251][T13665] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.878949][T13665] bridge_slave_1: entered allmulticast mode [ 174.886437][T13665] bridge_slave_1: entered promiscuous mode [ 174.976675][T13665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.015208][T13665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.067168][T13665] team0: Port device team_slave_0 added [ 175.086241][T13665] team0: Port device team_slave_1 added [ 175.128523][T13665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.135599][T13665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.161684][T13665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.188117][T13665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.195160][T13665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.221201][T13665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.263819][T13665] hsr_slave_0: entered promiscuous mode [ 175.274778][T13665] hsr_slave_1: entered promiscuous mode [ 175.294106][T13665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.301728][T13665] Cannot create hsr debugfs directory [ 175.436301][T13739] netlink: 'syz.5.4135': attribute type 10 has an invalid length. [ 175.482229][ T3523] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.494560][ T3523] bond_slave_0: left promiscuous mode [ 175.500872][ T3523] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.514332][ T3523] bond_slave_1: left promiscuous mode [ 175.520114][ T3523] $H (unregistering): Released all slaves [ 175.532427][ T3523] bond1 (unregistering): Released all slaves [ 175.540634][T13739] syz_tun: entered promiscuous mode [ 175.551621][T13739] syz_tun: entered allmulticast mode [ 175.557204][T13739] $H: (slave syz_tun): Enslaving as an active interface with an up link [ 175.579201][ T3523] hsr_slave_0: left promiscuous mode [ 175.600949][ T3523] hsr_slave_1: left promiscuous mode [ 175.632216][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 175.643476][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 175.706156][T13665] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.721052][T13635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.730369][T13635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.739972][T13635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.749532][T13635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.787024][T13665] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.819348][T13635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.835414][T13635] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.846834][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4143'. [ 175.857491][T13665] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.875156][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.882316][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.912155][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.919330][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.950704][T13635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.970251][T13665] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.076207][T13665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.095479][T13665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.119219][T13635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.128565][T13665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.146743][T13665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.215477][T13665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.240941][T13665] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.261119][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.268348][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.285468][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.292575][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.340279][T13635] veth0_vlan: entered promiscuous mode [ 176.350748][T13635] veth1_vlan: entered promiscuous mode [ 176.380198][T13635] veth0_macvtap: entered promiscuous mode [ 176.392629][T13665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.400937][T13635] veth1_macvtap: entered promiscuous mode [ 176.427960][T13635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.461663][T13635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.476550][T13635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.485424][T13635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.494268][T13635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.503075][T13635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.628599][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 176.628617][ T29] audit: type=1326 audit(176.607:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 176.666055][ T29] audit: type=1326 audit(176.637:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 176.689342][ T29] audit: type=1326 audit(176.637:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 176.712418][ T29] audit: type=1326 audit(176.637:10321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 176.717060][T13665] veth0_vlan: entered promiscuous mode [ 176.735387][ T29] audit: type=1326 audit(176.637:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a784ed2d0 code=0x7ffc0000 [ 176.764156][ T29] audit: type=1326 audit(176.637:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9a784f0197 code=0x7ffc0000 [ 176.787492][ T29] audit: type=1326 audit(176.637:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 176.810453][ T29] audit: type=1326 audit(176.637:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9a784f0197 code=0x7ffc0000 [ 176.834033][ T29] audit: type=1326 audit(176.637:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9a784ed5ca code=0x7ffc0000 [ 176.856962][ T29] audit: type=1326 audit(176.637:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13818 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 176.887028][T13665] veth1_vlan: entered promiscuous mode [ 176.898081][T13827] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.4160'. [ 176.917796][T13829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13829 comm=syz.2.4161 [ 176.923088][T13665] veth0_macvtap: entered promiscuous mode [ 176.930557][T13829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13829 comm=syz.2.4161 [ 176.942143][T13665] veth1_macvtap: entered promiscuous mode [ 176.962530][T13665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.997942][T13665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.012251][T13665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.021161][T13665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.030015][T13665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.038982][T13665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.288644][T13853] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.300598][T13853] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 177.443859][T13863] xt_hashlimit: max too large, truncated to 1048576 [ 177.718147][T13883] netlink: 'syz.4.4182': attribute type 3 has an invalid length. [ 178.811453][T13940] geneve0: entered allmulticast mode [ 178.869972][T13954] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4213'. [ 178.901654][T13958] loop2: detected capacity change from 0 to 1024 [ 178.936620][T13958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.960891][T13958] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.4215: lblock 3 mapped to illegal pblock 3 (length 1) [ 178.978964][T13958] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 178.991311][T13958] EXT4-fs (loop2): This should not happen!! Data will be lost [ 178.991311][T13958] [ 179.009073][T13967] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13958: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.034377][T13967] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13958: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.055876][T13967] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13958: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.073305][T13967] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13958: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.091859][T13967] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13958: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.107676][T13967] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13958: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.122892][T13967] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13958: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.167295][T13975] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm iou-wrk-13958: lblock 3 mapped to illegal pblock 3 (length 1) [ 179.292113][T13635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.419001][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4233'. [ 179.475559][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4235'. [ 179.502340][T14015] ref_ctr_offset mismatch. inode: 0x50 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 179.519518][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.527850][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.536028][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.546423][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.554590][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.562902][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.571468][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.579652][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.587783][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.596088][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.604245][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.612477][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.620728][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.629236][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.643663][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.652055][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.660238][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.668553][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.676733][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.684877][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.692969][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.701105][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.709376][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.717529][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.725687][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.733877][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.742188][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.750324][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.758470][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: unknown main item tag 0x0 [ 179.779769][ T3425] hid-generic FFFF:FFFFFFFC:20000001.000D: hidraw0: HID va0.69 Device [syz0] on syz1 [ 179.803682][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4244'. [ 179.849468][T14034] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4247'. [ 179.890920][T14040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4250'. [ 179.901139][T14036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4248'. [ 179.970201][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4256'. [ 180.009458][T14060] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 180.071433][T14069] SELinux: Context system_u:object is not valid (left unmapped). [ 180.301385][T14106] netlink: 'syz.3.4279': attribute type 1 has an invalid length. [ 180.318407][T14106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.354356][T14106] bond4: (slave veth15): Enslaving as an active interface with a down link [ 180.384913][T14106] bond4: (slave dummy0): making interface the new active one [ 180.398946][T14106] dummy0: entered promiscuous mode [ 180.404285][T14106] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 180.413591][T14118] SELinux: security policydb version 18 (MLS) not backwards compatible [ 180.439346][T14118] SELinux: failed to load policy [ 181.295213][T14153] __nla_validate_parse: 3 callbacks suppressed [ 181.295232][T14153] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4298'. [ 181.466239][T14158] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4300'. [ 181.708917][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 181.708934][ T29] audit: type=1326 audit(181.687:10711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 181.809805][ T29] audit: type=1326 audit(181.687:10712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 181.833228][ T29] audit: type=1326 audit(181.687:10713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 181.856281][ T29] audit: type=1326 audit(181.687:10714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 181.879334][ T29] audit: type=1326 audit(181.687:10715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 181.902445][ T29] audit: type=1326 audit(181.687:10716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 181.925497][ T29] audit: type=1326 audit(181.687:10717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 181.948540][ T29] audit: type=1326 audit(181.687:10718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 181.971518][ T29] audit: type=1326 audit(181.687:10719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 181.994552][ T29] audit: type=1326 audit(181.687:10720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14176 comm="syz.2.4309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a784ee969 code=0x7ffc0000 [ 182.188958][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4314'. [ 182.389760][T14211] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4318'. [ 182.536423][T14230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4333'. [ 182.598203][T14236] netlink: 'syz.0.4336': attribute type 1 has an invalid length. [ 182.628699][T14236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.659734][T14236] bond0: (slave veth11): Enslaving as an active interface with a down link [ 182.668497][T14245] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4339'. [ 182.697181][T14236] bond0: (slave dummy0): making interface the new active one [ 182.716910][T14236] dummy0: entered promiscuous mode [ 182.722907][T14236] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.780834][T14258] netlink: 'syz.2.4345': attribute type 13 has an invalid length. [ 182.796727][T14262] netlink: 'syz.0.4347': attribute type 2 has an invalid length. [ 182.804567][T14262] netlink: 'syz.0.4347': attribute type 9 has an invalid length. [ 182.812325][T14262] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4347'. [ 182.866910][T14258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.946690][T14275] 9pnet: p9_errstr2errno: server reported unknown error L O! [ 183.077788][T14285] SELinux: security policydb version 18 (MLS) not backwards compatible [ 183.079631][T14286] loop2: detected capacity change from 0 to 256 [ 183.092200][T14285] SELinux: failed to load policy [ 183.110994][T14286] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.138557][T14286] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 183.147285][T14286] FAT-fs (loop2): Filesystem has been set read-only [ 183.313397][T14297] loop2: detected capacity change from 0 to 512 [ 183.332602][T14297] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.338078][T14300] netlink: 'syz.0.4365': attribute type 13 has an invalid length. [ 183.356871][T14297] EXT4-fs (loop2): 1 truncate cleaned up [ 183.370373][T14297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.385727][T14300] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.412263][T14300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.432687][T14304] netlink: 'syz.5.4366': attribute type 1 has an invalid length. [ 183.440621][T14304] netlink: 'syz.5.4366': attribute type 2 has an invalid length. [ 183.448445][T14304] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4366'. [ 183.574805][T14311] bond4: entered promiscuous mode [ 183.580020][T14311] bond4: entered allmulticast mode [ 183.596332][T14311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.637759][T14311] bond4 (unregistering): Released all slaves [ 183.779236][T13635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.991266][T14346] loop2: detected capacity change from 0 to 512 [ 184.011157][T14346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.027152][T14346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.098204][T14354] block device autoloading is deprecated and will be removed. [ 184.127624][T14356] bond5: entered promiscuous mode [ 184.132738][T14356] bond5: entered allmulticast mode [ 184.138373][T14356] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.151725][T14356] bond5 (unregistering): Released all slaves [ 184.248376][T13635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.024640][T14389] loop2: detected capacity change from 0 to 128 [ 185.057270][ T3392] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 185.082402][ T3392] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.572505][T14431] netlink: 'syz.3.4418': attribute type 13 has an invalid length. [ 185.617164][T14431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.632946][T14431] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.637862][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 185.651179][T14431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.756727][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4428'. [ 185.767938][T14450] netlink: 'syz.3.4428': attribute type 6 has an invalid length. [ 185.820951][T14453] netlink: 'syz.4.4429': attribute type 10 has an invalid length. [ 185.834223][T14453] syz_tun: entered promiscuous mode [ 185.844429][T14453] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 185.962921][T14471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.031894][T14471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.077436][T14471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.148822][T14471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.184749][T14493] syz_tun: entered promiscuous mode [ 186.208140][T14493] syz_tun: entered allmulticast mode [ 186.224686][T14493] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 186.256026][T14471] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.271282][T14471] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.300102][T14471] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.328029][T14471] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.354587][T14475] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.415683][T14475] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.465937][T14475] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.515594][T14475] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.753921][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 186.760254][ T29] audit: type=1400 audit(186.727:10835): avc: denied { create } for pid=14513 comm="syz.5.4453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 186.786808][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 186.809842][ T29] audit: type=1400 audit(186.757:10836): avc: denied { write } for pid=14513 comm="syz.5.4453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 186.878174][ T29] audit: type=1400 audit(186.857:10837): avc: denied { read } for pid=14519 comm="syz.3.4456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.984039][ T29] audit: type=1326 audit(186.957:10838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 187.007163][ T29] audit: type=1326 audit(186.957:10839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 187.031837][ T29] audit: type=1326 audit(186.987:10840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 187.054961][ T29] audit: type=1326 audit(186.987:10841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 187.078116][ T29] audit: type=1326 audit(186.987:10842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 187.101552][ T29] audit: type=1326 audit(186.987:10843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 187.124638][ T29] audit: type=1326 audit(186.987:10844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14522 comm="syz.3.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 187.162869][T14527] __nla_validate_parse: 3 callbacks suppressed [ 187.162953][T14527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4458'. [ 187.364526][T14529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.393692][T14529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.881270][T14584] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.905565][T14588] netlink: 328 bytes leftover after parsing attributes in process `syz.4.4484'. [ 188.925756][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4487'. [ 189.041819][T14600] hub 6-0:1.0: USB hub found [ 189.046736][T14600] hub 6-0:1.0: 8 ports detected [ 189.082237][T14606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4493'. [ 189.098118][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4495'. [ 189.127948][T14610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.190471][T14618] macvlan1: entered promiscuous mode [ 189.198485][T14618] ipvlan0: entered promiscuous mode [ 189.204914][T14618] ipvlan0: left promiscuous mode [ 189.210436][T14618] macvlan1: left promiscuous mode [ 189.217695][T14616] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4497'. [ 189.641785][T14655] netlink: 332 bytes leftover after parsing attributes in process `syz.5.4514'. [ 189.950473][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4526'. [ 190.011072][T14690] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.105043][T14475] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.138297][T14475] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.166473][T14475] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.203850][T14475] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.229826][T14703] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000007 [ 190.413103][T14716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.421379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.535264][T14724] all: renamed from bridge_slave_0 (while UP) [ 190.609530][T14735] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 190.708720][T14742] serio: Serial port ptm0 [ 191.225612][T14776] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 191.465594][T14790] all: renamed from bridge_slave_0 [ 191.634202][ T3523] dummy0: left promiscuous mode [ 191.717079][T14809] vlan2: entered allmulticast mode [ 191.737703][T14809] dummy0: entered allmulticast mode [ 191.859207][T14823] loop2: detected capacity change from 0 to 512 [ 191.885105][T14823] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.895141][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 191.895157][ T29] audit: type=1400 audit(191.867:10920): avc: denied { write } for pid=14819 comm="syz.4.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.954743][T14823] EXT4-fs (loop2): 1 truncate cleaned up [ 191.961072][T14823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.984537][ T29] audit: type=1400 audit(191.967:10921): avc: denied { rename } for pid=14822 comm="syz.2.4586" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.032334][T13635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.271047][ T29] audit: type=1326 audit(192.247:10922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 192.294649][ T29] audit: type=1326 audit(192.247:10923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 192.327298][T14862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.335665][T14862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.364135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.372325][T14862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.380728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.388956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.394356][T14868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4603'. [ 192.399386][ T29] audit: type=1400 audit(192.247:10924): avc: denied { map } for pid=14863 comm="syz.0.4602" path="socket:[47892]" dev="sockfs" ino=47892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 192.415585][T14861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.428729][ T29] audit: type=1326 audit(192.307:10925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 192.459792][ T29] audit: type=1326 audit(192.307:10926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 192.483104][ T29] audit: type=1326 audit(192.307:10927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 192.506141][ T29] audit: type=1326 audit(192.307:10928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 192.529178][ T29] audit: type=1326 audit(192.307:10929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.3.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7801e969 code=0x7ffc0000 [ 192.918718][T14908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14908 comm=syz.5.4621 [ 193.694057][T14974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4650'. [ 193.853091][T14988] serio: Serial port ptm0 [ 193.884265][ T3564] dummy0: left promiscuous mode [ 193.920558][T14976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.942380][T14976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.979774][T15005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.988614][T15005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.648457][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4681'. [ 194.759052][T15053] IPv6: Can't replace route, no match found [ 194.855684][T15056] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 194.880051][T15056] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 194.895405][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4690'. [ 194.904481][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4690'. [ 194.913455][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4690'. [ 194.928814][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4690'. [ 194.937875][T15067] validate_nla: 1 callbacks suppressed [ 194.937943][T15067] netlink: 'syz.2.4690': attribute type 6 has an invalid length. [ 194.964558][T15071] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4691'. [ 195.070657][T15088] net_ratelimit: 1 callbacks suppressed [ 195.070673][T15088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.099862][T15088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.115423][T15088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.127777][T15088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.136256][T15088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.144564][T15088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.169631][T15088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.190618][T15096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.205648][T15096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.230986][T15087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.302258][T15111] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 196.040968][T15145] IPv6: Can't replace route, no match found [ 196.155608][T15155] rdma_op ffff888119633180 conn xmit_rdma 0000000000000000 [ 196.420906][T15197] netlink: 328 bytes leftover after parsing attributes in process `syz.0.4745'. [ 196.490287][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4750'. [ 196.931606][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 196.931625][ T29] audit: type=1326 audit(196.907:11013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 196.961117][ T29] audit: type=1326 audit(196.907:11014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 196.984263][ T29] audit: type=1326 audit(196.907:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 197.007256][ T29] audit: type=1326 audit(196.907:11016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 197.030338][ T29] audit: type=1326 audit(196.907:11017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 197.053343][ T29] audit: type=1326 audit(196.907:11018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 197.076369][ T29] audit: type=1326 audit(196.907:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 197.099380][ T29] audit: type=1326 audit(196.907:11020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 197.122332][ T29] audit: type=1326 audit(196.907:11021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 197.145389][ T29] audit: type=1326 audit(196.907:11022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.4.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86868e969 code=0x7ffc0000 [ 197.201466][T15232] netlink: 'syz.2.4762': attribute type 10 has an invalid length. [ 197.216368][T15232] team0: Port device geneve1 added [ 197.442398][T15256] loop2: detected capacity change from 0 to 512 [ 197.457497][T15256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.567685][T15256] __nla_validate_parse: 1 callbacks suppressed [ 197.567733][T15256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4772'. [ 197.600279][T13635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.627435][T15273] loop2: detected capacity change from 0 to 1024 [ 197.635452][T15273] EXT4-fs: Ignoring removed orlov option [ 197.643594][T15273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.819131][T15283] netlink: 'syz.0.4782': attribute type 4 has an invalid length. [ 198.479608][T15273] ================================================================== [ 198.487763][T15273] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 198.494928][T15273] [ 198.497271][T15273] write to 0xffff888118dbf254 of 4 bytes by task 15277 on cpu 0: [ 198.505011][T15273] xas_set_mark+0x12b/0x140 [ 198.509543][T15273] __folio_start_writeback+0x1dd/0x440 [ 198.515037][T15273] ext4_bio_write_folio+0x5ad/0x9f0 [ 198.520270][T15273] mpage_submit_folio+0xe4/0x170 [ 198.525267][T15273] mpage_process_page_bufs+0x39b/0x4a0 [ 198.530773][T15273] mpage_prepare_extent_to_map+0x741/0xaa0 [ 198.536631][T15273] ext4_do_writepages+0x6ea/0x21c0 [ 198.541787][T15273] ext4_writepages+0x176/0x300 [ 198.546602][T15273] do_writepages+0x1c3/0x310 [ 198.551230][T15273] file_write_and_wait_range+0x156/0x2c0 [ 198.556905][T15273] generic_buffers_fsync_noflush+0x45/0x120 [ 198.562850][T15273] ext4_sync_file+0x1ab/0x690 [ 198.567562][T15273] vfs_fsync_range+0x10d/0x130 [ 198.572344][T15273] ext4_buffered_write_iter+0x34f/0x3c0 [ 198.577929][T15273] ext4_file_write_iter+0x383/0xf00 [ 198.583154][T15273] iter_file_splice_write+0x5f2/0x970 [ 198.588573][T15273] direct_splice_actor+0x153/0x2a0 [ 198.593742][T15273] splice_direct_to_actor+0x30f/0x680 [ 198.599159][T15273] do_splice_direct+0xda/0x150 [ 198.603963][T15273] do_sendfile+0x380/0x650 [ 198.608420][T15273] __x64_sys_sendfile64+0x105/0x150 [ 198.613642][T15273] x64_sys_call+0xb39/0x2fb0 [ 198.618247][T15273] do_syscall_64+0xd2/0x200 [ 198.622782][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.628705][T15273] [ 198.631048][T15273] read to 0xffff888118dbf254 of 4 bytes by task 15273 on cpu 1: [ 198.638704][T15273] xas_find_marked+0x5dc/0x620 [ 198.643519][T15273] find_get_entry+0x5d/0x380 [ 198.648496][T15273] filemap_get_folios_tag+0x92/0x210 [ 198.654095][T15273] filemap_fdatawait_range+0x88/0x1d0 [ 198.659498][T15273] __writeback_single_inode+0xdb/0x7c0 [ 198.665011][T15273] writeback_single_inode+0x167/0x3e0 [ 198.670490][T15273] sync_inode_metadata+0x5b/0x90 [ 198.675470][T15273] generic_buffers_fsync_noflush+0xd9/0x120 [ 198.681512][T15273] ext4_sync_file+0x1ab/0x690 [ 198.686233][T15273] vfs_fsync_range+0x10d/0x130 [ 198.691022][T15273] ext4_buffered_write_iter+0x34f/0x3c0 [ 198.696611][T15273] ext4_file_write_iter+0x383/0xf00 [ 198.701845][T15273] iter_file_splice_write+0x5f2/0x970 [ 198.707255][T15273] direct_splice_actor+0x153/0x2a0 [ 198.712408][T15273] splice_direct_to_actor+0x30f/0x680 [ 198.717819][T15273] do_splice_direct+0xda/0x150 [ 198.722619][T15273] do_sendfile+0x380/0x650 [ 198.727055][T15273] __x64_sys_sendfile64+0x105/0x150 [ 198.732270][T15273] x64_sys_call+0xb39/0x2fb0 [ 198.736873][T15273] do_syscall_64+0xd2/0x200 [ 198.741397][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.747444][T15273] [ 198.749773][T15273] value changed: 0x0a000021 -> 0x04000021 [ 198.755528][T15273] [ 198.757852][T15273] Reported by Kernel Concurrency Sanitizer on: [ 198.764114][T15273] CPU: 1 UID: 0 PID: 15273 Comm: syz.2.4777 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 198.776275][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.786339][T15273] ================================================================== [ 198.816045][T13635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.