last executing test programs: 3.933551583s ago: executing program 4 (id=1071): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.492557736s ago: executing program 1 (id=1076): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd3080014060020010000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000640)={0x2, &(0x7f0000000700)=[{0x200000000006, 0x2, 0xf0, 0x4bff435f}, {0x5, 0x0, 0x3, 0x1}]}) unshare(0x22020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 3.071218208s ago: executing program 4 (id=1080): unshare(0x22020600) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.010761634s ago: executing program 4 (id=1083): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 2.4364757s ago: executing program 1 (id=1088): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") 2.382065065s ago: executing program 1 (id=1089): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nodelalloc}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) fallocate(r0, 0x0, 0xbf5, 0x2000402) socket$inet6_sctp(0xa, 0xedc883434e23d8e1, 0x84) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x5, 0x1, 0xf, 0x5, 0x62, "fbb91f0ea2104bef6f5caffb508fcb718ea08405910060ccebf321607ce85464f90bd60d19d620e9771ca8516b836bde7d1e317324324ba61951c41c9114d43f37fbcf20328e5e2e8f61e4f7a60654dfa3a2daa5b6dfee3cda947f78268b650441cc"}, 0x6b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) 2.352625928s ago: executing program 0 (id=1090): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 2.272514766s ago: executing program 0 (id=1091): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) close(r0) 2.197956504s ago: executing program 0 (id=1092): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.147345218s ago: executing program 4 (id=1093): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 2.121961551s ago: executing program 0 (id=1094): bpf$MAP_CREATE(0x0, 0x0, 0x48) mq_open(0x0, 0x42, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) 1.938845819s ago: executing program 0 (id=1097): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 1.880844685s ago: executing program 0 (id=1098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.794051303s ago: executing program 4 (id=1100): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") 1.758474487s ago: executing program 3 (id=1101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 1.430894209s ago: executing program 1 (id=1102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb8b}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x21, 0xfffffff2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x2a) r3 = syz_clone(0x2b02000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x2590f58a) 1.160025386s ago: executing program 1 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80100) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r0, r2}, 0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 1.159555616s ago: executing program 2 (id=1104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) 1.145449287s ago: executing program 3 (id=1105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='ext4_free_blocks\x00', r0}, 0x18) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_read_part_table(0x618, &(0x7f0000002200)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x1207080, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(0x0, r3, 0x9, 0xffffffffffffffff, 0x3) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) 598.632641ms ago: executing program 3 (id=1106): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 444.837157ms ago: executing program 2 (id=1107): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc04c4c4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0xfdef) 349.208136ms ago: executing program 4 (id=1108): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) tee(r3, r4, 0x8f5, 0x100000000000008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) 258.561635ms ago: executing program 3 (id=1109): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x8000002}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) 160.680974ms ago: executing program 2 (id=1110): r0 = getpid() ioprio_get$pid(0x2, r0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) close_range(r2, 0xffffffffffffffff, 0x0) 144.402646ms ago: executing program 3 (id=1111): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 139.584816ms ago: executing program 2 (id=1112): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 76.471262ms ago: executing program 1 (id=1113): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe7a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 74.018923ms ago: executing program 2 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 43.491226ms ago: executing program 3 (id=1115): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) dup3(r2, r0, 0x80000) 0s ago: executing program 2 (id=1116): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x1, 0x6, 0x3d, 0x100, 0x3c, 0x540000, r3}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1, 0x6, 0x8, 0x100, 0x4, 0x86030090, r5}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): med from eth3 [ 38.661864][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.684051][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.693697][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.715703][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.727209][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.754561][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.772311][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.779413][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.787619][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.797792][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.810574][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.827029][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.843980][ T1841] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.851090][ T1841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.881628][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.904013][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.915798][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.941158][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.949327][ T1841] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.956540][ T1841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.974897][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.990371][ T1841] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.997622][ T1841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.024072][ T1817] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.031297][ T1817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.040111][ T1817] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.047498][ T1817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.066048][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.090528][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.107159][ T1841] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.114577][ T1841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.123991][ T1841] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.131176][ T1841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.144870][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.171450][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.189476][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.214035][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.221158][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.235718][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.242869][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.264054][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.274700][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.313855][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.326294][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.395864][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.416074][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.510199][ T3323] veth0_vlan: entered promiscuous mode [ 39.531302][ T3321] veth0_vlan: entered promiscuous mode [ 39.541721][ T3323] veth1_vlan: entered promiscuous mode [ 39.554559][ T3321] veth1_vlan: entered promiscuous mode [ 39.596167][ T3318] veth0_vlan: entered promiscuous mode [ 39.618179][ T3316] veth0_vlan: entered promiscuous mode [ 39.635818][ T3321] veth0_macvtap: entered promiscuous mode [ 39.644017][ T3314] veth0_vlan: entered promiscuous mode [ 39.650022][ T3318] veth1_vlan: entered promiscuous mode [ 39.657423][ T3321] veth1_macvtap: entered promiscuous mode [ 39.666938][ T3323] veth0_macvtap: entered promiscuous mode [ 39.676032][ T3323] veth1_macvtap: entered promiscuous mode [ 39.683297][ T3316] veth1_vlan: entered promiscuous mode [ 39.694952][ T3314] veth1_vlan: entered promiscuous mode [ 39.705563][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.715289][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.725033][ T3318] veth0_macvtap: entered promiscuous mode [ 39.743809][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.752039][ T3318] veth1_macvtap: entered promiscuous mode [ 39.760969][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.772767][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.786448][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.796115][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.813586][ T1673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.830515][ T3316] veth0_macvtap: entered promiscuous mode [ 39.838537][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.849696][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.861262][ T3316] veth1_macvtap: entered promiscuous mode [ 39.874226][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.884204][ T3314] veth0_macvtap: entered promiscuous mode [ 39.899877][ T175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.909356][ T3314] veth1_macvtap: entered promiscuous mode [ 39.922395][ T175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.931877][ T175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.941101][ T175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.950233][ T175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.962090][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.972892][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.977583][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.997407][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.004963][ T175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.014023][ T175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.032009][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.052599][ T1817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.090575][ T1817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.111380][ T3485] loop2: detected capacity change from 0 to 512 [ 40.141128][ T1817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.141363][ T3485] ======================================================= [ 40.141363][ T3485] WARNING: The mand mount option has been deprecated and [ 40.141363][ T3485] and is ignored by this kernel. Remove the mand [ 40.141363][ T3485] option from the mount to silence this warning. [ 40.141363][ T3485] ======================================================= [ 40.150240][ T1817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.206460][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 40.206484][ T29] audit: type=1400 audit(1760355977.251:99): avc: denied { create } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.241752][ T29] audit: type=1400 audit(1760355977.261:100): avc: denied { connect } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.261426][ T29] audit: type=1400 audit(1760355977.261:101): avc: denied { name_connect } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 40.281617][ T29] audit: type=1400 audit(1760355977.261:102): avc: denied { listen } for pid=3487 comm="syz.3.4" lport=43819 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.304569][ T29] audit: type=1400 audit(1760355977.261:103): avc: denied { accept } for pid=3487 comm="syz.3.4" lport=43819 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.307510][ T3485] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 40.327580][ T29] audit: type=1400 audit(1760355977.271:104): avc: denied { write } for pid=3487 comm="syz.3.4" lport=43819 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 40.344669][ T1817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.360184][ T29] audit: type=1400 audit(1760355977.271:105): avc: denied { setopt } for pid=3487 comm="syz.3.4" lport=43819 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 40.399269][ T29] audit: type=1400 audit(1760355977.431:106): avc: denied { open } for pid=3494 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.418517][ T29] audit: type=1400 audit(1760355977.431:107): avc: denied { kernel } for pid=3494 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.447749][ T1817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.511897][ T1817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.521904][ T3503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 40.525655][ T29] audit: type=1400 audit(1760355977.481:108): avc: denied { mount } for pid=3483 comm="syz.2.3" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.532398][ T3495] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 40.560105][ T3495] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.6'. [ 40.587472][ T1817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.606857][ T3505] netlink: 'syz.2.8': attribute type 13 has an invalid length. [ 40.705328][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 40.714198][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 40.780397][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.787895][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.843935][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.844485][ T3530] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 40.862570][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.943487][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 41.020231][ T1841] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.042373][ T1841] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.060887][ T3525] Zero length message leads to an empty skb [ 41.067117][ T1841] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.100019][ T1841] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.245866][ T3555] syz.3.20 (3555) used greatest stack depth: 10400 bytes left [ 41.356360][ T3564] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.653385][ T3586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 41.666324][ T3586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 41.945789][ T3610] netlink: 'syz.3.36': attribute type 153 has an invalid length. [ 42.408417][ T3632] loop4: detected capacity change from 0 to 1024 [ 42.441726][ T3632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.498786][ C0] hrtimer: interrupt took 31138 ns [ 42.519104][ T3642] syz.3.51 uses obsolete (PF_INET,SOCK_PACKET) [ 42.528258][ T3632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.617783][ T3645] loop2: detected capacity change from 0 to 1024 [ 42.625217][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.776003][ T3645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.817830][ T3645] syz.2.52 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.974148][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.333823][ T3667] netlink: 96 bytes leftover after parsing attributes in process `syz.4.60'. [ 43.345603][ T3669] random: crng reseeded on system resumption [ 43.468808][ T3678] wg2: entered promiscuous mode [ 43.473873][ T3678] wg2: entered allmulticast mode [ 43.657755][ T3692] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.027239][ T3728] 9p: Unknown access argument ¿: -22 [ 44.289869][ T3744] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 44.328849][ T3746] Driver unsupported XDP return value 0 on prog (id 89) dev N/A, expect packet loss! [ 44.894879][ T3776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 45.077433][ T3783] loop3: detected capacity change from 0 to 1024 [ 45.137212][ T3783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.249502][ T3790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 45.270762][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 45.270780][ T29] audit: type=1326 audit(1760355982.311:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 45.300496][ T29] audit: type=1326 audit(1760355982.311:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 45.324002][ T29] audit: type=1326 audit(1760355982.311:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 45.348400][ T29] audit: type=1326 audit(1760355982.311:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 45.371916][ T29] audit: type=1326 audit(1760355982.311:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 45.414340][ T29] audit: type=1400 audit(1760355982.461:382): avc: denied { bind } for pid=3793 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.434900][ T29] audit: type=1400 audit(1760355982.481:383): avc: denied { listen } for pid=3793 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.454718][ T29] audit: type=1400 audit(1760355982.481:384): avc: denied { read } for pid=3793 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.503857][ T3783] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.109: Allocating blocks 449-513 which overlap fs metadata [ 45.528123][ T3782] EXT4-fs (loop3): pa ffff888107658070: logic 48, phys. 177, len 21 [ 45.536326][ T3782] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 45.547008][ T3783] syz.3.109 (3783) used greatest stack depth: 10384 bytes left [ 45.558696][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.617889][ T29] audit: type=1400 audit(1760355982.661:385): avc: denied { write } for pid=3798 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.742396][ T29] audit: type=1400 audit(1760355982.791:386): avc: denied { write } for pid=3802 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 46.266839][ T3828] capability: warning: `syz.4.129' uses deprecated v2 capabilities in a way that may be insecure [ 46.307123][ T3833] loop1: detected capacity change from 0 to 1024 [ 46.322663][ T3833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.350698][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.420429][ T3846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.134'. [ 46.497456][ T3855] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.505729][ T3855] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 46.631684][ T3857] futex_wake_op: syz.1.140 tries to shift op by 144; fix this program [ 46.711474][ T3864] loop3: detected capacity change from 0 to 512 [ 46.718203][ T3864] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.735614][ T3864] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.741947][ T3866] vlan2: entered allmulticast mode [ 46.748858][ T3864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.756481][ T3866] dummy0: entered allmulticast mode [ 46.771736][ T3864] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.143: iget: bogus i_mode (2355) [ 46.785438][ T3864] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.143: couldn't read orphan inode 15 (err -117) [ 46.797848][ T3864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.904596][ T3872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 46.923927][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.010759][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.110033][ T3891] loop3: detected capacity change from 0 to 1024 [ 47.117309][ T3892] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 47.147644][ T3891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.162597][ T3892] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 47.208558][ T3891] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.361923][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.577789][ T3920] all: renamed from lo (while UP) [ 47.627722][ T3926] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 47.637853][ T3928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 47.638803][ T3926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 47.654689][ T3928] netlink: 236 bytes leftover after parsing attributes in process `syz.4.166'. [ 47.768761][ T3934] process 'syz.1.169' launched './file0' with NULL argv: empty string added [ 48.193326][ T4009] veth2: entered promiscuous mode [ 48.198521][ T4009] veth2: entered allmulticast mode [ 48.465785][ T4034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4034 comm=syz.2.189 [ 48.646336][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.653923][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.743418][ T4046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.755922][ T4046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.810222][ T3999] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.819385][ T3999] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.831784][ T3999] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.841115][ T3999] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.066116][ T4078] tipc: Started in network mode [ 49.071242][ T4078] tipc: Node identity ac14140f, cluster identity 4711 [ 49.078490][ T4078] tipc: New replicast peer: 255.255.255.255 [ 49.084807][ T4078] tipc: Enabled bearer , priority 10 [ 49.699285][ T4107] loop4: detected capacity change from 0 to 1024 [ 49.722240][ T4107] EXT4-fs: inline encryption not supported [ 49.753638][ T4107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.797222][ T4114] loop1: detected capacity change from 0 to 1024 [ 49.853558][ T4114] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.864783][ T4114] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.881455][ T4117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 49.905567][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.906446][ T4114] JBD2: no valid journal superblock found [ 49.921549][ T4114] EXT4-fs (loop1): Could not load journal inode [ 50.022020][ T4114] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºueâÂ…W†¤ÃFct̹3 íL;-níýý’Û9çž;=çBŸ9gî=g&€ÂK”"öDÄå$b¤­¬YáXã¸;¿¿:Ý’¨Õ^ý-‰$Û×<>ɇ³'ÿ=ñý7Iì.¯¬wnáêùéjuöJ–Ÿ˜¿pybnáês¦ÏΞ½8õÜÔÑ#‡ p4 [ 58.504039][ T3305] loop4: p4 size 262144 extends beyond EOD, truncated [ 58.559828][ T4459] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 58.737369][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 58.762101][ T4470] atomic_op ffff88812e8ac928 conn xmit_atomic 0000000000000000 [ 59.403928][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 59.406543][ T4497] netlink: 'wÞ££‘': attribute type 39 has an invalid length. [ 59.466427][ T4499] loop0: detected capacity change from 0 to 512 [ 59.476886][ T4499] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.494878][ T4499] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 59.509820][ T4499] EXT4-fs (loop0): 1 truncate cleaned up [ 59.516261][ T4499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.575240][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.593539][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 59.597130][ T4507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4507 comm=syz.2.365 [ 59.672475][ T4510] loop0: detected capacity change from 0 to 1024 [ 59.690414][ T4510] EXT4-fs: Ignoring removed oldalloc option [ 59.696553][ T4510] EXT4-fs: Ignoring removed bh option [ 59.723315][ T4510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.805887][ T4520] loop2: detected capacity change from 0 to 1024 [ 59.813894][ T4520] EXT4-fs: Ignoring removed nobh option [ 59.831680][ T4520] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.853213][ T4520] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.369: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 59.880976][ T4520] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.369: couldn't read orphan inode 11 (err -117) [ 59.929937][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.954574][ T4520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.017254][ T4520] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.369: Invalid block bitmap block 0 in block_group 0 [ 60.053543][ T4520] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.369: Failed to acquire dquot type 0 [ 60.092115][ T4530] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.371'. [ 60.101465][ T4530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'. [ 60.124700][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.138392][ T3962] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:32: Failed to release dquot type 0 [ 60.274625][ T4537] netlink: 120 bytes leftover after parsing attributes in process `syz.1.375'. [ 60.826071][ T4590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 61.084696][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 61.084715][ T29] audit: type=1326 audit(1760355998.131:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.287981][ T29] audit: type=1326 audit(1760355998.171:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.311411][ T29] audit: type=1326 audit(1760355998.171:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.334931][ T29] audit: type=1326 audit(1760355998.191:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.358521][ T29] audit: type=1326 audit(1760355998.191:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.364933][ T4643] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 61.382299][ T29] audit: type=1326 audit(1760355998.201:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.413314][ T29] audit: type=1326 audit(1760355998.201:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.436976][ T29] audit: type=1326 audit(1760355998.201:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.460965][ T29] audit: type=1326 audit(1760355998.201:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.484827][ T29] audit: type=1326 audit(1760355998.211:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 61.581246][ T4645] bond1: (slave veth3): Enslaving as an active interface with a down link [ 61.618991][ T4648] bond1: entered promiscuous mode [ 61.624481][ T4648] bond1: entered allmulticast mode [ 61.660901][ T4648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.736555][ T4661] loop2: detected capacity change from 0 to 512 [ 61.744895][ T4663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.395'. [ 61.787951][ T4661] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.801838][ T4667] sch_tbf: burst 127 is lower than device ip6tnl0 mtu (1452) ! [ 61.854367][ T3321] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 61.884066][ T4675] siw: device registration error -23 [ 61.907436][ T4675] loop0: detected capacity change from 0 to 512 [ 61.933343][ T4675] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.399: EA inode hash validation failed [ 61.963052][ T4675] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.399: corrupted inode contents [ 62.047717][ T4675] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #15: comm syz.0.399: mark_inode_dirty error [ 62.129305][ T4675] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.399: corrupted inode contents [ 62.153039][ T4675] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.399: mark_inode_dirty error [ 62.194122][ T4675] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.399: mark inode dirty (error -117) [ 62.219573][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 62.229132][ T4675] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 62.242909][ T4675] EXT4-fs (loop0): 1 orphan inode deleted [ 62.256887][ T4675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.279116][ T4675] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.472174][ T4716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.417'. [ 62.568398][ T4724] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 62.610616][ T4724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.619855][ T4725] lo speed is unknown, defaulting to 1000 [ 62.626086][ T4725] lo speed is unknown, defaulting to 1000 [ 62.632301][ T4725] lo speed is unknown, defaulting to 1000 [ 62.639365][ T4725] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 62.654102][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 62.663529][ T4724] bond1: (slave batadv1): making interface the new active one [ 62.707091][ T4724] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 62.774892][ T4725] lo speed is unknown, defaulting to 1000 [ 62.811192][ T4725] lo speed is unknown, defaulting to 1000 [ 62.817316][ T4725] lo speed is unknown, defaulting to 1000 [ 62.827881][ T4735] GUP no longer grows the stack in syz.3.424 (4735): 200000003000-20000000a000 (200000001000) [ 62.838580][ T4735] CPU: 0 UID: 0 PID: 4735 Comm: syz.3.424 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.838617][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.838635][ T4735] Call Trace: [ 62.838644][ T4735] [ 62.838656][ T4735] __dump_stack+0x1d/0x30 [ 62.838685][ T4735] dump_stack_lvl+0xe8/0x140 [ 62.838705][ T4735] dump_stack+0x15/0x1b [ 62.838753][ T4735] __get_user_pages+0x1968/0x1ed0 [ 62.838794][ T4735] ? bpf_trace_run3+0x12c/0x1d0 [ 62.838841][ T4735] ? __bpf_trace_mmap_lock_acquire_returned+0x28/0x40 [ 62.838947][ T4735] __gup_longterm_locked+0x8ef/0xe60 [ 62.839035][ T4735] ? __rcu_read_unlock+0x34/0x70 [ 62.839148][ T4735] ? try_get_folio+0x379/0x3c0 [ 62.839186][ T4735] ? try_grab_folio_fast+0xdc/0x370 [ 62.839225][ T4735] gup_fast_fallback+0x1f5/0x1420 [ 62.839379][ T4735] get_user_pages_fast+0x5f/0x90 [ 62.839409][ T4735] __iov_iter_get_pages_alloc+0x250/0x730 [ 62.839451][ T4735] ? __rcu_read_unlock+0x4f/0x70 [ 62.839484][ T4735] iov_iter_get_pages2+0x5e/0xa0 [ 62.839522][ T4735] __se_sys_vmsplice+0x4db/0xee0 [ 62.839663][ T4735] __x64_sys_vmsplice+0x55/0x70 [ 62.839695][ T4735] x64_sys_call+0x1dde/0x3000 [ 62.839725][ T4735] do_syscall_64+0xd2/0x200 [ 62.839773][ T4735] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.839822][ T4735] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.839855][ T4735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.839901][ T4735] RIP: 0033:0x7f017615eec9 [ 62.839936][ T4735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.839967][ T4735] RSP: 002b:00007f0174bbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 62.839994][ T4735] RAX: ffffffffffffffda RBX: 00007f01763b5fa0 RCX: 00007f017615eec9 [ 62.840007][ T4735] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 62.840021][ T4735] RBP: 00007f01761e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 62.840033][ T4735] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 62.840046][ T4735] R13: 00007f01763b6038 R14: 00007f01763b5fa0 R15: 00007ffd3fa15458 [ 62.840207][ T4735] [ 63.061202][ T4725] lo speed is unknown, defaulting to 1000 [ 63.107093][ T4725] lo speed is unknown, defaulting to 1000 [ 63.204429][ T4742] loop2: detected capacity change from 0 to 2048 [ 63.264704][ T4742] loop2: p1 < > p4 [ 63.269639][ T4742] loop2: p4 size 8388608 extends beyond EOD, truncated [ 63.296668][ T4749] team0 (unregistering): Port device team_slave_0 removed [ 63.327557][ T4749] team0 (unregistering): Port device team_slave_1 removed [ 63.344090][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 63.367394][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 63.386542][ T4754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'. [ 63.388649][ T4687] udevd[4687]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.417938][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 63.441691][ T4756] loop4: detected capacity change from 0 to 512 [ 63.442768][ T4687] udevd[4687]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.505957][ T4756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.546193][ T4756] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.588130][ T4756] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.433: corrupted inode contents [ 63.613627][ T4756] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #2: comm syz.4.433: mark_inode_dirty error [ 63.634243][ T4756] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.433: corrupted inode contents [ 63.660968][ T4765] veth0: entered promiscuous mode [ 63.671252][ T4765] veth0: left promiscuous mode [ 63.717859][ T4756] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.433: corrupted inode contents [ 63.736509][ T4771] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 63.748220][ T4774] netlink: 'syz.3.441': attribute type 5 has an invalid length. [ 63.758111][ T4756] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #2: comm syz.4.433: mark_inode_dirty error [ 63.770056][ T4756] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.433: corrupted inode contents [ 63.782550][ T4756] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.433: mark_inode_dirty error [ 63.804399][ T4756] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.433: corrupted inode contents [ 63.816880][ T4756] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #2: comm syz.4.433: mark_inode_dirty error [ 63.841071][ T4781] veth2: entered promiscuous mode [ 63.846169][ T4781] veth2: entered allmulticast mode [ 63.853193][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.040206][ T4804] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 64.115352][ T4811] syzkaller0: entered allmulticast mode [ 64.122796][ T4811] syzkaller0: entered promiscuous mode [ 64.127764][ T4809] loop2: detected capacity change from 0 to 512 [ 64.140448][ T4811] syzkaller0 (unregistering): left allmulticast mode [ 64.147798][ T4811] syzkaller0 (unregistering): left promiscuous mode [ 64.173635][ T4801] loop0: detected capacity change from 0 to 2048 [ 64.199937][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 64.214664][ T4801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.270354][ T4813] lo speed is unknown, defaulting to 1000 [ 64.396409][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.769016][ T4849] loop3: detected capacity change from 0 to 2048 [ 64.801499][ T4849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.861612][ T4849] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 64.921335][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.024797][ T4863] sch_tbf: burst 127 is lower than device ip6tnl0 mtu (1452) ! [ 65.396589][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 65.716159][ T4923] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 65.853287][ T4937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 66.039063][ T4948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.506'. [ 66.048390][ T4948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.506'. [ 66.057326][ T4948] netlink: 'syz.4.506': attribute type 6 has an invalid length. [ 66.176152][ T4961] syzkaller0: entered allmulticast mode [ 66.184542][ T4961] syzkaller0: entered promiscuous mode [ 66.195304][ T4961] syzkaller0 (unregistering): left allmulticast mode [ 66.202416][ T4961] syzkaller0 (unregistering): left promiscuous mode [ 66.258395][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 66.258413][ T29] audit: type=1400 audit(1760356003.301:1564): avc: denied { getopt } for pid=4967 comm="syz.1.516" lport=58829 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 66.358832][ T29] audit: type=1400 audit(1760356003.401:1565): avc: denied { load_policy } for pid=4971 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.392819][ T4972] SELinux: failed to load policy [ 66.435785][ T29] audit: type=1400 audit(1760356003.481:1566): avc: denied { mount } for pid=4979 comm="syz.1.522" name="/" dev="ramfs" ino=10415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.521515][ T29] audit: type=1326 audit(1760356003.571:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 66.545083][ T29] audit: type=1326 audit(1760356003.571:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 66.620354][ T29] audit: type=1326 audit(1760356003.571:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 66.643847][ T29] audit: type=1326 audit(1760356003.571:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 66.667668][ T29] audit: type=1326 audit(1760356003.571:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 66.690959][ T29] audit: type=1326 audit(1760356003.571:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 66.714337][ T29] audit: type=1326 audit(1760356003.571:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 67.277417][ T5025] loop0: detected capacity change from 0 to 1024 [ 67.306758][ T5025] EXT4-fs: Ignoring removed nobh option [ 67.317010][ T5025] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.357714][ T5025] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.539: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 67.406659][ T5025] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.539: couldn't read orphan inode 11 (err -117) [ 67.460079][ T5025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.561931][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.407448][ T5058] loop2: detected capacity change from 0 to 1024 [ 68.415915][ T5056] loop3: detected capacity change from 0 to 1024 [ 68.422860][ T5058] EXT4-fs: inline encryption not supported [ 68.428793][ T5058] EXT4-fs: Ignoring removed i_version option [ 68.435220][ T5056] EXT4-fs: Ignoring removed nobh option [ 68.441550][ T5056] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.455804][ T5056] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.553: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 68.475432][ T5056] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.553: couldn't read orphan inode 11 (err -117) [ 68.489194][ T5056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.503705][ T5058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.532162][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.547094][ T5058] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 68.579173][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.867922][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 68.881009][ T5088] loop3: detected capacity change from 0 to 512 [ 68.894299][ T5088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.914068][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 68.939047][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.013137][ T5095] netlink: 'syz.3.563': attribute type 4 has an invalid length. [ 69.131292][ T5101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.204047][ T5101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.282502][ T5101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.402992][ T5101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.528783][ T5109] lo speed is unknown, defaulting to 1000 [ 69.541677][ T3996] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.591939][ T3996] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.600418][ T3996] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.676482][ T3996] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.684894][ T5114] lo speed is unknown, defaulting to 1000 [ 69.864189][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 69.881780][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 69.896265][ T5137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 69.984002][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 70.043632][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 70.138094][ T5139] tipc: Started in network mode [ 70.143224][ T5139] tipc: Node identity ac141413, cluster identity 4711 [ 70.151634][ T5139] tipc: New replicast peer: 10.1.1.2 [ 70.152130][ T5161] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 70.157416][ T5139] tipc: Enabled bearer , priority 10 [ 70.244367][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 70.261403][ T5169] team1: entered promiscuous mode [ 70.266593][ T5169] team1: entered allmulticast mode [ 70.272348][ T5169] 8021q: adding VLAN 0 to HW filter on device team1 [ 70.414421][ T5181] netlink: 'syz.4.598': attribute type 5 has an invalid length. [ 70.517015][ T5186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'. [ 70.544070][ T5188] loop3: detected capacity change from 0 to 1024 [ 70.550606][ T5186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 70.564601][ T5188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.580549][ T5188] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.609767][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.668668][ T5199] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 70.741215][ T5204] loop2: detected capacity change from 0 to 512 [ 70.751451][ T5204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.763138][ T5204] EXT4-fs (loop2): 1 truncate cleaned up [ 70.771692][ T5204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.948597][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.988613][ T5207] loop2: detected capacity change from 0 to 128 [ 70.997051][ T5207] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.011349][ T5207] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.098232][ T5209] SELinux: failed to load policy [ 71.160737][ T3395] tipc: Node number set to 2886997011 [ 71.271132][ T5242] netlink: 'syz.1.613': attribute type 13 has an invalid length. [ 71.278948][ T5242] netlink: 'syz.1.613': attribute type 17 has an invalid length. [ 71.327128][ T5242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.399517][ T29] kauditd_printk_skb: 925 callbacks suppressed [ 71.399536][ T29] audit: type=1400 audit(1760356008.441:2499): avc: denied { bind } for pid=5256 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.439360][ T29] audit: type=1400 audit(1760356008.441:2500): avc: denied { name_bind } for pid=5256 comm="syz.1.615" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 71.460290][ T29] audit: type=1400 audit(1760356008.441:2501): avc: denied { node_bind } for pid=5256 comm="syz.1.615" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 71.482840][ T29] audit: type=1400 audit(1760356008.451:2502): avc: denied { write } for pid=5256 comm="syz.1.615" name="icmp" dev="proc" ino=4026532696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.505643][ T29] audit: type=1400 audit(1760356008.451:2503): avc: denied { write } for pid=5256 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.584958][ T5270] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.619393][ T29] audit: type=1400 audit(1760356008.661:2504): avc: denied { create } for pid=5276 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.641731][ T29] audit: type=1400 audit(1760356008.691:2505): avc: denied { connect } for pid=5276 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.691662][ T5283] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 71.713957][ T29] audit: type=1400 audit(1760356008.711:2506): avc: denied { write } for pid=5276 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.741923][ T5270] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.816606][ T5283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.852658][ T5296] veth7: entered promiscuous mode [ 71.889928][ T5296] bond2: (slave veth7): Enslaving as an active interface with a down link [ 71.941684][ T5270] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.974453][ T5283] bond2: entered allmulticast mode [ 72.022752][ T5270] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.120122][ T3996] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.158261][ T3996] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.183123][ T3996] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.206100][ T3996] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.473782][ T29] audit: type=1400 audit(1760356009.521:2507): avc: denied { setopt } for pid=5359 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.480792][ T5356] loop0: detected capacity change from 0 to 764 [ 72.525465][ T29] audit: type=1400 audit(1760356009.571:2508): avc: denied { mount } for pid=5355 comm="syz.0.632" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 72.556674][ T5356] rock: directory entry would overflow storage [ 72.563117][ T5356] rock: sig=0x4f50, size=4, remaining=3 [ 72.568697][ T5356] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 73.642135][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.867797][ T5434] 8021q: adding VLAN 0 to HW filter on device bond4 [ 73.876683][ T5434] bond3: (slave bond4): Enslaving as an active interface with an up link [ 73.896500][ T5434] __nla_validate_parse: 4 callbacks suppressed [ 73.896519][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 73.914119][ T5434] bond3 (unregistering): (slave bond4): Releasing backup interface [ 73.924009][ T5434] bond3 (unregistering): Released all slaves [ 73.963099][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.970379][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.984477][ T5441] loop0: detected capacity change from 0 to 1024 [ 73.997735][ T5441] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.007850][ T5441] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.018876][ T5441] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.037529][ T5439] bridge_slave_0: left allmulticast mode [ 74.043688][ T5439] bridge_slave_0: left promiscuous mode [ 74.049584][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.051400][ T5441] JBD2: no valid journal superblock found [ 74.062604][ T5441] EXT4-fs (loop0): Could not load journal inode [ 74.072577][ T5439] bridge_slave_1: left allmulticast mode [ 74.078286][ T5439] bridge_slave_1: left promiscuous mode [ 74.084095][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.094695][ T5439] bond0: (slave bond_slave_0): Releasing backup interface [ 74.104441][ T5439] bond0: (slave bond_slave_1): Releasing backup interface [ 74.118088][ T5439] team0: Port device team_slave_0 removed [ 74.127254][ T5439] team0: Port device team_slave_1 removed [ 74.134822][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.143376][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.152526][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.161684][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.172450][ T5439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.253770][ T5449] netlink: 'syz.0.652': attribute type 39 has an invalid length. [ 74.271731][ T5452] netlink: 36 bytes leftover after parsing attributes in process `GPL'. [ 74.283339][ T5452] netlink: 12 bytes leftover after parsing attributes in process `GPL'. [ 74.372821][ T5463] loop3: detected capacity change from 0 to 1024 [ 74.392812][ T5463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.418883][ T5469] syzkaller0: entered allmulticast mode [ 74.425799][ T5469] syzkaller0: entered promiscuous mode [ 74.434138][ T5463] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.445633][ T5469] syzkaller0 (unregistering): left allmulticast mode [ 74.452651][ T5469] syzkaller0 (unregistering): left promiscuous mode [ 74.610039][ T5478] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.624750][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 74.658440][ T5478] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.689288][ T5485] loop4: detected capacity change from 0 to 512 [ 74.708621][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 74.709288][ T5485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.754749][ T5485] EXT4-fs (loop4): 1 truncate cleaned up [ 74.771578][ T5485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.794813][ T5478] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.814296][ T5492] loop0: detected capacity change from 0 to 1024 [ 74.851322][ T5492] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.862538][ T5492] EXT4-fs (loop0): group descriptors corrupted! [ 74.872098][ T5478] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.906397][ T5492] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 74.930821][ T5496] loop2: detected capacity change from 0 to 512 [ 74.976569][ T5496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.989463][ T5496] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.020879][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.062060][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.117158][ T5508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'. [ 75.141829][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 75.154086][ T5511] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 75.161951][ T5511] netlink: 'syz.3.674': attribute type 4 has an invalid length. [ 75.169746][ T5511] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.674'. [ 75.185563][ T5510] netlink: 19 bytes leftover after parsing attributes in process `syz.2.676'. [ 75.362575][ T5526] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.535290][ T5533] veth6: entered promiscuous mode [ 75.540532][ T5533] veth6: entered allmulticast mode [ 75.575635][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 76.688775][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 76.688835][ T29] audit: type=1326 audit(1760356013.731:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 76.719556][ T29] audit: type=1326 audit(1760356013.731:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 76.743377][ T29] audit: type=1326 audit(1760356013.731:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 76.767126][ T29] audit: type=1326 audit(1760356013.731:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 76.790686][ T29] audit: type=1326 audit(1760356013.731:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 76.814123][ T29] audit: type=1326 audit(1760356013.731:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 76.837831][ T29] audit: type=1326 audit(1760356013.731:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 76.861367][ T29] audit: type=1326 audit(1760356013.741:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 76.884975][ T29] audit: type=1326 audit(1760356013.741:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 76.908696][ T29] audit: type=1326 audit(1760356013.741:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe495b8eec9 code=0x7ffc0000 [ 77.257518][ T5640] loop2: detected capacity change from 0 to 512 [ 77.259055][ T5638] macsec0: entered promiscuous mode [ 77.269315][ T5638] bridge0: entered promiscuous mode [ 77.277631][ T5638] bridge0: port 1(macsec0) entered blocking state [ 77.284243][ T5638] bridge0: port 1(macsec0) entered disabled state [ 77.297777][ T5638] macsec0: entered allmulticast mode [ 77.303431][ T5638] bridge0: entered allmulticast mode [ 77.310292][ T5638] macsec0: left allmulticast mode [ 77.315544][ T5638] bridge0: left allmulticast mode [ 77.323211][ T5638] bridge0: left promiscuous mode [ 77.334960][ T5640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.364753][ T5640] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.416351][ T5634] lo speed is unknown, defaulting to 1000 [ 77.452814][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.484224][ T3996] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.496926][ T5660] bridge: RTM_NEWNEIGH with invalid ether address [ 77.520421][ T3994] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.541475][ T5663] pim6reg1: entered promiscuous mode [ 77.547109][ T5663] pim6reg1: entered allmulticast mode [ 77.568133][ T3996] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.588641][ T3994] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.599290][ T5665] loop2: detected capacity change from 0 to 512 [ 77.617290][ T5665] journal_path: Non-blockdev passed as './bus' [ 77.623674][ T5665] EXT4-fs: error: could not find journal device path [ 77.634954][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.834103][ T5677] loop4: detected capacity change from 0 to 2048 [ 77.875849][ T5684] netlink: 'syz.0.732': attribute type 39 has an invalid length. [ 77.884997][ T5677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 77.937320][ T5686] loop2: detected capacity change from 0 to 8192 [ 77.954307][ T5686] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.035817][ T5677] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.060431][ T5677] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1444 with error 28 [ 78.073515][ T5677] EXT4-fs (loop4): This should not happen!! Data will be lost [ 78.073515][ T5677] [ 78.083821][ T5677] EXT4-fs (loop4): Total free blocks count 0 [ 78.090167][ T5677] EXT4-fs (loop4): Free/Dirty block details [ 78.096560][ T5677] EXT4-fs (loop4): free_blocks=2415919104 [ 78.102489][ T5677] EXT4-fs (loop4): dirty_blocks=1456 [ 78.108362][ T5677] EXT4-fs (loop4): Block reservation details [ 78.114492][ T5677] EXT4-fs (loop4): i_reserved_data_blocks=91 [ 78.323155][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 78.738958][ T5760] loop3: detected capacity change from 0 to 128 [ 78.758829][ T5760] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.812516][ T5755] lo speed is unknown, defaulting to 1000 [ 78.961161][ T5763] lo speed is unknown, defaulting to 1000 [ 79.038842][ T5787] netlink: 'syz.4.752': attribute type 1 has an invalid length. [ 79.083516][ T5787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.124702][ T5787] bond3: (slave ip6gretap1): making interface the new active one [ 79.133945][ T5787] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 79.153224][ T5787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5787 comm=syz.4.752 [ 79.222126][ T5806] __nla_validate_parse: 5 callbacks suppressed [ 79.222141][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 79.344279][ T5801] lo speed is unknown, defaulting to 1000 [ 79.860221][ T5852] SELinux: ebitmap: truncated map [ 79.868255][ T5852] SELinux: failed to load policy [ 80.009703][ T5865] netlink: 'syz.2.772': attribute type 30 has an invalid length. [ 80.054983][ T5857] loop0: detected capacity change from 0 to 512 [ 80.069445][ T5857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 80.080247][ T5857] System zones: 1-12 [ 80.084776][ T5857] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.768: Directory hole found for htree index block 0 [ 80.100704][ T5857] EXT4-fs (loop0): Remounting filesystem read-only [ 80.107374][ T5857] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 80.120717][ T5857] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 80.130449][ T5857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.154453][ T5857] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 80.190903][ T5878] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.215687][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.241031][ T5880] serio: Serial port ptm0 [ 80.252848][ T5878] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.322648][ T5878] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.372745][ T5878] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.407857][ T5884] lo speed is unknown, defaulting to 1000 [ 80.441006][ T3994] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.458080][ T3994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.471029][ T3994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.515144][ T3994] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.684898][ T5904] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.788'. [ 80.791013][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 80.930923][ T5926] loop3: detected capacity change from 0 to 512 [ 80.938941][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.796'. [ 80.962355][ T5926] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.989846][ T5925] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5925 comm=syz.4.796 [ 81.004435][ T5926] EXT4-fs (loop3): 1 truncate cleaned up [ 81.011358][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.150138][ T5932] lo speed is unknown, defaulting to 1000 [ 81.179084][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.378911][ T5939] netlink: 'syz.4.800': attribute type 27 has an invalid length. [ 81.479018][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.486389][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.566491][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.594880][ T5945] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 81.603328][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.646029][ T5948] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 81.669686][ T5939] veth2: left promiscuous mode [ 81.675051][ T5939] veth2: left allmulticast mode [ 81.690916][ T5939] team1: left promiscuous mode [ 81.695814][ T5939] team1: left allmulticast mode [ 81.716767][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.752805][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.765834][ T5941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.783736][ T5945] team0: Port device dummy0 added [ 81.790002][ T5948] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 81.829774][ T5948] team0: Failed to send options change via netlink (err -105) [ 81.840026][ T5948] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 81.849263][ T5948] team0: Port device dummy0 removed [ 81.857755][ T5948] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 81.894831][ T175] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.912591][ T175] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.921491][ T175] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.941466][ T175] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.970127][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 81.970144][ T29] audit: type=1400 audit(1760356019.011:2755): avc: denied { listen } for pid=5956 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.075571][ T5960] lo speed is unknown, defaulting to 1000 [ 82.139230][ T29] audit: type=1400 audit(1760356019.181:2756): avc: denied { connect } for pid=5971 comm="syz.3.814" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.159895][ T29] audit: type=1400 audit(1760356019.181:2757): avc: denied { write } for pid=5971 comm="syz.3.814" laddr=fe80::b lport=2 faddr=::1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.192962][ T29] audit: type=1326 audit(1760356019.241:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 82.216831][ T29] audit: type=1326 audit(1760356019.241:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 82.250507][ T29] audit: type=1326 audit(1760356019.261:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 82.274514][ T29] audit: type=1326 audit(1760356019.261:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 82.298133][ T29] audit: type=1326 audit(1760356019.261:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 82.321883][ T29] audit: type=1326 audit(1760356019.261:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 82.345507][ T29] audit: type=1326 audit(1760356019.261:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5975 comm="syz.3.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017615eec9 code=0x7ffc0000 [ 82.488234][ T5988] syzkaller0: entered promiscuous mode [ 82.493840][ T5988] syzkaller0: entered allmulticast mode [ 82.507474][ T5986] geneve2: entered promiscuous mode [ 82.512856][ T5986] geneve2: entered allmulticast mode [ 82.536171][ T3996] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.546979][ T3996] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.586064][ T3996] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.601031][ T3996] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 82.692705][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 82.718760][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.737683][ T5998] loop4: detected capacity change from 0 to 128 [ 82.745208][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.757786][ T5998] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.774984][ T5998] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.922733][ T6013] ÿÿÿÿÿÿ: renamed from vlan1 [ 83.008545][ T6020] binfmt_misc: register: failed to install interpreter file ./file2 [ 83.058402][ T6032] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 83.079866][ T6032] bond2: entered promiscuous mode [ 83.085391][ T6032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.107401][ T6032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.115256][ T6032] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 83.125902][ T6032] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 83.146949][ T6032] bond2: (slave wireguard0): making interface the new active one [ 83.154818][ T6032] wireguard0: entered promiscuous mode [ 83.159692][ T6045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.167567][ T6045] IPv6: NLM_F_CREATE should be set when creating new route [ 83.174799][ T6045] IPv6: NLM_F_CREATE should be set when creating new route [ 83.182654][ T6045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.184310][ T6032] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 83.205223][ T6045] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 83.218662][ T6045] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 83.285526][ T6004] lo speed is unknown, defaulting to 1000 [ 83.373384][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.835'. [ 83.412148][ T6063] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6063 comm=syz.2.835 [ 83.530036][ T6080] netlink: 96 bytes leftover after parsing attributes in process `syz.3.840'. [ 83.651580][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 83.703075][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 83.856380][ T6123] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 83.904741][ T6123] bond2: entered promiscuous mode [ 83.910268][ T6123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.937252][ T6123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.947911][ T6123] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 83.958901][ T6123] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 83.978959][ T6123] bond2: (slave wireguard0): making interface the new active one [ 83.986818][ T6123] wireguard0: entered promiscuous mode [ 83.987020][ T6140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.999645][ T6140] IPv6: NLM_F_CREATE should be set when creating new route [ 84.006958][ T6140] IPv6: NLM_F_CREATE should be set when creating new route [ 84.023416][ T6140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.025951][ T6123] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 84.053332][ T6140] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 84.093231][ T6140] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 84.164441][ T6127] lo speed is unknown, defaulting to 1000 [ 84.245022][ T6134] lo speed is unknown, defaulting to 1000 [ 84.422455][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 84.440110][ T6138] lo speed is unknown, defaulting to 1000 [ 84.557585][ T6194] Invalid ELF header magic: != ELF [ 84.993485][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 85.019255][ T6243] netlink: 'syz.3.871': attribute type 12 has an invalid length. [ 85.165529][ T6248] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 85.184232][ T6248] team0: Port device dummy0 added [ 85.199821][ T6248] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 85.208391][ T6253] netem: change failed [ 85.219901][ T6248] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.234147][ T6248] team0: Failed to send options change via netlink (err -105) [ 85.245938][ T6248] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.256468][ T6248] team0: Port device dummy0 removed [ 85.302222][ T6248] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.303348][ T6258] SELinux: failed to load policy [ 85.354701][ T6264] netlink: 96 bytes leftover after parsing attributes in process `syz.2.882'. [ 85.368547][ T6266] loop0: detected capacity change from 0 to 512 [ 85.386543][ T6266] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.393831][ T6266] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.881: bad orphan inode 13 [ 85.414700][ T6266] ext4_test_bit(bit=12, block=18) = 1 [ 85.420323][ T6266] is_bad_inode(inode)=0 [ 85.424746][ T6266] NEXT_ORPHAN(inode)=2130706432 [ 85.429882][ T6266] max_ino=32 [ 85.433432][ T6266] i_nlink=1 [ 85.438994][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.440785][ T6266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.707509][ T6266] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 85.755260][ T6266] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.881: bg 0: block 248: padding at end of block bitmap is not set [ 85.792070][ T6266] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.881: Failed to acquire dquot type 1 [ 85.811558][ T6266] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.815534][ T6284] netlink: 14 bytes leftover after parsing attributes in process `syz.3.889'. [ 85.843896][ T6284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.869214][ T6284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.880350][ T6284] bond0 (unregistering): Released all slaves [ 85.902147][ T3396] syz0: Port: 1 Link DOWN [ 85.931173][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.058376][ T6301] netlink: 56 bytes leftover after parsing attributes in process `syz.1.896'. [ 86.093328][ T6303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.898'. [ 86.380309][ T6327] lo speed is unknown, defaulting to 1000 [ 86.431812][ T6332] vlan2: entered allmulticast mode [ 86.437144][ T6332] dummy0: entered allmulticast mode [ 86.536898][ T6341] Invalid ELF header magic: != ELF [ 86.656177][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 86.679411][ T6359] loop2: detected capacity change from 0 to 1024 [ 86.682413][ T6356] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.686582][ T6359] EXT4-fs: Ignoring removed orlov option [ 86.711277][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 86.723487][ T6359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.737740][ T6356] bond4 (unregistering): Released all slaves [ 86.746438][ T6359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.802665][ T6368] bridge: RTM_NEWNEIGH with invalid ether address [ 86.815659][ T6365] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 86.910523][ T6371] program syz.2.924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.986019][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 86.986038][ T29] audit: type=1400 audit(1760356280.029:2828): avc: denied { name_bind } for pid=6384 comm="syz.2.929" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 87.088615][ T6390] netlink: 'syz.1.932': attribute type 10 has an invalid length. [ 87.097782][ T6390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.932'. [ 87.108053][ T6390] dummy0: entered promiscuous mode [ 87.116466][ T6390] bond0: (slave dummy0): Releasing backup interface [ 87.129574][ T6390] bridge0: port 1(dummy0) entered blocking state [ 87.136817][ T6390] bridge0: port 1(dummy0) entered disabled state [ 87.196370][ T29] audit: type=1326 audit(1760356280.239:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 87.220417][ T29] audit: type=1326 audit(1760356280.239:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 87.243959][ T29] audit: type=1326 audit(1760356280.249:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 87.267390][ T29] audit: type=1326 audit(1760356280.249:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 87.290902][ T29] audit: type=1326 audit(1760356280.249:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 87.307085][ T6400] netlink: 660 bytes leftover after parsing attributes in process `syz.4.935'. [ 87.314304][ T29] audit: type=1326 audit(1760356280.249:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 87.314343][ T29] audit: type=1326 audit(1760356280.249:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 87.370275][ T29] audit: type=1326 audit(1760356280.249:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 87.393858][ T29] audit: type=1326 audit(1760356280.249:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6396 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 87.528453][ T6416] tipc: Started in network mode [ 87.533659][ T6416] tipc: Node identity 32f9312d3877, cluster identity 4711 [ 87.540984][ T6416] tipc: Enabled bearer , priority 0 [ 87.551169][ T6416] syzkaller0: MTU too low for tipc bearer [ 87.557315][ T6416] tipc: Disabling bearer [ 87.826302][ T6452] lo: entered allmulticast mode [ 87.834851][ T6452] macvlan0: entered allmulticast mode [ 87.842396][ T6451] lo: left allmulticast mode [ 87.918308][ T6463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6463 comm=syz.0.947 [ 88.108846][ T6492] loop2: detected capacity change from 0 to 128 [ 88.146309][ T6492] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.167261][ T6492] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.239835][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.352618][ T6519] loop3: detected capacity change from 0 to 512 [ 88.370620][ T6519] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.959: bad orphan inode 11862016 [ 88.400585][ T6519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.421041][ T3962] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.430189][ T6519] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.439000][ T3962] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.449290][ T3962] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.458012][ T3962] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.512818][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 88.609614][ T6553] loop3: detected capacity change from 0 to 1024 [ 88.722755][ T6553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.735877][ T6553] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.748956][ T6553] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #12: comm syz.3.963: directory missing '..' [ 89.221475][ T6580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.231932][ T6580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.241778][ T6580] bond0 (unregistering): Released all slaves [ 89.406292][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.754533][ T6618] pim6reg1: entered promiscuous mode [ 89.760140][ T6618] pim6reg1: entered allmulticast mode [ 89.863156][ T6626] __nla_validate_parse: 2 callbacks suppressed [ 89.863175][ T6626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.990'. [ 91.194567][ T6670] vlan2: entered allmulticast mode [ 91.200076][ T6670] dummy0: entered allmulticast mode [ 91.269938][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 91.278921][ T6672] bridge_slave_1: left allmulticast mode [ 91.284676][ T6672] bridge_slave_1: left promiscuous mode [ 91.290592][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.298980][ T6672] bridge_slave_0: left allmulticast mode [ 91.304713][ T6672] bridge_slave_0: left promiscuous mode [ 91.310741][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.325127][ T6674] netlink: 'syz.2.1008': attribute type 4 has an invalid length. [ 91.464325][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 91.662625][ T6692] tipc: Started in network mode [ 91.667660][ T6692] tipc: Node identity 4a207da2e3cf, cluster identity 4711 [ 91.675035][ T6692] tipc: Enabled bearer , priority 0 [ 91.712577][ T6695] loop4: detected capacity change from 0 to 1024 [ 91.722525][ T6692] tipc: Disabling bearer [ 91.722704][ T6695] EXT4-fs: Ignoring removed nobh option [ 91.734399][ T6695] EXT4-fs: inline encryption not supported [ 91.766911][ T6695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.787084][ T6695] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.1018: Allocating blocks 497-513 which overlap fs metadata [ 91.816312][ T6695] EXT4-fs (loop4): pa ffff888107658700: logic 16, phys. 129, len 24 [ 91.824445][ T6695] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 92.020390][ T6714] loop0: detected capacity change from 0 to 128 [ 92.031932][ T6714] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.047971][ T6714] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.119619][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 92.130130][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 92.131216][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.220419][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 92.220524][ T29] audit: type=1326 audit(1760356285.259:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4083eec9 code=0x7ffc0000 [ 92.264764][ T29] audit: type=1326 audit(1760356285.299:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1c4083eec9 code=0x7ffc0000 [ 92.288449][ T29] audit: type=1326 audit(1760356285.299:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c4083ef03 code=0x7ffc0000 [ 92.311878][ T29] audit: type=1326 audit(1760356285.299:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c4083d97f code=0x7ffc0000 [ 92.335219][ T29] audit: type=1326 audit(1760356285.299:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1c4083ef57 code=0x7ffc0000 [ 92.358617][ T29] audit: type=1326 audit(1760356285.299:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c4083d710 code=0x7ffc0000 [ 92.382259][ T29] audit: type=1326 audit(1760356285.299:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1c4083db2a code=0x7ffc0000 [ 92.406262][ T29] audit: type=1326 audit(1760356285.299:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4083eec9 code=0x7ffc0000 [ 92.430307][ T29] audit: type=1326 audit(1760356285.329:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c4083eec9 code=0x7ffc0000 [ 92.453857][ T29] audit: type=1326 audit(1760356285.329:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4083eec9 code=0x7ffc0000 [ 92.454352][ T6729] netlink: 'syz.1.1031': attribute type 83 has an invalid length. [ 92.507019][ T6731] netlink: 'syz.3.1032': attribute type 30 has an invalid length. [ 92.552730][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.611528][ T3996] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.637961][ T6733] lo speed is unknown, defaulting to 1000 [ 92.693571][ T6741] lo speed is unknown, defaulting to 1000 [ 92.800395][ T6749] loop4: detected capacity change from 0 to 128 [ 92.852157][ T6749] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.877327][ T6749] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.957436][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.002208][ T6754] lo speed is unknown, defaulting to 1000 [ 93.203877][ T6772] batadv_slave_1: entered promiscuous mode [ 93.210528][ T6770] batadv_slave_1: left promiscuous mode [ 93.729447][ T6780] lo speed is unknown, defaulting to 1000 [ 94.649613][ T6813] lo speed is unknown, defaulting to 1000 [ 94.690370][ T3781] Bluetooth: hci0: command 0x1003 tx timeout [ 94.692414][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.731103][ T6824] loop0: detected capacity change from 0 to 1024 [ 94.752417][ T6824] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.777725][ T6824] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1068: Invalid block bitmap block 0 in block_group 0 [ 94.831448][ T6824] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1068: Failed to acquire dquot type 0 [ 94.860822][ T6824] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.1068: Freeing blocks not in datazone - block = 0, count = 4096 [ 94.886996][ T6824] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1068: Invalid inode bitmap blk 0 in block_group 0 [ 94.922534][ T3962] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:32: Failed to release dquot type 0 [ 94.940609][ T6824] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 94.949569][ T6824] EXT4-fs (loop0): 1 orphan inode deleted [ 94.955998][ T6824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.059825][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.134949][ T6834] loop0: detected capacity change from 0 to 2048 [ 95.162342][ T6834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.178147][ T6834] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1070: bg 0: block 2: invalid block bitmap [ 95.217819][ T6834] EXT4-fs (loop0): Remounting filesystem read-only [ 95.321163][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.494883][ T6845] lo speed is unknown, defaulting to 1000 [ 95.931173][ T6857] netlink: 'syz.3.1079': attribute type 12 has an invalid length. [ 96.062439][ T6869] loop3: detected capacity change from 0 to 1024 [ 96.069415][ T6869] EXT4-fs: Ignoring removed bh option [ 96.075097][ T6869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.090176][ T6869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.110604][ T6872] lo: entered allmulticast mode [ 96.118402][ T6872] tunl0: entered allmulticast mode [ 96.124309][ T6872] gre0: entered allmulticast mode [ 96.130701][ T6872] gretap0: entered allmulticast mode [ 96.138009][ T6872] erspan0: entered allmulticast mode [ 96.147443][ T6872] ip_vti0: entered allmulticast mode [ 96.153965][ T6872] ip6_vti0: entered allmulticast mode [ 96.160332][ T6872] sit0: entered allmulticast mode [ 96.168518][ T6872] ip6tnl0: entered allmulticast mode [ 96.190900][ T6872] ip6gre0: entered allmulticast mode [ 96.201118][ T6872] syz_tun: entered allmulticast mode [ 96.209134][ T6872] ip6gretap0: entered allmulticast mode [ 96.217639][ T6872] bridge0: entered allmulticast mode [ 96.223589][ T6872] vcan0: entered allmulticast mode [ 96.229444][ T6872] bond0: entered allmulticast mode [ 96.234839][ T6872] bond_slave_0: entered allmulticast mode [ 96.240707][ T6872] bond_slave_1: entered allmulticast mode [ 96.248437][ T6872] team0: entered allmulticast mode [ 96.253767][ T6872] team_slave_0: entered allmulticast mode [ 96.259635][ T6872] team_slave_1: entered allmulticast mode [ 96.266082][ T6872] dummy0: entered allmulticast mode [ 96.272434][ T6872] nlmon0: entered allmulticast mode [ 96.278200][ T6872] caif0: entered allmulticast mode [ 96.283677][ T6872] batadv0: entered allmulticast mode [ 96.289126][ T6872] vxcan0: entered allmulticast mode [ 96.294657][ T6872] vxcan1: entered allmulticast mode [ 96.300046][ T6872] veth0: entered allmulticast mode [ 96.305317][ T6872] veth1: entered allmulticast mode [ 96.310603][ T6872] wg0: entered allmulticast mode [ 96.315659][ T6872] wg1: entered allmulticast mode [ 96.320754][ T6872] wg2: entered allmulticast mode [ 96.325793][ T6872] veth0_to_bridge: entered allmulticast mode [ 96.332290][ T6872] veth1_to_bridge: entered allmulticast mode [ 96.338619][ T6872] veth0_to_bond: entered allmulticast mode [ 96.344768][ T6872] veth1_to_bond: entered allmulticast mode [ 96.351051][ T6872] veth0_to_team: entered allmulticast mode [ 96.357113][ T6872] veth1_to_team: entered allmulticast mode [ 96.363232][ T6872] veth0_to_batadv: entered allmulticast mode [ 96.369340][ T6872] batadv_slave_0: entered allmulticast mode [ 96.375544][ T6872] veth1_to_batadv: entered allmulticast mode [ 96.381684][ T6872] batadv_slave_1: entered allmulticast mode [ 96.387752][ T6872] xfrm0: entered allmulticast mode [ 96.393068][ T6872] veth0_to_hsr: entered allmulticast mode [ 96.399054][ T6872] hsr_slave_0: entered allmulticast mode [ 96.405019][ T6872] veth1_to_hsr: entered allmulticast mode [ 96.411157][ T6872] hsr_slave_1: entered allmulticast mode [ 96.416966][ T6872] hsr0: entered allmulticast mode [ 96.422119][ T6872] veth1_virt_wifi: entered allmulticast mode [ 96.428237][ T6872] veth0_virt_wifi: entered allmulticast mode [ 96.434348][ T6872] veth1_vlan: entered allmulticast mode [ 96.440117][ T6872] veth0_vlan: entered allmulticast mode [ 96.446059][ T6872] vlan0: entered allmulticast mode [ 96.451304][ T6872] vlan1: entered allmulticast mode [ 96.456575][ T6872] macvlan0: entered allmulticast mode [ 96.462106][ T6872] macvlan1: entered allmulticast mode [ 96.467650][ T6872] ipvlan0: entered allmulticast mode [ 96.473183][ T6872] ipvlan1: entered allmulticast mode [ 96.478567][ T6872] veth1_macvtap: entered allmulticast mode [ 96.484651][ T6872] veth0_macvtap: entered allmulticast mode [ 96.490750][ T6872] macvtap0: entered allmulticast mode [ 96.496230][ T6872] macsec0: entered allmulticast mode [ 96.501638][ T6872] geneve0: entered allmulticast mode [ 96.507125][ T6872] geneve1: entered allmulticast mode [ 96.512670][ T6872] gre1: entered allmulticast mode [ 96.517784][ T6872] gre2: entered allmulticast mode [ 96.523503][ T6872] veth2: entered allmulticast mode [ 96.528741][ T6872] veth3: entered allmulticast mode [ 96.534728][ T6872] bond1: entered allmulticast mode [ 96.539933][ T6872] batadv1: entered allmulticast mode [ 96.545552][ T6872] bond2: entered allmulticast mode [ 96.551037][ T6872] team1: entered allmulticast mode [ 96.556490][ T6872] netdevsim netdevsim4 eth0: entered allmulticast mode [ 96.564619][ T6872] netdevsim netdevsim4 eth1: entered allmulticast mode [ 96.572371][ T6872] netdevsim netdevsim4 eth2: entered allmulticast mode [ 96.579675][ T6872] netdevsim netdevsim4 eth3: entered allmulticast mode [ 96.586663][ T6872] bond3: entered allmulticast mode [ 96.591938][ T6872] ip6gretap1: entered allmulticast mode [ 96.597899][ T6872] veth4: entered allmulticast mode [ 96.603517][ T6872] veth5: entered allmulticast mode [ 96.617791][ T6872] geneve2: left promiscuous mode [ 96.625037][ T6872] vxlan0: entered allmulticast mode [ 96.639916][ T175] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.648344][ T175] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 96.667257][ T3981] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.675719][ T3981] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 96.710877][ T3981] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.719840][ T3981] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 96.759901][ T3981] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.768478][ T3981] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 96.949738][ T6903] tipc: Enabled bearer , priority 0 [ 96.961478][ T6898] loop4: detected capacity change from 0 to 2048 [ 97.003729][ T6903] tipc: Disabling bearer [ 97.014037][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.030129][ T6898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.070649][ T6907] loop3: detected capacity change from 0 to 164 [ 97.130898][ T6907] syz.3.1096: attempt to access beyond end of device [ 97.130898][ T6907] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.173094][ T6907] syz.3.1096: attempt to access beyond end of device [ 97.173094][ T6907] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.225800][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1099'. [ 97.236064][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.332816][ T6919] loop4: detected capacity change from 0 to 1024 [ 97.341553][ T6919] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.352159][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 97.352178][ T29] audit: type=1326 audit(1760356290.365:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 97.381908][ T29] audit: type=1326 audit(1760356290.365:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe8e417eec9 code=0x7ffc0000 [ 97.405835][ T29] audit: type=1326 audit(1760356290.365:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8e417ef03 code=0x7ffc0000 [ 97.429366][ T29] audit: type=1326 audit(1760356290.375:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe8e417d97f code=0x7ffc0000 [ 97.452813][ T29] audit: type=1326 audit(1760356290.375:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe8e417ef57 code=0x7ffc0000 [ 97.476457][ T29] audit: type=1326 audit(1760356290.375:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8e417d710 code=0x7ffc0000 [ 97.500334][ T29] audit: type=1326 audit(1760356290.375:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8e417eacb code=0x7ffc0000 [ 97.523961][ T29] audit: type=1326 audit(1760356290.385:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe8e417db2a code=0x7ffc0000 [ 97.547433][ T29] audit: type=1326 audit(1760356290.385:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe8e417db2a code=0x7ffc0000 [ 97.570787][ T29] audit: type=1326 audit(1760356290.385:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe8e417d617 code=0x7ffc0000 [ 97.627635][ T6919] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1100: Invalid block bitmap block 0 in block_group 0 [ 97.662280][ T6919] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1100: Failed to acquire dquot type 0 [ 97.701372][ T6919] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.1100: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.747433][ T6919] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1100: Invalid inode bitmap blk 0 in block_group 0 [ 97.788583][ T3981] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:49: Failed to release dquot type 0 [ 97.813741][ T6919] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 97.928394][ T6930] loop2: detected capacity change from 0 to 1024 [ 97.955024][ T6930] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.966556][ T6919] EXT4-fs (loop4): 1 orphan inode deleted [ 97.980742][ T6930] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1104: Invalid block bitmap block 0 in block_group 0 [ 97.999973][ T6919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.013832][ T6919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.037724][ T6932] loop3: detected capacity change from 0 to 2048 [ 98.239154][ T6930] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1104: Failed to acquire dquot type 0 [ 98.262027][ T6930] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.1104: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.289486][ T6932] loop3: p1 < > p4 [ 98.297868][ T6930] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1104: Invalid inode bitmap blk 0 in block_group 0 [ 98.311314][ T6932] loop3: p4 size 8388608 extends beyond EOD, truncated [ 98.327928][ T3004] loop3: p1 < > p4 [ 98.331934][ T3962] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:32: Failed to release dquot type 0 [ 98.346479][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated [ 98.363786][ T6930] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 98.431149][ T6930] EXT4-fs (loop2): 1 orphan inode deleted [ 98.476704][ T6930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.596066][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.071358][ T6958] ================================================================== [ 99.079587][ T6958] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 99.086839][ T6958] [ 99.089187][ T6958] read-write to 0xffff888237d1b294 of 4 bytes by interrupt on cpu 1: [ 99.097316][ T6958] hrtimer_interrupt+0x70/0x460 [ 99.102243][ T6958] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 99.108190][ T6958] sysvec_apic_timer_interrupt+0x6f/0x80 [ 99.113888][ T6958] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.119898][ T6958] _raw_spin_unlock_irq+0x2f/0x50 [ 99.125061][ T6958] set_current_blocked+0x9d/0xb0 [ 99.130037][ T6958] __ia32_sys_rt_sigreturn+0xd3/0x350 [ 99.135462][ T6958] x64_sys_call+0x2d4b/0x3000 [ 99.140187][ T6958] do_syscall_64+0xd2/0x200 [ 99.144730][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.150929][ T6958] [ 99.153302][ T6958] read to 0xffff888237d1b294 of 4 bytes by task 6958 on cpu 0: [ 99.160907][ T6958] print_cpu+0x338/0x660 [ 99.165194][ T6958] timer_list_show+0x107/0x170 [ 99.170091][ T6958] seq_read_iter+0x636/0x950 [ 99.174725][ T6958] proc_reg_read_iter+0x110/0x180 [ 99.179809][ T6958] copy_splice_read+0x442/0x660 [ 99.184706][ T6958] splice_direct_to_actor+0x26f/0x680 [ 99.190236][ T6958] do_splice_direct+0xda/0x150 [ 99.195059][ T6958] do_sendfile+0x380/0x650 [ 99.199628][ T6958] __x64_sys_sendfile64+0x105/0x150 [ 99.204970][ T6958] x64_sys_call+0x2bb4/0x3000 [ 99.209819][ T6958] do_syscall_64+0xd2/0x200 [ 99.214361][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.220314][ T6958] [ 99.222658][ T6958] value changed: 0x00039304 -> 0x00039307 [ 99.228431][ T6958] [ 99.230788][ T6958] Reported by Kernel Concurrency Sanitizer on: [ 99.236966][ T6958] CPU: 0 UID: 0 PID: 6958 Comm: syz.1.1113 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.246811][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.256973][ T6958] ================================================================== [ 99.269692][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 99.286096][ T6960] batman_adv: batadv0: Removing interface: batadv_slave_1