last executing test programs: 3.292584333s ago: executing program 2 (id=1106): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_THP_DISABLE(0x29, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) mount(0x0, 0x0, &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) 3.008481431s ago: executing program 0 (id=1116): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x6b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x2cb1, 0x1c080, 0xd, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.843579828s ago: executing program 0 (id=1128): socket$inet6(0xa, 0x1, 0x409) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) clock_settime(0x3, 0x0) getpid() epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") 2.212092091s ago: executing program 4 (id=1121): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000780)=[{0x6, 0x53, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000100)={[{@nodioread_nolock}, {@acl}, {@data_ordered}, {@nouid32}, {@inlinecrypt}, {@acl}, {@usrjquota}]}, 0x0, 0x485, &(0x7f0000000b40)="$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") perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0xd14, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) unshare(0x40400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f00000002c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50ebffff8f7856000069204047eb5f4b63fd0e65eca4065a2bd4499e2244f863d2526836808590fc8d1431e59c36569978cf3b733a33a25821cb1c040000d984ef88d4574f3a000000933a9512f5bf0cf98fc186cca5a0460000654a4016bc4b6dc082c8b99e8f4d3bd51590ef925009c1714c5ee5624a03269716785089e496765cff20cc3244c55c7ec51caa1e3dd4ca7e"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x6}}, {0x10, 0x1b, [0x0, 0x0, 0x6, 0xc981, 0x7, 0x0]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000c00) 2.210524521s ago: executing program 2 (id=1132): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./cgroup/../file0\x00', 0x0, &(0x7f0000000f40), 0x0, 0x47e, &(0x7f0000001480)="$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") 2.050375546s ago: executing program 2 (id=1123): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$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") 1.992359542s ago: executing program 0 (id=1125): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) rt_sigaction(0x29, &(0x7f00000005c0)={&(0x7f0000000500)="c4817e70c30cc442e5bc0b8f692096d2c4a1fb2c640604c4a15168956f04000066440f5a8800000100c46110123af2430f38f1c7666666410f3a148abe505c81ff66f045197127", 0x2, &(0x7f0000000580)="26f26dc4c3bd7f6e2611f3450fb831c4c17951be7a7600003ef30f0183e997efb88f4978c326c4612dfa21656526660ffae9400fb0a00a6ea594c463ad790a00", {[0x7]}}, &(0x7f00000006c0)={&(0x7f0000000600)="f20f5a1d000001000fff65bc418309082e3e400f41ff36f30f2d8c6a00000080c40299095e39c481c9d3d00f405d0066440fec2ac441f9e736", 0x0, &(0x7f0000000640)="c4c144540ccbc4010dfaa60000000065f2aa8135000000808ab70000f2430f10531ec46171ecb301000000abc4e17929a4230010c0fe66460f1285d50000008f0860a601d5"}, 0x8, &(0x7f0000000700)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff0000000090ffffff9500000000000000360a00000000001018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.723032179s ago: executing program 0 (id=1129): socket$inet6(0xa, 0x1, 0x409) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) clock_settime(0x3, 0x0) getpid() epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.247856406s ago: executing program 1 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r2, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r2, 0x4, 0xf, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180900001bc81a0000a3390002000001851000000600000018", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000200)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000280)=r3, 0x4) 1.178506873s ago: executing program 4 (id=1133): socket$inet6(0xa, 0x1, 0x409) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) clock_settime(0x3, 0x0) getpid() r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close_range(r1, r2, 0x0) 1.161406995s ago: executing program 2 (id=1134): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40001) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.097896301s ago: executing program 4 (id=1136): socket$inet6(0xa, 0x1, 0x409) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) clock_settime(0x3, 0x0) getpid() r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") close_range(r1, r2, 0x0) 1.076755003s ago: executing program 4 (id=1137): socket$inet6(0xa, 0x1, 0x409) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) clock_settime(0x3, 0x0) getpid() r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close_range(r1, r2, 0x0) 1.000315591s ago: executing program 4 (id=1138): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 824.199079ms ago: executing program 3 (id=1139): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, 0x0, 0x0, 0xfecc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) rt_sigaction(0x29, &(0x7f00000005c0)={&(0x7f0000000500)="c4817e70c30cc442e5bc0b8f692096d2c4a1fb2c640604c4a15168956f04000066440f5a8800000100c46110123af2430f38f1c7666666410f3a148abe505c81ff66f045197127", 0x2, &(0x7f0000000580)="26f26dc4c3bd7f6e2611f3450fb831c4c17951be7a7600003ef30f0183e997efb88f4978c326c4612dfa21656526660ffae9400fb0a00a6ea594c463ad790a00", {[0x7]}}, &(0x7f00000006c0)={&(0x7f0000000600)="f20f5a1d000001000fff65bc418309082e3e400f41ff36f30f2d8c6a00000080c40299095e39c481c9d3d00f405d0066440fec2ac441f9e736", 0x0, &(0x7f0000000640)="c4c144540ccbc4010dfaa60000000065f2aa8135000000808ab70000f2430f10531ec46171ecb301000000abc4e17929a4230010c0fe66460f1285d50000008f0860a601d5"}, 0x8, &(0x7f0000000700)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff0000000090ffffff9500000000000000360a00000000001018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 823.813028ms ago: executing program 0 (id=1140): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, 0x0, 0x0, 0xfecc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r0}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) rt_sigaction(0x29, &(0x7f00000005c0)={&(0x7f0000000500)="c4817e70c30cc442e5bc0b8f692096d2c4a1fb2c640604c4a15168956f04000066440f5a8800000100c46110123af2430f38f1c7666666410f3a148abe505c81ff66f045197127", 0x2, &(0x7f0000000580)="26f26dc4c3bd7f6e2611f3450fb831c4c17951be7a7600003ef30f0183e997efb88f4978c326c4612dfa21656526660ffae9400fb0a00a6ea594c463ad790a00", {[0x7]}}, &(0x7f00000006c0)={&(0x7f0000000600)="f20f5a1d000001000fff65bc418309082e3e400f41ff36f30f2d8c6a00000080c40299095e39c481c9d3d00f405d0066440fec2ac441f9e736", 0x0, &(0x7f0000000640)="c4c144540ccbc4010dfaa60000000065f2aa8135000000808ab70000f2430f10531ec46171ecb301000000abc4e17929a4230010c0fe66460f1285d50000008f0860a601d5"}, 0x8, &(0x7f0000000700)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff0000000090ffffff9500000000000000360a00000000001018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 767.616024ms ago: executing program 3 (id=1141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x94) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB]) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x556, &(0x7f0000000fc0)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c055}, 0x0) 761.968664ms ago: executing program 0 (id=1142): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 659.434965ms ago: executing program 3 (id=1143): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ftruncate(r0, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x8000, 0x8000, 0x4, 0xfffff001, {{0x6, 0x4, 0x0, 0x38, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'tunl0\x00', r3, 0x80, 0x8000, 0xc53, 0x8, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp={0x44, 0x10, 0xb5, 0x0, 0xf, [0x0, 0x7, 0x4]}]}}}}}) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r5}, 0x8) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid={'resuid', 0x3d, r4}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syslog(0x9, 0x0, 0x0) 584.357552ms ago: executing program 3 (id=1144): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000780)=[{0x6, 0x53, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000100)={[{@nodioread_nolock}, {@acl}, {@data_ordered}, {@nouid32}, {@inlinecrypt}, {@acl}, {@usrjquota}]}, 0x0, 0x485, &(0x7f0000000b40)="$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") perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0xd14, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) unshare(0x40400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f00000002c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50ebffff8f7856000069204047eb5f4b63fd0e65eca4065a2bd4499e2244f863d2526836808590fc8d1431e59c36569978cf3b733a33a25821cb1c040000d984ef88d4574f3a000000933a9512f5bf0cf98fc186cca5a0460000654a4016bc4b6dc082c8b99e8f4d3bd51590ef925009c1714c5ee5624a03269716785089e496765cff20cc3244c55c7ec51caa1e3dd4ca7e"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x6}}, {0x10, 0x1b, [0x0, 0x0, 0x6, 0xc981, 0x7, 0x0]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000c00) 472.020863ms ago: executing program 3 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x0, 0x901, 0x6, 0x7fffffff, 0x6d8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 417.053969ms ago: executing program 1 (id=1146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 402.046301ms ago: executing program 2 (id=1147): socket$inet6(0xa, 0x1, 0x409) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) clock_settime(0x3, 0x0) getpid() r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close_range(r1, r2, 0x0) 341.644427ms ago: executing program 1 (id=1148): socket$inet6(0xa, 0x1, 0x409) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8804) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) clock_settime(0x3, 0x0) getpid() r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close_range(r1, r2, 0x0) 341.339787ms ago: executing program 3 (id=1149): socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) open(0x0, 0x147842, 0x1ef) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x4}, 0x38) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 315.273069ms ago: executing program 2 (id=1150): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000ff0f00000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0xc001}, 0xc814) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x20000000002}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x603f) 284.346952ms ago: executing program 1 (id=1151): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, 0x0, 0x0, 0xfecc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) rt_sigaction(0x29, &(0x7f00000005c0)={&(0x7f0000000500)="c4817e70c30cc442e5bc0b8f692096d2c4a1fb2c640604c4a15168956f04000066440f5a8800000100c46110123af2430f38f1c7666666410f3a148abe505c81ff66f045197127", 0x2, &(0x7f0000000580)="26f26dc4c3bd7f6e2611f3450fb831c4c17951be7a7600003ef30f0183e997efb88f4978c326c4612dfa21656526660ffae9400fb0a00a6ea594c463ad790a00", {[0x7]}}, &(0x7f00000006c0)={&(0x7f0000000600)="f20f5a1d000001000fff65bc418309082e3e400f41ff36f30f2d8c6a00000080c40299095e39c481c9d3d00f405d0066440fec2ac441f9e736", 0x0, &(0x7f0000000640)="c4c144540ccbc4010dfaa60000000065f2aa8135000000808ab70000f2430f10531ec46171ecb301000000abc4e17929a4230010c0fe66460f1285d50000008f0860a601d5"}, 0x8, &(0x7f0000000700)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff0000000090ffffff9500000000000000360a00000000001018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 222.339328ms ago: executing program 1 (id=1152): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, 0x0, 0x0, 0xfecc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r0}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) rt_sigaction(0x29, &(0x7f00000005c0)={&(0x7f0000000500)="c4817e70c30cc442e5bc0b8f692096d2c4a1fb2c640604c4a15168956f04000066440f5a8800000100c46110123af2430f38f1c7666666410f3a148abe505c81ff66f045197127", 0x2, &(0x7f0000000580)="26f26dc4c3bd7f6e2611f3450fb831c4c17951be7a7600003ef30f0183e997efb88f4978c326c4612dfa21656526660ffae9400fb0a00a6ea594c463ad790a00", {[0x7]}}, &(0x7f00000006c0)={&(0x7f0000000600)="f20f5a1d000001000fff65bc418309082e3e400f41ff36f30f2d8c6a00000080c40299095e39c481c9d3d00f405d0066440fec2ac441f9e736", 0x0, &(0x7f0000000640)="c4c144540ccbc4010dfaa60000000065f2aa8135000000808ab70000f2430f10531ec46171ecb301000000abc4e17929a4230010c0fe66460f1285d50000008f0860a601d5"}, 0x8, &(0x7f0000000700)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff0000000090ffffff9500000000000000360a00000000001018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 21.559678ms ago: executing program 4 (id=1153): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x7}, 0x0, 0x10000, 0xc, 0x6, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x44400) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @func={0x4, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=1163): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0xfffffffffffffff9}}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) kernel console output (not intermixed with test programs): contents [ 93.536039][ T5256] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.487: mark_inode_dirty error [ 93.536210][ T5256] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 93.536868][ T5256] EXT4-fs (loop0): 1 truncate cleaned up [ 93.552812][ T5276] pim6reg: entered allmulticast mode [ 93.556012][ T5256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.595631][ T5214] Bluetooth: hci0: command 0x1003 tx timeout [ 93.599008][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.609059][ T5277] vhci_hcd: connection closed [ 93.611631][ T5256] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.613690][ T4338] vhci_hcd: stop threads [ 93.631401][ T4338] vhci_hcd: release socket [ 93.635899][ T4338] vhci_hcd: disconnect device [ 93.677492][ T5256] team0 (unregistering): Port device team_slave_0 removed [ 93.687467][ T5256] team0 (unregistering): Port device team_slave_1 removed [ 93.711326][ T5285] netlink: 'syz.2.496': attribute type 2 has an invalid length. [ 93.719364][ T5285] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.496'. [ 94.013610][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.050762][ T5291] loop0: detected capacity change from 0 to 4096 [ 94.058631][ T5291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.069176][ T5291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.116447][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.405217][ T5305] IPv6: sit1: Disabled Multicast RS [ 94.412034][ T5305] sit1: entered allmulticast mode [ 94.501682][ T5309] tipc: Enabling of bearer rejected, failed to enable media [ 95.650624][ T5333] loop1: detected capacity change from 0 to 512 [ 95.686323][ T5334] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 95.715372][ T5333] EXT4-fs: Ignoring removed nobh option [ 95.749931][ T5334] ipvlan0: entered allmulticast mode [ 95.755553][ T5334] veth0_vlan: entered allmulticast mode [ 95.769743][ T4339] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.787070][ T5333] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #3: comm syz.1.510: corrupted inode contents [ 95.807755][ T5333] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #3: comm syz.1.510: mark_inode_dirty error [ 95.891152][ T5333] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #3: comm syz.1.510: corrupted inode contents [ 95.916375][ T5333] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.510: mark_inode_dirty error [ 95.932153][ T5333] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.510: Failed to acquire dquot type 0 [ 95.944464][ T5333] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.510: corrupted inode contents [ 95.959303][ T5333] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #16: comm syz.1.510: mark_inode_dirty error [ 95.976922][ T5333] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.510: corrupted inode contents [ 95.989131][ T5333] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.510: mark_inode_dirty error [ 96.000977][ T5333] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.510: corrupted inode contents [ 96.013401][ T5333] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 96.022136][ T5333] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.510: corrupted inode contents [ 96.034698][ T5333] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.510: mark_inode_dirty error [ 96.046083][ T5333] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 96.055787][ T5333] EXT4-fs (loop1): 1 truncate cleaned up [ 96.062128][ T5333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.074887][ T5333] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.115948][ T5333] team0 (unregistering): Port device team_slave_0 removed [ 96.126085][ T5333] team0 (unregistering): Port device team_slave_1 removed [ 96.246396][ T5345] loop0: detected capacity change from 0 to 512 [ 96.266007][ T5345] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 96.287391][ T5345] EXT4-fs (loop0): orphan cleanup on readonly fs [ 96.297267][ T5345] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.525: corrupted inode contents [ 96.310640][ T5345] EXT4-fs (loop0): Remounting filesystem read-only [ 96.318692][ T5345] EXT4-fs (loop0): 1 truncate cleaned up [ 96.326556][ T4359] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.338244][ T4359] __quota_error: 208 callbacks suppressed [ 96.338261][ T4359] Quota error (device loop0): write_blk: dquota write failed [ 96.352531][ T4359] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 96.364504][ T4359] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.376411][ T4359] Quota error (device loop0): write_blk: dquota write failed [ 96.385011][ T4359] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 96.398340][ T4359] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.408757][ T4359] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 96.418269][ T4359] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 96.429667][ T5345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.444360][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.497036][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.555169][ T5355] nfs4: Bad value for 'source' [ 96.575270][ T5355] netlink: 'syz.3.518': attribute type 13 has an invalid length. [ 96.588417][ T29] audit: type=1326 audit(1760356384.992:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 96.630447][ T29] audit: type=1326 audit(1760356384.992:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 96.653918][ T29] audit: type=1326 audit(1760356385.012:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 96.665908][ T29] audit: type=1326 audit(1760356385.062:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.0.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 96.687795][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.708353][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.855510][ T4339] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.866183][ T4339] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.877110][ T4339] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.887007][ T4339] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.079603][ T5375] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.122774][ T5382] tipc: Started in network mode [ 97.129026][ T5382] tipc: Node identity 12564a7fb29b, cluster identity 4711 [ 97.138175][ T5382] tipc: Enabled bearer , priority 0 [ 97.156902][ T5382] syzkaller0: entered promiscuous mode [ 97.162505][ T5382] syzkaller0: entered allmulticast mode [ 97.162804][ T5381] loop1: detected capacity change from 0 to 8192 [ 97.175807][ T5381] vfat: Unknown parameter 'À' [ 97.207395][ T5382] tipc: Resetting bearer [ 97.215238][ T5379] tipc: Resetting bearer [ 97.222335][ T5379] tipc: Disabling bearer [ 97.388464][ T5381] loop1: detected capacity change from 0 to 2048 [ 97.415692][ T5381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.428049][ T5381] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.833327][ T5214] Bluetooth: hci0: command 0x1003 tx timeout [ 97.839412][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.973048][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 97.984100][ T5396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.529'. [ 97.992978][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 98.006078][ T5396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.529'. [ 98.016922][ T5396] netlink: 'syz.2.529': attribute type 6 has an invalid length. [ 98.034989][ T5396] netlink: 14 bytes leftover after parsing attributes in process `syz.2.529'. [ 98.046171][ T5396] hsr_slave_0: left promiscuous mode [ 98.052555][ T5396] hsr_slave_1: left promiscuous mode [ 98.073418][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.219429][ T5406] loop0: detected capacity change from 0 to 2048 [ 98.237746][ T5404] loop2: detected capacity change from 0 to 1024 [ 98.246089][ T5406] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.252929][ T5404] EXT4-fs: Ignoring removed orlov option [ 98.285282][ T5406] Invalid ELF header magic: != ELF [ 98.826687][ T5422] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.866643][ T5422] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.946976][ T5422] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.967016][ T5425] loop0: detected capacity change from 0 to 1024 [ 99.006962][ T5422] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.036128][ T5429] loop1: detected capacity change from 0 to 256 [ 99.045146][ T5425] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.538: Allocating blocks 449-513 which overlap fs metadata [ 99.071187][ T4359] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.080223][ T5424] EXT4-fs (loop0): pa ffff888105bed310: logic 48, phys. 177, len 21 [ 99.088317][ T5424] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 99.100355][ T4359] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.116293][ T4359] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.133621][ T4359] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.168883][ T5435] loop0: detected capacity change from 0 to 512 [ 99.208806][ T5439] loop2: detected capacity change from 0 to 128 [ 99.254733][ T5439] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 99.262713][ T5439] FAT-fs (loop2): Filesystem has been set read-only [ 99.271423][ T5439] bio_check_eod: 102 callbacks suppressed [ 99.271441][ T5439] syz.2.541: attempt to access beyond end of device [ 99.271441][ T5439] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 99.294573][ T5439] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 99.302469][ T5439] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 99.315524][ T5435] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.368546][ T5439] syz.2.541: attempt to access beyond end of device [ 99.368546][ T5439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.385397][ T5439] syz.2.541: attempt to access beyond end of device [ 99.385397][ T5439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.398819][ T5439] syz.2.541: attempt to access beyond end of device [ 99.398819][ T5439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.412366][ T5439] syz.2.541: attempt to access beyond end of device [ 99.412366][ T5439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.425964][ T5439] syz.2.541: attempt to access beyond end of device [ 99.425964][ T5439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.439336][ T5439] syz.2.541: attempt to access beyond end of device [ 99.439336][ T5439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.453084][ T5439] syz.2.541: attempt to access beyond end of device [ 99.453084][ T5439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.466490][ T5438] syz.2.541: attempt to access beyond end of device [ 99.466490][ T5438] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.475301][ T5445] loop4: detected capacity change from 0 to 1024 [ 99.479878][ T5439] syz.2.541: attempt to access beyond end of device [ 99.479878][ T5439] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.500410][ T5443] buffer_io_error: 26510 callbacks suppressed [ 99.500490][ T5443] Buffer I/O error on dev loop2, logical block 2065, async page read [ 99.508171][ T5445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.516896][ T5443] Buffer I/O error on dev loop2, logical block 2066, async page read [ 99.516932][ T5443] Buffer I/O error on dev loop2, logical block 2067, async page read [ 99.516955][ T5443] Buffer I/O error on dev loop2, logical block 2068, async page read [ 99.516975][ T5443] Buffer I/O error on dev loop2, logical block 2069, async page read [ 99.516993][ T5443] Buffer I/O error on dev loop2, logical block 2070, async page read [ 99.517085][ T5443] Buffer I/O error on dev loop2, logical block 2071, async page read [ 99.517106][ T5443] Buffer I/O error on dev loop2, logical block 2072, async page read [ 99.517145][ T5443] Buffer I/O error on dev loop2, logical block 2065, async page read [ 99.517162][ T5443] Buffer I/O error on dev loop2, logical block 2066, async page read [ 101.038896][ T5492] netlink: 'syz.3.555': attribute type 2 has an invalid length. [ 101.046935][ T5492] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.555'. [ 101.147342][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 101.156644][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.164139][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.171971][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.180623][ T5496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.337538][ T5500] loop1: detected capacity change from 0 to 2048 [ 101.344448][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 101.344464][ T29] audit: type=1326 audit(1760356389.752:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c96fc5d67 code=0x7ffc0000 [ 101.374125][ T29] audit: type=1326 audit(1760356389.752:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c96f6af79 code=0x7ffc0000 [ 101.397492][ T29] audit: type=1326 audit(1760356389.752:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 101.423735][ T29] audit: type=1326 audit(1760356389.832:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c96fc5d67 code=0x7ffc0000 [ 101.425216][ T5500] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.447221][ T29] audit: type=1326 audit(1760356389.832:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c96f6af79 code=0x7ffc0000 [ 101.447262][ T29] audit: type=1326 audit(1760356389.832:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 101.464402][ T29] audit: type=1326 audit(1760356389.852:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c96fc5d67 code=0x7ffc0000 [ 101.526657][ T29] audit: type=1326 audit(1760356389.852:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c96f6af79 code=0x7ffc0000 [ 101.550119][ T29] audit: type=1326 audit(1760356389.852:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 101.573470][ T29] audit: type=1326 audit(1760356389.852:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5494 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c96fc5d67 code=0x7ffc0000 [ 101.651072][ T5500] Invalid ELF header magic: != ELF [ 101.884606][ T5517] loop1: detected capacity change from 0 to 512 [ 101.921922][ T5517] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.049890][ T3322] EXT4-fs unmount: 13 callbacks suppressed [ 102.049911][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.117172][ T5526] netlink: 'syz.3.564': attribute type 4 has an invalid length. [ 102.157330][ T5526] loop3: detected capacity change from 0 to 2048 [ 102.167852][ T5506] loop4: detected capacity change from 0 to 1024 [ 102.183183][ T5506] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.196229][ T5524] loop1: detected capacity change from 0 to 164 [ 102.212680][ T4697] Alternate GPT is invalid, using primary GPT. [ 102.220362][ T4697] loop3: p1 p2 p3 [ 102.255658][ T5506] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #11: comm syz.4.558: iget: bogus i_mode (1) [ 102.287842][ T5526] Alternate GPT is invalid, using primary GPT. [ 102.294991][ T5526] loop3: p1 p2 p3 [ 102.396046][ T5506] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.558: couldn't read orphan inode 11 (err -117) [ 102.436021][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 102.451345][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 102.465673][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 102.479522][ T5506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.772122][ T5503] syz.4.558 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 102.786252][ T5503] CPU: 1 UID: 0 PID: 5503 Comm: syz.4.558 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.786282][ T5503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.786323][ T5503] Call Trace: [ 102.786333][ T5503] [ 102.786344][ T5503] __dump_stack+0x1d/0x30 [ 102.786373][ T5503] dump_stack_lvl+0xe8/0x140 [ 102.786444][ T5503] dump_stack+0x15/0x1b [ 102.786467][ T5503] dump_header+0x81/0x220 [ 102.786507][ T5503] oom_kill_process+0x342/0x400 [ 102.786539][ T5503] out_of_memory+0x979/0xb80 [ 102.786620][ T5503] try_charge_memcg+0x610/0xa10 [ 102.786662][ T5503] obj_cgroup_charge_pages+0xa6/0x150 [ 102.786698][ T5503] __memcg_kmem_charge_page+0x9f/0x170 [ 102.786818][ T5503] __alloc_frozen_pages_noprof+0x188/0x360 [ 102.786943][ T5503] alloc_pages_mpol+0xb3/0x260 [ 102.786962][ T5503] ? alloc_pages_noprof+0xf4/0x130 [ 102.786982][ T5503] alloc_pages_noprof+0x90/0x130 [ 102.787008][ T5503] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 102.787151][ T5503] __kvmalloc_node_noprof+0x483/0x670 [ 102.787188][ T5503] ? ip_set_alloc+0x24/0x30 [ 102.787225][ T5503] ? ip_set_alloc+0x24/0x30 [ 102.787284][ T5503] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 102.787315][ T5503] ip_set_alloc+0x24/0x30 [ 102.787341][ T5503] hash_netiface_create+0x282/0x740 [ 102.787378][ T5503] ? __pfx_hash_netiface_create+0x10/0x10 [ 102.787536][ T5503] ip_set_create+0x3cc/0x970 [ 102.787582][ T5503] ? __nla_parse+0x40/0x60 [ 102.787733][ T5503] nfnetlink_rcv_msg+0x4c6/0x590 [ 102.787783][ T5503] netlink_rcv_skb+0x123/0x220 [ 102.787817][ T5503] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 102.787908][ T5503] nfnetlink_rcv+0x167/0x16c0 [ 102.787967][ T5503] ? kmem_cache_free+0xe4/0x3d0 [ 102.788009][ T5503] ? __kfree_skb+0x109/0x150 [ 102.788050][ T5503] ? nlmon_xmit+0x4f/0x60 [ 102.788080][ T5503] ? consume_skb+0x49/0x150 [ 102.788167][ T5503] ? nlmon_xmit+0x4f/0x60 [ 102.788194][ T5503] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 102.788237][ T5503] ? __dev_queue_xmit+0x1200/0x2000 [ 102.788477][ T5503] ? __dev_queue_xmit+0x182/0x2000 [ 102.788591][ T5503] ? ref_tracker_free+0x37d/0x3e0 [ 102.788647][ T5503] ? __netlink_deliver_tap+0x4dc/0x500 [ 102.788693][ T5503] netlink_unicast+0x5c0/0x690 [ 102.788725][ T5503] netlink_sendmsg+0x58b/0x6b0 [ 102.788774][ T5503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.788816][ T5503] __sock_sendmsg+0x145/0x180 [ 102.788844][ T5503] ____sys_sendmsg+0x31e/0x4e0 [ 102.788945][ T5503] ___sys_sendmsg+0x17b/0x1d0 [ 102.788994][ T5503] __x64_sys_sendmsg+0xd4/0x160 [ 102.789038][ T5503] x64_sys_call+0x191e/0x3000 [ 102.789102][ T5503] do_syscall_64+0xd2/0x200 [ 102.789184][ T5503] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.789212][ T5503] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.789269][ T5503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.789299][ T5503] RIP: 0033:0x7f5647c7eec9 [ 102.789319][ T5503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.789339][ T5503] RSP: 002b:00007f56466e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.789363][ T5503] RAX: ffffffffffffffda RBX: 00007f5647ed5fa0 RCX: 00007f5647c7eec9 [ 102.789378][ T5503] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 102.789453][ T5503] RBP: 00007f5647d01f91 R08: 0000000000000000 R09: 0000000000000000 [ 102.789465][ T5503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.789477][ T5503] R13: 00007f5647ed6038 R14: 00007f5647ed5fa0 R15: 00007ffc934986e8 [ 102.789500][ T5503] [ 102.789509][ T5503] memory: usage 307200kB, limit 307200kB, failcnt 2513 [ 103.143721][ T5503] memory+swap: usage 312388kB, limit 9007199254740988kB, failcnt 0 [ 103.151630][ T5503] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 103.158974][ T5503] Memory cgroup stats for /syz4: [ 103.161537][ T5503] cache 4096 [ 103.169842][ T5503] rss 0 [ 103.172619][ T5503] shmem 0 [ 103.175648][ T5503] mapped_file 0 [ 103.179118][ T5503] dirty 0 [ 103.182075][ T5503] writeback 0 [ 103.185398][ T5503] workingset_refault_anon 108 [ 103.190097][ T5503] workingset_refault_file 417 [ 103.194869][ T5503] swap 5312512 [ 103.198256][ T5503] swapcached 0 [ 103.201634][ T5503] pgpgin 62548 [ 103.205089][ T5503] pgpgout 62546 [ 103.208561][ T5503] pgfault 78542 [ 103.212043][ T5503] pgmajfault 68 [ 103.215546][ T5503] inactive_anon 0 [ 103.219183][ T5503] active_anon 0 [ 103.222674][ T5503] inactive_file 8192 [ 103.226616][ T5503] active_file 0 [ 103.230098][ T5503] unevictable 0 [ 103.233621][ T5503] hierarchical_memory_limit 314572800 [ 103.239018][ T5503] hierarchical_memsw_limit 9223372036854771712 [ 103.245227][ T5503] total_cache 4096 [ 103.248962][ T5503] total_rss 0 [ 103.252263][ T5503] total_shmem 0 [ 103.255787][ T5503] total_mapped_file 0 [ 103.259831][ T5503] total_dirty 0 [ 103.263338][ T5503] total_writeback 0 [ 103.267174][ T5503] total_workingset_refault_anon 108 [ 103.272386][ T5503] total_workingset_refault_file 417 [ 103.277741][ T5503] total_swap 5312512 [ 103.281642][ T5503] total_swapcached 0 [ 103.285581][ T5503] total_pgpgin 62548 [ 103.289498][ T5503] total_pgpgout 62546 [ 103.293616][ T5503] total_pgfault 78542 [ 103.297624][ T5503] total_pgmajfault 68 [ 103.301618][ T5503] total_inactive_anon 0 [ 103.305836][ T5503] total_active_anon 0 [ 103.309839][ T5503] total_inactive_file 8192 [ 103.314300][ T5503] total_active_file 0 [ 103.318338][ T5503] total_unevictable 0 [ 103.322336][ T5503] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.558,pid=5501,uid=0 [ 103.336894][ T5503] Memory cgroup out of memory: Killed process 5501 (syz.4.558) total-vm:96136kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 103.755712][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.816218][ T5558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.576'. [ 103.904639][ T5558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5558 comm=syz.2.576 [ 104.020004][ T5572] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 104.083370][ T5572] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 104.090018][ T5572] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.097702][ T5572] vhci_hcd vhci_hcd.0: Device attached [ 104.156787][ T5571] loop0: detected capacity change from 0 to 8192 [ 104.189197][ T5571] vfat: Unknown parameter 'À' [ 104.226842][ T5577] vhci_hcd: connection closed [ 104.227011][ T4339] vhci_hcd: stop threads [ 104.237196][ T4339] vhci_hcd: release socket [ 104.241645][ T4339] vhci_hcd: disconnect device [ 104.283301][ T3422] vhci_hcd: vhci_device speed not set [ 104.350567][ T5589] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 104.382399][ T5589] bond3 (unregistering): Released all slaves [ 105.339603][ T5602] loop0: detected capacity change from 0 to 2048 [ 105.371258][ T5620] netlink: 56 bytes leftover after parsing attributes in process `syz.3.594'. [ 105.483708][ T5602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.496220][ T5602] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.041651][ T5639] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 106.051216][ T5639] netlink: 224 bytes leftover after parsing attributes in process `syz.2.597'. [ 106.237411][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.425137][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 106.425219][ T29] audit: type=1326 audit(1760356394.832:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.462183][ T29] audit: type=1326 audit(1760356394.832:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.487502][ T29] audit: type=1326 audit(1760356394.862:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.511977][ T29] audit: type=1326 audit(1760356394.862:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.537321][ T29] audit: type=1326 audit(1760356394.862:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.561888][ T29] audit: type=1326 audit(1760356394.862:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.587545][ T29] audit: type=1326 audit(1760356394.862:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.612468][ T29] audit: type=1326 audit(1760356394.862:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.637899][ T29] audit: type=1326 audit(1760356394.862:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.662505][ T29] audit: type=1326 audit(1760356394.862:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 106.772544][ T5654] nfs4: Bad value for 'source' [ 106.780012][ T5654] netlink: 'syz.0.613': attribute type 13 has an invalid length. [ 106.826605][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.834072][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.911413][ T5654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.926882][ T5654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.016049][ T3379] syz1: Port: 1 Link DOWN [ 107.025908][ T5661] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.087165][ T4346] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.101806][ T4346] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.129941][ T5661] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.157384][ T4346] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.188446][ T5661] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.205224][ T4346] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.246424][ T5661] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.334706][ T4338] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.387827][ T4338] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.409528][ T4338] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.440787][ T4338] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.684923][ T5674] serio: Serial port ptm0 [ 107.807981][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 109.093936][ T5721] loop3: detected capacity change from 0 to 512 [ 109.127903][ T5721] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.197650][ T5721] EXT4-fs (loop3): 1 truncate cleaned up [ 109.223865][ T5721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.284082][ T5727] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 109.435278][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.445693][ T5731] netlink: 'syz.1.637': attribute type 1 has an invalid length. [ 109.453391][ T5731] netlink: 224 bytes leftover after parsing attributes in process `syz.1.637'. [ 110.286777][ T5736] loop2: detected capacity change from 0 to 8192 [ 110.665041][ T5741] bridge0: entered allmulticast mode [ 110.710402][ T5741] bridge_slave_1: left allmulticast mode [ 110.720132][ T5741] bridge_slave_1: left promiscuous mode [ 110.727324][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.749482][ T5743] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 110.757263][ T5743] netlink: 224 bytes leftover after parsing attributes in process `syz.0.631'. [ 110.862581][ T5741] bridge_slave_0: left allmulticast mode [ 110.868925][ T5741] bridge_slave_0: left promiscuous mode [ 110.876598][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.066219][ T5765] loop1: detected capacity change from 0 to 1024 [ 111.078600][ T5763] loop2: detected capacity change from 0 to 512 [ 111.087327][ T5765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.135707][ T5765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.241367][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.335299][ T5773] loop2: detected capacity change from 0 to 164 [ 111.418016][ T5781] loop4: detected capacity change from 0 to 128 [ 111.443072][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 111.443090][ T29] audit: type=1400 audit(1760356399.842:4973): avc: denied { create } for pid=5774 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.491533][ T5781] bio_check_eod: 17131 callbacks suppressed [ 111.491554][ T5781] syz.4.642: attempt to access beyond end of device [ 111.491554][ T5781] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 111.525370][ T5781] syz.4.642: attempt to access beyond end of device [ 111.525370][ T5781] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 111.540715][ T5781] syz.4.642: attempt to access beyond end of device [ 111.540715][ T5781] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 111.564544][ T5781] syz.4.642: attempt to access beyond end of device [ 111.564544][ T5781] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 111.610199][ T5786] syz.4.642: attempt to access beyond end of device [ 111.610199][ T5786] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 111.633434][ T5781] syz.4.642: attempt to access beyond end of device [ 111.633434][ T5781] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 111.637882][ T5786] syz.4.642: attempt to access beyond end of device [ 111.637882][ T5786] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 111.656055][ T5781] syz.4.642: attempt to access beyond end of device [ 111.656055][ T5781] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 111.681789][ T5781] syz.4.642: attempt to access beyond end of device [ 111.681789][ T5781] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 111.695556][ T5781] syz.4.642: attempt to access beyond end of device [ 111.695556][ T5781] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 111.796398][ T29] audit: type=1400 audit(1760356400.202:4974): avc: denied { write } for pid=5792 comm="syz.2.646" laddr=172.20.20.170 lport=12200 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.016353][ T29] audit: type=1400 audit(1760356400.342:4975): avc: denied { getopt } for pid=5792 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.056551][ T5802] loop3: detected capacity change from 0 to 512 [ 112.140277][ T5803] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 112.209285][ T29] audit: type=1326 audit(1760356400.612:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 112.242196][ T5805] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 112.250108][ T5805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.651'. [ 112.265765][ T5802] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.278753][ T5802] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.650: EA inode hash validation failed [ 112.314742][ T29] audit: type=1326 audit(1760356400.642:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 112.338144][ T29] audit: type=1326 audit(1760356400.642:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 112.361673][ T29] audit: type=1326 audit(1760356400.642:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 112.385354][ T29] audit: type=1326 audit(1760356400.642:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 112.408645][ T29] audit: type=1326 audit(1760356400.642:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 112.432306][ T29] audit: type=1326 audit(1760356400.642:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5804 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 112.492391][ T5802] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.564692][ T5802] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.650: corrupted inode contents [ 112.637439][ T5802] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.650: mark_inode_dirty error [ 112.650825][ T5802] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.650: corrupted inode contents [ 112.663605][ T5802] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.650: mark_inode_dirty error [ 112.678823][ T5802] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.650: mark inode dirty (error -117) [ 112.692757][ T5802] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 112.702179][ T5802] EXT4-fs (loop3): 1 orphan inode deleted [ 112.709614][ T5802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.833143][ T5814] loop0: detected capacity change from 0 to 512 [ 112.878195][ T5814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.935518][ T5814] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.955409][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.974580][ T5821] netlink: 288 bytes leftover after parsing attributes in process `syz.1.656'. [ 112.986743][ T5814] netlink: 64 bytes leftover after parsing attributes in process `syz.0.654'. [ 112.996496][ T5816] loop2: detected capacity change from 0 to 8192 [ 113.084182][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.158895][ T5832] serio: Serial port ttyS3 [ 113.268485][ T5838] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 113.277521][ T5838] netlink: 224 bytes leftover after parsing attributes in process `syz.2.663'. [ 113.423836][ T5826] loop3: detected capacity change from 0 to 32768 [ 113.468440][ T5826] loop3: p1 p2 p3 < p5 p6 > [ 113.474758][ T5826] loop3: p2 size 16775168 extends beyond EOD, truncated [ 113.486598][ T5826] loop3: p5 start 4294970168 is beyond EOD, truncated [ 113.514430][ T5847] loop1: detected capacity change from 0 to 1024 [ 113.623745][ T5847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.661509][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 113.661556][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 113.677083][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 113.684932][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 113.919030][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.049507][ T5868] nfs4: Bad value for 'source' [ 114.079024][ T5868] netlink: 'syz.2.673': attribute type 13 has an invalid length. [ 114.205577][ T5874] loop0: detected capacity change from 0 to 1024 [ 114.224089][ T5874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.266672][ T5874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.364679][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.474756][ T4339] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.536541][ T5885] loop4: detected capacity change from 0 to 2048 [ 114.559184][ T4339] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.614945][ T4339] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.639778][ T5885] loop4: p1 < > p4 [ 114.670102][ T4339] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.713519][ T5885] loop4: p4 size 8388608 extends beyond EOD, truncated [ 115.239974][ T5896] loop2: detected capacity change from 0 to 512 [ 115.326203][ T5896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.676981][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.684'. [ 115.764905][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.791944][ T5917] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 115.799790][ T5917] netlink: 224 bytes leftover after parsing attributes in process `syz.1.688'. [ 115.805088][ T5916] bond1: option mode: unable to set because the bond device has slaves [ 115.820329][ T5918] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 115.828116][ T5918] netlink: 224 bytes leftover after parsing attributes in process `syz.3.691'. [ 115.870905][ T5923] loop2: detected capacity change from 0 to 1024 [ 115.874299][ T5916] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 115.901531][ T5923] EXT4-fs: Ignoring removed orlov option [ 115.927722][ T5924] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 115.935928][ T5923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.961196][ T5923] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.061521][ T5930] netlink: 'syz.1.694': attribute type 30 has an invalid length. [ 116.083541][ T4339] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:28: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.098324][ T4339] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 116.110651][ T4339] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.110651][ T4339] [ 116.120711][ T5937] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: comm syz.2.689: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.135115][ T5937] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.689: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 116.180811][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.387605][ T5951] hub 6-0:1.0: USB hub found [ 116.395316][ T5951] hub 6-0:1.0: 8 ports detected [ 116.567529][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 116.567547][ T29] audit: type=1326 audit(1760356404.972:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.666070][ T29] audit: type=1326 audit(1760356405.002:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.689459][ T29] audit: type=1326 audit(1760356405.002:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.690692][ T5960] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 116.713033][ T29] audit: type=1326 audit(1760356405.012:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.713092][ T29] audit: type=1326 audit(1760356405.012:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.713126][ T29] audit: type=1326 audit(1760356405.012:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.713162][ T29] audit: type=1326 audit(1760356405.012:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.713302][ T29] audit: type=1326 audit(1760356405.012:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.713339][ T29] audit: type=1326 audit(1760356405.012:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.713371][ T29] audit: type=1326 audit(1760356405.012:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 116.722748][ T5963] loop3: detected capacity change from 0 to 512 [ 116.748200][ T5960] netlink: 224 bytes leftover after parsing attributes in process `syz.2.703'. [ 116.855122][ T5963] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.702: bg 0: block 248: padding at end of block bitmap is not set [ 116.935268][ T5962] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 116.942989][ T5962] netlink: 224 bytes leftover after parsing attributes in process `syz.0.704'. [ 116.988617][ T5969] netlink: 'syz.1.705': attribute type 1 has an invalid length. [ 116.996448][ T5969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.705'. [ 117.006242][ T5963] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.702: Failed to acquire dquot type 1 [ 117.041011][ T5963] EXT4-fs (loop3): 1 truncate cleaned up [ 117.049913][ T5963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.056438][ T5972] loop2: detected capacity change from 0 to 512 [ 117.063281][ T5963] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.084716][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 117.095239][ T5963] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.104537][ T5972] EXT4-fs: Ignoring removed nobh option [ 117.129146][ T5972] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.706: corrupted inode contents [ 117.147472][ T5972] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #3: comm syz.2.706: mark_inode_dirty error [ 117.165792][ T5972] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.706: corrupted inode contents [ 117.181063][ T5972] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.706: mark_inode_dirty error [ 117.193872][ T5972] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.706: Failed to acquire dquot type 0 [ 117.207327][ T5972] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.706: corrupted inode contents [ 117.221040][ T5972] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.706: mark_inode_dirty error [ 117.234240][ T5972] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.706: corrupted inode contents [ 117.246392][ T5972] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.706: mark_inode_dirty error [ 117.261300][ T5972] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.706: corrupted inode contents [ 117.275622][ T5972] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 117.285946][ T5972] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.706: corrupted inode contents [ 117.299295][ T5972] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.706: mark_inode_dirty error [ 117.315106][ T5972] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 117.326032][ T5972] EXT4-fs (loop2): 1 truncate cleaned up [ 117.332320][ T5972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.347292][ T5972] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.388971][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.428663][ T5997] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 117.436423][ T5997] netlink: 224 bytes leftover after parsing attributes in process `syz.3.717'. [ 117.498953][ T6004] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 117.506671][ T6004] netlink: 224 bytes leftover after parsing attributes in process `syz.3.719'. [ 117.526119][ T6000] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 117.533983][ T6000] netlink: 224 bytes leftover after parsing attributes in process `syz.1.718'. [ 117.556660][ T6006] loop2: detected capacity change from 0 to 1024 [ 117.586803][ T6006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.628112][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.298318][ T6032] loop1: detected capacity change from 0 to 512 [ 118.307207][ T6032] EXT4-fs: Ignoring removed nobh option [ 118.308526][ T6030] can0: slcan on ttyS3. [ 118.313178][ T6032] ext4: Unknown parameter 'obj_type' [ 118.353294][ T6035] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 118.404397][ T6038] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 118.412118][ T6030] can0 (unregistered): slcan off ttyS3. [ 118.418192][ T6030] Falling back ldisc for ttyS3. [ 118.459306][ T6040] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 118.485773][ T6043] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 118.694137][ T6049] loop2: detected capacity change from 0 to 164 [ 118.757905][ T6059] loop1: detected capacity change from 0 to 1024 [ 118.765560][ T6059] EXT4-fs: Ignoring removed nobh option [ 118.776582][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.296241][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.726830][ T6072] loop4: detected capacity change from 0 to 1024 [ 119.768463][ T6072] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.875539][ T6072] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.742: Invalid block bitmap block 0 in block_group 0 [ 120.153776][ T6072] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.742: Failed to acquire dquot type 0 [ 120.195501][ T6072] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.742: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.225452][ T6072] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.742: Invalid inode bitmap blk 0 in block_group 0 [ 120.244360][ T4335] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:24: Failed to release dquot type 0 [ 120.278486][ T6072] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 120.313011][ T6072] EXT4-fs (loop4): 1 orphan inode deleted [ 120.332705][ T6072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.385760][ T6078] Cannot find add_set index 4 as target [ 120.395647][ T6072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.906088][ T6088] __nla_validate_parse: 13 callbacks suppressed [ 120.906110][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 121.378349][ T6093] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 121.386411][ T6093] netlink: 224 bytes leftover after parsing attributes in process `syz.0.747'. [ 121.449152][ T6099] loop1: detected capacity change from 0 to 128 [ 121.477147][ T6101] loop3: detected capacity change from 0 to 2048 [ 121.490444][ T6099] bio_check_eod: 22 callbacks suppressed [ 121.490477][ T6099] syz.1.751: attempt to access beyond end of device [ 121.490477][ T6099] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 121.555959][ T6099] syz.1.751: attempt to access beyond end of device [ 121.555959][ T6099] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 121.581500][ T29] kauditd_printk_skb: 555 callbacks suppressed [ 121.581514][ T29] audit: type=1400 audit(1760356409.982:5864): avc: denied { connect } for pid=6104 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.615115][ T6099] syz.1.751: attempt to access beyond end of device [ 121.615115][ T6099] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 121.629260][ T6099] syz.1.751: attempt to access beyond end of device [ 121.629260][ T6099] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 121.643871][ T6101] loop3: p1 < > p4 [ 121.648971][ T6108] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 121.661676][ T6101] loop3: p4 size 8388608 extends beyond EOD, truncated [ 121.675796][ T6107] syz.1.751: attempt to access beyond end of device [ 121.675796][ T6107] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 121.676084][ T6099] syz.1.751: attempt to access beyond end of device [ 121.676084][ T6099] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 121.707401][ T6099] syz.1.751: attempt to access beyond end of device [ 121.707401][ T6099] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 121.721990][ T6099] syz.1.751: attempt to access beyond end of device [ 121.721990][ T6099] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 121.739612][ T6107] syz.1.751: attempt to access beyond end of device [ 121.739612][ T6107] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 121.749898][ T6099] syz.1.751: attempt to access beyond end of device [ 121.749898][ T6099] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 121.767519][ T6098] loop0: detected capacity change from 0 to 1024 [ 121.802677][ T6098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.876740][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.886301][ T29] audit: type=1326 audit(1760356410.292:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 121.914545][ T6118] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 121.915602][ T29] audit: type=1326 audit(1760356410.322:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 121.922224][ T6118] netlink: 224 bytes leftover after parsing attributes in process `syz.3.756'. [ 121.957773][ T29] audit: type=1326 audit(1760356410.322:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 121.983458][ T29] audit: type=1326 audit(1760356410.322:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 122.006811][ T29] audit: type=1326 audit(1760356410.322:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 122.032003][ T29] audit: type=1326 audit(1760356410.322:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 122.055511][ T29] audit: type=1326 audit(1760356410.322:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 122.080832][ T29] audit: type=1326 audit(1760356410.322:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 122.106186][ T29] audit: type=1326 audit(1760356410.322:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.3.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 122.309507][ T6133] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 122.319040][ T6133] netlink: 224 bytes leftover after parsing attributes in process `syz.2.761'. [ 122.337930][ T6136] loop4: detected capacity change from 0 to 512 [ 122.357030][ T6136] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.402730][ T6136] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 9: comm syz.4.763: lblock 0 mapped to illegal pblock 9 (length 1) [ 122.422250][ T6139] loop1: detected capacity change from 0 to 128 [ 122.429073][ T6136] EXT4-fs (loop4): mount failed [ 122.467506][ T6146] loop1: detected capacity change from 0 to 1024 [ 122.506479][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 122.775982][ T6146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.133772][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.166761][ T6156] loop3: detected capacity change from 0 to 128 [ 123.254861][ T6160] loop1: detected capacity change from 0 to 2048 [ 123.345646][ T6160] loop1: p1 < > p4 [ 123.350066][ T6160] loop1: p4 size 8388608 extends beyond EOD, truncated [ 123.466093][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 123.753117][ T6176] tipc: Enabled bearer , priority 0 [ 123.782751][ T6176] syzkaller0: entered promiscuous mode [ 123.789768][ T6176] syzkaller0: entered allmulticast mode [ 123.810654][ T6179] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 123.819613][ T6179] netlink: 224 bytes leftover after parsing attributes in process `syz.0.774'. [ 123.837891][ T6176] tipc: Resetting bearer [ 123.844559][ T6172] tipc: Resetting bearer [ 123.852158][ T6172] tipc: Disabling bearer [ 123.920981][ T6185] bond1: option mode: unable to set because the bond device has slaves [ 123.956105][ T6185] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 124.129876][ T6200] loop3: detected capacity change from 0 to 512 [ 124.139546][ T6200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.152514][ T6200] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 9: comm syz.3.782: lblock 0 mapped to illegal pblock 9 (length 1) [ 124.158472][ T6190] SELinux: Context  is not valid (left unmapped). [ 124.167099][ T6200] EXT4-fs (loop3): mount failed [ 124.295408][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 124.351516][ T6214] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 124.359279][ T6214] netlink: 224 bytes leftover after parsing attributes in process `syz.3.788'. [ 124.419587][ T6218] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.493893][ T6216] bridge_slave_0: left allmulticast mode [ 124.499752][ T6216] bridge_slave_0: left promiscuous mode [ 124.505653][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.529076][ T6216] bridge_slave_1: left allmulticast mode [ 124.534883][ T6216] bridge_slave_1: left promiscuous mode [ 124.540624][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.608204][ T6216] .`: (slave bond_slave_0): Releasing backup interface [ 124.647740][ T6216] .`: (slave bond_slave_1): Releasing backup interface [ 124.657765][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.667104][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.675679][ T6216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.745783][ T6227] loop1: detected capacity change from 0 to 764 [ 124.790443][ T6227] rock: directory entry would overflow storage [ 124.796814][ T6227] rock: sig=0x4f50, size=4, remaining=3 [ 124.802642][ T6227] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 124.852929][ T6231] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 124.860755][ T6231] netlink: 224 bytes leftover after parsing attributes in process `syz.4.794'. [ 125.152172][ T6247] loop4: detected capacity change from 0 to 128 [ 125.171725][ T6246] loop2: detected capacity change from 0 to 512 [ 125.186670][ T6246] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.204024][ T6246] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 9: comm syz.2.799: lblock 0 mapped to illegal pblock 9 (length 1) [ 125.230433][ T6249] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 125.280108][ T6246] EXT4-fs (loop2): mount failed [ 125.367728][ T6258] loop3: detected capacity change from 0 to 512 [ 125.401168][ T6258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.417815][ T6247] buffer_io_error: 17118 callbacks suppressed [ 125.417836][ T6247] Buffer I/O error on dev loop4, logical block 305, async page read [ 125.433173][ T6247] Buffer I/O error on dev loop4, logical block 306, async page read [ 125.442653][ T6247] Buffer I/O error on dev loop4, logical block 307, async page read [ 125.452555][ T6247] Buffer I/O error on dev loop4, logical block 308, async page read [ 125.460864][ T6258] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.474390][ T6247] Buffer I/O error on dev loop4, logical block 309, async page read [ 125.482432][ T6247] Buffer I/O error on dev loop4, logical block 310, async page read [ 125.484245][ T4335] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.491834][ T6247] Buffer I/O error on dev loop4, logical block 311, async page read [ 125.526620][ T6247] Buffer I/O error on dev loop4, logical block 312, async page read [ 125.535501][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.571437][ T6265] loop3: detected capacity change from 0 to 1024 [ 125.601893][ T6265] EXT4-fs: Ignoring removed orlov option [ 125.689561][ T6265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.972147][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.210303][ T6283] syzkaller0: entered promiscuous mode [ 126.215875][ T6283] syzkaller0: entered allmulticast mode [ 126.234854][ T6285] netlink: 'syz.0.815': attribute type 1 has an invalid length. [ 126.242736][ T6285] __nla_validate_parse: 1 callbacks suppressed [ 126.242755][ T6285] netlink: 224 bytes leftover after parsing attributes in process `syz.0.815'. [ 126.312186][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 126.421020][ T6291] team0: Port device team_slave_1 removed [ 127.514287][ T5214] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.514319][ T3514] Bluetooth: hci0: command 0x1003 tx timeout [ 127.568268][ T6310] loop2: detected capacity change from 0 to 128 [ 127.580187][ T6308] geneve2: entered promiscuous mode [ 127.636036][ T6310] bio_check_eod: 16606 callbacks suppressed [ 127.636055][ T6310] syz.2.819: attempt to access beyond end of device [ 127.636055][ T6310] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 127.657542][ T6310] syz.2.819: attempt to access beyond end of device [ 127.657542][ T6310] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 127.662222][ T6303] syzkaller0: entered promiscuous mode [ 127.672908][ T6310] syz.2.819: attempt to access beyond end of device [ 127.672908][ T6310] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 127.676636][ T6303] syzkaller0: entered allmulticast mode [ 127.707102][ T6310] syz.2.819: attempt to access beyond end of device [ 127.707102][ T6310] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 127.736662][ T4359] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 37195 - 0 [ 127.747453][ T6312] netlink: 'syz.3.832': attribute type 3 has an invalid length. [ 127.768868][ T6310] syz.2.819: attempt to access beyond end of device [ 127.768868][ T6310] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 127.782489][ T4359] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 37195 - 0 [ 127.810943][ T6315] syz.2.819: attempt to access beyond end of device [ 127.810943][ T6315] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 127.828478][ T4359] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 37195 - 0 [ 127.835881][ T6310] syz.2.819: attempt to access beyond end of device [ 127.835881][ T6310] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 127.837366][ T4359] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 37195 - 0 [ 127.858660][ T6315] syz.2.819: attempt to access beyond end of device [ 127.858660][ T6315] loop2: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 127.860396][ T6310] syz.2.819: attempt to access beyond end of device [ 127.860396][ T6310] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 127.872216][ T6315] syz.2.819: attempt to access beyond end of device [ 127.872216][ T6315] loop2: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 128.018397][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 128.018417][ T29] audit: type=1400 audit(1760356416.412:6454): avc: denied { create } for pid=6317 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.022974][ T6323] loop3: detected capacity change from 0 to 764 [ 128.026748][ T29] audit: type=1400 audit(1760356416.422:6455): avc: denied { ioctl } for pid=6317 comm="syz.3.822" path="socket:[16530]" dev="sockfs" ino=16530 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.051699][ T29] audit: type=1400 audit(1760356416.422:6456): avc: denied { setattr } for pid=6317 comm="syz.3.822" path="socket:[16530]" dev="sockfs" ino=16530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.113600][ T6323] rock: directory entry would overflow storage [ 128.119910][ T6323] rock: sig=0x4f50, size=4, remaining=3 [ 128.125639][ T6323] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 128.181617][ T29] audit: type=1326 audit(1760356416.512:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5647c7eec9 code=0x7ffc0000 [ 128.205159][ T29] audit: type=1326 audit(1760356416.512:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6316 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5647c7eec9 code=0x7ffc0000 [ 128.281874][ T6327] loop4: detected capacity change from 0 to 512 [ 128.328404][ T6327] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.825: bg 0: block 248: padding at end of block bitmap is not set [ 128.360239][ T6332] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 128.369218][ T6332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.827'. [ 128.388580][ T6337] tipc: Started in network mode [ 128.394673][ T6337] tipc: Node identity e22a21598e57, cluster identity 4711 [ 128.401921][ T6337] tipc: Enabled bearer , priority 0 [ 128.403260][ T29] audit: type=1326 audit(1760356416.752:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 128.422134][ T6327] Quota error (device loop4): write_blk: dquota write failed [ 128.432001][ T29] audit: type=1326 audit(1760356416.752:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 128.432085][ T29] audit: type=1326 audit(1760356416.762:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 128.432123][ T29] audit: type=1326 audit(1760356416.762:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6330 comm="syz.1.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 128.441098][ T6339] syzkaller0: entered promiscuous mode [ 128.441122][ T6339] syzkaller0: entered allmulticast mode [ 128.442669][ T6339] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 128.532546][ T6327] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.825: Failed to acquire dquot type 1 [ 128.544285][ T6327] EXT4-fs (loop4): 1 truncate cleaned up [ 128.550356][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.571372][ T6327] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.577315][ T6337] tipc: Resetting bearer [ 128.586677][ T6327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.606818][ T6342] netlink: 'syz.1.835': attribute type 1 has an invalid length. [ 128.614678][ T6342] netlink: 224 bytes leftover after parsing attributes in process `syz.1.835'. [ 128.644161][ T6336] tipc: Resetting bearer [ 128.664972][ T6336] tipc: Disabling bearer [ 128.684462][ T6345] loop3: detected capacity change from 0 to 1024 [ 128.721881][ T6345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.745682][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.840'. [ 128.808976][ T6360] rdma_op ffff88810a234580 conn xmit_rdma 0000000000000000 [ 128.835921][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.881433][ T6368] loop2: detected capacity change from 0 to 2048 [ 128.915569][ T6372] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 128.923430][ T6372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.846'. [ 128.946215][ T6368] loop2: p1 < > p4 [ 128.950779][ T6368] loop2: p4 size 8388608 extends beyond EOD, truncated [ 128.996575][ T6375] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 129.006403][ T6375] netlink: 224 bytes leftover after parsing attributes in process `syz.4.847'. [ 129.062415][ T6381] loop2: detected capacity change from 0 to 1024 [ 129.073673][ T6381] EXT4-fs: Ignoring removed nobh option [ 129.078811][ T6382] netlink: 'syz.1.860': attribute type 1 has an invalid length. [ 129.088078][ T6382] netlink: 224 bytes leftover after parsing attributes in process `syz.1.860'. [ 129.145004][ T6381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.216749][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'. [ 129.249902][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 129.351052][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.706262][ T6397] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 129.939322][ T6405] loop3: detected capacity change from 0 to 1024 [ 129.945529][ T6407] loop4: detected capacity change from 0 to 1024 [ 129.966358][ T6405] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºuGPL) failed with errno=-22 [ 129.978174][ T6407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.037093][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.074471][ T6412] loop3: detected capacity change from 0 to 2048 [ 130.105711][ T6412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.110838][ T6416] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 130.152867][ T6414] loop4: detected capacity change from 0 to 512 [ 130.160736][ T6414] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 130.202030][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 130.221015][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 130.223875][ T6424] veth0: entered promiscuous mode [ 130.235537][ T6416] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 130.242096][ T6416] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.249976][ T6416] vhci_hcd vhci_hcd.0: Device attached [ 130.258493][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.300944][ T6430] netlink: 'syz.3.864': attribute type 1 has an invalid length. [ 130.320380][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.367695][ T6423] vhci_hcd: connection closed [ 130.368005][ T4335] vhci_hcd: stop threads [ 130.377396][ T4335] vhci_hcd: release socket [ 130.381939][ T4335] vhci_hcd: disconnect device [ 130.443415][ T36] vhci_hcd: vhci_device speed not set [ 130.471879][ T6434] infiniband syz!: set down [ 130.477625][ T6434] infiniband syz!: added team_slave_0 [ 130.500813][ T6434] RDS/IB: syz!: added [ 131.066625][ T6453] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 37195 - 0 [ 131.333960][ T6453] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 37195 - 0 [ 131.384526][ T6457] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.651090][ T6453] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 37195 - 0 [ 131.919191][ T6453] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 37195 - 0 [ 132.002475][ T6468] tipc: Enabled bearer , priority 0 [ 132.041871][ T6468] syzkaller0: entered promiscuous mode [ 132.047495][ T6468] syzkaller0: entered allmulticast mode [ 132.131642][ T4335] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 37195 - 0 [ 132.198722][ T6468] tipc: Resetting bearer [ 132.210671][ T4335] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 37195 - 0 [ 132.225776][ T6467] tipc: Resetting bearer [ 132.267030][ T6467] tipc: Disabling bearer [ 132.279256][ T6471] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 132.288795][ T6471] __nla_validate_parse: 4 callbacks suppressed [ 132.288814][ T6471] netlink: 224 bytes leftover after parsing attributes in process `syz.1.879'. [ 132.308214][ T4335] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 37195 - 0 [ 132.326037][ T6473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.351361][ T4335] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 37195 - 0 [ 132.368497][ T6474] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.413464][ T6474] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 132.434164][ T4339] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 132.469713][ T6480] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 132.478842][ T6480] netlink: 224 bytes leftover after parsing attributes in process `syz.2.883'. [ 132.506306][ T6487] tipc: Started in network mode [ 132.511353][ T6487] tipc: Node identity 0276d5b919f2, cluster identity 4711 [ 132.519712][ T6487] tipc: Enabled bearer , priority 0 [ 132.529373][ T6487] syzkaller0: entered promiscuous mode [ 132.536130][ T6487] syzkaller0: entered allmulticast mode [ 132.583292][ T4339] bond1: (slave macvlan2): link status up again after 0 ms [ 132.590716][ T4339] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 132.608552][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 132.617468][ T4346] bond1: (slave macvlan2): link status up again after 0 ms [ 132.646934][ T6487] tipc: Resetting bearer [ 132.690667][ T4346] bond1: (slave macvlan2): link status up again after 0 ms [ 132.697999][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 132.706687][ T6486] tipc: Resetting bearer [ 132.723956][ T6486] tipc: Disabling bearer [ 132.814503][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 132.877226][ T6496] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 132.886849][ T6496] netlink: 224 bytes leftover after parsing attributes in process `syz.2.887'. [ 132.922998][ T6500] tipc: Started in network mode [ 132.929059][ T6500] tipc: Node identity 0aca352c222, cluster identity 4711 [ 132.937447][ T6500] tipc: Enabled bearer , priority 0 [ 132.946098][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 133.041007][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 133.041024][ T29] audit: type=1326 audit(1760356421.442:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 133.074811][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 133.125742][ T6500] syzkaller0: entered promiscuous mode [ 133.131360][ T6500] syzkaller0: entered allmulticast mode [ 133.139301][ T29] audit: type=1326 audit(1760356421.482:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 133.162894][ T29] audit: type=1326 audit(1760356421.492:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 133.186247][ T29] audit: type=1326 audit(1760356421.492:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 133.209619][ T29] audit: type=1326 audit(1760356421.492:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 133.233230][ T29] audit: type=1326 audit(1760356421.492:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 133.256740][ T29] audit: type=1326 audit(1760356421.512:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 133.280629][ T29] audit: type=1326 audit(1760356421.512:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 133.345205][ T4335] bond1: (slave macvlan2): failed to get link speed/duplex [ 133.363186][ T6500] tipc: Resetting bearer [ 133.370399][ T6505] rdma_op ffff888101064580 conn xmit_rdma 0000000000000000 [ 133.389680][ T6499] tipc: Resetting bearer [ 133.400927][ T6510] netlink: 'syz.0.891': attribute type 1 has an invalid length. [ 133.410611][ T6510] netlink: 224 bytes leftover after parsing attributes in process `syz.0.891'. [ 133.414664][ T29] audit: type=1326 audit(1760356421.802:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 133.443056][ T29] audit: type=1326 audit(1760356421.802:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.0.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe120d1eec9 code=0x7ffc0000 [ 133.603503][ T6499] tipc: Disabling bearer [ 133.703400][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.712166][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.682123][ T6527] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 134.690184][ T6527] netlink: 224 bytes leftover after parsing attributes in process `syz.0.897'. [ 135.784630][ T6533] hub 2-0:1.0: USB hub found [ 135.789802][ T6533] hub 2-0:1.0: 8 ports detected [ 136.042700][ T6536] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 136.051956][ T6536] netlink: 224 bytes leftover after parsing attributes in process `syz.4.900'. [ 136.088711][ T6537] netlink: 'syz.1.899': attribute type 3 has an invalid length. [ 136.148216][ T6546] netlink: 'syz.4.904': attribute type 1 has an invalid length. [ 136.156030][ T6546] netlink: 224 bytes leftover after parsing attributes in process `syz.4.904'. [ 136.172618][ T6541] loop3: detected capacity change from 0 to 512 [ 136.186449][ T6541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.201164][ T6541] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.232511][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.290481][ T6559] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 136.298338][ T6559] netlink: 224 bytes leftover after parsing attributes in process `syz.3.907'. [ 136.346214][ T6562] loop3: detected capacity change from 0 to 512 [ 136.353821][ T6562] journal_path: Non-blockdev passed as './file0' [ 136.360218][ T6562] EXT4-fs: error: could not find journal device path [ 136.401812][ T6562] loop3: detected capacity change from 0 to 1024 [ 136.409047][ T6562] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 136.420031][ T6562] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 136.431285][ T6562] JBD2: no valid journal superblock found [ 136.437112][ T6562] EXT4-fs (loop3): Could not load journal inode [ 136.450428][ T6562] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 136.817677][ T6581] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 136.827382][ T6581] netlink: 224 bytes leftover after parsing attributes in process `syz.0.914'. [ 136.889184][ T6585] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 136.898707][ T6583] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 136.909040][ T6578] loop3: detected capacity change from 0 to 8192 [ 136.967417][ T6589] loop4: detected capacity change from 0 to 512 [ 136.996893][ T6589] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.918: bad orphan inode 11862016 [ 137.010688][ T6589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 137.027255][ T6589] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.041543][ T6591] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 137.062017][ T6596] loop3: detected capacity change from 0 to 1024 [ 137.103602][ T6598] syzkaller0: entered promiscuous mode [ 137.109136][ T6598] syzkaller0: entered allmulticast mode [ 137.193431][ T6596] EXT4-fs: Ignoring removed orlov option [ 137.272063][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 137.307646][ T6607] netlink: 'syz.0.926': attribute type 1 has an invalid length. [ 137.316074][ T6596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.316148][ T6596] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.342363][ T6607] __nla_validate_parse: 4 callbacks suppressed [ 137.342379][ T6607] netlink: 224 bytes leftover after parsing attributes in process `syz.0.926'. [ 137.411353][ T6611] batman_adv: batadv0: Removing interface: dummy0 [ 137.434935][ T6615] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.921: Freeing blocks not in datazone - block = 0, count = 16 [ 137.460299][ T6611] bond0: (slave bond_slave_0): Releasing backup interface [ 137.482693][ T6617] netlink: 224 bytes leftover after parsing attributes in process `syz.4.929'. [ 137.495937][ T4382] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 137.513590][ T4382] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 137.525918][ T4382] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.525918][ T4382] [ 137.535650][ T4382] EXT4-fs (loop3): Total free blocks count 0 [ 137.541707][ T4382] EXT4-fs (loop3): Free/Dirty block details [ 137.547648][ T4382] EXT4-fs (loop3): free_blocks=4293918736 [ 137.553403][ T4382] EXT4-fs (loop3): dirty_blocks=16 [ 137.558685][ T4382] EXT4-fs (loop3): Block reservation details [ 137.564719][ T4382] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 137.583467][ T6611] bond0: (slave bond_slave_1): Releasing backup interface [ 137.596990][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.605441][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.616463][ T6611] net_ratelimit: 16 callbacks suppressed [ 137.616480][ T6611] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.639092][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 137.646692][ T6622] netlink: 224 bytes leftover after parsing attributes in process `syz.0.931'. [ 137.758760][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 137.854888][ T6633] netlink: 224 bytes leftover after parsing attributes in process `syz.2.934'. [ 137.909977][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 137.962588][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.024489][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.135455][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.244311][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.354636][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.445091][ T6656] 1ªX¹¦À: left allmulticast mode [ 138.452668][ T6656] ipvlan0: left allmulticast mode [ 138.459526][ T6656] veth0_vlan: left allmulticast mode [ 138.469644][ T6656] sit1: left allmulticast mode [ 138.524445][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.602113][ T6660] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.705243][ T4335] bond1: (slave macvlan2): failed to get link speed/duplex [ 138.726689][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 138.726707][ T29] audit: type=1326 audit(1760356427.132:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 138.760199][ T6665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.945'. [ 138.776140][ T6660] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.790912][ T29] audit: type=1326 audit(1760356427.162:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 138.814781][ T29] audit: type=1326 audit(1760356427.162:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 138.838388][ T29] audit: type=1326 audit(1760356427.162:7361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 138.861812][ T29] audit: type=1326 audit(1760356427.162:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 138.885297][ T29] audit: type=1326 audit(1760356427.162:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 138.908741][ T29] audit: type=1326 audit(1760356427.162:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 138.910972][ T6668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.946'. [ 138.932206][ T29] audit: type=1326 audit(1760356427.162:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 138.932252][ T29] audit: type=1326 audit(1760356427.162:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 138.932334][ T29] audit: type=1326 audit(1760356427.162:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.1.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 139.022465][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.946'. [ 139.046416][ T6660] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.057102][ T6672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.947'. [ 139.097311][ T6660] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.170131][ T4335] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.186092][ T4335] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.192091][ T6654] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 139.206485][ T4335] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.219404][ T4335] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.304558][ T6691] loop4: detected capacity change from 0 to 2048 [ 139.357406][ T6691] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.399906][ T6691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.434115][ T6691] Invalid ELF header magic: != ELF [ 139.468562][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.775528][ T6707] bond1: entered promiscuous mode [ 139.780724][ T6707] bond1: entered allmulticast mode [ 139.786750][ T6707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.805951][ T6707] bond1 (unregistering): Released all slaves [ 140.967717][ T6723] validate_nla: 7 callbacks suppressed [ 140.967734][ T6723] netlink: 'syz.2.963': attribute type 27 has an invalid length. [ 140.994521][ T6723] veth0_to_team: left promiscuous mode [ 141.002000][ T6723] team1: left promiscuous mode [ 141.006852][ T6723] team1: left allmulticast mode [ 141.011911][ T6723] vlan1: left promiscuous mode [ 141.016724][ T6723] bond0: left promiscuous mode [ 141.021568][ T6723] gretap1: left promiscuous mode [ 141.026714][ T6723] vlan1: left allmulticast mode [ 141.031598][ T6723] bond0: left allmulticast mode [ 141.036576][ T6723] gretap1: left allmulticast mode [ 141.204812][ T6730] 8021q: adding VLAN 0 to HW filter on device  [ 141.262595][ T6730] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.451602][ T6733] syzkaller0: entered promiscuous mode [ 141.457211][ T6733] syzkaller0: entered allmulticast mode [ 142.096541][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'. [ 142.117278][ T6742] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 142.348023][ T6749] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 142.368567][ T6749] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 142.375123][ T6749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.382787][ T6749] vhci_hcd vhci_hcd.0: Device attached [ 142.388306][ T6755] syz.0.974 (6755): /proc/6754/oom_adj is deprecated, please use /proc/6754/oom_score_adj instead. [ 142.389929][ T6751] __nla_validate_parse: 2 callbacks suppressed [ 142.389950][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.973'. [ 142.414993][ T6751] veth0_macvtap: left promiscuous mode [ 142.776047][ T4346] net_ratelimit: 20 callbacks suppressed [ 142.776068][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.395527][ T6752] vhci_hcd: connection closed [ 143.397208][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.469761][ T4346] vhci_hcd: stop threads [ 143.475302][ T4346] vhci_hcd: release socket [ 143.479760][ T4346] vhci_hcd: disconnect device [ 143.543087][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.577586][ T6771] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 143.585397][ T6771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.977'. [ 143.654327][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.681414][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 143.697318][ T6769] netlink: 96 bytes leftover after parsing attributes in process `syz.2.978'. [ 143.745940][ T6780] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 143.764400][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.874910][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 143.901397][ T6791] tipc: Enabled bearer , priority 0 [ 143.910462][ T6791] syzkaller0: entered promiscuous mode [ 143.917164][ T6791] syzkaller0: entered allmulticast mode [ 143.926563][ T6791] tipc: Resetting bearer [ 143.933108][ T6790] tipc: Resetting bearer [ 143.941820][ T6790] tipc: Disabling bearer [ 144.016540][ T6793] syzkaller0: entered promiscuous mode [ 144.018878][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 144.018898][ T29] audit: type=1326 audit(1760356432.422:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.022093][ T6793] syzkaller0: entered allmulticast mode [ 144.030313][ T6795] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 144.052721][ T29] audit: type=1326 audit(1760356432.432:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.052760][ T29] audit: type=1326 audit(1760356432.432:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.052838][ T29] audit: type=1326 audit(1760356432.432:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.052871][ T29] audit: type=1326 audit(1760356432.432:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.052975][ T29] audit: type=1326 audit(1760356432.432:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.060629][ T6795] netlink: 224 bytes leftover after parsing attributes in process `syz.3.986'. [ 144.066196][ T29] audit: type=1326 audit(1760356432.432:7546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.066234][ T29] audit: type=1326 audit(1760356432.432:7547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.066287][ T29] audit: type=1326 audit(1760356432.432:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.066361][ T29] audit: type=1326 audit(1760356432.432:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96fceec9 code=0x7ffc0000 [ 144.066653][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 144.193398][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 144.308705][ T6798] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 144.318051][ T6798] netlink: 224 bytes leftover after parsing attributes in process `syz.3.987'. [ 144.423386][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 144.534342][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 145.106588][ T6816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.126284][ T6819] syzkaller0: entered promiscuous mode [ 145.131800][ T6819] syzkaller0: entered allmulticast mode [ 145.194844][ T6822] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 145.346476][ T6828] futex_wake_op: syz.0.998 tries to shift op by 144; fix this program [ 145.384580][ T6831] netlink: 'syz.0.999': attribute type 27 has an invalid length. [ 145.430873][ T6831] 8021q: adding VLAN 0 to HW filter on device .` [ 146.409783][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 146.481057][ T6857] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 146.481057][ T6857] The task syz.0.1003 (6857) triggered the difference, watch for misbehavior. [ 147.625439][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 147.635522][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 147.649516][ T6868] dummy0: entered allmulticast mode [ 147.688756][ T6872] syzkaller0: entered promiscuous mode [ 147.694478][ T6872] syzkaller0: entered allmulticast mode [ 147.705451][ T6874] @ÿ: renamed from veth0_vlan [ 147.718242][ T6868] SELinux: Context @ is not valid (left unmapped). [ 147.856958][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1017'. [ 147.867349][ T4382] net_ratelimit: 23 callbacks suppressed [ 147.867442][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 147.977812][ T6901] netlink: 'syz.4.1022': attribute type 29 has an invalid length. [ 147.985821][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 148.094843][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 148.203294][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 148.313298][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 148.433297][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 148.554222][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 148.663661][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 148.705799][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'. [ 149.052182][ T6912] tipc: Enabled bearer , priority 0 [ 149.060977][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 149.069980][ T6912] syzkaller0: entered promiscuous mode [ 149.076728][ T6912] syzkaller0: entered allmulticast mode [ 149.108994][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 149.109011][ T29] audit: type=1326 audit(1760356437.502:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.138731][ T29] audit: type=1326 audit(1760356437.502:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.162177][ T29] audit: type=1326 audit(1760356437.502:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.185835][ T29] audit: type=1326 audit(1760356437.502:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.209539][ T29] audit: type=1326 audit(1760356437.502:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.233049][ T29] audit: type=1326 audit(1760356437.502:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.256477][ T29] audit: type=1326 audit(1760356437.502:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.280082][ T29] audit: type=1326 audit(1760356437.502:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.303714][ T29] audit: type=1326 audit(1760356437.502:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.328102][ T29] audit: type=1326 audit(1760356437.502:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6913 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91085eec9 code=0x7ffc0000 [ 149.388399][ T6917] tipc: Resetting bearer [ 149.400421][ T6924] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 149.408431][ T6924] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1030'. [ 149.408964][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 149.429332][ T6911] tipc: Resetting bearer [ 149.439369][ T6911] tipc: Disabling bearer [ 149.489323][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 149.500287][ T3318] CPU: 1 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.500320][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.500337][ T3318] Call Trace: [ 149.500346][ T3318] [ 149.500356][ T3318] __dump_stack+0x1d/0x30 [ 149.500457][ T3318] dump_stack_lvl+0xe8/0x140 [ 149.500483][ T3318] dump_stack+0x15/0x1b [ 149.500505][ T3318] dump_header+0x81/0x220 [ 149.500553][ T3318] oom_kill_process+0x342/0x400 [ 149.500593][ T3318] out_of_memory+0x979/0xb80 [ 149.500634][ T3318] try_charge_memcg+0x610/0xa10 [ 149.500705][ T3318] charge_memcg+0x51/0xc0 [ 149.500808][ T3318] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 149.500834][ T3318] __read_swap_cache_async+0x17b/0x2d0 [ 149.500884][ T3318] swap_cluster_readahead+0x262/0x3c0 [ 149.500963][ T3318] swapin_readahead+0xde/0x6f0 [ 149.500989][ T3318] ? css_rstat_updated+0xb7/0x240 [ 149.501101][ T3318] ? next_uptodate_folio+0x81c/0x890 [ 149.501144][ T3318] ? __rcu_read_unlock+0x4f/0x70 [ 149.501177][ T3318] ? __rcu_read_unlock+0x4f/0x70 [ 149.501265][ T3318] ? swap_cache_get_folio+0x277/0x280 [ 149.501345][ T3318] do_swap_page+0x2ae/0x2370 [ 149.501374][ T3318] ? _raw_spin_unlock+0x26/0x50 [ 149.501413][ T3318] ? finish_task_switch+0xad/0x2b0 [ 149.501441][ T3318] ? __pfx_default_wake_function+0x10/0x10 [ 149.501495][ T3318] handle_mm_fault+0x9a5/0x2be0 [ 149.501530][ T3318] ? vma_start_read+0x141/0x1f0 [ 149.501575][ T3318] do_user_addr_fault+0x630/0x1080 [ 149.501636][ T3318] ? fpregs_restore_userregs+0xe2/0x1d0 [ 149.501754][ T3318] ? switch_fpu_return+0xe/0x20 [ 149.501789][ T3318] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.501825][ T3318] exc_page_fault+0x62/0xa0 [ 149.501923][ T3318] asm_exc_page_fault+0x26/0x30 [ 149.501964][ T3318] RIP: 0033:0x7f5647cb1745 [ 149.501996][ T3318] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 149.502019][ T3318] RSP: 002b:00007ffc93498a28 EFLAGS: 00010246 [ 149.502035][ T3318] RAX: 0000000000000000 RBX: 000000000000024d RCX: 00007f5647cb1743 [ 149.502058][ T3318] RDX: 00007ffc93498a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.502070][ T3318] RBP: 00007ffc93498aac R08: 000000001439436a R09: 0000000000000000 [ 149.502086][ T3318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 149.502102][ T3318] R13: 00000000000927c0 R14: 0000000000024621 R15: 00007ffc93498b00 [ 149.502128][ T3318] [ 149.502137][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 2853 [ 149.755339][ T3318] memory+swap: usage 312024kB, limit 9007199254740988kB, failcnt 0 [ 149.763294][ T3318] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 149.770615][ T3318] Memory cgroup stats for /syz4: [ 149.770804][ T3318] cache 0 [ 149.778753][ T3318] rss 0 [ 149.781616][ T3318] shmem 0 [ 149.784683][ T3318] mapped_file 0 [ 149.788181][ T3318] dirty 0 [ 149.791121][ T3318] writeback 0 [ 149.794550][ T3318] workingset_refault_anon 166 [ 149.799277][ T3318] workingset_refault_file 961 [ 149.804005][ T3318] swap 4939776 [ 149.807468][ T3318] swapcached 12288 [ 149.811218][ T3318] pgpgin 127850 [ 149.814774][ T3318] pgpgout 127846 [ 149.818419][ T3318] pgfault 154636 [ 149.821967][ T3318] pgmajfault 100 [ 149.825641][ T3318] inactive_anon 0 [ 149.829446][ T3318] active_anon 12288 [ 149.833407][ T3318] inactive_file 0 [ 149.837056][ T3318] active_file 4096 [ 149.840866][ T3318] unevictable 0 [ 149.844363][ T3318] hierarchical_memory_limit 314572800 [ 149.849826][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 149.856254][ T3318] total_cache 0 [ 149.859760][ T3318] total_rss 0 [ 149.863074][ T3318] total_shmem 0 [ 149.866562][ T3318] total_mapped_file 0 [ 149.870557][ T3318] total_dirty 0 [ 149.874041][ T3318] total_writeback 0 [ 149.877925][ T3318] total_workingset_refault_anon 166 [ 149.883114][ T3318] total_workingset_refault_file 961 [ 149.888472][ T3318] total_swap 4939776 [ 149.892388][ T3318] total_swapcached 12288 [ 149.896695][ T3318] total_pgpgin 127850 [ 149.900690][ T3318] total_pgpgout 127846 [ 149.904798][ T3318] total_pgfault 154636 [ 149.908876][ T3318] total_pgmajfault 100 [ 149.912993][ T3318] total_inactive_anon 0 [ 149.917305][ T3318] total_active_anon 12288 [ 149.921645][ T3318] total_inactive_file 0 [ 149.925863][ T3318] total_active_file 4096 [ 149.930159][ T3318] total_unevictable 0 [ 149.934172][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1022,pid=6900,uid=0 [ 149.948895][ T3318] Memory cgroup out of memory: Killed process 6900 (syz.4.1022) total-vm:93824kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 150.259201][ T6955] tipc: Enabled bearer , priority 0 [ 150.271315][ T6955] syzkaller0: entered promiscuous mode [ 150.277070][ T6955] syzkaller0: entered allmulticast mode [ 150.287126][ T6957] tipc: Enabled bearer , priority 0 [ 150.296471][ T6955] tipc: Resetting bearer [ 150.303158][ T6953] tipc: Resetting bearer [ 150.310840][ T6953] tipc: Disabling bearer [ 150.319291][ T6957] syzkaller0: entered promiscuous mode [ 150.324866][ T6957] syzkaller0: entered allmulticast mode [ 150.339989][ T6957] tipc: Resetting bearer [ 150.346568][ T6956] tipc: Resetting bearer [ 150.358213][ T6956] tipc: Disabling bearer [ 150.715539][ T6972] syzkaller0: entered promiscuous mode [ 150.721048][ T6972] syzkaller0: entered allmulticast mode [ 151.025729][ T6978] hub 9-0:1.0: USB hub found [ 151.030790][ T6978] hub 9-0:1.0: 8 ports detected [ 151.446409][ T6982] FAT-fs (loop7): unable to read boot sector [ 151.456894][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 151.466110][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 151.742136][ T6990] syzkaller0: entered promiscuous mode [ 151.747881][ T6990] syzkaller0: entered allmulticast mode [ 152.783995][ T7026] tipc: Enabled bearer , priority 0 [ 152.791635][ T7026] syzkaller0: entered promiscuous mode [ 152.798137][ T7026] syzkaller0: entered allmulticast mode [ 153.008391][ T4339] net_ratelimit: 17 callbacks suppressed [ 153.008410][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.034453][ T7026] tipc: Resetting bearer [ 153.052094][ T7025] tipc: Resetting bearer [ 153.062468][ T7025] tipc: Disabling bearer [ 153.123281][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.260365][ T7040] syzkaller0: entered promiscuous mode [ 153.266034][ T7040] syzkaller0: entered allmulticast mode [ 153.324319][ T7044] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 153.332094][ T7044] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1072'. [ 153.343269][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.419414][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 153.465334][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 153.473275][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.549975][ T7050] bond0: (slave veth1_to_bond): Error: Device can not be enslaved while up [ 153.583903][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.640815][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 153.665600][ T7054] syzkaller0: entered promiscuous mode [ 153.671132][ T7054] syzkaller0: entered allmulticast mode [ 153.753485][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 153.772672][ T7059] dummy0: entered allmulticast mode [ 153.893427][ T4382] bond1: (slave macvlan2): failed to get link speed/duplex [ 154.098783][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 154.924796][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 155.168669][ T4346] bond1: (slave macvlan2): failed to get link speed/duplex [ 155.202227][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 155.202244][ T29] audit: type=1400 audit(1760356443.602:7894): avc: denied { read } for pid=7075 comm="syz.2.1085" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.233166][ T29] audit: type=1400 audit(1760356443.602:7895): avc: denied { open } for pid=7075 comm="syz.2.1085" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.513471][ T29] audit: type=1400 audit(1760356443.672:7896): avc: denied { open } for pid=7075 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 155.534089][ T29] audit: type=1400 audit(1760356443.672:7897): avc: denied { kernel } for pid=7075 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 155.553653][ T29] audit: type=1400 audit(1760356443.672:7898): avc: denied { tracepoint } for pid=7075 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 155.574177][ T29] audit: type=1400 audit(1760356443.682:7899): avc: denied { create } for pid=7075 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.594409][ T29] audit: type=1400 audit(1760356443.782:7900): avc: denied { create } for pid=7081 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.614813][ T29] audit: type=1400 audit(1760356443.792:7901): avc: denied { setopt } for pid=7081 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.634865][ T29] audit: type=1400 audit(1760356443.792:7902): avc: denied { write } for pid=7081 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.655191][ T29] audit: type=1400 audit(1760356443.792:7903): avc: denied { connect } for pid=7081 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.965200][ T7093] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 155.973011][ T7093] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1089'. [ 156.137846][ T7098] syzkaller0: entered promiscuous mode [ 156.143430][ T7098] syzkaller0: entered allmulticast mode [ 156.574810][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 156.644983][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 156.736023][ T7117] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 156.743963][ T7117] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1098'. [ 156.790103][ T7120] tipc: Enabled bearer , priority 0 [ 156.813699][ T7120] syzkaller0: entered promiscuous mode [ 156.819245][ T7120] syzkaller0: entered allmulticast mode [ 156.829991][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 156.843777][ T7120] tipc: Resetting bearer [ 156.851908][ T7119] tipc: Resetting bearer [ 156.864987][ T7119] tipc: Disabling bearer [ 156.885016][ T7124] vlan0: entered promiscuous mode [ 156.890126][ T7124] hsr_slave_1: entered promiscuous mode [ 156.895847][ T7124] vlan0: entered allmulticast mode [ 156.900994][ T7124] hsr_slave_1: entered allmulticast mode [ 156.948286][ T7126] netlink: 'syz.1.1102': attribute type 13 has an invalid length. [ 156.956299][ T7126] netlink: 'syz.1.1102': attribute type 27 has an invalid length. [ 156.968187][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 157.219251][ T7140] tipc: Enabled bearer , priority 0 [ 157.227358][ T7140] syzkaller0: entered promiscuous mode [ 157.232882][ T7140] syzkaller0: entered allmulticast mode [ 157.243877][ T7140] tipc: Resetting bearer [ 157.250764][ T7139] tipc: Resetting bearer [ 157.260053][ T7139] tipc: Disabling bearer [ 157.287467][ T7144] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 157.372838][ T7148] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 157.424077][ T7153] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 158.353154][ T4339] net_ratelimit: 22 callbacks suppressed [ 158.353175][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 158.438709][ T7180] netlink: 'syz.4.1121': attribute type 13 has an invalid length. [ 158.446640][ T7180] netlink: 'syz.4.1121': attribute type 27 has an invalid length. [ 158.495937][ T7180] bond_slave_0: left promiscuous mode [ 158.501463][ T7180] bond_slave_1: left promiscuous mode [ 158.535485][ T7191] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 158.544130][ T7191] __nla_validate_parse: 3 callbacks suppressed [ 158.550595][ T7191] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1125'. [ 159.171214][ T7196] tipc: Enabled bearer , priority 0 [ 159.179202][ T7198] syzkaller0: entered promiscuous mode [ 159.185494][ T7198] syzkaller0: entered allmulticast mode [ 159.193476][ T7217] tipc: Resetting bearer [ 159.199530][ T4339] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.208923][ T7187] tipc: Resetting bearer [ 159.216548][ T7187] tipc: Disabling bearer [ 159.224383][ T4339] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.233019][ T4339] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.241929][ T4339] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.263377][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.373442][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.483312][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.547274][ T7230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.565910][ T7230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.594180][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.678685][ T7247] netlink: 'syz.3.1139': attribute type 1 has an invalid length. [ 159.687347][ T7247] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1139'. [ 159.696711][ T7249] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 159.703502][ T4336] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.704754][ T7249] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1140'. [ 159.745358][ T7251] vlan0: entered promiscuous mode [ 159.750609][ T7251] vlan0: entered allmulticast mode [ 159.755786][ T7251] hsr_slave_1: entered allmulticast mode [ 159.771549][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'. [ 159.821356][ T4339] bond1: (slave macvlan2): failed to get link speed/duplex [ 159.864656][ T7254] SELinux: failed to load policy [ 159.916818][ T7258] netlink: 'syz.3.1144': attribute type 13 has an invalid length. [ 159.925517][ T7258] netlink: 'syz.3.1144': attribute type 27 has an invalid length. [ 159.937378][ T4338] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 37195 - 0 [ 159.955123][ T4338] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 37195 - 0 [ 159.969322][ T4338] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 37195 - 0 [ 159.978035][ T4338] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 37195 - 0 [ 160.035797][ T7260] tipc: Enabled bearer , priority 0 [ 160.043265][ T7260] syzkaller0: entered promiscuous mode [ 160.048801][ T7260] syzkaller0: entered allmulticast mode [ 160.058393][ T7260] tipc: Resetting bearer [ 160.065466][ T7259] tipc: Resetting bearer [ 160.073984][ T7259] tipc: Disabling bearer [ 160.225707][ T7274] SELinux: policydb magic number 0x5c does not match expected magic number 0xf97cff8c [ 160.235512][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 160.235572][ T29] audit: type=1326 audit(1760356448.632:8342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.265885][ T29] audit: type=1326 audit(1760356448.632:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.289643][ T29] audit: type=1326 audit(1760356448.632:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.314156][ T29] audit: type=1326 audit(1760356448.632:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.338053][ T29] audit: type=1326 audit(1760356448.632:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.362728][ T29] audit: type=1326 audit(1760356448.632:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.386528][ T29] audit: type=1326 audit(1760356448.632:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.411289][ T29] audit: type=1326 audit(1760356448.632:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.435747][ T29] audit: type=1326 audit(1760356448.632:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.459337][ T29] audit: type=1326 audit(1760356448.632:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.1.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406945eec9 code=0x7ffc0000 [ 160.459354][ T7274] SELinux: failed to load policy [ 160.459483][ T29] ================================================================== [ 160.459513][ T29] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 160.459553][ T29] [ 160.459561][ T29] write to 0xffffffff88e38860 of 33 bytes by task 7274 on cpu 1: [ 160.459582][ T29] vsnprintf+0x2ce/0x890 [ 160.459618][ T29] vscnprintf+0x41/0x90 [ 160.459655][ T29] printk_sprint+0x30/0x2d0 [ 160.459681][ T29] vprintk_store+0x599/0x860 [ 160.459706][ T29] vprintk_emit+0x10d/0x580 [ 160.459728][ T29] vprintk_default+0x26/0x30 [ 160.459753][ T29] vprintk+0x1d/0x30 [ 160.459783][ T29] _printk+0x79/0xa0 [ 160.459815][ T29] sel_write_load+0x32a/0x380 [ 160.459853][ T29] vfs_write+0x269/0x960 [ 160.459888][ T29] ksys_write+0xda/0x1a0 [ 160.459915][ T29] __x64_sys_write+0x40/0x50 [ 160.459943][ T29] x64_sys_call+0x2802/0x3000 [ 160.459982][ T29] do_syscall_64+0xd2/0x200 [ 160.460007][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.460030][ T29] [ 160.460037][ T29] read to 0xffffffff88e38860 of 8 bytes by task 29 on cpu 0: [ 160.460055][ T29] data_push_tail+0xfd/0x420 [ 160.460076][ T29] data_alloc+0xfb/0x2e0 [ 160.460110][ T29] prb_reserve+0x807/0xaf0 [ 160.460129][ T29] vprintk_store+0x56d/0x860 [ 160.460150][ T29] vprintk_emit+0x10d/0x580 [ 160.460172][ T29] vprintk_default+0x26/0x30 [ 160.460195][ T29] vprintk+0x1d/0x30 [ 160.460224][ T29] _printk+0x79/0xa0 [ 160.460254][ T29] kauditd_hold_skb+0x1b1/0x1c0 [ 160.460278][ T29] kauditd_send_queue+0x273/0x2c0 [ 160.460303][ T29] kauditd_thread+0x421/0x630 [ 160.460324][ T29] kthread+0x489/0x510 [ 160.460348][ T29] ret_from_fork+0x122/0x1b0 [ 160.460377][ T29] ret_from_fork_asm+0x1a/0x30 [ 160.460401][ T29] [ 160.460406][ T29] value changed: 0x00000000ffffe4f2 -> 0x3a78756e694c4553 [ 160.460419][ T29] [ 160.460425][ T29] Reported by Kernel Concurrency Sanitizer on: [ 160.460438][ T29] CPU: 0 UID: 0 PID: 29 Comm: kauditd Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.460465][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.460480][ T29] ================================================================== [ 160.588664][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'.