last executing test programs: 1m9.806898895s ago: executing program 4 (id=1796): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r0, 0x1b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) 1m8.956693501s ago: executing program 4 (id=1821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m8.836810533s ago: executing program 4 (id=1824): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m8.725137105s ago: executing program 4 (id=1828): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000180)) 1m8.417459961s ago: executing program 4 (id=1835): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1m7.824863203s ago: executing program 4 (id=1844): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 1m7.791251943s ago: executing program 32 (id=1844): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 44.08978248s ago: executing program 2 (id=2484): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 43.774266516s ago: executing program 2 (id=2493): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000780)={0x2, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1}, 0x4}], 0x1, 0x10000, 0x0) 42.950233312s ago: executing program 2 (id=2509): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 42.187384527s ago: executing program 2 (id=2529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) 42.157480487s ago: executing program 2 (id=2532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 42.00315674s ago: executing program 2 (id=2535): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 42.0030448s ago: executing program 33 (id=2535): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 2.366250084s ago: executing program 3 (id=3551): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x11, 0x2, 0x0) 2.311057715s ago: executing program 3 (id=3554): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='io_uring_cqring_wait\x00', 0xffffffffffffffff, 0x0, 0x80000001}, 0xffffffffffffff78) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 2.147006489s ago: executing program 0 (id=3559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x20b}, 0x18) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 2.09238923s ago: executing program 0 (id=3560): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="020000000100"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000003580)=ANY=[@ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 2.023100701s ago: executing program 5 (id=3562): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 2.022726271s ago: executing program 0 (id=3564): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff019) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) 2.022532381s ago: executing program 5 (id=3566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) close(r3) accept4(r2, 0x0, 0x0, 0x400000000000000) 1.995170311s ago: executing program 5 (id=3567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010180)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x3, 0x2, 0x8001, 0x10}, {0x0, 0x55, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) 1.968578492s ago: executing program 5 (id=3568): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.937666893s ago: executing program 3 (id=3569): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0xcc38b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x3, 0x3, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0xffffffff7fffffff, 0x1, 0xffffffffffffffff, 0x0, 0x7b37}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0xd9, 0xfffffffffffffffc}, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.937120303s ago: executing program 5 (id=3570): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.920132763s ago: executing program 5 (id=3571): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.171024417s ago: executing program 6 (id=3575): ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000240)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='vnet_rx_one\x00', r0, 0x0, 0xfffffffffffff310}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000500)='sched_switch\x00', r1, 0x0, 0x81c}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 1.117711908s ago: executing program 6 (id=3576): syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 978.085281ms ago: executing program 6 (id=3577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x20b}, 0x18) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 976.380431ms ago: executing program 0 (id=3587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 931.163352ms ago: executing program 3 (id=3578): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 930.934422ms ago: executing program 1 (id=3579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}) 899.635033ms ago: executing program 0 (id=3580): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x822b01) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800400, &(0x7f0000003240)=ANY=[], 0x2, 0x33c, &(0x7f0000000340)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 880.511183ms ago: executing program 6 (id=3581): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 880.114493ms ago: executing program 0 (id=3592): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x5) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) execveat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0) 879.717073ms ago: executing program 1 (id=3582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 844.664543ms ago: executing program 6 (id=3583): r0 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x65, 0x0) mq_notify(r0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 844.120354ms ago: executing program 1 (id=3595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 742.726205ms ago: executing program 6 (id=3584): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94000000}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 559.186409ms ago: executing program 1 (id=3585): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0), &(0x7f0000000200)) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) 107.701728ms ago: executing program 3 (id=3586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) 78.009809ms ago: executing program 1 (id=3588): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x94, 0x1) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000180)) syz_emit_ethernet(0x46, 0x0, 0x0) 63.889999ms ago: executing program 1 (id=3589): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000008c0)="3bf58d7d45", 0x5) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) 0s ago: executing program 3 (id=3590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 97.227201][T11041] loop2: detected capacity change from 0 to 1024 [ 97.258472][T11041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.299879][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.470886][T11083] IPVS: Error connecting to the multicast addr [ 97.921877][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'. [ 97.933203][T11118] macvlan2: entered promiscuous mode [ 97.938506][T11118] bond0: entered promiscuous mode [ 97.943807][T11118] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.004758][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 98.416150][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 98.416165][ T29] audit: type=1326 audit(98.395:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.453923][ T29] audit: type=1326 audit(98.395:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.476980][ T29] audit: type=1326 audit(98.395:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.499992][ T29] audit: type=1326 audit(98.395:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.522910][ T29] audit: type=1326 audit(98.395:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.545755][ T29] audit: type=1326 audit(98.395:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.568628][ T29] audit: type=1326 audit(98.395:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.591448][ T29] audit: type=1326 audit(98.395:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.614301][ T29] audit: type=1326 audit(98.395:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.637185][ T29] audit: type=1326 audit(98.395:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11168 comm="syz.5.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 98.711369][T11177] pim6reg1: entered promiscuous mode [ 98.716744][T11177] pim6reg1: entered allmulticast mode [ 99.059785][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'. [ 99.079716][T11189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1928'. [ 99.393257][T11184] syz.2.1926 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 99.407491][T11184] CPU: 0 UID: 0 PID: 11184 Comm: syz.2.1926 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.407521][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.407591][T11184] Call Trace: [ 99.407598][T11184] [ 99.407606][T11184] __dump_stack+0x1d/0x30 [ 99.407684][T11184] dump_stack_lvl+0xe8/0x140 [ 99.407739][T11184] dump_stack+0x15/0x1b [ 99.407773][T11184] dump_header+0x81/0x220 [ 99.407804][T11184] oom_kill_process+0x342/0x400 [ 99.407901][T11184] out_of_memory+0x979/0xb80 [ 99.407929][T11184] try_charge_memcg+0x5e6/0x9e0 [ 99.407955][T11184] obj_cgroup_charge_pages+0xa6/0x150 [ 99.407985][T11184] __memcg_kmem_charge_page+0x9f/0x170 [ 99.408123][T11184] __alloc_frozen_pages_noprof+0x188/0x360 [ 99.408157][T11184] alloc_pages_mpol+0x1e0/0x250 [ 99.408185][T11184] alloc_pages_noprof+0x90/0x130 [ 99.408289][T11184] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 99.408333][T11184] __kvmalloc_node_noprof+0x30f/0x4e0 [ 99.408365][T11184] ? ip_set_alloc+0x1f/0x30 [ 99.408387][T11184] ? ip_set_alloc+0x1f/0x30 [ 99.408479][T11184] ? __kmalloc_cache_noprof+0x189/0x320 [ 99.408508][T11184] ip_set_alloc+0x1f/0x30 [ 99.408526][T11184] hash_netiface_create+0x282/0x740 [ 99.408550][T11184] ? __pfx_hash_netiface_create+0x10/0x10 [ 99.408594][T11184] ip_set_create+0x3c9/0x960 [ 99.408623][T11184] ? __nla_parse+0x40/0x60 [ 99.408660][T11184] nfnetlink_rcv_msg+0x4c3/0x590 [ 99.408766][T11184] netlink_rcv_skb+0x123/0x220 [ 99.408787][T11184] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 99.408809][T11184] nfnetlink_rcv+0x16b/0x1690 [ 99.408829][T11184] ? insn_get_prefixes+0x99d/0xbe0 [ 99.408894][T11184] ? insn_get_prefixes+0x99d/0xbe0 [ 99.408925][T11184] ? inat_get_opcode_attribute+0xc/0x20 [ 99.408986][T11184] ? insn_get_opcode+0x750/0x790 [ 99.409014][T11184] ? insn_get_modrm+0x32a/0x360 [ 99.409040][T11184] ? insn_get_modrm+0x32a/0x360 [ 99.409097][T11184] ? __rcu_read_lock+0x37/0x50 [ 99.409116][T11184] ? free_unref_folios+0xaf/0x750 [ 99.409146][T11184] ? __pte_offset_map_lock+0x1d4/0x230 [ 99.409181][T11184] ? do_sync_core+0x39/0x60 [ 99.409234][T11184] ? smp_call_function_many_cond+0x7f8/0xc60 [ 99.409253][T11184] ? should_fail_ex+0x30/0x280 [ 99.409273][T11184] ? selinux_nlmsg_lookup+0x99/0x890 [ 99.409300][T11184] ? __rcu_read_unlock+0x34/0x70 [ 99.409331][T11184] ? __netlink_lookup+0x266/0x2a0 [ 99.409470][T11184] netlink_unicast+0x5bd/0x690 [ 99.409496][T11184] netlink_sendmsg+0x58b/0x6b0 [ 99.409559][T11184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.409582][T11184] __sock_sendmsg+0x145/0x180 [ 99.409619][T11184] ____sys_sendmsg+0x31e/0x4e0 [ 99.409651][T11184] ___sys_sendmsg+0x17b/0x1d0 [ 99.409732][T11184] __x64_sys_sendmsg+0xd4/0x160 [ 99.409772][T11184] x64_sys_call+0x191e/0x2ff0 [ 99.409794][T11184] do_syscall_64+0xd2/0x200 [ 99.409886][T11184] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.409909][T11184] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.409939][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.409958][T11184] RIP: 0033:0x7fc4c9d8eba9 [ 99.410015][T11184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.410033][T11184] RSP: 002b:00007fc4c87f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.410050][T11184] RAX: ffffffffffffffda RBX: 00007fc4c9fd5fa0 RCX: 00007fc4c9d8eba9 [ 99.410062][T11184] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 99.410074][T11184] RBP: 00007fc4c9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 99.410127][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.410139][T11184] R13: 00007fc4c9fd6038 R14: 00007fc4c9fd5fa0 R15: 00007fffd3426498 [ 99.410154][T11184] [ 99.410160][T11184] memory: usage 307200kB, limit 307200kB, failcnt 428 [ 99.783242][T11184] memory+swap: usage 307600kB, limit 9007199254740988kB, failcnt 0 [ 99.791115][T11184] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 99.798390][T11184] Memory cgroup stats for /syz2: [ 99.798672][T11184] cache 0 [ 99.806609][T11184] rss 0 [ 99.809359][T11184] shmem 0 [ 99.812343][T11184] mapped_file 0 [ 99.815832][T11184] dirty 0 [ 99.818780][T11184] writeback 0 [ 99.822056][T11184] workingset_refault_anon 28 [ 99.826650][T11184] workingset_refault_file 128 [ 99.831309][T11184] swap 409600 [ 99.834601][T11184] swapcached 0 [ 99.837974][T11184] pgpgin 49035 [ 99.841338][T11184] pgpgout 49032 [ 99.844817][T11184] pgfault 81406 [ 99.848261][T11184] pgmajfault 17 [ 99.851706][T11184] inactive_anon 0 [ 99.855353][T11184] active_anon 0 [ 99.858797][T11184] inactive_file 0 [ 99.862439][T11184] active_file 12288 [ 99.866268][T11184] unevictable 0 [ 99.869719][T11184] hierarchical_memory_limit 314572800 [ 99.875105][T11184] hierarchical_memsw_limit 9223372036854771712 [ 99.881231][T11184] total_cache 0 [ 99.884724][T11184] total_rss 0 [ 99.887983][T11184] total_shmem 0 [ 99.891410][T11184] total_mapped_file 0 [ 99.895375][T11184] total_dirty 0 [ 99.898824][T11184] total_writeback 0 [ 99.902601][T11184] total_workingset_refault_anon 28 [ 99.907834][T11184] total_workingset_refault_file 128 [ 99.913036][T11184] total_swap 409600 [ 99.916844][T11184] total_swapcached 0 [ 99.920723][T11184] total_pgpgin 49035 [ 99.924610][T11184] total_pgpgout 49032 [ 99.928624][T11184] total_pgfault 81406 [ 99.932579][T11184] total_pgmajfault 17 [ 99.936555][T11184] total_inactive_anon 0 [ 99.940690][T11184] total_active_anon 0 [ 99.944658][T11184] total_inactive_file 0 [ 99.948782][T11184] total_active_file 12288 [ 99.953199][T11184] total_unevictable 0 [ 99.957158][T11184] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1926,pid=11183,uid=0 [ 99.971871][T11184] Memory cgroup out of memory: Killed process 11183 (syz.2.1926) total-vm:93760kB, anon-rss:1200kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 100.296116][T11255] loop2: detected capacity change from 0 to 4096 [ 100.315270][T11255] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 100.321938][T11261] syzkaller0: entered allmulticast mode [ 100.338705][T11261] syzkaller0 (unregistering): left allmulticast mode [ 100.347153][T11255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.393160][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.874988][T11304] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1972'. [ 100.907628][T11306] netlink: 'syz.3.1973': attribute type 12 has an invalid length. [ 100.915572][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'. [ 100.928982][T11306] netlink: 'syz.3.1973': attribute type 12 has an invalid length. [ 100.936962][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'. [ 100.982386][T11312] tipc: Enabled bearer , priority 0 [ 100.995712][T11312] tipc: Disabling bearer [ 101.067618][T11330] loop3: detected capacity change from 0 to 512 [ 101.076627][T11330] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.104587][T11330] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.132593][ T3307] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 101.269143][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1991'. [ 101.335870][T11371] team0: Device ipvlan2 failed to enter team mode [ 101.342337][T11371] team0: Device ipvlan2 failed to enter team mode [ 101.448855][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'. [ 101.598505][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2000'. [ 101.681207][T11398] loop2: detected capacity change from 0 to 1024 [ 101.718699][T11398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.754771][T11410] team0: Port device dummy0 removed [ 101.760821][T11410] bond2: (slave batadv1): Releasing active interface [ 101.767924][T11410] bond2: (slave batadv1): the permanent HWaddr of slave - 9a:15:61:8a:30:59 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 101.772458][T11398] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 101.803026][T11410] bond2: (slave batadv2): making interface the new active one [ 101.822187][T11410] bond2: (slave batadv2): Releasing active interface [ 101.848711][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.074884][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 102.097981][T11437] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2017'. [ 102.195023][T11453] ref_ctr increment failed for inode: 0x878 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811d6f4500 [ 102.206634][T11452] uprobe: syz.1.2023:11452 failed to unregister, leaking uprobe [ 102.256945][T11458] loop5: detected capacity change from 0 to 128 [ 102.270714][T11458] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 102.323886][T11467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11467 comm=syz.1.2029 [ 102.356503][T10610] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.581019][T11528] net_ratelimit: 1 callbacks suppressed [ 102.581034][T11528] netlink: zone id is out of range [ 102.591793][T11528] netlink: zone id is out of range [ 102.597007][T11528] netlink: zone id is out of range [ 102.602477][T11528] netlink: zone id is out of range [ 102.607694][T11528] netlink: zone id is out of range [ 102.612827][T11528] netlink: zone id is out of range [ 102.617992][T11528] netlink: zone id is out of range [ 102.623156][T11528] netlink: zone id is out of range [ 102.628313][T11528] netlink: zone id is out of range [ 102.637247][T11528] netlink: zone id is out of range [ 102.645893][T11535] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 102.838053][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'. [ 103.202944][T11600] netlink: 'syz.5.2077': attribute type 4 has an invalid length. [ 103.269049][T11602] loop5: detected capacity change from 0 to 512 [ 103.305209][T11602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.390110][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.459018][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2085'. [ 103.460019][T11623] loop2: detected capacity change from 0 to 512 [ 103.492208][T11623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.521666][T11623] EXT4-fs (loop2): 1 truncate cleaned up [ 103.554225][T11623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.610293][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 103.610307][ T29] audit: type=1326 audit(103.585:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 103.651877][ T29] audit: type=1326 audit(103.625:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 103.675145][ T29] audit: type=1326 audit(103.625:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 103.698070][ T29] audit: type=1326 audit(103.625:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 103.768265][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.779693][ T29] audit: type=1326 audit(103.635:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 103.802833][ T29] audit: type=1326 audit(103.635:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 103.825776][ T29] audit: type=1326 audit(103.635:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 103.848894][ T29] audit: type=1326 audit(103.635:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 103.871864][ T29] audit: type=1326 audit(103.635:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 103.895529][ T29] audit: type=1326 audit(103.635:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.5.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 104.568340][T11771] netlink: 'syz.0.2110': attribute type 32 has an invalid length. [ 104.801323][T11792] 9pnet: Could not find request transport: r [ 104.887645][T11798] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.937024][T11798] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.978858][T11798] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.031672][T11798] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.119094][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.136873][T11697] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.152221][T11697] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.187646][T11697] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.296640][T11845] vhci_hcd: invalid port number 96 [ 105.301775][T11845] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 105.325266][T11851] loop2: detected capacity change from 0 to 512 [ 105.891613][T11892] syzkaller0: entered promiscuous mode [ 105.897149][T11892] syzkaller0: entered allmulticast mode [ 105.952442][T11916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11916 comm=syz.1.2147 [ 105.971956][T11916] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 106.004853][T11916] bond4: (slave bridge0): making interface the new active one [ 106.012623][T11916] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 106.118914][T11981] __nla_validate_parse: 3 callbacks suppressed [ 106.118930][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2156'. [ 106.138372][T11985] loop3: detected capacity change from 0 to 512 [ 106.147277][T11985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.159715][T11985] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2157: bad orphan inode 131083 [ 106.170955][T11985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.323435][T12012] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2175'. [ 106.590560][T12045] loop2: detected capacity change from 0 to 2048 [ 106.623307][T12045] loop2: p1 < > p4 [ 106.627677][T12045] loop2: p4 size 8388608 extends beyond EOD, truncated [ 106.838589][T12088] infiniband syz!: set down [ 106.843237][T12088] infiniband syz!: added team_slave_0 [ 106.854840][T12088] RDS/IB: syz!: added [ 106.858940][T12088] smc: adding ib device syz! with port count 1 [ 106.865378][T12088] smc: ib device syz! port 1 has pnetid [ 106.988769][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.036707][T12109] netlink: 'syz.2.2187': attribute type 3 has an invalid length. [ 107.159266][T12137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2192'. [ 107.307313][T12163] tipc: Enabling of bearer rejected, failed to enable media [ 107.427849][T12181] syzkaller0: entered allmulticast mode [ 107.438934][T12181] syzkaller0 (unregistering): left allmulticast mode [ 107.471979][T12185] syz.1.2210: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 107.486557][T12185] CPU: 1 UID: 0 PID: 12185 Comm: syz.1.2210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.486619][T12185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.486630][T12185] Call Trace: [ 107.486636][T12185] [ 107.486643][T12185] __dump_stack+0x1d/0x30 [ 107.486681][T12185] dump_stack_lvl+0xe8/0x140 [ 107.486698][T12185] dump_stack+0x15/0x1b [ 107.486712][T12185] warn_alloc+0x12b/0x1a0 [ 107.486758][T12185] __vmalloc_node_range_noprof+0x9c/0xe00 [ 107.486785][T12185] ? __futex_wait+0x1ff/0x260 [ 107.486889][T12185] ? __pfx_futex_wake_mark+0x10/0x10 [ 107.486914][T12185] ? __rcu_read_unlock+0x4f/0x70 [ 107.486931][T12185] ? avc_has_perm_noaudit+0x1b1/0x200 [ 107.487012][T12185] ? should_fail_ex+0x30/0x280 [ 107.487032][T12185] ? xskq_create+0x36/0xe0 [ 107.487050][T12185] vmalloc_user_noprof+0x7d/0xb0 [ 107.487156][T12185] ? xskq_create+0x80/0xe0 [ 107.487228][T12185] xskq_create+0x80/0xe0 [ 107.487245][T12185] xsk_init_queue+0x95/0xf0 [ 107.487268][T12185] xsk_setsockopt+0x477/0x640 [ 107.487296][T12185] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.487322][T12185] __sys_setsockopt+0x184/0x200 [ 107.487412][T12185] __x64_sys_setsockopt+0x64/0x80 [ 107.487432][T12185] x64_sys_call+0x20ec/0x2ff0 [ 107.487450][T12185] do_syscall_64+0xd2/0x200 [ 107.487527][T12185] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.487593][T12185] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.487616][T12185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.487694][T12185] RIP: 0033:0x7f1c2c0feba9 [ 107.487708][T12185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.487722][T12185] RSP: 002b:00007f1c2ab5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.487739][T12185] RAX: ffffffffffffffda RBX: 00007f1c2c345fa0 RCX: 00007f1c2c0feba9 [ 107.487750][T12185] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 107.487760][T12185] RBP: 00007f1c2c181e19 R08: 0000000000000004 R09: 0000000000000000 [ 107.487771][T12185] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 107.487840][T12185] R13: 00007f1c2c346038 R14: 00007f1c2c345fa0 R15: 00007ffd2e7ada48 [ 107.487856][T12185] [ 107.487863][T12185] Mem-Info: [ 107.709857][T12185] active_anon:6260 inactive_anon:42 isolated_anon:0 [ 107.709857][T12185] active_file:24450 inactive_file:2257 isolated_file:0 [ 107.709857][T12185] unevictable:0 dirty:300 writeback:0 [ 107.709857][T12185] slab_reclaimable:3401 slab_unreclaimable:42838 [ 107.709857][T12185] mapped:28954 shmem:2357 pagetables:1214 [ 107.709857][T12185] sec_pagetables:0 bounce:0 [ 107.709857][T12185] kernel_misc_reclaimable:0 [ 107.709857][T12185] free:1852679 free_pcp:11172 free_cma:0 [ 107.755036][T12185] Node 0 active_anon:25040kB inactive_anon:168kB active_file:97800kB inactive_file:9028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115816kB dirty:1200kB writeback:0kB shmem:9428kB kernel_stack:4624kB pagetables:4856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.782422][T12185] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.810995][T12185] lowmem_reserve[]: 0 2883 7862 7862 [ 107.816372][T12185] Node 0 DMA32 free:2949292kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 107.846564][T12185] lowmem_reserve[]: 0 0 4978 4978 [ 107.851622][T12185] Node 0 Normal free:4446064kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25040kB inactive_anon:168kB active_file:97800kB inactive_file:9028kB unevictable:0kB writepending:1196kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:41156kB local_pcp:20524kB free_cma:0kB [ 107.883855][T12185] lowmem_reserve[]: 0 0 0 0 [ 107.889347][T12185] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.901964][T12185] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949292kB [ 107.917933][T12185] Node 0 Normal: 2*4kB (ME) 1*8kB (E) 348*16kB (UE) 205*32kB (UM) 313*64kB (UME) 262*128kB (UME) 161*256kB (UME) 125*512kB (UME) 105*1024kB (UME) 61*2048kB (UM) 987*4096kB (UM) = 4446128kB [ 107.936824][T12185] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 107.946184][T12185] 29105 total pagecache pages [ 107.951014][T12185] 55 pages in swap cache [ 107.955421][T12185] Free swap = 124568kB [ 107.959566][T12185] Total swap = 124996kB [ 107.963814][T12185] 2097051 pages RAM [ 107.967637][T12185] 0 pages HighMem/MovableOnly [ 107.972776][T12185] 80445 pages reserved [ 108.849547][T12224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2223'. [ 108.858545][T12224] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2223'. [ 108.867633][T12224] netlink: 'syz.2.2223': attribute type 2 has an invalid length. [ 108.875397][T12224] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2223'. [ 108.993096][ T3363] IPVS: starting estimator thread 0... [ 109.094116][T12245] IPVS: using max 2688 ests per chain, 134400 per kthread [ 109.214693][T12264] tipc: New replicast peer: 255.255.255.255 [ 109.220789][T12264] tipc: Enabled bearer , priority 10 [ 109.300906][T12278] tipc: Enabled bearer , priority 0 [ 109.312463][T12278] tipc: Disabling bearer [ 109.385466][T12288] loop3: detected capacity change from 0 to 2048 [ 109.424937][T12288] loop3: p1 < > p4 [ 109.429411][T12288] loop3: p4 size 8388608 extends beyond EOD, truncated [ 109.754973][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 109.755064][ T29] audit: type=1326 audit(109.735:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12326 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 109.823292][ T29] audit: type=1326 audit(109.735:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12326 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 109.846383][ T29] audit: type=1326 audit(109.765:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12326 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 109.869501][ T29] audit: type=1326 audit(109.765:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12326 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 109.892576][ T29] audit: type=1326 audit(109.765:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12326 comm="syz.3.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 110.013391][T12346] vhci_hcd: invalid port number 96 [ 110.018579][T12346] vhci_hcd: default hub control req: 0300 vfbfa i0060 l0 [ 110.030062][T12351] bridge: RTM_NEWNEIGH with invalid ether address [ 110.191557][ T29] audit: type=1326 audit(110.165:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 110.214575][ T29] audit: type=1326 audit(110.165:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 110.271226][ T29] audit: type=1326 audit(110.225:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 110.294227][ T29] audit: type=1326 audit(110.225:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 110.317133][ T29] audit: type=1326 audit(110.225:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.5.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc416b3eba9 code=0x7ffc0000 [ 110.543463][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 110.582106][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2276'. [ 110.588001][T12396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2277'. [ 110.707438][T12424] loop3: detected capacity change from 0 to 1024 [ 110.722222][T12424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.729471][T12424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.748119][T12424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.828586][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 110.902631][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.945131][T12458] loop5: detected capacity change from 0 to 512 [ 110.954708][T12458] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.984384][T12462] loop3: detected capacity change from 0 to 1024 [ 110.986767][T12458] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.029982][T12462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.052401][T10610] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 111.069880][T12462] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 111.134168][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.401106][T12506] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2310'. [ 111.879967][T12532] smc: net device bond0 applied user defined pnetid SYZ0 [ 111.887623][T12532] smc: net device bond0 erased user defined pnetid SYZ0 [ 111.979715][T12540] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2325'. [ 112.461905][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'. [ 112.598847][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 112.607785][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2348'. [ 112.618018][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 112.626954][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2348'. [ 112.939577][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 113.340828][T12669] loop5: detected capacity change from 0 to 1024 [ 113.354588][T12669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.368276][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 113.379666][T12678] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2358'. [ 113.395558][T12669] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 113.434382][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.874788][T12716] tipc: Enabled bearer , priority 0 [ 113.948126][T12712] tipc: Resetting bearer [ 113.980242][T12712] tipc: Disabling bearer [ 114.110689][T12723] loop2: detected capacity change from 0 to 1024 [ 114.146509][T12723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.216769][T12723] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2385: bg 0: block 393: padding at end of block bitmap is not set [ 114.260284][T12723] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 114.272884][T12723] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.272884][T12723] [ 114.332421][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.506198][T12733] loop2: detected capacity change from 0 to 256 [ 114.523320][T12733] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.563321][T12733] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.861826][T12758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12758 comm=syz.0.2382 [ 114.896054][T12760] : (slave dummy0): Releasing backup interface [ 114.905306][T12760] bond1: (slave batadv0): Releasing active interface [ 114.912040][T12760] bond1: (slave batadv0): the permanent HWaddr of slave - f6:02:53:62:be:ce - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 114.933007][T12760] bond1: (slave batadv1): making interface the new active one [ 114.947310][T12760] bond1: (slave batadv1): Releasing active interface [ 114.998846][T12766] loop5: detected capacity change from 0 to 1024 [ 115.017010][T12766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.341320][T12776] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2387: Allocating blocks 1-17 which overlap fs metadata [ 115.376702][T12766] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2387: Allocating blocks 1-17 which overlap fs metadata [ 115.457378][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 115.457393][ T29] audit: type=1400 audit(115.435:3920): avc: denied { listen } for pid=12786 comm="syz.3.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.499479][T12792] loop3: detected capacity change from 0 to 128 [ 115.514272][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.533419][T12792] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 115.548431][T12790] loop2: detected capacity change from 0 to 2048 [ 115.597414][T12790] loop2: p2 p3 p7 [ 115.646219][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.798349][T12834] bridge0: port 1(ip6gretap0) entered blocking state [ 115.805169][T12834] bridge0: port 1(ip6gretap0) entered disabled state [ 115.832623][T12834] ip6gretap0: entered allmulticast mode [ 115.856697][T12834] ip6gretap0: entered promiscuous mode [ 115.903017][ T29] audit: type=1326 audit(115.885:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c9d8eba9 code=0x7ffc0000 [ 115.926431][ T29] audit: type=1326 audit(115.885:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c9d8eba9 code=0x7ffc0000 [ 115.963106][ T29] audit: type=1326 audit(115.885:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4c9d8eba9 code=0x7ffc0000 [ 115.985993][ T29] audit: type=1326 audit(115.885:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c9d8eba9 code=0x7ffc0000 [ 116.009024][ T29] audit: type=1326 audit(115.885:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c9d8eba9 code=0x7ffc0000 [ 116.031894][ T29] audit: type=1326 audit(115.925:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fc4c9d8eba9 code=0x7ffc0000 [ 116.054677][ T29] audit: type=1326 audit(115.925:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c9d8eba9 code=0x7ffc0000 [ 116.077578][ T29] audit: type=1326 audit(115.925:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c9d8eba9 code=0x7ffc0000 [ 116.100527][ T29] audit: type=1326 audit(115.935:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12837 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fc4c9d8eba9 code=0x7ffc0000 [ 116.197995][T12852] loop2: detected capacity change from 0 to 128 [ 116.209648][T12852] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 116.405000][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.572434][T12863] loop5: detected capacity change from 0 to 512 [ 116.684274][T12863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.945714][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.111554][T12846] net_ratelimit: 255 callbacks suppressed [ 117.111591][T12846] Set syz1 is full, maxelem 65536 reached [ 117.650626][T12910] loop5: detected capacity change from 0 to 128 [ 117.683929][T12920] netlink: 'syz.5.2437': attribute type 7 has an invalid length. [ 117.691691][T12920] __nla_validate_parse: 2 callbacks suppressed [ 117.691705][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 117.737625][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2439'. [ 118.277645][T12998] loop5: detected capacity change from 0 to 256 [ 118.290325][T12998] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.323706][T12998] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.390731][T13005] loop3: detected capacity change from 0 to 128 [ 118.436294][T13014] loop3: detected capacity change from 0 to 2048 [ 118.476785][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 118.487455][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 118.499201][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 118.508573][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 118.514598][T13014] loop3: p2 p3 p7 [ 118.519563][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 118.556037][T13029] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2469'. [ 118.904739][T13080] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2486'. [ 119.184743][T13102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2492'. [ 119.610855][T13140] loop3: detected capacity change from 0 to 512 [ 119.655337][T13140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.676242][T13147] loop5: detected capacity change from 0 to 128 [ 119.702289][T13147] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 119.768508][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.821963][T10610] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.842539][T13158] SELinux: failed to load policy [ 120.016675][T13177] netlink: 'syz.5.2508': attribute type 1 has an invalid length. [ 120.051434][T13177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.068938][T13177] vlan2: entered allmulticast mode [ 120.074174][T13177] batadv0: entered allmulticast mode [ 120.087316][T13177] bond1: (slave vlan2): making interface the new active one [ 120.096705][T13177] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 120.901400][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 120.901415][ T29] audit: type=1326 audit(120.875:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13295 comm="syz.1.2533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2c0feba9 code=0x0 [ 120.982815][ T29] audit: type=1400 audit(120.955:4094): avc: denied { read write } for pid=13295 comm="syz.1.2533" path="socket:[26610]" dev="sockfs" ino=26610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 121.178375][T13301] chnl_net:caif_netlink_parms(): no params data found [ 121.221157][T13463] loop3: detected capacity change from 0 to 128 [ 121.234586][T13463] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 121.242541][T13463] FAT-fs (loop3): Filesystem has been set read-only [ 121.249471][T13463] syz.3.2539: attempt to access beyond end of device [ 121.249471][T13463] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 121.263402][T13463] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 121.271306][T13463] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 121.279411][T13301] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.282872][T13463] syz.3.2539: attempt to access beyond end of device [ 121.282872][T13463] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.286589][T13301] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.321453][T13301] bridge_slave_0: entered allmulticast mode [ 121.330172][T13301] bridge_slave_0: entered promiscuous mode [ 121.337197][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.344334][T13301] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.354341][T13301] bridge_slave_1: entered allmulticast mode [ 121.360893][T13301] bridge_slave_1: entered promiscuous mode [ 121.384188][T13301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.394665][T13301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.421148][T13301] team0: Port device team_slave_0 added [ 121.442408][T13301] team0: Port device team_slave_1 added [ 121.470780][T13301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.477787][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.503834][T13301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.517264][T13301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.524267][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.550223][T13301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.625035][T13301] hsr_slave_0: entered promiscuous mode [ 121.631144][T13301] hsr_slave_1: entered promiscuous mode [ 121.641318][T13301] debugfs: 'hsr0' already exists in 'hsr' [ 121.647139][T13301] Cannot create hsr debugfs directory [ 121.745225][ T29] audit: type=1400 audit(121.715:4095): avc: denied { mounton } for pid=13664 comm="syz.3.2545" path="/488/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 121.781004][T13670] loop3: detected capacity change from 0 to 1024 [ 121.796028][T13670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.811631][T13301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.822382][T13301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.834266][T13301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.850452][T13301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.886963][T13301] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.894090][T13301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.901435][T13301] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.908513][T13301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.934117][ T29] audit: type=1326 audit(121.915:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 121.946997][T13301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.978013][ T2367] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.986986][ T2367] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.001022][T13301] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.026467][ T29] audit: type=1326 audit(121.945:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 122.027399][T11709] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.049441][ T29] audit: type=1326 audit(121.945:4098): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 122.056901][T11709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.080186][ T29] audit: type=1326 audit(121.945:4099): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 122.110518][ T29] audit: type=1326 audit(121.945:4100): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 122.133786][ T29] audit: type=1326 audit(121.945:4101): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 122.157065][ T29] audit: type=1326 audit(121.945:4102): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13700 comm="syz.0.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 122.173630][T13301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.190827][T13301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.204972][T11755] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 122.220969][T11755] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 122.233444][T11755] EXT4-fs (loop3): This should not happen!! Data will be lost [ 122.233444][T11755] [ 122.243616][T11755] EXT4-fs (loop3): Total free blocks count 0 [ 122.249593][T11755] EXT4-fs (loop3): Free/Dirty block details [ 122.255577][T11755] EXT4-fs (loop3): free_blocks=68451041280 [ 122.261445][T11755] EXT4-fs (loop3): dirty_blocks=320 [ 122.266660][T11755] EXT4-fs (loop3): Block reservation details [ 122.272626][T11755] EXT4-fs (loop3): i_reserved_data_blocks=20 [ 122.287757][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.310287][T11709] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.317520][T11709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.416114][T13301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.662486][T13758] loop5: detected capacity change from 0 to 512 [ 122.669281][T13301] veth0_vlan: entered promiscuous mode [ 122.679397][T13758] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.698604][T13301] veth1_vlan: entered promiscuous mode [ 122.710916][T13758] EXT4-fs (loop5): 1 truncate cleaned up [ 122.720141][T13758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.748319][T13301] veth0_macvtap: entered promiscuous mode [ 122.764581][T13301] veth1_macvtap: entered promiscuous mode [ 122.779704][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.795203][T13301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.807529][T13301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.819149][T11753] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.830645][T11753] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.844490][T11753] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.854151][T13772] syzkaller0: entered allmulticast mode [ 122.861334][T11753] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.871326][T13772] syzkaller0 (unregistering): left allmulticast mode [ 122.986149][T13786] netlink: 'syz.6.2566': attribute type 1 has an invalid length. [ 122.999762][T13786] vlan2: entered allmulticast mode [ 123.004941][T13786] batadv0: entered allmulticast mode [ 123.083148][T13796] netlink: 'syz.6.2567': attribute type 30 has an invalid length. [ 123.220611][T13804] loop6: detected capacity change from 0 to 512 [ 123.238412][T13804] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #17: comm syz.6.2569: invalid fast symlink length 37 [ 123.263847][T13804] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2569: couldn't read orphan inode 17 (err -117) [ 123.291208][T13809] netlink: 'syz.1.2570': attribute type 16 has an invalid length. [ 123.299091][T13809] __nla_validate_parse: 1 callbacks suppressed [ 123.299105][T13809] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2570'. [ 123.323212][T13804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.385900][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.406733][T13817] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2573'. [ 123.415883][T13817] tipc: Started in network mode [ 123.420764][T13817] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 123.429922][T13817] tipc: Enabling of bearer rejected, failed to enable media [ 123.489034][T13831] netlink: 'syz.0.2578': attribute type 1 has an invalid length. [ 123.513537][T13831] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.543965][T13831] vlan0: entered allmulticast mode [ 123.549113][T13831] batadv0: entered allmulticast mode [ 123.555399][T13831] bond3: (slave vlan0): Opening slave failed [ 123.566744][T13870] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2581'. [ 123.643480][T13897] rdma_op ffff88813b66dd80 conn xmit_rdma 0000000000000000 [ 123.696725][T13901] loop3: detected capacity change from 0 to 512 [ 123.732766][T13901] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.756970][T13901] EXT4-fs (loop3): mount failed [ 124.588266][T13919] Set syz1 is full, maxelem 65536 reached [ 124.687027][T13959] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2607'. [ 124.696179][T13959] tipc: Started in network mode [ 124.701042][T13959] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 124.709960][T13959] tipc: Enabling of bearer rejected, failed to enable media [ 124.750821][T13962] loop5: detected capacity change from 0 to 512 [ 124.772207][T13962] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.790203][T13971] tipc: Enabling of bearer rejected, failed to enable media [ 124.801619][T13962] EXT4-fs (loop5): mount failed [ 124.824876][T13977] tipc: New replicast peer: 10.1.1.2 [ 124.830232][T13977] tipc: Enabled bearer , priority 10 [ 124.851406][T13981] netlink: zone id is out of range [ 124.867495][T13981] netlink: zone id is out of range [ 124.875453][T13981] netlink: zone id is out of range [ 124.880571][T13981] netlink: zone id is out of range [ 124.890546][T13981] netlink: zone id is out of range [ 124.898994][T13981] netlink: zone id is out of range [ 124.912946][T13981] netlink: zone id is out of range [ 124.925534][T13981] netlink: zone id is out of range [ 124.932621][T13981] netlink: zone id is out of range [ 125.249845][T14015] veth1_macvtap: left promiscuous mode [ 125.262742][T14015] macsec0: entered promiscuous mode [ 125.268314][T14015] macsec0: entered allmulticast mode [ 125.423886][T14028] syz!: rxe_newlink: already configured on team_slave_0 [ 125.448609][T14030] : renamed from bond0 [ 125.481894][T14039] rdma_op ffff888105c28580 conn xmit_rdma 0000000000000000 [ 125.622426][T14056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2645'. [ 125.723097][T14069] rdma_op ffff888126fc6d80 conn xmit_rdma 0000000000000000 [ 125.735430][T14071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2652'. [ 125.744471][T14071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2652'. [ 125.787163][T14076] tipc: Enabled bearer , priority 0 [ 125.801592][T14076] tipc: Disabling bearer [ 125.801757][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'. [ 126.026009][T14117] loop3: detected capacity change from 0 to 512 [ 126.061995][T14117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.085201][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 126.085294][ T29] audit: type=1326 audit(126.055:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 126.114668][ T29] audit: type=1326 audit(126.055:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 126.137625][ T29] audit: type=1326 audit(126.055:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 126.160628][ T29] audit: type=1326 audit(126.055:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 126.183584][ T29] audit: type=1326 audit(126.055:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 126.206455][ T29] audit: type=1326 audit(126.055:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 126.232404][ T29] audit: type=1326 audit(126.215:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 126.255366][ T29] audit: type=1326 audit(126.215:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.0.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85173feba9 code=0x7ffc0000 [ 126.261705][T14136] loop6: detected capacity change from 0 to 1024 [ 126.293721][T14136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.304962][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.317602][T14136] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 126.327641][T14136] System zones: 0-1, 3-36 [ 126.332675][T14136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.418915][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.450480][ T29] audit: type=1326 audit(126.425:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.1.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2c0feba9 code=0x7ffc0000 [ 126.473775][ T29] audit: type=1326 audit(126.425:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.1.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2c0feba9 code=0x7ffc0000 [ 126.641660][T14186] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 126.695634][T14207] loop3: detected capacity change from 0 to 1024 [ 126.715612][T14207] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 126.726661][T14207] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 126.744315][T14215] netlink: 'syz.5.2695': attribute type 21 has an invalid length. [ 126.752991][T14207] JBD2: no valid journal superblock found [ 126.758724][T14207] EXT4-fs (loop3): Could not load journal inode [ 126.760631][T14215] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2695'. [ 126.946292][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2705'. [ 126.998673][T14251] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 127.363039][T14296] tipc: Enabled bearer , priority 0 [ 127.369863][T14293] loop5: detected capacity change from 0 to 512 [ 127.425412][T14296] tipc: Disabling bearer [ 127.473680][T14293] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #17: comm syz.5.2732: invalid fast symlink length 37 [ 127.487719][T14293] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2732: couldn't read orphan inode 17 (err -117) [ 127.507054][T14293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.833691][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.157273][T14367] netlink: 'syz.1.2755': attribute type 1 has an invalid length. [ 128.176882][T14367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.206493][T14367] vlan0: entered allmulticast mode [ 128.211677][T14367] batadv0: entered allmulticast mode [ 128.220175][T14367] bond5: (slave vlan0): Opening slave failed [ 128.344433][T14424] __nla_validate_parse: 6 callbacks suppressed [ 128.344446][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2753'. [ 128.402257][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2756'. [ 129.393968][T14458] netlink: 'syz.3.2762': attribute type 1 has an invalid length. [ 129.452970][T14458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.461068][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2766'. [ 129.492439][T14458] vlan0: entered allmulticast mode [ 129.497701][T14458] batadv0: entered allmulticast mode [ 129.523461][T14458] bond0: (slave vlan0): Opening slave failed [ 129.602051][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2767'. [ 129.966681][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 129.975592][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 130.239775][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2785'. [ 130.260695][T14584] netlink: 'syz.0.2795': attribute type 21 has an invalid length. [ 130.293724][T14584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2795'. [ 130.443482][T14603] team0: Port device team_slave_0 removed [ 130.566782][T14595] loop3: detected capacity change from 0 to 512 [ 130.596060][T14595] EXT4-fs (loop3): too many log groups per flexible block group [ 130.603955][T14595] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 130.614351][T14595] EXT4-fs (loop3): mount failed [ 130.792456][T14643] loop3: detected capacity change from 0 to 512 [ 130.827698][T14643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.851217][T14655] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2808'. [ 130.861712][T14655] 0ªî{X¹¦: renamed from 30ªX¹¦D [ 130.869886][T14655] 0ªî{X¹¦: entered allmulticast mode [ 130.882644][T14655] net_ratelimit: 5 callbacks suppressed [ 130.882657][T14655] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 130.959046][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.982298][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2812'. [ 131.029753][T14669] team1: entered promiscuous mode [ 131.034961][T14669] team1: entered allmulticast mode [ 131.095101][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 131.095116][ T29] audit: type=1326 audit(131.075:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e1c9a5b67 code=0x7ffc0000 [ 131.131548][ T29] audit: type=1326 audit(131.075:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e1c94ada9 code=0x7ffc0000 [ 131.154420][ T29] audit: type=1326 audit(131.075:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 131.177349][ T29] audit: type=1326 audit(131.085:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e1c9a5b67 code=0x7ffc0000 [ 131.200177][ T29] audit: type=1326 audit(131.085:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e1c94ada9 code=0x7ffc0000 [ 131.223014][ T29] audit: type=1326 audit(131.085:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 131.245966][ T29] audit: type=1326 audit(131.095:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e1c9a5b67 code=0x7ffc0000 [ 131.268790][ T29] audit: type=1326 audit(131.095:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e1c94ada9 code=0x7ffc0000 [ 131.291630][ T29] audit: type=1326 audit(131.095:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 131.314525][ T29] audit: type=1326 audit(131.105:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.6.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e1c9a5b67 code=0x7ffc0000 [ 131.389490][T14752] netlink: 'syz.1.2823': attribute type 30 has an invalid length. [ 131.620631][T14763] syzkaller0: entered promiscuous mode [ 131.626342][T14763] syzkaller0: entered allmulticast mode [ 131.715828][T14779] netlink: 'syz.1.2831': attribute type 10 has an invalid length. [ 131.734991][T14779] team0: Port device geneve1 added [ 131.744078][T11753] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.760240][T11753] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.780952][T11753] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.802182][T11753] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.104180][ T2367]  (unregistering): Released all slaves [ 132.167208][ T2367] bond1 (unregistering): Released all slaves [ 132.184527][ T2367] bond2 (unregistering): Released all slaves [ 132.284017][ T2367] tipc: Disabling bearer [ 132.290917][ T2367] tipc: Left network mode [ 132.445291][T14894] netlink: 'syz.3.2862': attribute type 30 has an invalid length. [ 132.540944][T14954] team0: Port device geneve1 removed [ 132.565830][T14954] bond4: (slave bridge0): Releasing active interface [ 132.629024][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.663290][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.685861][T14966] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.724477][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.745111][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.760044][T14966] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.798243][T14999] loop3: detected capacity change from 0 to 128 [ 132.806711][T14999] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.823803][T14999] EXT4-fs (loop3): shut down requested (2) [ 132.836268][T14966] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.852936][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.895811][ T2367] IPVS: stop unused estimator thread 0... [ 132.970662][T14966] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.087799][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.113182][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.121384][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.141725][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.173216][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.180983][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.360688][T15062] loop3: detected capacity change from 0 to 1024 [ 133.367407][T15062] EXT4-fs: Ignoring removed nobh option [ 133.373131][T15062] EXT4-fs: Ignoring removed bh option [ 133.385342][T15062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.408654][T15062] netlink: 'syz.3.2886': attribute type 10 has an invalid length. [ 133.416502][T15062] __nla_validate_parse: 5 callbacks suppressed [ 133.416513][T15062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2886'. [ 133.467742][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.858338][T15100] netlink: 'syz.6.2895': attribute type 1 has an invalid length. [ 133.866412][T15100] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2895'. [ 133.891420][T15104] ÿÿÿÿÿÿ: renamed from vlan1 [ 133.904155][T15102] loop3: detected capacity change from 0 to 8192 [ 134.065244][T15132] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.107782][T15137] netlink: 'syz.1.2907': attribute type 1 has an invalid length. [ 134.161914][T15137] bond8: entered promiscuous mode [ 134.167148][T15137] bond8: entered allmulticast mode [ 134.179660][T15180] loop6: detected capacity change from 0 to 128 [ 134.186569][T15137] 8021q: adding VLAN 0 to HW filter on device bond8 [ 134.197339][T15180] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.229204][T15137] bridge3: entered promiscuous mode [ 134.234592][T15137] bridge3: entered allmulticast mode [ 134.265727][T15137] bond8: (slave bridge3): Enslaving as a backup interface with an up link [ 134.285473][T11755] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.347304][T13301] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.431582][T11755] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.487087][T15209] loop6: detected capacity change from 0 to 512 [ 134.507481][T15209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.568597][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.606831][T15220] netlink: 'syz.0.2921': attribute type 10 has an invalid length. [ 134.614919][T15220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2921'. [ 134.668724][T15239] loop3: detected capacity change from 0 to 512 [ 134.679885][T15239] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 134.690038][T15239] EXT4-fs (loop3): invalid journal inode [ 134.696566][T15239] EXT4-fs (loop3): can't get journal size [ 134.708548][T15239] EXT4-fs (loop3): 1 truncate cleaned up [ 134.734737][T15239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.751476][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2924'. [ 134.774202][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.025156][T15277] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.065881][T15277] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.135123][T15277] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.225708][T15277] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.279909][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.290555][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.301679][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.312368][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.416263][T15347] ip6gretap0: left allmulticast mode [ 135.421556][T15347] ip6gretap0: left promiscuous mode [ 135.427036][T15347] bridge0: port 1(ip6gretap0) entered disabled state [ 135.437810][T15347] team0: Port device geneve1 removed [ 135.443909][T15347] bond2: (slave batadv1): Releasing active interface [ 135.450661][T15347] bond2: (slave batadv1): the permanent HWaddr of slave - 72:8c:5f:ab:14:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 135.469833][T15347] bond2: (slave batadv2): making interface the new active one [ 135.478767][T15347] bond2: (slave batadv2): Releasing active interface [ 135.494688][T15352] netlink: 'syz.1.2940': attribute type 1 has an invalid length. [ 135.502459][T15352] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2940'. [ 135.518280][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 135.548584][T15356] tipc: Enabling of bearer rejected, failed to enable media [ 135.856566][T15378] netlink: 'syz.6.2950': attribute type 83 has an invalid length. [ 136.085887][T15395] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 136.220356][T15404] loop6: detected capacity change from 0 to 1024 [ 136.227398][T15404] EXT4-fs: Ignoring removed nobh option [ 136.233110][T15404] EXT4-fs: Ignoring removed bh option [ 136.245890][T15404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.263546][T15404] netlink: 'syz.6.2961': attribute type 10 has an invalid length. [ 136.271383][T15404] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2961'. [ 136.283847][T15404] team0: Port device geneve1 added [ 136.324938][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.357536][T15415] loop6: detected capacity change from 0 to 1024 [ 136.364533][T15415] EXT4-fs: Ignoring removed orlov option [ 136.376583][T15415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.403322][T15415] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.2963: lblock 0 mapped to illegal pblock 0 (length 1) [ 136.427584][T15415] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 136.439902][T15415] EXT4-fs (loop6): This should not happen!! Data will be lost [ 136.439902][T15415] [ 136.463691][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.601483][T15439] ÿÿÿÿÿÿ: renamed from vlan1 [ 136.609822][T15435] siw: device registration error -23 [ 136.615170][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 136.615183][ T29] audit: type=1400 audit(136.585:5285): avc: denied { associate } for pid=15441 comm="syz.0.2971" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 136.878857][T15464] loop6: detected capacity change from 0 to 8192 [ 137.188340][T15479] siw: device registration error -23 [ 137.204818][ T29] audit: type=1326 audit(137.175:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.6.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 137.227881][ T29] audit: type=1326 audit(137.175:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.6.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 137.250852][ T29] audit: type=1326 audit(137.185:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.6.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 137.273909][ T29] audit: type=1326 audit(137.185:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.6.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 137.296880][ T29] audit: type=1326 audit(137.185:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.6.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 137.319914][ T29] audit: type=1326 audit(137.185:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.6.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 137.342839][ T29] audit: type=1326 audit(137.185:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.6.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 137.366104][ T29] audit: type=1326 audit(137.345:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.6.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 137.389068][ T29] audit: type=1326 audit(137.345:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.6.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 137.459570][T15488] ÿÿÿÿÿÿ: renamed from vlan1 [ 137.689662][T15513] loop5: detected capacity change from 0 to 512 [ 137.717364][T15513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.799849][T15526] siw: device registration error -23 [ 137.836936][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.884474][T15537] netlink: 'syz.5.3005': attribute type 30 has an invalid length. [ 138.428234][T15556] loop6: detected capacity change from 0 to 512 [ 138.447858][T15556] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3011: error while reading EA inode 32 err=-116 [ 138.487673][T15556] EXT4-fs (loop6): Remounting filesystem read-only [ 138.494240][T15556] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 138.504363][T15556] EXT4-fs (loop6): 1 orphan inode deleted [ 138.510456][T15556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.524868][T15556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.602516][T15574] loop6: detected capacity change from 0 to 164 [ 138.619376][T15574] syz.6.3013: attempt to access beyond end of device [ 138.619376][T15574] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 138.638844][T15574] syz.6.3013: attempt to access beyond end of device [ 138.638844][T15574] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.907863][T15623] tipc: New replicast peer: 255.255.255.255 [ 138.913927][T15623] tipc: Enabled bearer , priority 10 [ 139.001081][T15637] loop6: detected capacity change from 0 to 8192 [ 139.274885][T15625] Set syz1 is full, maxelem 65536 reached [ 139.406451][T15688] loop5: detected capacity change from 0 to 1024 [ 139.412193][T15692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15692 comm=syz.3.3037 [ 139.433238][T15688] EXT4-fs: inline encryption not supported [ 139.444815][T15688] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 139.505572][T15688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.537310][T15688] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 139.577314][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.776576][T15765] netlink: 'syz.3.3050': attribute type 30 has an invalid length. [ 139.912747][ T9] tipc: Node number set to 24339 [ 139.922660][T15814] loop3: detected capacity change from 0 to 1024 [ 139.967561][T15814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.984066][T15821] all: renamed from lo [ 140.010801][T15814] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3056: inode #3843031323: comm syz.3.3056: iget: illegal inode # [ 140.035451][T15814] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3056: error while reading EA inode 3843031323 err=-117 [ 140.054083][T15827] netlink: 'syz.5.3060': attribute type 10 has an invalid length. [ 140.097319][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.310265][T15858] loop5: detected capacity change from 0 to 512 [ 140.337649][T15858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.487894][T15876] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 140.512962][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.571771][T15886] netlink: 'syz.1.3079': attribute type 30 has an invalid length. [ 140.709623][T15918] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.786320][T15918] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.799766][T15932] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3091'. [ 140.834356][T15918] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.921436][T15950] Invalid ELF header magic: != ELF [ 140.936460][T15918] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.991843][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.010237][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.018770][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.043979][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.127720][T15995] sch_fq: defrate 0 ignored. [ 141.319203][T16015] tipc: Enabling of bearer rejected, already enabled [ 141.618255][T16057] netlink: 'syz.0.3123': attribute type 30 has an invalid length. [ 141.626187][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 141.626197][ T29] audit: type=1400 audit(141.595:5742): avc: denied { create } for pid=16058 comm="syz.6.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.651482][ T29] audit: type=1400 audit(141.595:5743): avc: denied { create } for pid=16058 comm="syz.6.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.670729][ T29] audit: type=1400 audit(141.595:5744): avc: denied { ioctl } for pid=16058 comm="syz.6.3124" path="socket:[32890]" dev="sockfs" ino=32890 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.694895][ T29] audit: type=1400 audit(141.595:5745): avc: denied { bind } for pid=16058 comm="syz.6.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.713662][ T29] audit: type=1400 audit(141.595:5746): avc: denied { setopt } for pid=16058 comm="syz.6.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.732591][ T29] audit: type=1400 audit(141.595:5747): avc: denied { write } for pid=16058 comm="syz.6.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.766108][ T29] audit: type=1400 audit(141.745:5748): avc: denied { create } for pid=16064 comm="syz.6.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.785230][ T29] audit: type=1400 audit(141.745:5749): avc: denied { connect } for pid=16064 comm="syz.6.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.817201][ T29] audit: type=1400 audit(141.795:5750): avc: denied { accept } for pid=16064 comm="syz.6.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.868901][ T29] audit: type=1400 audit(141.845:5751): avc: denied { write } for pid=16064 comm="syz.6.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.372422][ C0] vcan0: j1939_tp_rxtimer: 0xffff888103f8d000: rx timeout, send abort [ 142.383520][T16069] netlink: 'syz.3.3127': attribute type 7 has an invalid length. [ 142.391300][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3127'. [ 142.619214][T16132] 9pnet: p9_errstr2errno: server reported unknown error [ 142.629171][T16133] : (slave dummy0): Releasing backup interface [ 142.641027][T16133] team0: Port device geneve1 removed [ 142.706406][T16141] loop3: detected capacity change from 0 to 512 [ 142.713808][T16141] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.730526][T16141] EXT4-fs (loop3): 1 truncate cleaned up [ 142.751100][T16141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.787157][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.806948][T16152] syzkaller0: entered allmulticast mode [ 142.812638][T16152] syzkaller0: entered promiscuous mode [ 142.819278][T16152] syzkaller0 (unregistering): left allmulticast mode [ 142.826156][T16152] syzkaller0 (unregistering): left promiscuous mode [ 142.865589][T16162] netlink: 'syz.6.3139': attribute type 30 has an invalid length. [ 142.880673][ C0] vcan0: j1939_tp_rxtimer: 0xffff888103f8d000: abort rx timeout. Force session deactivation [ 143.349334][T16181] loop3: detected capacity change from 0 to 736 [ 143.433503][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3149'. [ 143.462546][T16211] 8021q: adding VLAN 0 to HW filter on device bond9 [ 143.483510][T16211] vlan0: entered allmulticast mode [ 143.488679][T16211] bond9: entered allmulticast mode [ 143.529779][T16277] bridge_slave_0: left allmulticast mode [ 143.535538][T16277] bridge_slave_0: left promiscuous mode [ 143.541253][T16277] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.552504][T16277] bridge_slave_1: left allmulticast mode [ 143.558304][T16277] bridge_slave_1: left promiscuous mode [ 143.564036][T16277] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.578597][T16277] bond0: (slave bond_slave_0): Releasing backup interface [ 143.598922][T16277] bond0: (slave bond_slave_1): Releasing backup interface [ 143.611890][T16277] team0: Port device team_slave_1 removed [ 143.618890][T16277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.626552][T16277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.635412][T16277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.643814][T16277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.657551][T16280] loop3: detected capacity change from 0 to 512 [ 143.675079][T16277] team0: Port device geneve1 removed [ 143.686705][T16280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.775418][T16280] vhci_hcd: invalid port number 96 [ 143.781405][T16280] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 143.823496][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.877560][T16305] loop3: detected capacity change from 0 to 512 [ 143.896949][T16305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.981645][T16314] loop6: detected capacity change from 0 to 1024 [ 143.991380][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.006113][T16314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.027815][T16314] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3163: inode #3843031323: comm syz.6.3163: iget: illegal inode # [ 144.041981][T16314] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3163: error while reading EA inode 3843031323 err=-117 [ 144.072428][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.735229][T16382] Invalid ELF header magic: != ELF [ 144.744329][T16380] bridge_slave_0: left allmulticast mode [ 144.750022][T16380] bridge_slave_0: left promiscuous mode [ 144.755923][T16380] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.767430][T16380] bridge_slave_1: left allmulticast mode [ 144.773176][T16380] bridge_slave_1: left promiscuous mode [ 144.778854][T16380] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.807363][T16380] bond0: (slave bond_slave_0): Releasing backup interface [ 144.824600][T16380] bond0: (slave bond_slave_1): Releasing backup interface [ 144.856717][T16380] team0: Port device team_slave_0 removed [ 144.887674][T16380] team0: Port device team_slave_1 removed [ 144.902051][T16380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.909564][T16380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.937669][T16380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.945205][T16380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.966181][T16380] bond1: (slave vlan2): Releasing active interface [ 144.982544][T16388] tipc: New replicast peer: 255.255.255.255 [ 144.988528][T16388] tipc: Enabled bearer , priority 10 [ 145.079432][T16394] loop5: detected capacity change from 0 to 2048 [ 145.117923][T16394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.177125][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 145.184653][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 145.192183][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 145.270638][ T9] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 145.300756][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.580472][T16461] syzkaller0: entered allmulticast mode [ 145.587805][T16461] syzkaller0: entered promiscuous mode [ 145.597050][T16461] syzkaller0 (unregistering): left allmulticast mode [ 145.603824][T16461] syzkaller0 (unregistering): left promiscuous mode [ 145.918671][T16534] loop6: detected capacity change from 0 to 512 [ 145.955345][T16534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.047858][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.071296][T16583] netlink: 4 bytes leftover after parsing attributes in process `wÞ¡ÿ'. [ 146.104058][T16542] bond8: (slave bridge3): Removing an active aggregator [ 146.111565][T16542] bond8: (slave bridge3): Releasing backup interface [ 146.120404][T16542] bridge3: left promiscuous mode [ 146.125552][T16542] bridge3: left allmulticast mode [ 146.265857][T16620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16620 comm=syz.0.3213 [ 146.266167][T16615] pim6reg1: entered promiscuous mode [ 146.283896][T16615] pim6reg1: entered allmulticast mode [ 146.323971][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3213'. [ 146.405110][T16666] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.446144][T16666] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.514215][T16666] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.570022][T16727] syzkaller0: entered allmulticast mode [ 146.578452][T16727] syzkaller0: entered promiscuous mode [ 146.588867][T16666] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.604279][T16727] syzkaller0 (unregistering): left allmulticast mode [ 146.610987][T16727] syzkaller0 (unregistering): left promiscuous mode [ 146.697573][ T2367] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.708545][ T2367] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.719049][ T2367] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.730732][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.785203][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 146.785237][ T29] audit: type=1400 audit(146.765:5991): avc: denied { create } for pid=16746 comm="syz.5.3227" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.852747][ T29] audit: type=1400 audit(146.785:5992): avc: denied { write } for pid=16746 comm="syz.5.3227" name="file0" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.874838][ T29] audit: type=1400 audit(146.785:5993): avc: denied { open } for pid=16746 comm="syz.5.3227" path="/247/file0" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.897181][ T29] audit: type=1400 audit(146.785:5994): avc: denied { ioctl } for pid=16746 comm="syz.5.3227" path="/247/file0" dev="tmpfs" ino=1307 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.955017][ T29] audit: type=1326 audit(146.885:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2c0feba9 code=0x7ffc0000 [ 146.977949][ T29] audit: type=1326 audit(146.885:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2c0feba9 code=0x7ffc0000 [ 147.000888][ T29] audit: type=1326 audit(146.885:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2c0feba9 code=0x7ffc0000 [ 147.023838][ T29] audit: type=1326 audit(146.885:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2c0feba9 code=0x7ffc0000 [ 147.046701][ T29] audit: type=1326 audit(146.885:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2c0feba9 code=0x7ffc0000 [ 147.069574][ T29] audit: type=1326 audit(146.885:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.1.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2c0feba9 code=0x7ffc0000 [ 147.157315][T16767] pim6reg1: entered promiscuous mode [ 147.162654][T16767] pim6reg1: entered allmulticast mode [ 147.524132][T16788] syzkaller0: entered allmulticast mode [ 147.537119][T16788] syzkaller0: entered promiscuous mode [ 147.551634][T16788] syzkaller0 (unregistering): left allmulticast mode [ 147.558551][T16788] syzkaller0 (unregistering): left promiscuous mode [ 148.176157][T16836] netlink: 4 bytes leftover after parsing attributes in process `wÞ¡ÿ'. [ 148.363968][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3253'. [ 148.525631][T16846] vhci_hcd: invalid port number 96 [ 148.525642][T16846] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 148.847307][T16878] pim6reg1: entered promiscuous mode [ 148.852767][T16878] pim6reg1: entered allmulticast mode [ 148.924045][T16908] netlink: 'syz.6.3264': attribute type 4 has an invalid length. [ 148.982840][T16912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16912 comm=syz.5.3267 [ 149.030400][T16916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3269'. [ 149.057869][T16916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.063414][T16918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3270'. [ 149.085511][T16916] vlan0: entered allmulticast mode [ 149.090681][T16916] bond3: entered allmulticast mode [ 149.232071][T16959] loop6: detected capacity change from 0 to 2048 [ 149.278618][T16959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.350132][T16971] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 149.433607][T16975] netlink: 'syz.1.3277': attribute type 4 has an invalid length. [ 149.482323][ T12] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 149.498414][ T12] EXT4-fs (loop6): Remounting filesystem read-only [ 149.505960][T11754] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 149.538468][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.600153][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3283'. [ 150.087510][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3286'. [ 150.140340][T17005] netlink: 'syz.5.3287': attribute type 1 has an invalid length. [ 150.189744][T17005] bond4: entered promiscuous mode [ 150.194853][T17005] bond4: entered allmulticast mode [ 150.217015][T17039] geneve2: entered allmulticast mode [ 150.235349][T17039] bond4: (slave geneve2): making interface the new active one [ 150.243500][T17039] geneve2: entered promiscuous mode [ 150.292848][T17005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3287'. [ 150.293303][T17039] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 150.312882][T17005] bond4: left promiscuous mode [ 150.317680][T17005] geneve2: left promiscuous mode [ 150.323458][T17005] bond4: left allmulticast mode [ 150.344805][T17005] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.463023][T17052] loop3: detected capacity change from 0 to 128 [ 150.490217][T17052] EXT4-fs: Ignoring removed nobh option [ 150.506189][T17052] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.559778][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.880234][T17093] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3306'. [ 150.981443][T17114] netlink: 'syz.5.3308': attribute type 30 has an invalid length. [ 150.999919][T17118] loop3: detected capacity change from 0 to 256 [ 151.021587][ T2367] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.030633][T17118] FAT-fs (loop3): Directory bread(block 1285) failed [ 151.037380][ T2367] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.049234][T17118] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 151.056892][ T2367] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.072721][ T2367] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.839776][T17168] loop6: detected capacity change from 0 to 256 [ 151.857313][T17168] FAT-fs (loop6): Directory bread(block 1285) failed [ 151.895571][T17168] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 151.949945][T17183] __nla_validate_parse: 2 callbacks suppressed [ 151.949961][T17183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3332'. [ 151.979673][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3332'. [ 152.223215][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 152.223229][ T29] audit: type=1400 audit(152.205:6121): avc: denied { watch watch_reads } for pid=17225 comm="syz.0.3343" path="/706" dev="tmpfs" ino=3671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.799961][T17253] smc: net device bond0 applied user defined pnetid SYZ0 [ 152.807615][T17253] smc: net device bond0 erased user defined pnetid SYZ0 [ 152.847626][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3357'. [ 153.003913][T17273] netlink: 'syz.6.3362': attribute type 10 has an invalid length. [ 153.011811][T17273] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3362'. [ 153.023419][T17273] team0: Port device geneve1 added [ 153.054726][T17278] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3373'. [ 153.459404][ T29] audit: type=1400 audit(153.435:6122): avc: denied { mac_admin } for pid=17316 comm="syz.6.3367" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.489607][ T29] audit: type=1400 audit(153.435:6123): avc: denied { relabelto } for pid=17316 comm="syz.6.3367" name="file0" dev="tmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 153.515505][ T29] audit: type=1400 audit(153.435:6124): avc: denied { associate } for pid=17316 comm="syz.6.3367" name="file0" dev="tmpfs" ino=862 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 153.568035][ T29] audit: type=1400 audit(153.495:6125): avc: denied { rmdir } for pid=13301 comm="syz-executor" name="file0" dev="tmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 153.595423][T17322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3369'. [ 153.617007][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3368'. [ 153.625922][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3368'. [ 153.637312][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3369'. [ 153.671275][ T29] audit: type=1326 audit(153.645:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17343 comm="syz.6.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 153.694235][ T29] audit: type=1326 audit(153.645:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17343 comm="syz.6.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 153.724127][T17344] loop6: detected capacity change from 0 to 1024 [ 153.731197][T17344] EXT4-fs: Ignoring removed bh option [ 153.736988][ T29] audit: type=1326 audit(153.695:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17343 comm="syz.6.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3e1c9aeba9 code=0x7ffc0000 [ 153.739634][T17344] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.759904][ T29] audit: type=1326 audit(153.695:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17343 comm="syz.6.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3e1c9aebe3 code=0x7ffc0000 [ 153.760006][ T29] audit: type=1326 audit(153.695:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17343 comm="syz.6.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e1c9ad65f code=0x7ffc0000 [ 153.805406][T17349] loop3: detected capacity change from 0 to 2048 [ 153.827149][T17344] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 153.836014][T17344] System zones: 0-1, 3-12 [ 153.841328][T17349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.855546][T17344] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.3371: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.869833][T17344] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.3371: Failed to acquire dquot type 0 [ 153.881674][T17344] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.3371: Freeing blocks not in datazone - block = 0, count = 4096 [ 153.896211][T17344] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3371: Invalid inode bitmap blk 0 in block_group 0 [ 153.909931][T17344] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 153.918521][T11754] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.933888][T17344] EXT4-fs (loop6): 1 orphan inode deleted [ 153.939988][T17344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.952545][T11754] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:58: Failed to release dquot type 0 [ 153.983173][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.046734][T17370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17370 comm=syz.0.3379 [ 154.075753][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3380'. [ 154.079009][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 154.106563][ T12] EXT4-fs (loop3): Remounting filesystem read-only [ 154.113306][T11754] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 154.155327][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.333435][T17399] Falling back ldisc for ttyS3. [ 154.783621][T17482] loop5: detected capacity change from 0 to 1024 [ 154.805435][T17482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.822206][T17488] netlink: 'syz.0.3413': attribute type 7 has an invalid length. [ 154.835187][T17482] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 154.913996][T17501] netlink: 'syz.0.3416': attribute type 1 has an invalid length. [ 154.934511][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.953211][T17501] bond7: entered promiscuous mode [ 154.958278][T17501] bond7: entered allmulticast mode [ 154.970534][T17501] geneve2: entered allmulticast mode [ 154.971281][T17540] netlink: 'syz.5.3417': attribute type 10 has an invalid length. [ 154.978288][T17501] bond7: (slave geneve2): making interface the new active one [ 154.991247][T17501] geneve2: entered promiscuous mode [ 154.997339][T17501] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 155.006042][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.016051][T17501] bond7: left promiscuous mode [ 155.020829][T17501] geneve2: left promiscuous mode [ 155.026014][T17501] bond7: left allmulticast mode [ 155.031561][T17501] 8021q: adding VLAN 0 to HW filter on device bond7 [ 155.038297][T17543] netlink: 'syz.5.3417': attribute type 10 has an invalid length. [ 155.065319][T17540] team0: Port device dummy0 added [ 155.070778][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.079360][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.088331][T17543] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 155.106603][T17543] team0: Failed to send options change via netlink (err -105) [ 155.114233][T17543] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 155.123129][T17543] team0: Port device dummy0 removed [ 155.130801][T17543] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.141679][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.216214][T17555] loop3: detected capacity change from 0 to 1024 [ 155.243268][T17555] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.251946][T17555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.277081][T17555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.438147][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.484065][T17605] loop3: detected capacity change from 0 to 512 [ 155.491186][T17605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.506380][T17605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.537962][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.565672][ T47] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 155.659304][T17634] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 155.797814][T17648] loop3: detected capacity change from 0 to 512 [ 155.807833][T17648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.819540][T17648] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 155.836563][T17648] EXT4-fs (loop3): 1 truncate cleaned up [ 155.842878][T17648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.940461][T17681] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.950772][T17681] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.974373][T17685] netlink: 'syz.1.3450': attribute type 10 has an invalid length. [ 155.983553][T17685] team0: Port device dummy0 added [ 155.989844][T17685] netlink: 'syz.1.3450': attribute type 10 has an invalid length. [ 155.998141][T17685] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 156.007790][T17685] team0: Failed to send options change via netlink (err -105) [ 156.016270][T17685] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 156.025238][T17685] team0: Port device dummy0 removed [ 156.031733][T17685] dummy0: entered promiscuous mode [ 156.037537][T17685] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.047559][T17681] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.057371][T17681] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.106154][T17681] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.115914][T17681] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.148321][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.179480][T17681] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.189247][T17681] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.283703][ T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.291956][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.301838][ T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.310105][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.353481][ T2367] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.361755][ T2367] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.374036][ T2367] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.382223][ T2367] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.408200][T17718] loop3: detected capacity change from 0 to 1024 [ 156.439488][T17718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.471122][T17727] loop6: detected capacity change from 0 to 256 [ 156.494880][T17729] netlink: 'syz.0.3470': attribute type 10 has an invalid length. [ 156.504636][T17729] team0: Port device dummy0 added [ 156.511125][T17729] netlink: 'syz.0.3470': attribute type 10 has an invalid length. [ 156.519807][T17729] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 156.570388][T17729] team0: Failed to send options change via netlink (err -105) [ 156.673550][T17729] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 156.687518][T17729] team0: Port device dummy0 removed [ 156.726990][T17729] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.874805][T17734] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3457: Allocating blocks 1-17 which overlap fs metadata [ 156.895515][T17718] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3457: Allocating blocks 1-17 which overlap fs metadata [ 156.910041][T17760] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.964630][T17760] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.024419][T17760] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.070092][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.084210][T17760] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.106213][T17781] __nla_validate_parse: 7 callbacks suppressed [ 157.106228][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3474'. [ 157.121355][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3474'. [ 157.140971][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.160480][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.169729][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.180097][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.305542][T17801] loop3: detected capacity change from 0 to 256 [ 157.323983][T17803] netlink: 'syz.6.3478': attribute type 7 has an invalid length. [ 157.331763][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3478'. [ 157.361245][T17808] netlink: 'syz.6.3479': attribute type 10 has an invalid length. [ 157.372263][T17808] team0: Port device dummy0 added [ 157.381922][T17808] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 157.392436][T17808] team0: Failed to send options change via netlink (err -105) [ 157.400115][T17808] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 157.409418][T17808] team0: Port device dummy0 removed [ 157.416838][T17808] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 157.581834][T17812] loop6: detected capacity change from 0 to 2048 [ 157.593950][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 157.593962][ T29] audit: type=1400 audit(157.575:6245): avc: denied { load_policy } for pid=17809 comm="syz.5.3481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 157.606365][T17810] SELinux: failed to load policy [ 157.627320][T17818] geneve2: entered promiscuous mode [ 157.632563][T17818] geneve2: entered allmulticast mode [ 157.653727][T17812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.721357][ T29] audit: type=1400 audit(157.695:6246): avc: denied { write } for pid=17827 comm="syz.5.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.841868][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.960753][T17872] loop6: detected capacity change from 0 to 1024 [ 157.974677][T17872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.006570][T17872] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 158.078148][T13301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.137001][T17880] team0 (unregistering): Port device geneve1 removed [ 158.616318][T17919] loop5: detected capacity change from 0 to 256 [ 158.664930][T17922] macvtap1: entered allmulticast mode [ 158.670440][T17922] bridge0: entered allmulticast mode [ 158.676117][T17922] bridge0: port 1(macvtap1) entered blocking state [ 158.682640][T17922] bridge0: port 1(macvtap1) entered disabled state [ 158.690930][T17922] bridge0: left allmulticast mode [ 158.816131][ T29] audit: type=1326 audit(158.795:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17932 comm="syz.3.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 158.839768][ T29] audit: type=1326 audit(158.795:6248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17932 comm="syz.3.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 158.925131][ T29] audit: type=1326 audit(158.855:6249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17932 comm="syz.3.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 158.948700][ T29] audit: type=1326 audit(158.855:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17932 comm="syz.3.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 158.971590][ T29] audit: type=1326 audit(158.855:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17932 comm="syz.3.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1434eba9 code=0x7ffc0000 [ 159.048840][ T29] audit: type=1400 audit(158.985:6252): avc: denied { read write } for pid=17947 comm="syz.3.3507" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.073903][ T29] audit: type=1400 audit(158.985:6253): avc: denied { open } for pid=17947 comm="syz.3.3507" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.139830][T17959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3510'. [ 159.141909][T17957] loop3: detected capacity change from 0 to 128 [ 159.249976][T17977] loop5: detected capacity change from 0 to 512 [ 159.268106][T17977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.314209][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.410041][T17995] loop5: detected capacity change from 0 to 128 [ 159.506712][ T29] audit: type=1400 audit(159.485:6254): avc: denied { kexec_image_load } for pid=18005 comm="syz.5.3525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 159.565637][T18012] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.575012][T18012] FAT-fs (loop3): unable to read boot sector [ 159.908152][T18040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3530'. [ 159.917140][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3530'. [ 159.929423][T18040] bridge0: port 1(macsec1) entered blocking state [ 159.935914][T18040] bridge0: port 1(macsec1) entered disabled state [ 159.942443][T18040] macsec1: entered allmulticast mode [ 159.948243][T18040] macsec1: left allmulticast mode [ 160.272466][T18056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18056 comm=syz.1.3535 [ 160.294906][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3535'. [ 160.359838][T18093] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.370317][T18093] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.444281][T18093] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.454750][T18093] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.554051][T18093] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.563883][T18093] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.627882][T18136] validate_nla: 1 callbacks suppressed [ 160.627902][T18136] netlink: 'syz.0.3552': attribute type 4 has an invalid length. [ 160.643027][T18093] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.652817][T18093] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.722258][T11709] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.730513][T11709] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.766041][T11709] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.774389][T11709] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.782728][T11709] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.790943][T11709] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.815971][T11709] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.824859][T11709] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.062659][T18202] loop5: detected capacity change from 0 to 512 [ 161.073641][T18202] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3571: bg 0: block 5: invalid block bitmap [ 161.087726][T18202] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 161.096994][T18202] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3571: invalid indirect mapped block 3 (level 2) [ 161.159707][T18202] EXT4-fs (loop5): 2 truncates cleaned up [ 161.171398][T18202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.251045][T18202] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.260888][T18202] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.334687][T18202] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.344488][T18202] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.404518][T18202] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.414333][T18202] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.484522][T18202] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.494327][T18202] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.576869][ T3390] IPVS: starting estimator thread 0... [ 161.585947][T18231] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 161.593808][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 161.783485][T18232] IPVS: using max 2688 ests per chain, 134400 per kthread [ 162.005732][T18240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18240 comm=syz.0.3587 [ 162.036765][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'. [ 162.059123][T18238] loop6: detected capacity change from 0 to 2048 [ 162.145489][T18293] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.163995][T18293] FAT-fs (loop13): unable to read boot sector [ 162.444814][T18324] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 162.465290][T18324] hsr_slave_0: left promiscuous mode [ 162.475043][T18324] hsr_slave_1: left promiscuous mode [ 162.882618][T18328] 9pnet: p9_errstr2errno: server reported unknown error [ 163.003728][T18338] ================================================================== [ 163.011861][T18338] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 163.020208][T18338] [ 163.022522][T18338] write to 0xffff888105c4b25c of 4 bytes by task 18332 on cpu 1: [ 163.030242][T18338] inode_update_timestamps+0x147/0x270 [ 163.035717][T18338] file_update_time+0x20e/0x2b0 [ 163.040660][T18338] shmem_file_write_iter+0x9c/0xf0 [ 163.045774][T18338] iter_file_splice_write+0x663/0xa60 [ 163.051135][T18338] direct_splice_actor+0x153/0x2a0 [ 163.056239][T18338] splice_direct_to_actor+0x30f/0x680 [ 163.061802][T18338] do_splice_direct+0xda/0x150 [ 163.067347][T18338] do_sendfile+0x380/0x650 [ 163.072399][T18338] __x64_sys_sendfile64+0x105/0x150 [ 163.077603][T18338] x64_sys_call+0x2bb0/0x2ff0 [ 163.082310][T18338] do_syscall_64+0xd2/0x200 [ 163.086825][T18338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.092712][T18338] [ 163.095114][T18338] read to 0xffff888105c4b25c of 4 bytes by task 18338 on cpu 0: [ 163.102735][T18338] atime_needs_update+0x2a8/0x3e0 [ 163.107762][T18338] touch_atime+0x4a/0x340 [ 163.112096][T18338] shmem_file_splice_read+0x5b1/0x600 [ 163.117465][T18338] splice_direct_to_actor+0x26f/0x680 [ 163.122824][T18338] do_splice_direct+0xda/0x150 [ 163.127586][T18338] do_sendfile+0x380/0x650 [ 163.132013][T18338] __x64_sys_sendfile64+0x105/0x150 [ 163.137208][T18338] x64_sys_call+0x2bb0/0x2ff0 [ 163.141880][T18338] do_syscall_64+0xd2/0x200 [ 163.146385][T18338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.152270][T18338] [ 163.154580][T18338] value changed: 0x3a2c3cc8 -> 0x3ac4d348 [ 163.160280][T18338] [ 163.162596][T18338] Reported by Kernel Concurrency Sanitizer on: [ 163.168730][T18338] CPU: 0 UID: 0 PID: 18338 Comm: syz.1.3589 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.178533][T18338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.188580][T18338] ================================================================== [ 164.496969][ T2367] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.505665][ T2367] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.516069][T11755] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.524313][T11755] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.534980][T11714] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.543180][T11714] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.554012][T11755] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.562294][T11755] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.572068][T10610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.