last executing test programs: 2m28.518515736s ago: executing program 4 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000005c0)={0x3ff, 0xa, 0x6, 0x4b, 0x0, "2ad119b7b16ca3829daac66d6792948a87c7cf", 0x9, 0x972e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x97, 0x3, 0x8, 0x2, 0x2, 0x400, 0x5}}, {0xe, 0x2, [0x4, 0x3, 0x85, 0xfff5, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001740), 0x8c200, 0x0) socket$can_raw(0x1d, 0x3, 0x1) io_uring_setup(0x4663, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x110, 0xffffffffffffffff, 0x8000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000080900010073797a30000000000900030073797a3100000000"], 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2, 0x9, 0x9, 0x5}, 0x7}, 0x20, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$selinux_user(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f72944367726f75705f743a73302075737500c52be6e500049f06a2bf4ae33d7bbab4bb9d2d75524b05afde9b6053c7851f93ae50f04f12f63ecdef32ace7a8ef442876af2b094a47a3939a220eca1a743ad52f522b65744696dc408000"], 0x25) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) uname(&(0x7f0000000040)=""/1) fcntl$lock(r7, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x1, 0xdb}) socket$packet(0x11, 0x2, 0x300) 2m27.300401034s ago: executing program 4 (id=139): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xea2029dcd3934029}}]}}]}, 0x40}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x204, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = eventfd(0x0) read$eventfd(r5, &(0x7f0000000240), 0x8) writev(r5, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r9, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='block_bio_remap\x00', r0}, 0x18) 2m26.516678818s ago: executing program 4 (id=154): r0 = io_uring_setup(0x3bf9, &(0x7f0000000040)={0x0, 0x70a6, 0x2, 0x0, 0x1ed}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001340)={0x1, 0x0, 0x0, &(0x7f0000001280)=[{0x0}], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='sys_exit\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r9, &(0x7f0000000180)=@other={'lock', ' ', 'mem'}, 0x9) r10 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000140)) write$vga_arbiter(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000025c0)={0x1, 0x0, 0x0, &(0x7f0000002540)=[{0x0}], 0x0}, 0x20) 2m25.572078644s ago: executing program 4 (id=147): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x3e5043, 0x12) write(r8, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980d6", 0x31) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000040)=0x8, 0x8) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7fffeffd) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x80044940, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r15, @ANYRES64=r13, @ANYRES16=r12, @ANYRES16=r15, @ANYRESDEC=r14, @ANYRES16=r11, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r10], 0x5, 0x0, &(0x7f0000000000)) 2m25.414810417s ago: executing program 4 (id=149): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) mount_setattr(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000500)={0x0, 0x7, 0x80000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x45) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8040180e}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002cbd7000020000004500000008000300", @ANYRES32=r6, @ANYBLOB="dc1b1a7a84e17f94bd3add5789d48f8dc16f468afaa7c6446ae80a759a587eacae5cc8fcd5"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r7, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0), 0x0, 0x9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 2m25.194320895s ago: executing program 4 (id=155): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f00000004c0)={0x11, 0x16, r1, 0x1, 0x81, 0x6, @random="d6bb8b911151"}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000280)={0xff7f}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x7) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x1a, r1, 0x1, 0xfc, 0x6, @multicast}, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000400), 0x8) r12 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r12, &(0x7f0000000a00)=""/4096, 0x1000, 0x120, &(0x7f0000000580)=@caif=@util={0x25, "f4abd4e980004037560422f70520d878"}, 0x80) r13 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r10, @ANYRES64=r3, @ANYRES16=r4, @ANYBLOB="769ccdc7bafee05de64352748024fe1449288f8979ab7e8f8d7f33658c15eab21171077b619942bc10ecf804a62dc84931a5e274fd455a3797b4d923d6d3995113a81bdc058922403e3e0fd273cb031d1a9cf8daf2020dc519f64de73b93095053915c6f4269324e77c187a60ca1db4a2220623bd3858f82d440b77c9eb1c4acf5be753b2ee63eaee75fc1", @ANYBLOB="5a7de17454f327db01e79f119b7cd37af93884970abdae61b0e1cae66d90a698eade5adfb06dee11af8f", @ANYRES32=r5, @ANYRES8=r7, @ANYRES8=r7, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r14}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r15}, 0x10) close(r13) r16 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', r1, 0x10, 0x8, 0xc8b, 0x400100, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0xbdf}, @timestamp={0x44, 0x14, 0x57, 0x0, 0x7, [0xfffffffe, 0x6, 0x3, 0x7ff]}, @lsrr={0x83, 0x1b, 0x68, [@empty, @empty, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r16, 0x8918, &(0x7f0000000340)={@remote, 0x65, r17}) 2m25.156117298s ago: executing program 32 (id=155): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f00000004c0)={0x11, 0x16, r1, 0x1, 0x81, 0x6, @random="d6bb8b911151"}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000280)={0xff7f}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x7) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x1a, r1, 0x1, 0xfc, 0x6, @multicast}, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000400), 0x8) r12 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r12, &(0x7f0000000a00)=""/4096, 0x1000, 0x120, &(0x7f0000000580)=@caif=@util={0x25, "f4abd4e980004037560422f70520d878"}, 0x80) r13 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r10, @ANYRES64=r3, @ANYRES16=r4, @ANYBLOB="769ccdc7bafee05de64352748024fe1449288f8979ab7e8f8d7f33658c15eab21171077b619942bc10ecf804a62dc84931a5e274fd455a3797b4d923d6d3995113a81bdc058922403e3e0fd273cb031d1a9cf8daf2020dc519f64de73b93095053915c6f4269324e77c187a60ca1db4a2220623bd3858f82d440b77c9eb1c4acf5be753b2ee63eaee75fc1", @ANYBLOB="5a7de17454f327db01e79f119b7cd37af93884970abdae61b0e1cae66d90a698eade5adfb06dee11af8f", @ANYRES32=r5, @ANYRES8=r7, @ANYRES8=r7, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r14}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r15}, 0x10) close(r13) r16 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', r1, 0x10, 0x8, 0xc8b, 0x400100, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0xbdf}, @timestamp={0x44, 0x14, 0x57, 0x0, 0x7, [0xfffffffe, 0x6, 0x3, 0x7ff]}, @lsrr={0x83, 0x1b, 0x68, [@empty, @empty, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r16, 0x8918, &(0x7f0000000340)={@remote, 0x65, r17}) 1.36014304s ago: executing program 1 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r1, &(0x7f0000000040)='\x00', 0x2, 0x1200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x5) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x3, {0x0, 0x0, 0x0, r7, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r8, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000080)=0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="01072bbd70000000001a05"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r12) sendmsg$NFC_CMD_LLC_GET_PARAMS(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000f0000008bfda228", @ANYBLOB="ef9b655b2b4f31509f11429b93a11be2b11975096cd694e1ed10a339ed11afd6e5d9b31e8938b0d2e1d6252ba5ab3f3c73014854366102e7be1dc31e4abd1dc7c1def71b7bab28a492f8308e63017a140026221c15b6b902c5b44e2ec977e5c9d624df7886d6"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 1.192286333s ago: executing program 1 (id=1932): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) 1.175418275s ago: executing program 1 (id=1933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c00078005001500150000000500050009000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e6574"], 0x58}}, 0x0) 1.158061816s ago: executing program 1 (id=1934): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x81ff, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x4817, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x826d, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r6, 0x0, 0x0, 0x1, 0x3000) msgrcv(r6, 0x0, 0x0, 0x1, 0x0) msgsnd(r6, &(0x7f0000000000)={0x1}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r12 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000080)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000480)='GPL\x00'}, 0xde) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') msgctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x3, r7, r8, r9, r10, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r11}) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r8) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x180, 0xff}) 767.754298ms ago: executing program 2 (id=1946): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) mount_setattr(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000500)={0x0, 0x7, 0x80000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x45) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8040180e}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002cbd7000020000004500000008000300", @ANYRES32=r6, @ANYBLOB="dc1b1a7a84e17f94bd3add5789d48f8dc16f468afaa7c6446ae80a759a587eacae5cc8fcd5"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) r7 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r7, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0), 0x0, 0x9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 715.491202ms ago: executing program 2 (id=1950): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x1b) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001220"], 0x20) 649.373537ms ago: executing program 2 (id=1953): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) 638.619428ms ago: executing program 2 (id=1954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000300)={0x14, 0xd, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x404c090) 621.683469ms ago: executing program 2 (id=1956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000000000000052930f47b4ae1897000000000000000000000000000000000066f868c359f250fe1717dda59acb1f7bd617ac8067d923f126481c41650da74f84d0fb41b6d62cbe9f5821fcae7ab679c85fb1f58e58844214d5c0b449ee0ccdcff5cef91e557d821f4788c205f5ac7b8cbd012bbfa1d3054c0b7c9ddf8cc3d063fd40d2eecd37c0ebb89c62abde43bc5ad4fe27a1a6e232234fc99b51dd5d74c7f1b12842c00962ff65b186c0875c31", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="328f0ed8cdff04dcc5770092e23c1c020000000000000006fdffffff33120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt(r4, 0x7, 0x20000404, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffc}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) fallocate(0xffffffffffffffff, 0x9, 0x2, 0x7000003) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 437.260075ms ago: executing program 5 (id=1963): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) mount_setattr(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000500)={0x0, 0x7, 0x80000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x45) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8040180e}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002cbd7000020000004500000008000300", @ANYRES32=r6, @ANYBLOB="dc1b1a7a84e17f94bd3add5789d48f8dc16f468afaa7c6446ae80a759a587eacae5cc8fcd5"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r7, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0), 0x0, 0x9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 413.308386ms ago: executing program 3 (id=1967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c840}, 0x0) 399.033517ms ago: executing program 3 (id=1968): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ac0)="a2"}, 0x50) 380.784889ms ago: executing program 3 (id=1969): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 380.408349ms ago: executing program 5 (id=1970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002075682500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 339.908763ms ago: executing program 5 (id=1972): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 326.840993ms ago: executing program 0 (id=1973): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01072bbd70000000001a05"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) 306.104305ms ago: executing program 5 (id=1974): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') fchdir(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='io_uring_req_failed\x00', r3}, 0x18) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0xc4, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0xb0, 0x1, [@m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x27d, 0x20000000}}]}, {0x4}, {0xc, 0x3}, {0xc}}}, @m_police={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10002, 0x0, 0x0, 0x3cd, 0x0, {0x0, 0x2, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x6, 0x6, "588d"}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xe32fa770345bf4cf}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) shutdown(0xffffffffffffffff, 0x1) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), &(0x7f0000000280)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x3) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) 301.211325ms ago: executing program 1 (id=1975): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14, &(0x7f0000000240)={0x0}}, 0x40040) 284.554797ms ago: executing program 0 (id=1976): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1412, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000811}, 0x4000) 279.626557ms ago: executing program 3 (id=1977): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x7f, 0xffffffff, @vifc_lcl_ifindex, @private}, 0x10) 241.90215ms ago: executing program 1 (id=1978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000000000000052930f47b4ae1897000000000000000000000000000000000066f868c359f250fe1717dda59acb1f7bd617ac8067d923f126481c41650da74f84d0fb41b6d62cbe9f5821fcae7ab679c85fb1f58e58844214d5c0b449ee0ccdcff5cef91e557d821f4788c205f5ac7b8cbd012bbfa1d3054c0b7c9ddf8cc3d063fd40d2eecd37c0ebb89c62abde43bc5ad4fe27a1a6e232234fc99b51dd5d74c7f1b12842c00962ff65b186c0875c31", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="328f0ed8cdff04dcc5770092e23c1c020000000000000006fdffffff33120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt(r4, 0x7, 0x20000404, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffc}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) fallocate(0xffffffffffffffff, 0x9, 0x2, 0x7000003) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 241.60992ms ago: executing program 0 (id=1979): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000380)={0x23, 0xb, 0x5, 0xf}, 0x10) 241.513321ms ago: executing program 3 (id=1980): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) 157.283887ms ago: executing program 0 (id=1981): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) mount_setattr(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000500)={0x0, 0x7, 0x80000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x45) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8040180e}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002cbd7000020000004500000008000300", @ANYRES32=r6, @ANYBLOB="dc1b1a7a84e17f94bd3add5789d48f8dc16f468afaa7c6446ae80a759a587eacae5cc8fcd5"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r7, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0), 0x0, 0x9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 157.171997ms ago: executing program 3 (id=1982): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x81ff, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x4817, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x826d, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote}}, 0x1e) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) r3 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r3, 0x0, 0x0, 0x1, 0x3000) msgrcv(r3, 0x0, 0x0, 0x1, 0x0) msgrcv(r3, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000680)={{0x3, r4, 0x0, 0x0, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r5}) 112.033701ms ago: executing program 0 (id=1983): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x3, 0x4}, 0x48) 85.218233ms ago: executing program 0 (id=1984): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x81ff, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x4817, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x826d, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r9 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') msgctl$IPC_SET(r4, 0x1, &(0x7f0000000680)={{0x3, 0x0, r5, r6, r7, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r8}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 81.785133ms ago: executing program 5 (id=1985): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="14140000170001000000000000000000fe880000000000000000000000000001000000002b000000fe8000000000000000000000000000bbfc000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000000008073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001fc00000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000fe7f0000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000b46b6e00000000000000000009000000000000000000000025bd70000702080003020800010f"], 0x1414}}, 0x0) 1.17933ms ago: executing program 5 (id=1986): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x81ff, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x4817, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x826d, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r6, 0x0, 0x0, 0x1, 0x3000) msgrcv(r6, 0x0, 0x0, 0x1, 0x0) msgsnd(r6, &(0x7f0000000000)={0x1}, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) r12 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000080)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000480)='GPL\x00'}, 0xde) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') msgctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x3, r7, r8, r9, r10, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r11}) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r8) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x180, 0xff}) 0s ago: executing program 2 (id=1987): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01072bbd70000000001a05"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): s_rstat_updated+0xb7/0x240 [ 136.296062][ T8198] ? pcpu_block_update+0x232/0x3b0 [ 136.301166][ T8198] ? pcpu_block_refresh_hint+0x157/0x170 [ 136.306811][ T8198] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 136.312889][ T8198] ? css_rstat_updated+0xb7/0x240 [ 136.317947][ T8198] ? __rcu_read_unlock+0x4f/0x70 [ 136.322886][ T8198] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 136.328751][ T8198] ? should_fail_ex+0x30/0x280 [ 136.333545][ T8198] ? selinux_bpf_prog_load+0x36/0xf0 [ 136.338917][ T8198] ? should_failslab+0x8c/0xb0 [ 136.343687][ T8198] ? __kmalloc_cache_noprof+0x189/0x320 [ 136.349261][ T8198] ? selinux_bpf_prog_load+0xbf/0xf0 [ 136.354626][ T8198] ? security_bpf_prog_load+0x2c/0xa0 [ 136.360114][ T8198] bpf_prog_load+0xedd/0x1070 [ 136.364928][ T8198] ? security_bpf+0x2b/0x90 [ 136.365019][ T8198] __sys_bpf+0x462/0x7b0 [ 136.365122][ T8198] __x64_sys_bpf+0x41/0x50 [ 136.365148][ T8198] x64_sys_call+0x2aea/0x2ff0 [ 136.365218][ T8198] do_syscall_64+0xd2/0x200 [ 136.365245][ T8198] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.365270][ T8198] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.365291][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.365356][ T8198] RIP: 0033:0x7f76cdc0ebe9 [ 136.365379][ T8198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.365396][ T8198] RSP: 002b:00007f76cc677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.365415][ T8198] RAX: ffffffffffffffda RBX: 00007f76cde35fa0 RCX: 00007f76cdc0ebe9 [ 136.365431][ T8198] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 136.365446][ T8198] RBP: 00007f76cdc91e19 R08: 0000000000000000 R09: 0000000000000000 [ 136.365517][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.365585][ T8198] R13: 00007f76cde36038 R14: 00007f76cde35fa0 R15: 00007ffe7683e5c8 [ 136.365662][ T8198] [ 136.365669][ T8198] ---[ end trace 0000000000000000 ]--- [ 136.525926][ T8214] lo speed is unknown, defaulting to 1000 [ 136.531971][ T8214] lo speed is unknown, defaulting to 1000 [ 136.567276][ T8214] lo speed is unknown, defaulting to 1000 [ 136.743365][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.779303][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 136.779315][ T29] audit: type=1400 audit(1755670981.662:12887): avc: denied { append } for pid=8223 comm="syz.3.1149" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.809314][ T29] audit: type=1400 audit(1755670981.662:12888): avc: denied { open } for pid=8223 comm="syz.3.1149" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 137.040259][ T29] audit: type=1400 audit(1755670981.888:12889): avc: denied { read } for pid=8223 comm="syz.3.1149" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.063407][ T29] audit: type=1400 audit(1755670981.888:12890): avc: denied { open } for pid=8223 comm="syz.3.1149" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.228151][ T8230] loop1: detected capacity change from 0 to 128 [ 137.262156][ T8230] EXT4-fs: Ignoring removed nobh option [ 137.325805][ T8230] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.344928][ T8230] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.357645][ T29] audit: type=1400 audit(1755670982.233:12891): avc: denied { write } for pid=8229 comm="syz.1.1150" path="/251/mnt/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.593589][ T8238] team0: Unable to change to the same mode the team is in [ 137.682025][ T8252] IPv6: Can't replace route, no match found [ 137.688316][ T29] audit: type=1400 audit(1755670982.558:12892): avc: denied { write } for pid=8251 comm="syz.3.1159" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 137.713141][ T29] audit: type=1400 audit(1755670982.558:12893): avc: denied { create } for pid=8251 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.716523][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1159'. [ 137.733491][ T29] audit: type=1400 audit(1755670982.588:12894): avc: denied { connect } for pid=8251 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.742058][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1159'. [ 137.765126][ T8255] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 137.765126][ T8255] The task syz.5.1157 (8255) triggered the difference, watch for misbehavior. [ 137.777972][ T29] audit: type=1400 audit(1755670982.647:12895): avc: denied { getopt } for pid=8251 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.807746][ T29] audit: type=1400 audit(1755670982.647:12896): avc: denied { connect } for pid=8251 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.830722][ T8253] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 137.840687][ T8253] SELinux: failed to load policy [ 138.013249][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.105269][ T8270] team0: Unable to change to the same mode the team is in [ 138.157286][ T8268] netlink: 'syz.1.1164': attribute type 3 has an invalid length. [ 138.165127][ T8268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1164'. [ 138.282742][ T8293] bond1: entered promiscuous mode [ 138.287859][ T8293] bond1: entered allmulticast mode [ 138.293241][ T8293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.438297][ T8299] team0: Unable to change to the same mode the team is in [ 138.449968][ T8297] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 138.460015][ T8297] SELinux: failed to load policy [ 138.512369][ T8307] team0: Unable to change to the same mode the team is in [ 138.555210][ T8312] wireguard0: entered promiscuous mode [ 138.560758][ T8312] wireguard0: entered allmulticast mode [ 138.708292][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 139.217000][ T8333] team0: Unable to change to the same mode the team is in [ 139.356971][ T8341] team0: Unable to change to the same mode the team is in [ 139.444815][ T8331] loop2: detected capacity change from 0 to 1024 [ 139.463592][ T8331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.476204][ T8331] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.539461][ T8338] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 139.556269][ T8338] SELinux: failed to load policy [ 139.565606][ T8356] __nla_validate_parse: 2 callbacks suppressed [ 139.565621][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 139.588386][ T8346] loop3: detected capacity change from 0 to 512 [ 139.598994][ T8356] wireguard0: entered promiscuous mode [ 139.604483][ T8356] wireguard0: entered allmulticast mode [ 139.613026][ T8346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.625644][ T8346] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.651954][ T8346] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 139.666424][ T8346] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 139.678671][ T8346] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.678671][ T8346] [ 139.688301][ T8346] EXT4-fs (loop3): Total free blocks count 0 [ 139.694321][ T8346] EXT4-fs (loop3): Free/Dirty block details [ 139.700236][ T8346] EXT4-fs (loop3): free_blocks=65280 [ 139.705607][ T8346] EXT4-fs (loop3): dirty_blocks=33 [ 139.710710][ T8346] EXT4-fs (loop3): Block reservation details [ 139.716698][ T8346] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 139.785191][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.812968][ T8361] team0: Unable to change to the same mode the team is in [ 139.831756][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 139.841980][ T8364] wireguard0: entered promiscuous mode [ 139.847546][ T8364] wireguard0: entered allmulticast mode [ 139.857767][ T8367] wireguard0: entered promiscuous mode [ 139.863280][ T8367] wireguard0: entered allmulticast mode [ 140.025585][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 140.037327][ T8372] wireguard0: entered promiscuous mode [ 140.042885][ T8372] wireguard0: entered allmulticast mode [ 140.073870][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1193'. [ 140.084833][ T8380] hsr_slave_1 (unregistering): left promiscuous mode [ 140.171457][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 140.192974][ T8385] smc: net device bond0 erased user defined pnetid SYZ0 [ 140.260268][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'. [ 140.368907][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.416899][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 140.428384][ T8408] wireguard0: entered promiscuous mode [ 140.433945][ T8408] wireguard0: entered allmulticast mode [ 141.256300][ T8421] loop0: detected capacity change from 0 to 512 [ 141.264278][ T8421] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.272208][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1206'. [ 141.290215][ T8421] EXT4-fs (loop0): failed to initialize system zone (-117) [ 141.307412][ T8419] loop1: detected capacity change from 0 to 2048 [ 141.322196][ T8424] team0: Unable to change to the same mode the team is in [ 141.329430][ T8421] EXT4-fs (loop0): mount failed [ 141.335730][ T8419] EXT4-fs (loop1): #clusters per group too big: 151011328 [ 141.373412][ T8433] smc: net device bond0 applied user defined pnetid SYZ0 [ 141.386948][ T8419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1204'. [ 141.399919][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1203'. [ 141.416700][ T8419] tipc: Resetting bearer [ 141.437236][ T8419] tipc: Disabling bearer [ 141.449124][ T8421] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 141.469545][ T8432] team0: Unable to change to the same mode the team is in [ 141.507633][ T8421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.613350][ T8441] bond2: (slave bridge1): making interface the new active one [ 141.646109][ T8441] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 141.668792][ T8421] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 141.744860][ T8443] team0: Unable to change to the same mode the team is in [ 141.930772][ T8464] loop2: detected capacity change from 0 to 2048 [ 142.500477][ T8456] syz.2.1211 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 142.514730][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.2.1211 Tainted: G W 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 142.514824][ T8456] Tainted: [W]=WARN [ 142.514832][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.514873][ T8456] Call Trace: [ 142.514879][ T8456] [ 142.514887][ T8456] __dump_stack+0x1d/0x30 [ 142.514910][ T8456] dump_stack_lvl+0xe8/0x140 [ 142.514953][ T8456] dump_stack+0x15/0x1b [ 142.514970][ T8456] dump_header+0x81/0x220 [ 142.515000][ T8456] oom_kill_process+0x342/0x400 [ 142.515041][ T8456] out_of_memory+0x979/0xb80 [ 142.515078][ T8456] try_charge_memcg+0x5e6/0x9e0 [ 142.515111][ T8456] obj_cgroup_charge_pages+0xa6/0x150 [ 142.515227][ T8456] __memcg_kmem_charge_page+0x9f/0x170 [ 142.515263][ T8456] __alloc_frozen_pages_noprof+0x188/0x360 [ 142.515353][ T8456] alloc_pages_mpol+0xb3/0x250 [ 142.515386][ T8456] alloc_pages_noprof+0x90/0x130 [ 142.515422][ T8456] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 142.515563][ T8456] __kvmalloc_node_noprof+0x30f/0x4e0 [ 142.515596][ T8456] ? ip_set_alloc+0x1f/0x30 [ 142.515624][ T8456] ? ip_set_alloc+0x1f/0x30 [ 142.515671][ T8456] ? __kmalloc_cache_noprof+0x189/0x320 [ 142.515699][ T8456] ip_set_alloc+0x1f/0x30 [ 142.515728][ T8456] hash_netiface_create+0x282/0x740 [ 142.515818][ T8456] ? __pfx_hash_netiface_create+0x10/0x10 [ 142.515846][ T8456] ip_set_create+0x3c9/0x960 [ 142.515890][ T8456] ? __nla_parse+0x40/0x60 [ 142.515910][ T8456] nfnetlink_rcv_msg+0x4c3/0x590 [ 142.515953][ T8456] netlink_rcv_skb+0x123/0x220 [ 142.516057][ T8456] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.516077][ T8456] nfnetlink_rcv+0x16b/0x1690 [ 142.516091][ T8456] ? css_rstat_updated+0xb7/0x240 [ 142.516140][ T8456] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 142.516155][ T8456] ? __list_del_entry_valid_or_report+0x65/0x130 [ 142.516171][ T8456] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 142.516209][ T8456] ? _raw_spin_unlock+0x26/0x50 [ 142.516226][ T8456] ? __swap_duplicate+0x2da/0x310 [ 142.516251][ T8456] ? mas_destroy+0x1f39/0x2090 [ 142.516299][ T8456] ? should_fail_ex+0x30/0x280 [ 142.516318][ T8456] ? selinux_nlmsg_lookup+0x99/0x890 [ 142.516389][ T8456] ? __rcu_read_unlock+0x34/0x70 [ 142.516401][ T8456] ? __netlink_lookup+0x266/0x2a0 [ 142.516413][ T8456] netlink_unicast+0x5bd/0x690 [ 142.516492][ T8456] netlink_sendmsg+0x58b/0x6b0 [ 142.516511][ T8456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.516533][ T8456] __sock_sendmsg+0x142/0x180 [ 142.516547][ T8456] ____sys_sendmsg+0x31e/0x4e0 [ 142.516639][ T8456] ___sys_sendmsg+0x17b/0x1d0 [ 142.516666][ T8456] __x64_sys_sendmsg+0xd4/0x160 [ 142.516687][ T8456] x64_sys_call+0x191e/0x2ff0 [ 142.516737][ T8456] do_syscall_64+0xd2/0x200 [ 142.516750][ T8456] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.516764][ T8456] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 142.516835][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.516847][ T8456] RIP: 0033:0x7ff5b890ebe9 [ 142.516857][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.516867][ T8456] RSP: 002b:00007ff5b736f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.516879][ T8456] RAX: ffffffffffffffda RBX: 00007ff5b8b35fa0 RCX: 00007ff5b890ebe9 [ 142.516992][ T8456] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 142.516999][ T8456] RBP: 00007ff5b8991e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.517006][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.517012][ T8456] R13: 00007ff5b8b36038 R14: 00007ff5b8b35fa0 R15: 00007ffea6f281c8 [ 142.517028][ T8456] [ 142.517058][ T8456] memory: usage 307200kB, limit 307200kB, failcnt 969 [ 142.692227][ T8470] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 142.695805][ T8456] memory+swap: usage 309072kB, limit 9007199254740988kB, failcnt 0 [ 142.695820][ T8456] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 142.695831][ T8456] Memory cgroup stats for /syz2: [ 142.963880][ T8470] loop3: detected capacity change from 0 to 32768 [ 142.964092][ T8456] cache 0 [ 142.978269][ T8456] rss 0 [ 142.981017][ T8456] shmem 0 [ 142.983968][ T8456] mapped_file 208896 [ 142.987996][ T8456] dirty 0 [ 142.990938][ T8456] writeback 0 [ 142.994222][ T8456] workingset_refault_anon 411 [ 142.998896][ T8456] workingset_refault_file 1013 [ 143.003645][ T8456] swap 1916928 [ 143.007072][ T8456] swapcached 16384 [ 143.010787][ T8456] pgpgin 180206 [ 143.014273][ T8456] pgpgout 180200 [ 143.017803][ T8456] pgfault 191097 [ 143.021342][ T8456] pgmajfault 280 [ 143.024911][ T8456] inactive_anon 8192 [ 143.028785][ T8456] active_anon 8192 [ 143.032487][ T8456] inactive_file 0 [ 143.036199][ T8456] active_file 8192 [ 143.039977][ T8456] unevictable 0 [ 143.043423][ T8456] hierarchical_memory_limit 314572800 [ 143.048861][ T8456] hierarchical_memsw_limit 9223372036854771712 [ 143.055026][ T8456] total_cache 0 [ 143.058474][ T8456] total_rss 0 [ 143.061744][ T8456] total_shmem 0 [ 143.065219][ T8456] total_mapped_file 208896 [ 143.069627][ T8456] total_dirty 0 [ 143.073077][ T8456] total_writeback 0 [ 143.077237][ T8456] total_workingset_refault_anon 411 [ 143.082467][ T8456] total_workingset_refault_file 1013 [ 143.087750][ T8456] total_swap 1916928 [ 143.091616][ T8456] total_swapcached 16384 [ 143.095837][ T8456] total_pgpgin 180206 [ 143.099807][ T8456] total_pgpgout 180200 [ 143.103844][ T8456] total_pgfault 191097 [ 143.107897][ T8456] total_pgmajfault 280 [ 143.112008][ T8456] total_inactive_anon 8192 [ 143.116416][ T8456] total_active_anon 8192 [ 143.120631][ T8456] total_inactive_file 0 [ 143.124828][ T8456] total_active_file 8192 [ 143.125038][ T8488] loop1: detected capacity change from 0 to 512 [ 143.129092][ T8456] total_unevictable 0 [ 143.136709][ T8488] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.139291][ T8456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.462,pid=5579,uid=0 [ 143.146220][ T8488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.160347][ T8456] Memory cgroup out of memory: Killed process 5579 (syz.2.462) total-vm:100180kB, anon-rss:1008kB, file-rss:24832kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 143.196621][ T8470] loop3: p1 p3 < > [ 143.212987][ T8488] EXT4-fs (loop1): 1 truncate cleaned up [ 143.228479][ T8488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.282376][ T8494] netlink: 'syz.0.1219': attribute type 3 has an invalid length. [ 143.305368][ T8456] syz.2.1211 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 143.315563][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 143.315578][ T29] audit: type=1400 audit(1755670988.107:12994): avc: denied { create } for pid=8493 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.319548][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.2.1211 Tainted: G W 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 143.319607][ T8456] Tainted: [W]=WARN [ 143.319614][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.319627][ T8456] Call Trace: [ 143.319679][ T8456] [ 143.319686][ T8456] __dump_stack+0x1d/0x30 [ 143.319709][ T8456] dump_stack_lvl+0xe8/0x140 [ 143.319838][ T8456] dump_stack+0x15/0x1b [ 143.319855][ T8456] dump_header+0x81/0x220 [ 143.319890][ T8456] oom_kill_process+0x342/0x400 [ 143.319926][ T8456] out_of_memory+0x979/0xb80 [ 143.320014][ T8456] try_charge_memcg+0x5e6/0x9e0 [ 143.320045][ T8456] obj_cgroup_charge_pages+0xa6/0x150 [ 143.320079][ T8456] __memcg_kmem_charge_page+0x9f/0x170 [ 143.320113][ T8456] __alloc_frozen_pages_noprof+0x188/0x360 [ 143.320252][ T8456] alloc_pages_mpol+0xb3/0x250 [ 143.320358][ T8456] alloc_pages_noprof+0x90/0x130 [ 143.320392][ T8456] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 143.320438][ T8456] __kvmalloc_node_noprof+0x30f/0x4e0 [ 143.320483][ T8456] ? ip_set_alloc+0x1f/0x30 [ 143.320512][ T8456] ? ip_set_alloc+0x1f/0x30 [ 143.320541][ T8456] ? __kmalloc_cache_noprof+0x189/0x320 [ 143.320624][ T8456] ip_set_alloc+0x1f/0x30 [ 143.320652][ T8456] hash_netiface_create+0x282/0x740 [ 143.320685][ T8456] ? __pfx_hash_netiface_create+0x10/0x10 [ 143.320790][ T8456] ip_set_create+0x3c9/0x960 [ 143.320832][ T8456] ? __nla_parse+0x40/0x60 [ 143.320934][ T8456] nfnetlink_rcv_msg+0x4c3/0x590 [ 143.320983][ T8456] netlink_rcv_skb+0x123/0x220 [ 143.321015][ T8456] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.321071][ T8456] nfnetlink_rcv+0x16b/0x1690 [ 143.321098][ T8456] ? css_rstat_updated+0xb7/0x240 [ 143.321142][ T8456] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 143.321170][ T8456] ? __list_del_entry_valid_or_report+0x65/0x130 [ 143.321215][ T8456] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 143.321254][ T8456] ? _raw_spin_unlock+0x26/0x50 [ 143.321284][ T8456] ? __swap_duplicate+0x2da/0x310 [ 143.321308][ T8456] ? mas_destroy+0x1f39/0x2090 [ 143.321374][ T8456] ? should_fail_ex+0x30/0x280 [ 143.321408][ T8456] ? selinux_nlmsg_lookup+0x99/0x890 [ 143.321515][ T8456] ? __rcu_read_unlock+0x34/0x70 [ 143.321538][ T8456] ? __netlink_lookup+0x266/0x2a0 [ 143.321560][ T8456] netlink_unicast+0x5bd/0x690 [ 143.321593][ T8456] netlink_sendmsg+0x58b/0x6b0 [ 143.321681][ T8456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.321716][ T8456] __sock_sendmsg+0x142/0x180 [ 143.321742][ T8456] ____sys_sendmsg+0x31e/0x4e0 [ 143.321780][ T8456] ___sys_sendmsg+0x17b/0x1d0 [ 143.321854][ T8456] __x64_sys_sendmsg+0xd4/0x160 [ 143.321894][ T8456] x64_sys_call+0x191e/0x2ff0 [ 143.321931][ T8456] do_syscall_64+0xd2/0x200 [ 143.321956][ T8456] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.322006][ T8456] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.322029][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.322051][ T8456] RIP: 0033:0x7ff5b890ebe9 [ 143.322079][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.322097][ T8456] RSP: 002b:00007ff5b736f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.322117][ T8456] RAX: ffffffffffffffda RBX: 00007ff5b8b35fa0 RCX: 00007ff5b890ebe9 [ 143.322130][ T8456] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 143.322161][ T8456] RBP: 00007ff5b8991e19 R08: 0000000000000000 R09: 0000000000000000 [ 143.322174][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.322187][ T8456] R13: 00007ff5b8b36038 R14: 00007ff5b8b35fa0 R15: 00007ffea6f281c8 [ 143.322207][ T8456] [ 143.322267][ T8456] memory: usage 307200kB, limit 307200kB, failcnt 1190 [ 143.357264][ T29] audit: type=1400 audit(1755670988.147:12995): avc: denied { listen } for pid=8493 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.358984][ T8456] memory+swap: usage 308908kB, limit 9007199254740988kB, failcnt 0 [ 143.362702][ T29] audit: type=1400 audit(1755670988.147:12996): avc: denied { accept } for pid=8493 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.372738][ T8456] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 143.372751][ T8456] Memory cgroup stats for /syz2: [ 143.373882][ T8456] cache 24576 [ 143.427577][ T8495] loop0: detected capacity change from 0 to 512 [ 143.432131][ T8456] rss 0 [ 143.432140][ T8456] shmem 0 [ 143.491334][ T8498] team0: Unable to change to the same mode the team is in [ 143.492065][ T8456] mapped_file 208896 [ 143.555295][ T8505] team0: Unable to change to the same mode the team is in [ 143.559202][ T8456] dirty 0 [ 143.590119][ T8495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.593278][ T8456] writeback 0 [ 143.599273][ T8495] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.602831][ T8456] workingset_refault_anon 420 [ 143.618316][ T29] audit: type=1400 audit(1755670988.414:12997): avc: denied { watch } for pid=8493 comm="syz.0.1219" path="/235/bus" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.619193][ T8456] workingset_refault_file 1019 [ 143.619203][ T8456] swap 1748992 [ 143.619217][ T8456] swapcached 8192 [ 143.625863][ T8495] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.1219: iget: bad i_size value: 2533274857506816 [ 143.629701][ T8456] pgpgin 180221 [ 143.676859][ T29] audit: type=1400 audit(1755670988.474:12998): avc: denied { connect } for pid=8510 comm="syz.5.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.682005][ T8456] pgpgout 180211 [ 143.907435][ T8456] pgfault 191098 [ 143.910978][ T8456] pgmajfault 283 [ 143.914533][ T8456] inactive_anon 8192 [ 143.918962][ T8456] active_anon 0 [ 143.922783][ T8456] inactive_file 32768 [ 143.926783][ T8456] active_file 0 [ 143.930212][ T8456] unevictable 0 [ 143.933901][ T8456] hierarchical_memory_limit 314572800 [ 143.939258][ T8456] hierarchical_memsw_limit 9223372036854771712 [ 143.945402][ T8456] total_cache 24576 [ 143.949199][ T8456] total_rss 0 [ 143.952480][ T8456] total_shmem 0 [ 143.955966][ T8456] total_mapped_file 208896 [ 143.960389][ T8456] total_dirty 0 [ 143.963820][ T8456] total_writeback 0 [ 143.967613][ T8456] total_workingset_refault_anon 420 [ 143.972813][ T8456] total_workingset_refault_file 1019 [ 143.978142][ T8456] total_swap 1748992 [ 143.982028][ T8456] total_swapcached 8192 [ 143.986202][ T8456] total_pgpgin 180221 [ 143.990154][ T8456] total_pgpgout 180211 [ 143.994189][ T8456] total_pgfault 191098 [ 143.998256][ T8456] total_pgmajfault 283 [ 144.002291][ T8456] total_inactive_anon 8192 [ 144.006696][ T8456] total_active_anon 0 [ 144.010730][ T8456] total_inactive_file 32768 [ 144.015212][ T8456] total_active_file 0 [ 144.019164][ T8456] total_unevictable 0 [ 144.023128][ T8456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1211,pid=8455,uid=0 [ 144.037675][ T8456] Memory cgroup out of memory: Killed process 8455 (syz.2.1211) total-vm:93896kB, anon-rss:1072kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 144.058072][ T29] audit: type=1400 audit(1755670988.850:12999): avc: denied { write } for pid=8510 comm="syz.5.1224" path="socket:[24093]" dev="sockfs" ino=24093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.130912][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.144345][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.176869][ T29] audit: type=1326 audit(1755670988.968:13000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 144.235583][ T8514] team0: Unable to change to the same mode the team is in [ 144.236848][ T29] audit: type=1400 audit(1755670988.968:13001): avc: denied { read write } for pid=8515 comm="syz.1.1228" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.266276][ T29] audit: type=1400 audit(1755670988.968:13002): avc: denied { open } for pid=8515 comm="syz.1.1228" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.289724][ T29] audit: type=1326 audit(1755670988.998:13003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.0.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 144.411668][ T8530] wireguard0: entered promiscuous mode [ 144.411684][ T8530] wireguard0: entered allmulticast mode [ 144.458581][ T8539] team0: Unable to change to the same mode the team is in [ 144.474198][ T8526] loop3: detected capacity change from 0 to 512 [ 144.486589][ T8526] journal_path: Lookup failure for './file0/../file0' [ 144.493555][ T8526] EXT4-fs: error: could not find journal device path [ 144.556206][ T8553] wireguard0: entered promiscuous mode [ 144.561883][ T8553] wireguard0: entered allmulticast mode [ 144.585207][ T8549] wireguard0: entered promiscuous mode [ 144.590910][ T8549] wireguard0: entered allmulticast mode [ 144.860045][ T8559] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 144.887726][ T8559] SELinux: failed to load policy [ 144.950536][ T8562] __nla_validate_parse: 6 callbacks suppressed [ 144.950552][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 145.505574][ T8584] bond2: (slave bridge1): Releasing active interface [ 145.522730][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'. [ 145.534828][ T8587] hsr_slave_1 (unregistering): left promiscuous mode [ 145.548559][ T8579] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1242'. [ 145.569206][ T8584] team0: Unable to change to the same mode the team is in [ 145.574257][ T8589] loop5: detected capacity change from 0 to 1024 [ 145.583258][ T8589] EXT4-fs: Ignoring removed bh option [ 145.602267][ T8589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.674450][ T8599] team0: Unable to change to the same mode the team is in [ 145.684768][ T8589] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1244: Allocating blocks 497-513 which overlap fs metadata [ 145.718493][ T8589] EXT4-fs (loop5): pa ffff888106dffa80: logic 1, phys. 321, len 12 [ 145.726523][ T8589] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 1, pa_free 2 [ 145.760238][ T8589] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 321:freeing already freed block (bit 20); block bitmap corrupt. [ 145.840840][ T8613] wireguard0: entered promiscuous mode [ 145.846563][ T8613] wireguard0: entered allmulticast mode [ 145.988053][ T8611] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 145.997810][ T8620] team0: Unable to change to the same mode the team is in [ 146.008099][ T8611] SELinux: failed to load policy [ 146.049505][ T8605] loop2: detected capacity change from 0 to 764 [ 146.056414][ T8605] iso9660: Unknown parameter 'syzkaller0' [ 146.103839][ T8628] loop0: detected capacity change from 0 to 8192 [ 146.155541][ T8628] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 146.160778][ T8628] loop0: partition table partially beyond EOD, truncated [ 146.168241][ T8628] loop0: p1 start 67108864 is beyond EOD, truncated [ 146.174851][ T8628] loop0: p2 size 61546 extends beyond EOD, truncated [ 146.182028][ T8628] loop0: p3 start 100859904 is beyond EOD, truncated [ 146.189205][ T8628] loop0: p5 start 67108864 is beyond EOD, truncated [ 146.195903][ T8628] loop0: p6 size 61546 extends beyond EOD, truncated [ 146.229377][ T8632] team0: Unable to change to the same mode the team is in [ 146.272802][ T8634] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 146.283011][ T8634] SELinux: failed to load policy [ 146.309508][ T8637] team0: Unable to change to the same mode the team is in [ 146.342453][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1261'. [ 146.351641][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1261'. [ 146.400735][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.471231][ T8657] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1262'. [ 146.480779][ T8650] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1262'. [ 146.497446][ T8650] loop5: detected capacity change from 0 to 2048 [ 146.540817][ T8650] Alternate GPT is invalid, using primary GPT. [ 146.547162][ T8650] loop5: p2 p3 p7 [ 146.604565][ T8664] loop1: detected capacity change from 0 to 128 [ 146.619726][ T8662] team0: Unable to change to the same mode the team is in [ 146.660038][ T8669] team0: Unable to change to the same mode the team is in [ 146.668731][ T8658] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 146.689128][ T8658] SELinux: failed to load policy [ 146.711227][ T8673] tipc: Enabling of bearer rejected, failed to enable media [ 146.723280][ T8673] loop5: detected capacity change from 0 to 1024 [ 146.730299][ T8673] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.744760][ T8673] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1269: Invalid block bitmap block 0 in block_group 0 [ 146.760165][ T8673] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1269: Failed to acquire dquot type 0 [ 146.771784][ T8673] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1269: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.785442][ T8673] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1269: Invalid inode bitmap blk 0 in block_group 0 [ 146.798322][ T8673] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 146.799380][ T1751] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 146.818636][ T8673] EXT4-fs (loop5): 1 orphan inode deleted [ 146.825228][ T8673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.842390][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1269'. [ 146.904184][ T8686] loop3: detected capacity change from 0 to 512 [ 146.912797][ T8686] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.944418][ T8686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.957056][ T8686] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.980188][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.033952][ T8692] loop1: detected capacity change from 0 to 8192 [ 147.048310][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.070190][ T8700] loop3: detected capacity change from 0 to 1024 [ 147.073015][ T8692] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 147.077201][ T8700] EXT4-fs: Ignoring removed bh option [ 147.081778][ T8692] loop1: partition table partially beyond EOD, truncated [ 147.084216][ T8692] loop1: p1 start 67108864 is beyond EOD, truncated [ 147.100809][ T8692] loop1: p2 size 61546 extends beyond EOD, truncated [ 147.109398][ T8692] loop1: p3 start 100859904 is beyond EOD, truncated [ 147.116845][ T8692] loop1: p5 start 67108864 is beyond EOD, truncated [ 147.123541][ T8692] loop1: p6 size 61546 extends beyond EOD, truncated [ 147.134660][ T8700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.197030][ T8700] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1275: Allocating blocks 497-513 which overlap fs metadata [ 147.223931][ T8700] EXT4-fs (loop3): pa ffff888106e647e0: logic 1, phys. 321, len 12 [ 147.231924][ T8700] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 1, pa_free 2 [ 147.253170][ T8700] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 321:freeing already freed block (bit 20); block bitmap corrupt. [ 147.275635][ T8708] team0: Unable to change to the same mode the team is in [ 147.336341][ T8716] bond2: entered promiscuous mode [ 147.341470][ T8716] bond2: entered allmulticast mode [ 147.357151][ T8716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.408299][ T8723] netlink: 'syz.5.1276': attribute type 15 has an invalid length. [ 147.428369][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1280'. [ 147.447581][ T8723] nfs4: Unknown parameter 'ates_per_insn 4 total_states 14 peak_states 14 mark_read 1 [ 147.447581][ T8723] ' [ 147.500129][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 147.561423][ T8732] team0: Unable to change to the same mode the team is in [ 147.713741][ T8740] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 147.738727][ T8740] SELinux: failed to load policy [ 147.918677][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.015637][ T8745] loop3: detected capacity change from 0 to 512 [ 148.041113][ T8745] EXT4-fs: Ignoring removed oldalloc option [ 148.047070][ T8745] ext4: Unknown parameter 'smackfsfloor' [ 148.148904][ T8745] loop3: detected capacity change from 0 to 1024 [ 148.173367][ T8745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.185658][ T8745] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.231236][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.389922][ T8751] tipc: Enabled bearer , priority 0 [ 148.397904][ T8751] tipc: Disabling bearer [ 148.491834][ T29] kauditd_printk_skb: 582 callbacks suppressed [ 148.491860][ T29] audit: type=1326 audit(1755670993.241:13583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.521930][ T8774] loop0: detected capacity change from 0 to 1024 [ 148.522700][ T29] audit: type=1326 audit(1755670993.241:13584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.545133][ T8774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.552013][ T29] audit: type=1326 audit(1755670993.241:13585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.587409][ T29] audit: type=1326 audit(1755670993.241:13586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.611000][ T29] audit: type=1326 audit(1755670993.241:13587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.634574][ T29] audit: type=1326 audit(1755670993.241:13588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.639185][ T8785] loop1: detected capacity change from 0 to 512 [ 148.658175][ T29] audit: type=1326 audit(1755670993.241:13589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.664692][ T8785] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.687868][ T29] audit: type=1326 audit(1755670993.241:13590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.687896][ T29] audit: type=1326 audit(1755670993.241:13591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.687919][ T29] audit: type=1326 audit(1755670993.241:13592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 148.700674][ T8759] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 148.757905][ T8774] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 148.767723][ T8759] SELinux: failed to load policy [ 148.774197][ T8774] EXT4-fs (loop0): This should not happen!! Data will be lost [ 148.774197][ T8774] [ 148.774212][ T8774] EXT4-fs (loop0): Total free blocks count 0 [ 148.774224][ T8774] EXT4-fs (loop0): Free/Dirty block details [ 148.774234][ T8774] EXT4-fs (loop0): free_blocks=0 [ 148.793969][ T8785] EXT4-fs (loop1): failed to initialize system zone (-117) [ 148.801132][ T8774] EXT4-fs (loop0): dirty_blocks=0 [ 148.801145][ T8774] EXT4-fs (loop0): Block reservation details [ 148.801155][ T8774] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 148.842581][ T8785] EXT4-fs (loop1): mount failed [ 148.853222][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.964068][ T8785] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 148.976249][ T8785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.992151][ T8785] bond2: (slave bridge2): making interface the new active one [ 149.001350][ T8785] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 149.036417][ T8785] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 149.058328][ T8796] netlink: 'syz.5.1298': attribute type 10 has an invalid length. [ 149.113176][ T8798] loop5: detected capacity change from 0 to 128 crond[3093]: time disparity of 8739 minutes detected [ 149.676393][ T8800] futex_wake_op: syz.2.1299 tries to shift op by -1; fix this program [ 149.962421][ T8796] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 150.081653][ T8803] lo speed is unknown, defaulting to 1000 [ 150.092830][ T8803] lo speed is unknown, defaulting to 1000 [ 150.158041][ T8803] lo speed is unknown, defaulting to 1000 [ 150.327495][ T8812] loop0: detected capacity change from 0 to 128 [ 150.408694][ T8813] loop2: detected capacity change from 0 to 512 [ 150.462647][ T8813] EXT4-fs: Ignoring removed oldalloc option [ 150.462777][ T8813] ext4: Unknown parameter 'smackfsfloor' [ 150.904483][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1302'. [ 151.023624][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1302'. [ 151.057525][ T8827] team0: Unable to change to the same mode the team is in [ 151.186881][ T8836] loop0: detected capacity change from 0 to 1024 [ 151.196647][ T8836] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.206957][ T8836] EXT4-fs: dax option not supported [ 151.313899][ T8840] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 151.331956][ T8844] loop2: detected capacity change from 0 to 1024 [ 151.334014][ T8840] SELinux: failed to load policy [ 151.338770][ T8844] EXT4-fs: Ignoring removed bh option [ 151.353216][ T8844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.405746][ T8844] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1308: Allocating blocks 497-513 which overlap fs metadata [ 151.426553][ T8844] EXT4-fs (loop2): pa ffff888106dffa10: logic 1, phys. 321, len 12 [ 151.434560][ T8844] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 1, pa_free 2 [ 151.445986][ T8844] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 321:freeing already freed block (bit 20); block bitmap corrupt. [ 151.912623][ T8852] loop3: detected capacity change from 0 to 128 [ 151.912687][ T8850] loop1: detected capacity change from 0 to 2048 [ 152.201167][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.225377][ T8858] loop5: detected capacity change from 0 to 1024 [ 152.233813][ T8858] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.244869][ T8858] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 152.255949][ T8858] JBD2: no valid journal superblock found [ 152.261691][ T8858] EXT4-fs (loop5): Could not load journal inode [ 152.303894][ T8856] lo speed is unknown, defaulting to 1000 [ 152.316684][ T8856] lo speed is unknown, defaulting to 1000 [ 152.351374][ T8861] lo speed is unknown, defaulting to 1000 [ 152.361947][ T8858] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 152.388238][ T8856] lo speed is unknown, defaulting to 1000 [ 152.394106][ T8861] lo speed is unknown, defaulting to 1000 [ 152.468178][ T8866] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 152.477932][ T8866] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 152.493717][ T8866] loop0: detected capacity change from 0 to 128 [ 152.517488][ T8861] lo speed is unknown, defaulting to 1000 [ 153.637417][ T8877] rdma_op ffff8881310a6980 conn xmit_rdma 0000000000000000 [ 154.124986][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 154.125004][ T29] audit: type=1400 audit(1756195286.738:13775): avc: denied { write } for pid=8878 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.152386][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'. [ 154.163906][ T8879] tipc: Enabling of bearer rejected, failed to enable media [ 154.202129][ T8884] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1329'. [ 154.238229][ T8883] loop3: detected capacity change from 0 to 1024 [ 154.288112][ T8883] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.534208][ T8883] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1316: Invalid block bitmap block 0 in block_group 0 [ 154.560720][ T8883] Quota error (device loop3): write_blk: dquota write failed [ 154.568153][ T8883] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 154.585319][ T8883] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1316: Failed to acquire dquot type 0 [ 154.597695][ T8883] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1316: Freeing blocks not in datazone - block = 0, count = 4096 [ 154.613977][ T8891] bond2: (slave bridge2): Releasing active interface [ 154.628417][ T8883] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1316: Invalid inode bitmap blk 0 in block_group 0 [ 154.665354][ T8873] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 154.674402][ T8873] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 154.679112][ T8883] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 154.708280][ T8883] EXT4-fs (loop3): 1 orphan inode deleted [ 154.718088][ T8883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.744702][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 154.876072][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.921764][ T8904] loop2: detected capacity change from 0 to 512 [ 154.930604][ T29] audit: type=1326 audit(1756195287.565:13776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.3.1324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8ced3ebe9 code=0x0 [ 154.958482][ T8904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.970974][ T8904] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.983210][ T29] audit: type=1400 audit(1756195287.614:13777): avc: denied { create } for pid=8908 comm="syz.3.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.004801][ T8899] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 155.019233][ T8899] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 155.031505][ T8899] EXT4-fs (loop2): This should not happen!! Data will be lost [ 155.031505][ T8899] [ 155.041183][ T8899] EXT4-fs (loop2): Total free blocks count 0 [ 155.045358][ T29] audit: type=1326 audit(1756195287.672:13778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.3.1324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8ced3ebe9 code=0x0 [ 155.047158][ T8899] EXT4-fs (loop2): Free/Dirty block details [ 155.076012][ T8899] EXT4-fs (loop2): free_blocks=65280 [ 155.081234][ T8910] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 155.081309][ T8899] EXT4-fs (loop2): dirty_blocks=33 [ 155.081325][ T8899] EXT4-fs (loop2): Block reservation details [ 155.091646][ T8910] SELinux: failed to load policy [ 155.095987][ T8899] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 155.694036][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.802016][ T8924] futex_wake_op: syz.1.1328 tries to shift op by -1; fix this program [ 155.811920][ T8930] lo speed is unknown, defaulting to 1000 [ 155.818028][ T8930] lo speed is unknown, defaulting to 1000 [ 155.823830][ T29] audit: type=1400 audit(1756195288.423:13779): avc: denied { accept } for pid=8931 comm="syz.5.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.870710][ T29] audit: type=1326 audit(1756195288.452:13780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cdc0ebe9 code=0x7ffc0000 [ 155.894280][ T29] audit: type=1326 audit(1756195288.452:13781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76cdc0ebe9 code=0x7ffc0000 [ 155.917973][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 155.965899][ T8930] lo speed is unknown, defaulting to 1000 [ 155.978513][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 156.011183][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 156.035173][ T8951] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 156.035863][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 156.094921][ T8957] team0: Unable to change to the same mode the team is in [ 156.165569][ T8972] wireguard0: entered promiscuous mode [ 156.171076][ T8972] wireguard0: entered allmulticast mode [ 156.715547][ T8987] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 156.743618][ T8987] SELinux: failed to load policy [ 156.754105][ T8986] loop2: detected capacity change from 0 to 512 [ 156.774963][ T8986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.791230][ T8986] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.810310][ T8984] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 156.824928][ T8984] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 156.837193][ T8984] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.837193][ T8984] [ 156.846825][ T8984] EXT4-fs (loop2): Total free blocks count 0 [ 156.852793][ T8984] EXT4-fs (loop2): Free/Dirty block details [ 156.858699][ T8984] EXT4-fs (loop2): free_blocks=65280 [ 156.864030][ T8984] EXT4-fs (loop2): dirty_blocks=33 [ 156.869129][ T8984] EXT4-fs (loop2): Block reservation details [ 156.875132][ T8984] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 157.028726][ T8998] loop0: detected capacity change from 0 to 764 [ 157.035388][ T8998] iso9660: Unknown parameter 'syzkaller0' [ 157.035484][ T8999] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 157.051413][ T8999] SELinux: failed to load policy [ 157.161189][ T9007] bond0: (slave dummy0): Releasing backup interface [ 157.185195][ T9007] team0: Unable to change to the same mode the team is in [ 157.259124][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1347'. [ 157.268774][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'. [ 157.429519][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.459664][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 157.463721][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 157.470454][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 157.486811][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 157.496216][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 157.571478][ T9024] lo speed is unknown, defaulting to 1000 [ 157.579483][ T9024] lo speed is unknown, defaulting to 1000 [ 157.644211][ T9024] lo speed is unknown, defaulting to 1000 [ 157.654673][ T9027] loop1: detected capacity change from 0 to 8192 [ 157.940319][ T9048] bond0: (slave dummy0): Releasing backup interface [ 157.974050][ T9048] team0: Unable to change to the same mode the team is in [ 158.367538][ T9056] loop2: detected capacity change from 0 to 1764 [ 158.375983][ T9057] loop5: detected capacity change from 0 to 1024 [ 158.383912][ T9057] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 158.395121][ T9056] siw: device registration error -23 [ 158.425663][ T9057] 9pnet: Could not find request transport: fd¯jŠ [ 158.439242][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 158.459003][ T9056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1358'. [ 158.480551][ T9059] loop0: detected capacity change from 0 to 512 [ 158.499004][ T9059] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 158.507670][ T9059] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1368: invalid indirect mapped block 8 (level 2) [ 158.526048][ T9059] EXT4-fs (loop0): Remounting filesystem read-only [ 158.533302][ T9059] EXT4-fs (loop0): 1 truncate cleaned up [ 158.539333][ T9059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.610062][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.935694][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 159.201384][ T9085] team0: Unable to change to the same mode the team is in [ 159.299384][ T9089] team0: Unable to change to the same mode the team is in [ 159.469665][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 159.469685][ T29] audit: type=1400 audit(1756195291.992:14302): avc: denied { bind } for pid=9092 comm="syz.5.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.238252][ T29] audit: type=1326 audit(1756195292.747:14303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a244bebe9 code=0x7ffc0000 [ 160.278387][ T29] audit: type=1326 audit(1756195292.766:14304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a244bebe9 code=0x7ffc0000 [ 160.302065][ T29] audit: type=1326 audit(1756195292.766:14305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a244bebe9 code=0x7ffc0000 [ 160.325545][ T29] audit: type=1326 audit(1756195292.766:14306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a244bebe9 code=0x7ffc0000 [ 160.349178][ T29] audit: type=1326 audit(1756195292.766:14307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a244bebe9 code=0x7ffc0000 [ 160.372688][ T29] audit: type=1326 audit(1756195292.766:14308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a244bebe9 code=0x7ffc0000 [ 160.396170][ T29] audit: type=1326 audit(1756195292.766:14309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a244bebe9 code=0x7ffc0000 [ 160.419675][ T29] audit: type=1326 audit(1756195292.766:14310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0a244bebe9 code=0x7ffc0000 [ 160.419708][ T29] audit: type=1326 audit(1756195292.766:14311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz.5.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a244bebe9 code=0x7ffc0000 [ 160.441556][ T9108] loop0: detected capacity change from 0 to 512 [ 160.442098][ T9108] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.486977][ T9108] EXT4-fs (loop0): failed to initialize system zone (-117) [ 160.487008][ T9108] EXT4-fs (loop0): mount failed [ 160.494148][ T9110] wireguard0: entered promiscuous mode [ 160.494166][ T9110] wireguard0: entered allmulticast mode [ 160.546547][ T9108] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 160.755595][ T9108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.770492][ T9122] bond3: (slave bridge2): making interface the new active one [ 160.775629][ T9122] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 160.793568][ T9124] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 161.291925][ T9131] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 161.331020][ T9135] loop0: detected capacity change from 0 to 512 [ 161.346899][ T9135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.346956][ T9135] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.410383][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.603131][ T9148] IPv6: Can't replace route, no match found [ 161.616336][ T9144] loop5: detected capacity change from 0 to 256 [ 161.660538][ T9148] rdma_op ffff888138d77180 conn xmit_rdma 0000000000000000 [ 162.084977][ T9172] serio: Serial port ptm0 [ 162.126425][ T9182] wireguard0: entered promiscuous mode [ 162.131980][ T9182] wireguard0: entered allmulticast mode [ 162.325513][ T9189] bond3: (slave bridge2): Releasing active interface [ 162.348970][ T9189] team0: Unable to change to the same mode the team is in [ 162.384572][ T9193] team0: Unable to change to the same mode the team is in [ 162.493054][ T9205] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 162.509321][ T9205] SELinux: failed to load policy [ 162.609679][ T9209] loop2: detected capacity change from 0 to 512 [ 162.627988][ T9209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.640591][ T9209] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.657721][ T9207] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 162.671572][ T9212] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 162.672104][ T9207] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 162.682390][ T9212] SELinux: failed to load policy [ 162.693887][ T9207] EXT4-fs (loop2): This should not happen!! Data will be lost [ 162.693887][ T9207] [ 162.708497][ T9207] EXT4-fs (loop2): Total free blocks count 0 [ 162.714487][ T9207] EXT4-fs (loop2): Free/Dirty block details [ 162.720416][ T9207] EXT4-fs (loop2): free_blocks=65280 [ 162.725723][ T9207] EXT4-fs (loop2): dirty_blocks=33 [ 162.730891][ T9207] EXT4-fs (loop2): Block reservation details [ 162.736859][ T9207] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 162.892631][ T9219] random: crng reseeded on system resumption [ 162.966473][ T9226] team0: Unable to change to the same mode the team is in [ 162.974033][ T9227] team0: Unable to change to the same mode the team is in [ 163.018302][ T9237] loop3: detected capacity change from 0 to 512 [ 163.027654][ T9237] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm gtp: invalid block [ 163.039517][ T9237] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 163.053618][ T9237] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 163.067429][ T9237] EXT4-fs (loop3): 2 truncates cleaned up [ 163.073592][ T9237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.082934][ T9242] loop5: detected capacity change from 0 to 2048 [ 163.115383][ T9242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.174178][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.210538][ T9256] __nla_validate_parse: 10 callbacks suppressed [ 163.210553][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'. [ 163.266249][ T9259] loop5: detected capacity change from 0 to 512 [ 163.273069][ T9259] msdos: Bad value for 'allow_utime' [ 163.281928][ T9259] loop5: detected capacity change from 0 to 128 [ 163.306679][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.306679][ T9259] loop5: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 163.320151][ T9259] buffer_io_error: 663 callbacks suppressed [ 163.320166][ T9259] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 163.334774][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.334774][ T9259] loop5: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 163.337298][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.348218][ T9259] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 163.348955][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.348955][ T9259] loop5: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 163.363755][ T9262] team0: Unable to change to the same mode the team is in [ 163.365749][ T9259] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 163.395211][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.395211][ T9259] loop5: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 163.408717][ T9259] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 163.417580][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.417580][ T9259] loop5: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 163.431002][ T9259] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 163.443599][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.443599][ T9259] loop5: rw=2049, sector=134, nr_sectors = 1 limit=128 [ 163.457062][ T9259] Buffer I/O error on dev loop5, logical block 134, lost async page write [ 163.465971][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.465971][ T9259] loop5: rw=2049, sector=137, nr_sectors = 1 limit=128 [ 163.479471][ T9259] Buffer I/O error on dev loop5, logical block 137, lost async page write [ 163.488403][ T9270] netlink: 'syz.5.1417': attribute type 21 has an invalid length. [ 163.489184][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.489184][ T9259] loop5: rw=2049, sector=138, nr_sectors = 1 limit=128 [ 163.509760][ T9259] Buffer I/O error on dev loop5, logical block 138, lost async page write [ 163.509847][ T9270] netlink: 'syz.5.1417': attribute type 1 has an invalid length. [ 163.526164][ T9270] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1417'. [ 163.550581][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.550581][ T9259] loop5: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 163.564130][ T9259] Buffer I/O error on dev loop5, logical block 147, lost async page write [ 163.576971][ T9276] loop0: detected capacity change from 0 to 512 [ 163.583749][ T9259] syz.5.1417: attempt to access beyond end of device [ 163.583749][ T9259] loop5: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 163.597198][ T9259] Buffer I/O error on dev loop5, logical block 148, lost async page write [ 163.606215][ T9276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.606449][ T9273] team0: Unable to change to the same mode the team is in [ 163.657365][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.695638][ T9284] loop2: detected capacity change from 0 to 512 [ 163.711032][ T9284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.746374][ T9284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.746564][ T9284] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.757045][ T9282] netlink: 'syz.5.1425': attribute type 10 has an invalid length. [ 163.782946][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 163.783347][ T9284] EXT4-fs (loop2): shut down requested (0) [ 163.798226][ T9289] wireguard0: entered promiscuous mode [ 163.803833][ T9289] wireguard0: entered allmulticast mode [ 163.810156][ T9297] netlink: 'syz.5.1425': attribute type 10 has an invalid length. [ 163.827360][ T9282] team0: Failed to send options change via netlink (err -105) [ 163.834864][ T9282] team0: Port device dummy0 added [ 163.842117][ T9297] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 163.851664][ T9284] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 163.860552][ T9284] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 163.869956][ T9284] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 163.870254][ T9297] team0: Failed to send options change via netlink (err -105) [ 163.887251][ T9297] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 163.896384][ T9297] team0: Port device dummy0 removed [ 163.901963][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.909524][ T9297] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 163.942736][ T9299] loop0: detected capacity change from 0 to 1024 [ 163.949879][ T9299] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 163.977477][ T9284] Falling back ldisc for ttyS3. [ 164.031550][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.046676][ T9307] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1432'. [ 164.164811][ T9307] program syz.3.1432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.202533][ T9317] loop5: detected capacity change from 0 to 512 [ 164.212498][ T9317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.225078][ T9317] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.242505][ T9301] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 164.256966][ T9301] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 164.269231][ T9301] EXT4-fs (loop5): This should not happen!! Data will be lost [ 164.269231][ T9301] [ 164.278941][ T9301] EXT4-fs (loop5): Total free blocks count 0 [ 164.285014][ T9301] EXT4-fs (loop5): Free/Dirty block details [ 164.290899][ T9301] EXT4-fs (loop5): free_blocks=65280 [ 164.296186][ T9301] EXT4-fs (loop5): dirty_blocks=33 [ 164.301284][ T9301] EXT4-fs (loop5): Block reservation details [ 164.307270][ T9301] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 164.493300][ T9328] loop2: detected capacity change from 0 to 1024 [ 164.500376][ T9328] EXT4-fs: Ignoring removed bh option [ 164.505897][ T9328] EXT4-fs: inline encryption not supported [ 164.512033][ T9328] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.523724][ T9328] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1435: lblock 2 mapped to illegal pblock 2 (length 1) [ 164.538092][ T9328] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1435: lblock 0 mapped to illegal pblock 48 (length 1) [ 164.552361][ T9328] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1435: Failed to acquire dquot type 0 [ 164.563888][ T9328] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 164.573513][ T9328] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1435: mark_inode_dirty error [ 164.585112][ T9328] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 164.595320][ T9328] EXT4-fs (loop2): 1 orphan inode deleted [ 164.601405][ T9328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.614123][ T7857] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.626043][ T29] kauditd_printk_skb: 763 callbacks suppressed [ 164.626056][ T29] audit: type=1326 audit(1756195297.054:15073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b890ebe9 code=0x7ffc0000 [ 164.628963][ T7857] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 164.634676][ T29] audit: type=1326 audit(1756195297.074:15074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b890ebe9 code=0x7ffc0000 [ 164.657843][ T7857] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 164.679041][ T29] audit: type=1326 audit(1756195297.104:15075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5b890ebe9 code=0x7ffc0000 [ 164.724528][ T29] audit: type=1326 audit(1756195297.104:15076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b890ebe9 code=0x7ffc0000 [ 164.748000][ T29] audit: type=1326 audit(1756195297.104:15077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b890ebe9 code=0x7ffc0000 [ 164.771451][ T29] audit: type=1326 audit(1756195297.104:15078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5b890ebe9 code=0x7ffc0000 [ 164.794922][ T29] audit: type=1326 audit(1756195297.104:15079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b890ebe9 code=0x7ffc0000 [ 164.818394][ T29] audit: type=1326 audit(1756195297.104:15080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5b890ebe9 code=0x7ffc0000 [ 164.841862][ T29] audit: type=1326 audit(1756195297.104:15081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5b890ebe9 code=0x7ffc0000 [ 164.850792][ T9337] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.1435: lblock 0 mapped to illegal pblock 16 (length 1) [ 164.909039][ T9332] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 16: comm syz.2.1435: lblock 0 mapped to illegal pblock 16 (length 1) [ 164.925660][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.931007][ T9336] lo speed is unknown, defaulting to 1000 [ 164.940820][ T9336] lo speed is unknown, defaulting to 1000 [ 165.098345][ T9336] lo speed is unknown, defaulting to 1000 [ 165.113157][ T9345] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 165.124783][ T9345] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 165.172361][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 165.189240][ T9347] wireguard0: entered promiscuous mode [ 165.195031][ T9347] wireguard0: entered allmulticast mode [ 165.385976][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.432343][ T3301] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 165.505692][ T3301] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 165.530174][ T9351] random: crng reseeded on system resumption [ 165.575804][ T3301] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 166.002280][ T9359] loop3: detected capacity change from 0 to 128 [ 166.038117][ T9339] lo speed is unknown, defaulting to 1000 [ 166.088249][ T9362] bond0: (slave dummy0): Releasing backup interface [ 166.097420][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 166.124185][ T9339] lo speed is unknown, defaulting to 1000 [ 166.152523][ T9359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1444'. [ 166.161512][ T9362] team0: Unable to change to the same mode the team is in [ 166.161535][ T9359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1444'. [ 166.249418][ T9339] lo speed is unknown, defaulting to 1000 [ 166.300759][ T9379] syzkaller1: entered promiscuous mode [ 166.306293][ T9379] syzkaller1: entered allmulticast mode [ 166.507669][ T9382] loop5: detected capacity change from 0 to 256 [ 166.510574][ T9384] loop3: detected capacity change from 0 to 4096 [ 166.542611][ T9384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.577022][ T9384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.643263][ T9381] sd 0:0:1:0: device reset [ 166.710268][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 166.719340][ T9399] tipc: Enabling of bearer rejected, failed to enable media [ 166.827150][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1455'. [ 166.841658][ T9404] wireguard0: entered promiscuous mode [ 166.847529][ T9404] wireguard0: entered allmulticast mode [ 166.919103][ T9407] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 166.929460][ T9407] SELinux: failed to load policy [ 167.133963][ T9410] loop0: detected capacity change from 0 to 512 [ 167.174077][ T9410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.202591][ T9410] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.235084][ T9409] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 167.249780][ T9409] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 167.262368][ T9409] EXT4-fs (loop0): This should not happen!! Data will be lost [ 167.262368][ T9409] [ 167.272414][ T9409] EXT4-fs (loop0): Total free blocks count 0 [ 167.278720][ T9409] EXT4-fs (loop0): Free/Dirty block details [ 167.285044][ T9409] EXT4-fs (loop0): free_blocks=65280 [ 167.290660][ T9409] EXT4-fs (loop0): dirty_blocks=33 [ 167.296106][ T9409] EXT4-fs (loop0): Block reservation details [ 167.302444][ T9409] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 167.399545][ T9425] $Hÿ: renamed from bond0 (while UP) [ 167.406911][ T9425] $Hÿ: entered promiscuous mode [ 167.529604][ T9431] wireguard0: entered promiscuous mode [ 167.535241][ T9431] wireguard0: entered allmulticast mode [ 167.545142][ T9434] netlink: 'syz.3.1463': attribute type 4 has an invalid length. [ 167.554811][ T3382] lo speed is unknown, defaulting to 1000 [ 167.560666][ T3382] sz1: Port: 1 Link DOWN [ 167.565110][ T9434] loop3: detected capacity change from 0 to 512 [ 167.565400][ T3382] lo speed is unknown, defaulting to 1000 [ 167.572752][ T9434] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 167.585996][ T9434] EXT4-fs (loop3): failed to open journal device unknown-block(128,1) -6 [ 167.631490][ T9434] loop3: detected capacity change from 0 to 8192 [ 167.659341][ T9437] team0: Unable to change to the same mode the team is in [ 167.682621][ T9435] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 167.693230][ T9435] SELinux: failed to load policy [ 167.700583][ T9447] loop2: detected capacity change from 0 to 512 [ 167.709674][ T9447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.860784][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.919564][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.003745][ T9462] wireguard0: entered promiscuous mode [ 168.009242][ T9462] wireguard0: entered allmulticast mode [ 168.436764][ T9481] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 168.444670][ T9477] loop2: detected capacity change from 0 to 1024 [ 168.467534][ T9477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.486321][ T9477] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.593745][ T9489] netlink: zone id is out of range [ 168.628052][ T9489] netlink: zone id is out of range [ 168.661733][ T9492] team0: Unable to change to the same mode the team is in [ 168.665137][ T9489] netlink: zone id is out of range [ 168.715019][ T9489] netlink: zone id is out of range [ 168.732027][ T9500] loop3: detected capacity change from 0 to 128 [ 168.736627][ T9489] netlink: zone id is out of range [ 168.763933][ T9489] netlink: zone id is out of range [ 168.779542][ T9489] netlink: zone id is out of range [ 168.794823][ T9489] netlink: zone id is out of range [ 168.809310][ T9489] netlink: zone id is out of range [ 168.824657][ T9489] netlink: zone id is out of range [ 168.866068][ T9500] bio_check_eod: 24 callbacks suppressed [ 168.866083][ T9500] syz.3.1479: attempt to access beyond end of device [ 168.866083][ T9500] loop3: rw=2049, sector=161, nr_sectors = 16 limit=128 [ 168.885908][ T9500] syz.3.1479: attempt to access beyond end of device [ 168.885908][ T9500] loop3: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 168.900204][ T9500] syz.3.1479: attempt to access beyond end of device [ 168.900204][ T9500] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 168.914137][ T9500] syz.3.1479: attempt to access beyond end of device [ 168.914137][ T9500] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 168.928744][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.938694][ T9500] syz.3.1479: attempt to access beyond end of device [ 168.938694][ T9500] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 168.959091][ T9500] syz.3.1479: attempt to access beyond end of device [ 168.959091][ T9500] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 168.973738][ T9500] syz.3.1479: attempt to access beyond end of device [ 168.973738][ T9500] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 168.998513][ T9500] syz.3.1479: attempt to access beyond end of device [ 168.998513][ T9500] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 169.013687][ T9500] syz.3.1479: attempt to access beyond end of device [ 169.013687][ T9500] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 169.027426][ T9500] syz.3.1479: attempt to access beyond end of device [ 169.027426][ T9500] loop3: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 169.146798][ T9510] loop3: detected capacity change from 0 to 512 [ 169.162595][ T9510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.258952][ T9512] tipc: Enabled bearer , priority 0 [ 169.292694][ T9516] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 169.411090][ T9507] tipc: Disabling bearer [ 169.461016][ T9512] netlink: 'syz.2.1482': attribute type 13 has an invalid length. [ 169.538091][ T9512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.562023][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.584411][ T9512] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.620807][ T9531] loop3: detected capacity change from 0 to 128 [ 169.654833][ T9529] loop0: detected capacity change from 0 to 4096 [ 169.684432][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 169.684447][ T29] audit: type=1326 audit(1756719590.072:15354): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0f989d84a code=0x7ffc0000 [ 169.689362][ T9529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.690715][ T29] audit: type=1326 audit(1756719590.072:15355): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0f989d84a code=0x7ffc0000 [ 169.750492][ T29] audit: type=1326 audit(1756719590.072:15356): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe0f989d457 code=0x7ffc0000 [ 169.774401][ T29] audit: type=1326 audit(1756719590.072:15357): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe0f98a038a code=0x7ffc0000 [ 169.786123][ T9529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.890460][ T29] audit: type=1400 audit(1756719590.072:15358): avc: denied { read } for pid=9530 comm="syz.3.1487" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 169.913334][ T29] audit: type=1400 audit(1756719590.072:15359): avc: denied { ioctl } for pid=9530 comm="syz.3.1487" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 169.938156][ T29] audit: type=1326 audit(1756719590.217:15360): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0f989d550 code=0x7ffc0000 [ 169.962023][ T29] audit: type=1326 audit(1756719590.217:15361): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0f989e7eb code=0x7ffc0000 [ 169.985801][ T29] audit: type=1326 audit(1756719590.217:15362): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0f989d84a code=0x7ffc0000 [ 170.009482][ T29] audit: type=1326 audit(1756719590.227:15363): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 170.040579][ T9535] wireguard0: entered promiscuous mode [ 170.046103][ T9535] wireguard0: entered allmulticast mode [ 170.091610][ T9550] __nla_validate_parse: 1 callbacks suppressed [ 170.091625][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 170.127859][ T9550] wireguard0: entered promiscuous mode [ 170.133375][ T9550] wireguard0: entered allmulticast mode [ 170.296201][ T9563] veth1_to_team: entered promiscuous mode [ 170.307086][ T9563] bond_slave_0: entered promiscuous mode [ 170.313555][ T9563] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 170.324206][ T9563] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.344777][ T9563] hsr1: entered promiscuous mode [ 170.350163][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'. [ 170.400003][ T9564] loop0: detected capacity change from 0 to 1764 [ 170.411751][ T9564] iso9660: Bad value for 'session' [ 170.705109][ T9567] lo speed is unknown, defaulting to 1000 [ 170.711484][ T9567] lo speed is unknown, defaulting to 1000 [ 170.767739][ T9567] lo speed is unknown, defaulting to 1000 [ 171.177644][ T9574] loop5: detected capacity change from 0 to 512 [ 171.210570][ T9574] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm gtp: invalid block [ 171.232598][ T9574] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 171.261113][ T9574] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 171.284880][ T9583] serio: Serial port ptm0 [ 171.290684][ T9574] EXT4-fs (loop5): 2 truncates cleaned up [ 171.297511][ T9574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.675566][ T9595] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 171.685334][ T9595] SELinux: failed to load policy [ 171.844377][ T9597] team0: Unable to change to the same mode the team is in [ 171.852610][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.880292][ T9603] loop5: detected capacity change from 0 to 1024 [ 171.887150][ T9603] EXT4-fs: Ignoring removed bh option [ 171.891977][ T9601] team0: Unable to change to the same mode the team is in [ 171.892809][ T9603] EXT4-fs: inline encryption not supported [ 171.906658][ T9603] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.918993][ T9603] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1504: lblock 2 mapped to illegal pblock 2 (length 1) [ 171.933410][ T9603] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1504: lblock 0 mapped to illegal pblock 48 (length 1) [ 171.933762][ T9603] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1504: Failed to acquire dquot type 0 [ 171.934135][ T9603] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 171.940891][ T9603] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1504: mark_inode_dirty error [ 171.980276][ T9603] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 171.980319][ T9603] EXT4-fs (loop5): 1 orphan inode deleted [ 171.980945][ T9603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.002097][ T31] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.035773][ T9611] wireguard0: entered promiscuous mode [ 172.041243][ T9611] wireguard0: entered allmulticast mode [ 172.048333][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 172.136090][ T9615] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 16: comm syz.5.1504: lblock 0 mapped to illegal pblock 16 (length 1) [ 172.158991][ T9615] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 16: comm syz.5.1504: lblock 0 mapped to illegal pblock 16 (length 1) [ 172.270275][ T9621] IPv6: Can't replace route, no match found [ 172.303375][ T9621] loop2: detected capacity change from 0 to 1024 [ 172.310512][ T9621] EXT4-fs: Ignoring removed bh option [ 172.316144][ T9621] EXT4-fs: inline encryption not supported [ 172.322025][ T9621] ext4: Unknown parameter 'smackfsroot' [ 172.328381][ T9625] team0: Unable to change to the same mode the team is in [ 172.344242][ T9621] rdma_op ffff88814d3ba980 conn xmit_rdma 0000000000000000 [ 172.387186][ T9621] loop2: detected capacity change from 0 to 2048 [ 172.406407][ T9621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.461779][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.497673][ T9636] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 172.513952][ T9636] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 172.566095][ T36] hid_parser_main: 22 callbacks suppressed [ 172.566112][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.579409][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.579522][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1513'. [ 172.586825][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.603227][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.610788][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.618167][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.625766][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.633300][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.640794][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.648161][ T36] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 172.658287][ T9642] random: crng reseeded on system resumption [ 172.658321][ T36] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 172.739663][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.748862][ T4263] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 172.784245][ T4263] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 172.805357][ T4263] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 172.834173][ T9650] loop0: detected capacity change from 0 to 512 [ 172.851158][ T9650] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.867518][ T9650] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1514: Failed to acquire dquot type 1 [ 172.887876][ T9650] EXT4-fs (loop0): 1 truncate cleaned up [ 172.894009][ T9650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.925312][ T9650] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 172.957833][ T9655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1515'. [ 173.091678][ T9659] team0: Unable to change to the same mode the team is in [ 173.174493][ T9663] wireguard0: entered promiscuous mode [ 173.179982][ T9663] wireguard0: entered allmulticast mode [ 173.364479][ T9669] $Hÿ: renamed from bond0 (while UP) [ 173.371983][ T9669] $Hÿ: entered promiscuous mode [ 173.427607][ T9673] IPv6: Can't replace route, no match found [ 173.451057][ T9673] loop3: detected capacity change from 0 to 1024 [ 173.458204][ T9673] EXT4-fs: Ignoring removed bh option [ 173.464075][ T9673] EXT4-fs: inline encryption not supported [ 173.470162][ T9673] ext4: Unknown parameter 'smackfsroot' [ 173.479785][ T9673] rdma_op ffff88811a02f980 conn xmit_rdma 0000000000000000 [ 173.490533][ T9674] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 173.501676][ T9673] loop3: detected capacity change from 0 to 2048 [ 173.510881][ T9674] SELinux: failed to load policy [ 173.527107][ T9673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.555828][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.588242][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.617535][ T9683] random: crng reseeded on system resumption [ 173.770610][ T9688] team0: Unable to change to the same mode the team is in [ 173.817796][ T9686] loop3: detected capacity change from 0 to 512 [ 173.829628][ T9686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.846693][ T9686] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.860235][ T9698] wireguard0: entered promiscuous mode [ 173.865778][ T9698] wireguard0: entered allmulticast mode [ 173.880263][ T9679] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 173.894724][ T9679] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 173.907009][ T9679] EXT4-fs (loop3): This should not happen!! Data will be lost [ 173.907009][ T9679] [ 173.916646][ T9679] EXT4-fs (loop3): Total free blocks count 0 [ 173.922690][ T9679] EXT4-fs (loop3): Free/Dirty block details [ 173.928583][ T9679] EXT4-fs (loop3): free_blocks=65280 [ 173.933864][ T9679] EXT4-fs (loop3): dirty_blocks=33 [ 173.939062][ T9679] EXT4-fs (loop3): Block reservation details [ 173.945107][ T9679] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 174.012545][ T9705] loop0: detected capacity change from 0 to 128 [ 174.033494][ T9705] EXT4-fs: Ignoring removed nobh option [ 174.047642][ T9705] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.067524][ T9705] ext4 filesystem being mounted at /297/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.115065][ T9710] loop2: detected capacity change from 0 to 164 [ 174.178068][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'. [ 174.187141][ T9710] tc_dump_action: action bad kind [ 174.227301][ T9710] bio_check_eod: 103 callbacks suppressed [ 174.227326][ T9710] syz.2.1542: attempt to access beyond end of device [ 174.227326][ T9710] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 174.265193][ T9710] syz.2.1542: attempt to access beyond end of device [ 174.265193][ T9710] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 174.365158][ T9718] loop5: detected capacity change from 0 to 1024 [ 174.372119][ T9718] EXT4-fs: Ignoring removed bh option [ 174.377786][ T9718] EXT4-fs: inline encryption not supported [ 174.383665][ T9718] ext4: Unknown parameter 'smackfsroot' [ 174.393204][ T9718] rdma_op ffff888154187580 conn xmit_rdma 0000000000000000 [ 174.410562][ T9718] loop5: detected capacity change from 0 to 2048 [ 174.428773][ T9718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.482975][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.584663][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.648507][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.679491][ T9731] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 174.823013][ T9731] loop3: detected capacity change from 0 to 1756 [ 174.852817][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 174.852856][ T29] audit: type=1326 audit(1756719595.087:15885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 174.883274][ T29] audit: type=1326 audit(1756719595.087:15886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 174.906823][ T29] audit: type=1326 audit(1756719595.087:15887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 174.930381][ T29] audit: type=1326 audit(1756719595.087:15888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 174.933357][ T9755] veth1_to_team: entered promiscuous mode [ 174.953851][ T29] audit: type=1326 audit(1756719595.087:15889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 174.953882][ T29] audit: type=1326 audit(1756719595.087:15890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 175.006549][ T29] audit: type=1326 audit(1756719595.087:15891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 175.018909][ T9755] bond_slave_0: entered promiscuous mode [ 175.030093][ T29] audit: type=1326 audit(1756719595.087:15892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 175.059171][ T29] audit: type=1326 audit(1756719595.087:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 175.082740][ T29] audit: type=1326 audit(1756719595.087:15894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe0f989ebe9 code=0x7ffc0000 [ 175.104729][ T9755] debugfs: 'hsr1' already exists in 'hsr' [ 175.106578][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'. [ 175.111998][ T9755] Cannot create hsr debugfs directory [ 175.113850][ T9755] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 175.136811][ T9755] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.154903][ T9755] hsr1: entered promiscuous mode [ 175.252708][ T9760] lo speed is unknown, defaulting to 1000 [ 175.271792][ T9760] lo speed is unknown, defaulting to 1000 [ 175.330968][ T9760] lo speed is unknown, defaulting to 1000 [ 175.430549][ T9770] netlink: 'syz.5.1550': attribute type 12 has an invalid length. [ 175.457176][ T9774] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=18201 sclass=netlink_xfrm_socket pid=9774 comm=syz.1.1551 [ 176.086158][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'. [ 176.095237][ T9807] tc_dump_action: action bad kind [ 176.170128][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1563'. [ 176.179260][ T9812] tipc: Enabling of bearer rejected, failed to enable media [ 176.355845][ T9819] loop0: detected capacity change from 0 to 512 [ 176.391898][ T9819] EXT4-fs (loop0): too many log groups per flexible block group [ 176.391966][ T9819] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 176.391989][ T9819] EXT4-fs (loop0): mount failed [ 176.440909][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1569'. [ 176.461678][ T9823] wireguard0: entered promiscuous mode [ 176.467580][ T9823] wireguard0: entered allmulticast mode [ 176.486899][ T9831] random: crng reseeded on system resumption [ 176.556633][ T9835] $Hÿ: renamed from bond0 [ 176.564057][ T9835] $Hÿ: entered promiscuous mode [ 177.036096][ T9847] loop3: detected capacity change from 0 to 128 [ 177.060674][ T9847] EXT4-fs: Ignoring removed nobh option [ 177.121525][ T9847] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.177890][ T9847] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.370462][ T9859] loop2: detected capacity change from 0 to 1764 [ 177.436132][ T9864] loop0: detected capacity change from 0 to 2048 [ 177.451187][ T9864] EXT4-fs (loop0): #clusters per group too big: 151011328 [ 177.498070][ T3375] hid-generic 0008:0006:0007.0004: hidraw0: HID v0.0b Device [syz1] on syz1 [ 177.512440][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1583'. [ 177.529532][ T9852] net_ratelimit: 42 callbacks suppressed [ 177.529548][ T9852] netlink: zone id is out of range [ 177.564884][ T9852] netlink: zone id is out of range [ 177.577874][ T9852] netlink: zone id is out of range [ 177.582992][ T9852] netlink: zone id is out of range [ 177.598638][ T9852] netlink: zone id is out of range [ 177.607089][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 177.615931][ T9875] tipc: Enabling of bearer rejected, already enabled [ 177.628128][ T9852] netlink: zone id is out of range [ 177.637448][ T9852] netlink: zone id is out of range [ 177.650103][ T9852] netlink: zone id is out of range [ 177.658952][ T9852] netlink: zone id is out of range [ 177.669407][ T9878] loop5: detected capacity change from 0 to 1024 [ 177.671541][ T9852] netlink: zone id is out of range [ 177.692020][ T9878] EXT4-fs: Ignoring removed orlov option [ 177.725757][ T9878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.808100][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.880393][ T9889] 9pnet_fd: Insufficient options for proto=fd [ 178.171420][ T9899] loop0: detected capacity change from 0 to 128 [ 178.202343][ T9899] syz.0.1595: attempt to access beyond end of device [ 178.202343][ T9899] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 178.246716][ T9899] syz.0.1595: attempt to access beyond end of device [ 178.246716][ T9899] loop0: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 178.301400][ T9899] syz.0.1595: attempt to access beyond end of device [ 178.301400][ T9899] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 178.336486][ T9899] syz.0.1595: attempt to access beyond end of device [ 178.336486][ T9899] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 178.356620][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.393499][ T9899] syz.0.1595: attempt to access beyond end of device [ 178.393499][ T9899] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 178.436445][ T9899] syz.0.1595: attempt to access beyond end of device [ 178.436445][ T9899] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 178.457855][ T9899] syz.0.1595: attempt to access beyond end of device [ 178.457855][ T9899] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 178.471775][ T9899] syz.0.1595: attempt to access beyond end of device [ 178.471775][ T9899] loop0: rw=2049, sector=281, nr_sectors = 9 limit=128 [ 178.574369][ T9916] loop5: detected capacity change from 0 to 1024 [ 178.596847][ T9916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.619450][ T9916] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.640755][ T9926] team0: Unable to change to the same mode the team is in [ 178.676956][ T9944] loop0: detected capacity change from 0 to 1024 [ 178.684078][ T9944] EXT4-fs: Ignoring removed bh option [ 178.689544][ T9944] EXT4-fs: inline encryption not supported [ 178.702105][ T9944] ext4: Unknown parameter 'smackfsroot' [ 178.710320][ T9942] team0: Unable to change to the same mode the team is in [ 178.718878][ T9947] team0: Unable to change to the same mode the team is in [ 178.724461][ T9944] rdma_op ffff88818dcbe980 conn xmit_rdma 0000000000000000 [ 178.758276][ T9944] loop0: detected capacity change from 0 to 2048 [ 178.787314][ T9944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.789401][ T9959] loop2: detected capacity change from 0 to 128 [ 178.836532][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.931528][ T9975] 9pnet_fd: Insufficient options for proto=fd [ 178.940171][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.986327][ T9982] veth1_to_team: entered promiscuous mode [ 179.001461][ T9982] bond_slave_0: entered promiscuous mode [ 179.018260][ T9982] debugfs: 'hsr1' already exists in 'hsr' [ 179.024102][ T9982] Cannot create hsr debugfs directory [ 179.030980][ T9982] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 179.041687][ T9982] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.052709][ T9982] hsr1: entered promiscuous mode [ 179.062139][ T9979] team0: Unable to change to the same mode the team is in [ 179.079649][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1622'. [ 179.118357][ T9995] serio: Serial port ptm0 [ 179.201248][ T9998] lo speed is unknown, defaulting to 1000 [ 179.209130][ T9998] lo speed is unknown, defaulting to 1000 [ 179.256236][T10001] loop5: detected capacity change from 0 to 512 [ 179.264436][ T9998] lo speed is unknown, defaulting to 1000 [ 179.268595][T10001] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 179.278712][T10001] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.286740][T10001] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1634: corrupted inode contents [ 179.301079][T10001] EXT4-fs (loop5): Remounting filesystem read-only [ 179.307899][T10001] EXT4-fs (loop5): 1 truncate cleaned up [ 179.313754][ T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.324308][ T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.335003][ T31] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 179.342904][ T9985] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 179.363339][T10001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.367491][ T9985] SELinux: failed to load policy [ 179.394346][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.443256][T10016] 9pnet_fd: Insufficient options for proto=fd [ 179.500587][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1642'. [ 179.521837][T10022] wireguard0: entered promiscuous mode [ 179.527475][T10022] wireguard0: entered allmulticast mode [ 179.685727][T10032] loop5: detected capacity change from 0 to 512 [ 179.692652][T10032] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 179.701828][T10032] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 1285)! [ 179.712231][T10032] EXT4-fs (loop5): group descriptors corrupted! [ 179.798660][T10043] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 179.805276][T10041] team0: Unable to change to the same mode the team is in [ 179.816995][T10043] SELinux: failed to load policy [ 179.935890][T10066] usb usb8: usbfs: process 10066 (syz.5.1661) did not claim interface 0 before use [ 179.951695][T10075] usb usb1: usbfs: process 10075 (syz.2.1664) did not claim interface 0 before use [ 179.984163][T10075] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.034129][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 180.034144][ T29] audit: type=1400 audit(2000000000.559:16118): avc: denied { getopt } for pid=10089 comm="syz.5.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.035881][T10092] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1672'. [ 180.095117][T10088] team0: Unable to change to the same mode the team is in [ 180.138334][T10101] team0: Unable to change to the same mode the team is in [ 180.227198][T10110] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 180.254987][T10110] SELinux: failed to load policy [ 180.280174][T10121] team0: Unable to change to the same mode the team is in [ 180.327707][T10126] team0: Unable to change to the same mode the team is in [ 180.383263][ T29] audit: type=1400 audit(2000000000.909:16119): avc: denied { create } for pid=10133 comm="syz.0.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 180.434850][ T29] audit: type=1400 audit(2000000000.949:16120): avc: denied { setopt } for pid=10133 comm="syz.0.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 180.469783][T10141] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 180.476391][T10141] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 180.477790][T10136] team0: Unable to change to the same mode the team is in [ 180.484086][T10141] vhci_hcd vhci_hcd.0: Device attached [ 180.507223][T10142] vhci_hcd: connection closed [ 180.507457][ T51] vhci_hcd: stop threads [ 180.516402][ T51] vhci_hcd: release socket [ 180.520888][ T51] vhci_hcd: disconnect device [ 180.646952][T10155] team0: Unable to change to the same mode the team is in [ 180.681077][T10159] team0: Unable to change to the same mode the team is in [ 180.723786][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1697'. [ 180.735644][T10166] wireguard0: entered promiscuous mode [ 180.741116][T10166] wireguard0: entered allmulticast mode [ 180.917458][ T29] audit: type=1400 audit(2000000001.448:16121): avc: denied { setopt } for pid=10170 comm="syz.5.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.985635][T10180] netlink: 'syz.2.1702': attribute type 12 has an invalid length. [ 181.021890][T10187] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 181.021890][T10187] program syz.0.1705 not setting count and/or reply_len properly [ 181.042082][T10191] vhci_hcd: invalid port number 23 [ 181.077415][T10186] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 181.087318][T10186] SELinux: failed to load policy [ 181.092439][ T29] audit: type=1400 audit(2000000001.618:16122): avc: denied { ioctl } for pid=10199 comm="syz.5.1711" path="socket:[30200]" dev="sockfs" ino=30200 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 181.188195][ T29] audit: type=1400 audit(2000000001.718:16123): avc: denied { create } for pid=10213 comm="syz.5.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.209528][ T29] audit: type=1400 audit(2000000001.718:16124): avc: denied { getopt } for pid=10213 comm="syz.5.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.258721][T10222] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 181.279117][ T29] audit: type=1400 audit(2000000001.808:16125): avc: denied { read } for pid=10223 comm="syz.5.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.325576][T10226] team0: Unable to change to the same mode the team is in [ 181.381480][ T29] audit: type=1400 audit(2000000001.908:16126): avc: denied { read } for pid=10238 comm="syz.3.1728" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.412463][ T29] audit: type=1400 audit(2000000001.908:16127): avc: denied { open } for pid=10238 comm="syz.3.1728" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 181.452817][T10242] team0: Unable to change to the same mode the team is in [ 181.462492][T10245] team0: Unable to change to the same mode the team is in [ 181.506317][T10252] team0: Unable to change to the same mode the team is in [ 181.543050][T10260] team0: Unable to change to the same mode the team is in [ 181.588350][T10268] team0: Unable to change to the same mode the team is in [ 181.706322][T10287] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1746'. [ 181.758864][T10293] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 181.779572][T10293] SELinux: failed to load policy [ 181.872173][T10295] team0: Unable to change to the same mode the team is in [ 181.961410][T10300] team0: Unable to change to the same mode the team is in [ 182.287799][T10317] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 182.307744][T10317] SELinux: failed to load policy [ 182.584068][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1758'. [ 182.628182][T10326] wireguard0: entered promiscuous mode [ 182.633705][T10326] wireguard0: entered allmulticast mode [ 182.739839][T10334] team0: Unable to change to the same mode the team is in [ 182.838366][T10338] team0: Unable to change to the same mode the team is in [ 182.942167][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 183.071757][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'. [ 183.096569][T10374] wireguard0: entered promiscuous mode [ 183.102093][T10374] wireguard0: entered allmulticast mode [ 183.477146][T10383] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 183.498793][T10383] SELinux: failed to load policy [ 183.678033][T10393] netlink: 'syz.0.1788': attribute type 12 has an invalid length. [ 183.998101][T10403] team0: Unable to change to the same mode the team is in [ 184.071132][T10413] loop5: detected capacity change from 0 to 164 [ 184.118986][T10423] wireguard0: entered promiscuous mode [ 184.124484][T10423] wireguard0: entered allmulticast mode [ 184.207865][T10429] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1800'. [ 184.252801][T10431] team0: Unable to change to the same mode the team is in [ 184.271455][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 184.458695][T10448] loop2: detected capacity change from 0 to 512 [ 184.470174][T10448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.485499][T10448] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.506263][T10420] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 184.520946][T10420] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 184.533322][T10420] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.533322][T10420] [ 184.542972][T10420] EXT4-fs (loop2): Total free blocks count 0 [ 184.548952][T10420] EXT4-fs (loop2): Free/Dirty block details [ 184.554902][T10420] EXT4-fs (loop2): free_blocks=65280 [ 184.560191][T10420] EXT4-fs (loop2): dirty_blocks=33 [ 184.565395][T10420] EXT4-fs (loop2): Block reservation details [ 184.571478][T10420] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 184.685039][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'. [ 184.694001][T10499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1830'. [ 184.702964][T10499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1830'. [ 184.764349][T10509] team0: Unable to change to the same mode the team is in [ 184.915451][T10543] team0: Unable to change to the same mode the team is in [ 185.012084][T10559] netlink: 'syz.1.1851': attribute type 12 has an invalid length. [ 185.030441][T10563] netlink: 'syz.3.1852': attribute type 12 has an invalid length. [ 185.112958][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.229932][T10580] team0: Unable to change to the same mode the team is in [ 185.282491][T10586] team0: Unable to change to the same mode the team is in [ 185.297688][T10592] random: crng reseeded on system resumption [ 185.444983][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1872'. [ 185.534997][T10600] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 185.544949][T10600] SELinux: failed to load policy [ 185.545554][T10629] netlink: 'syz.5.1874': attribute type 12 has an invalid length. [ 186.261142][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 186.261157][ T29] audit: type=1400 audit(2000000006.786:16142): avc: denied { setattr } for pid=10640 comm="syz.0.1878" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.365539][T10649] loop2: detected capacity change from 0 to 1764 [ 186.372294][T10649] iso9660: Bad value for 'session' [ 186.651563][T10654] lo speed is unknown, defaulting to 1000 [ 186.657903][T10654] lo speed is unknown, defaulting to 1000 [ 186.714920][T10654] lo speed is unknown, defaulting to 1000 [ 188.083969][ T29] audit: type=1400 audit(2000000008.605:16143): avc: denied { write } for pid=10663 comm="syz.0.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.162466][ T29] audit: type=1400 audit(2000000008.685:16144): avc: denied { ioctl } for pid=10679 comm="syz.0.1893" path="socket:[31020]" dev="sockfs" ino=31020 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.195414][T10683] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 188.196435][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1892'. [ 188.209169][T10683] SELinux: failed to load policy [ 188.222484][T10678] wireguard0: entered promiscuous mode [ 188.227965][T10678] wireguard0: entered allmulticast mode [ 188.295378][T10695] netlink: 'syz.0.1898': attribute type 12 has an invalid length. [ 188.322655][T10666] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 188.332804][T10666] SELinux: failed to load policy [ 188.352653][T10702] netlink: 'syz.0.1900': attribute type 12 has an invalid length. [ 188.371323][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1901'. [ 188.383761][T10707] wireguard0: entered promiscuous mode [ 188.389375][T10707] wireguard0: entered allmulticast mode [ 188.628660][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'. [ 188.640404][T10733] wireguard0: entered promiscuous mode [ 188.645882][T10733] wireguard0: entered allmulticast mode [ 188.941605][T10741] loop5: detected capacity change from 0 to 512 [ 188.981010][T10741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.002396][T10741] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.026649][T10740] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 189.041174][T10740] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 189.053424][T10740] EXT4-fs (loop5): This should not happen!! Data will be lost [ 189.053424][T10740] [ 189.063085][T10740] EXT4-fs (loop5): Total free blocks count 0 [ 189.069078][T10740] EXT4-fs (loop5): Free/Dirty block details [ 189.074961][T10740] EXT4-fs (loop5): free_blocks=65280 [ 189.080344][T10740] EXT4-fs (loop5): dirty_blocks=33 [ 189.085448][T10740] EXT4-fs (loop5): Block reservation details [ 189.091450][T10740] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 189.100319][T10765] loop2: detected capacity change from 0 to 128 [ 189.130242][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 189.144626][T10767] wireguard0: entered promiscuous mode [ 189.150169][T10767] wireguard0: entered allmulticast mode [ 189.177670][T10774] netlink: 'syz.3.1926': attribute type 12 has an invalid length. [ 189.212011][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 189.231538][T10780] wireguard0: entered promiscuous mode [ 189.237047][T10780] wireguard0: entered allmulticast mode [ 189.455717][T10806] sctp: [Deprecated]: syz.3.1938 (pid 10806) Use of int in max_burst socket option. [ 189.455717][T10806] Use struct sctp_assoc_value instead [ 189.492555][T10808] netlink: 'syz.3.1939': attribute type 12 has an invalid length. [ 189.509633][T10794] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 189.524159][T10794] SELinux: failed to load policy [ 189.535972][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'. [ 189.553488][T10816] wireguard0: entered promiscuous mode [ 189.559236][T10816] wireguard0: entered allmulticast mode [ 189.684970][ T4263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.757322][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 189.778438][ T29] audit: type=1400 audit(2000000010.294:16145): avc: denied { getopt } for pid=10842 comm="syz.2.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.785988][T10839] wireguard0: entered promiscuous mode [ 189.803555][T10839] wireguard0: entered allmulticast mode [ 189.870771][ T29] audit: type=1400 audit(2000000010.394:16146): avc: denied { setopt } for pid=10853 comm="syz.5.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 189.901722][ T29] audit: type=1400 audit(2000000010.424:16147): avc: denied { name_connect } for pid=10855 comm="syz.5.1959" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 190.015930][T10866] team0: Unable to change to the same mode the team is in [ 190.090076][T10885] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1971'. [ 190.104555][T10885] lo speed is unknown, defaulting to 1000 [ 190.181000][T10891] netlink: 'syz.5.1974': attribute type 12 has an invalid length. [ 190.213879][ T29] audit: type=1400 audit(2000000010.734:16148): avc: denied { bind } for pid=10902 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 190.302963][T10907] team0: Unable to change to the same mode the team is in [ 190.321495][T10911] 9pnet_fd: Insufficient options for proto=fd [ 190.376306][T10918] netlink: 4328 bytes leftover after parsing attributes in process `syz.5.1985'. [ 190.459748][T10901] ================================================================== [ 190.459782][T10901] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 190.459833][T10901] [ 190.459840][T10901] read-write to 0xffff888237d25ea8 of 1 bytes by task 10920 on cpu 1: [ 190.459859][T10901] folio_add_lru+0xa5/0x1f0 [ 190.459894][T10901] shmem_get_folio_gfp+0x7ab/0xd60 [ 190.459928][T10901] shmem_fault+0xf6/0x250 [ 190.459946][T10901] __do_fault+0xbc/0x200 [ 190.459971][T10901] handle_mm_fault+0xf78/0x2c20 [ 190.459993][T10901] __get_user_pages+0x102e/0x1fa0 [ 190.460016][T10901] __mm_populate+0x243/0x3a0 [ 190.460039][T10901] vm_mmap_pgoff+0x232/0x2e0 [ 190.460067][T10901] ksys_mmap_pgoff+0xc2/0x310 [ 190.460095][T10901] x64_sys_call+0x14a3/0x2ff0 [ 190.460118][T10901] do_syscall_64+0xd2/0x200 [ 190.460144][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.460166][T10901] [ 190.460172][T10901] read to 0xffff888237d25ea8 of 1 bytes by task 10901 on cpu 0: [ 190.460189][T10901] __lru_add_drain_all+0x12b/0x3f0 [ 190.460210][T10901] lru_cache_disable+0x1f/0x30 [ 190.460230][T10901] __se_sys_mbind+0x496/0xac0 [ 190.460258][T10901] __x64_sys_mbind+0x78/0x90 [ 190.460286][T10901] x64_sys_call+0x2932/0x2ff0 [ 190.460309][T10901] do_syscall_64+0xd2/0x200 [ 190.460334][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.460357][T10901] [ 190.460361][T10901] value changed: 0x00 -> 0x01 [ 190.460370][T10901] [ 190.460374][T10901] Reported by Kernel Concurrency Sanitizer on: [ 190.460398][T10901] CPU: 0 UID: 0 PID: 10901 Comm: +}[@ Tainted: G W 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 190.460427][T10901] Tainted: [W]=WARN [ 190.460433][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.460445][T10901] ================================================================== [ 190.483220][T10916] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 190.689942][T10916] SELinux: failed to load policy [ 190.715223][T10922] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 190.725030][T10922] SELinux: failed to load policy crond[3093]: time disparity of 4072150 minutes detected