last executing test programs: 1m7.192711717s ago: executing program 3 (id=127): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100000000000000e2000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x0) 1m7.145815017s ago: executing program 3 (id=130): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x7ff, 0x200006, 0xc, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1m6.285300973s ago: executing program 3 (id=152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_io_uring_setup(0x3554, &(0x7f00000000c0)={0x0, 0x7ce1, 0x0, 0x81, 0x1a9}, &(0x7f0000000180)=0x0, &(0x7f0000000600)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) io_uring_enter(r1, 0x47f6, 0xfffd, 0x0, 0x0, 0x0) 1m5.869224156s ago: executing program 3 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1m5.762620237s ago: executing program 3 (id=162): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r2}, 0x40) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev, 0xffffffff}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @random="21e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0xb7, 0xb}}}}}, 0x0) 1m5.489795219s ago: executing program 3 (id=166): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000020c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040), 0x1000000}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) 1m5.489413469s ago: executing program 32 (id=166): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000020c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040), 0x1000000}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) 2.78611018s ago: executing program 1 (id=1676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) acct(&(0x7f00000001c0)='./file0\x00') 2.699371721s ago: executing program 1 (id=1679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r6, @ANYBLOB="01"], 0x20}}, 0x0) 2.634506851s ago: executing program 1 (id=1691): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300), 0xf3, 0x481, &(0x7f0000000900)="$eJzs3E9sFNUfAPDvbLfw+/GvFfEPiFpFI/FPCwWVgwc1MfGAiYke8Li2hSALNbQmQhqphuDFREi8GxMvJp49ePJk1JOJFw96NyTEcBE9rZnd2XW23S3bdttt2c8nGfa9ndd97zszb+fNPGYD6Fsj6T9JxI6I+C0ihiKisLDASO3l1s25ib9vzk0kUam88WeS/ln8dXNuol40yV631zLF9KVwOYkXW9Q7c+HimVK5PHU+y4/Nnn13bObCxWdOny2dmjo1dW782LGjRw4//9z4s12J8660rfs+mN6/99W3rr02ceLa2z9+neQanY+jOwZjPrdNFnq8u5X13M5cOik2rZocai5aWJ8W0YmtEdWOOljt/0MxcHlXY91QvPJRTxsHrKlKpVIZb796vgLcwZLodQuA3qif6NPr3/qyTkOPDeHGS7ULoDTuW9lSW1NsXKgOLri+7aa5iDgx/8/n6RJrch8CAKDZd+n45+lW479C3JsrtyubGxrO5lJ2R8TdEbEnIu6JqJa9LyLuX2b9Iwvyi8c/hesrCqxD6fjvhWxuq3n815imGB7Icjur8Q8mJ0+Xpw5l2+RgDG5N84dbfnoS1Umg+OXTdvWP5MZ/6ZLWXx8LZu24Xtza/DeTpdnSqgPP3PgwYl+xVfzZBF42h7U3IvatsI7TT361v/mdgUbq9vEvobjCBuVUvoh4orb/52NB/HXJ0vOTY/+L8tShsfpRsdhPP195vV39q4q/C9L9v63l8d+IfzjJz9fOLPqILber48rvH7e9plnp8b8lebOp8vdLs7PnD0dsSY4vfj93g7uer5dP4z94oHX/3x3/bYkHIiI9iB+MiIci4uGs7Y9ExKMRcWCJ+H94+bF3Vh7/2krjP76s/b/8xMCZ779tV39n+/9oNXUwe6eT779OG7iabQcAAACbRSEidkRSGG2kC4XR0dr/4d8T2wrl6ZnZp05Ov3dusvaMwHAMFup3uoayfGT3P4dz90fHq7PmEZey/JHsvvFnA/+v5kcnpsuTvQ4e+tz2Nv0/9cdAr1sHrLkuzKMBm5T+D/1r5f3fNwdsdrfpxX6wAe5gzuLQv1r1/0s9aAew/pz/oX81+v/VDgrnHvda+PAmsPk4/0P/0v+hL63muf4NkYgvI5Yuk2yUpi4r8cnGaEaLxMnaYROFDdKefCIiiQ4Ll1qtiqsbIYo2iWLHv2pxoXKpVC7/+s1qKu31NxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BsAAP//5k/kKw==") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.566426191s ago: executing program 1 (id=1682): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 1.703388808s ago: executing program 0 (id=1705): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x8050) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b80, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 1.703080168s ago: executing program 1 (id=1696): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xc, 0x7, 0x4, 0x10000}, {0x2, 0x4, 0x5, 0x4}, {0x8f3, 0xa, 0x0, 0x1}]}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x0, 0x7, 0x4f1f, 0x5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) r0 = socket(0x10, 0x400000000080803, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 1.600505428s ago: executing program 0 (id=1699): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffefffffc, 0x10a002) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.39818884s ago: executing program 0 (id=1702): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) msgsnd(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000000000006b92490ceaa0bc0c58ac1d7c7b1ca020658876ea3340b9f702c5d1b7f9a6375a4a409f4f60d23dc923083b2f7f350dd5b30eb4f6e71cf75b62eee8f378553a75cc1f366eb366c8302703567de368d5124603eab78c9d5d713ee4ff1b892e8fe3c39ca4d087d49cd1d6a6480ff085a5cf6d9edb9c5a03caa965cb5ccd0b8301553940eebab5777ea73705f1214e28319cd09e6183b1d28e991326be670c1cee3cd4aa74c2ae7ffc2ffb839f2833240f6a45a4b0d78f6a595597972f6aaaaf"], 0x8, 0x0) 1.3621986s ago: executing program 4 (id=1706): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 1.32098339s ago: executing program 2 (id=1707): setreuid(0xee00, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000003c0)=0x2) ioperm(0x0, 0xef, 0x7) 1.320692701s ago: executing program 2 (id=1708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 1.320105671s ago: executing program 4 (id=1709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x84}, 0x18) syz_emit_ethernet(0x8a, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.271171811s ago: executing program 5 (id=1710): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 1.251617321s ago: executing program 2 (id=1711): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1.186001961s ago: executing program 4 (id=1712): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0xc}, &(0x7f0000000200)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x10}}}, 0x24}}, 0x0) 1.074321422s ago: executing program 4 (id=1713): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 1.048902242s ago: executing program 4 (id=1714): r0 = socket(0x1, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000004d40)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 934.059863ms ago: executing program 2 (id=1715): getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f004000fe0000400000000008000f00fd000000", 0x24) time(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 761.781405ms ago: executing program 4 (id=1716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) wait4(0x0, 0x0, 0x40000000, 0x0) sendto$inet6(r0, &(0x7f0000000000)='\t', 0xffe0, 0x0, 0x0, 0x0) 761.153304ms ago: executing program 1 (id=1726): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) setreuid(0xee01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 726.863205ms ago: executing program 2 (id=1717): socket(0x28, 0x5, 0x0) socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 591.834086ms ago: executing program 2 (id=1718): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 547.259826ms ago: executing program 0 (id=1719): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r3, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 387.648357ms ago: executing program 5 (id=1720): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setresuid(0x0, 0xee00, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 386.705837ms ago: executing program 0 (id=1731): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000020"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=ANY=[@ANYBLOB="6c01000017000d090000000000000000ffffffff0000000000000000000000000000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000001dfe8000000000000000000000000000bb00000000000400000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044001000fe8000000000000080000000000000aa00000000000000000000000000000000000000000000000000000000fdffffff00"/196], 0x16c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600)="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", 0xa01, 0x4000000006, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 348.115097ms ago: executing program 5 (id=1721): semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x3}, {}], 0x1f4, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 320.193958ms ago: executing program 5 (id=1722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 296.198868ms ago: executing program 0 (id=1723): pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x9, 0x2, 0x7fffffffffffffff, 0x7ff}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 295.597768ms ago: executing program 5 (id=1724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000001300)='sched_switch\x00', r1}, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r2, 0x4, r2}, 0x10) 0s ago: executing program 5 (id=1725): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) kernel console output (not intermixed with test programs): e) already exists on: batadv_slave_0 [ 45.352444][ T3848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.363612][ T3848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.374390][ T3848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.398078][ T3848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.421473][ T3848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.432160][ T3848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.442195][ T3848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.452716][ T3848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.463354][ T3848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.474167][ T3848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.484718][ T3848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.489076][ T30] audit: type=1400 audit(1742314335.906:358): avc: denied { read write } for pid=4040 comm="syz.1.233" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 45.495166][ T3848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.504862][ T3848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.540143][ T3848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.549538][ T3848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.559254][ T3848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.559223][ T30] audit: type=1400 audit(1742314335.946:359): avc: denied { open } for pid=4040 comm="syz.1.233" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 45.593333][ T3848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.625790][ T30] audit: type=1400 audit(1742314336.046:360): avc: denied { mount } for pid=3848 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.659491][ T30] audit: type=1400 audit(1742314336.046:361): avc: denied { mounton } for pid=3848 comm="syz-executor" path="/root/syzkaller.RIqAfx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.730024][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 45.790285][ T30] audit: type=1326 audit(1742314336.196:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 45.820784][ T30] audit: type=1326 audit(1742314336.196:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 45.845162][ T30] audit: type=1326 audit(1742314336.206:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 45.849957][ T4065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 45.895482][ T4063] loop9: detected capacity change from 0 to 7 [ 45.914031][ T4063] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.923255][ T4063] Buffer I/O error on dev loop9, logical block 0, async page read [ 45.932016][ T4063] loop9: unable to read partition table [ 45.947135][ T4063] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 45.947135][ T4063] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 46.094426][ T4079] serio: Serial port ptm0 [ 46.222199][ T4091] netlink: 292 bytes leftover after parsing attributes in process `syz.5.253'. [ 46.436317][ T4106] loop5: detected capacity change from 0 to 4096 [ 46.443264][ T4106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.452106][ T4106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.545085][ T4112] sd 0:0:1:0: device reset [ 46.753944][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.776754][ T4119] serio: Serial port ptm0 [ 46.830974][ T4123] SELinux: failed to load policy [ 46.971496][ T4143] netlink: 64 bytes leftover after parsing attributes in process `syz.5.275'. [ 47.107263][ T4160] syzkaller0: entered promiscuous mode [ 47.113191][ T4160] syzkaller0: entered allmulticast mode [ 47.493556][ T4198] vlan2: entered promiscuous mode [ 47.499193][ T4198] syz_tun: entered promiscuous mode [ 47.577959][ T4206] serio: Serial port ptm1 [ 47.665306][ T4216] loop2: detected capacity change from 0 to 128 [ 47.780153][ T4221] loop1: detected capacity change from 0 to 2048 [ 47.810984][ T4223] loop4: detected capacity change from 0 to 128 [ 47.819372][ T4221] EXT4-fs: Ignoring removed bh option [ 47.864849][ T4223] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.879548][ T4221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.921133][ T4223] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.006751][ T4234] vlan2: entered promiscuous mode [ 48.012227][ T4234] syz_tun: entered promiscuous mode [ 48.012775][ T4223] syz.4.311 (4223) used greatest stack depth: 10712 bytes left [ 48.027330][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.105123][ T4239] loop4: detected capacity change from 0 to 4096 [ 48.170231][ T4239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.200042][ T4239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.434101][ T3414] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.449982][ T3414] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.462388][ T3414] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.462388][ T3414] [ 48.472263][ T3414] EXT4-fs (loop1): Total free blocks count 0 [ 48.478411][ T3414] EXT4-fs (loop1): Free/Dirty block details [ 48.484362][ T3414] EXT4-fs (loop1): free_blocks=2415919104 [ 48.490300][ T3414] EXT4-fs (loop1): dirty_blocks=8224 [ 48.495714][ T3414] EXT4-fs (loop1): Block reservation details [ 48.502374][ T3414] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 48.512337][ T3414] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 48.620137][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.756239][ T4271] syzkaller0: entered promiscuous mode [ 48.762001][ T4271] syzkaller0: entered allmulticast mode [ 48.910134][ T4276] netlink: 96 bytes leftover after parsing attributes in process `syz.4.330'. [ 49.218532][ T4297] loop4: detected capacity change from 0 to 2048 [ 49.246620][ T4297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.266932][ T4297] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.285733][ T4297] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 9 with error 28 [ 49.298591][ T4297] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.298591][ T4297] [ 49.308471][ T4297] EXT4-fs (loop4): Total free blocks count 0 [ 49.315322][ T4297] EXT4-fs (loop4): Free/Dirty block details [ 49.321353][ T4297] EXT4-fs (loop4): free_blocks=2415919104 [ 49.327138][ T4297] EXT4-fs (loop4): dirty_blocks=16 [ 49.332507][ T4297] EXT4-fs (loop4): Block reservation details [ 49.338631][ T4297] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 49.369217][ T4304] loop0: detected capacity change from 0 to 512 [ 49.412318][ T4304] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.342: corrupted in-inode xattr: invalid ea_ino [ 49.427325][ T4297] syz.4.340 (4297) used greatest stack depth: 9704 bytes left [ 49.438240][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.449559][ T4304] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.342: couldn't read orphan inode 15 (err -117) [ 49.479422][ T4304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.546353][ T4311] loop1: detected capacity change from 0 to 256 [ 49.638564][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.840962][ T4333] loop5: detected capacity change from 0 to 2048 [ 49.861747][ T4336] pim6reg1: entered promiscuous mode [ 49.867202][ T4336] pim6reg1: entered allmulticast mode [ 49.876079][ T4333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.903880][ T4333] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.907236][ T4337] syzkaller0: entered promiscuous mode [ 49.922428][ T4333] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 9 with error 28 [ 49.927023][ T4337] syzkaller0: entered allmulticast mode [ 49.941321][ T4333] EXT4-fs (loop5): This should not happen!! Data will be lost [ 49.941321][ T4333] [ 49.941422][ T4333] EXT4-fs (loop5): Total free blocks count 0 [ 49.941437][ T4333] EXT4-fs (loop5): Free/Dirty block details [ 49.941449][ T4333] EXT4-fs (loop5): free_blocks=2415919104 [ 49.941495][ T4333] EXT4-fs (loop5): dirty_blocks=16 [ 49.941509][ T4333] EXT4-fs (loop5): Block reservation details [ 49.941522][ T4333] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 50.104028][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.123007][ T30] kauditd_printk_skb: 258 callbacks suppressed [ 50.123024][ T30] audit: type=1400 audit(1742314340.546:623): avc: denied { write } for pid=4350 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 50.156771][ T30] audit: type=1400 audit(1742314340.576:624): avc: denied { create } for pid=4349 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.239372][ T30] audit: type=1400 audit(1742314340.606:625): avc: denied { bind } for pid=4349 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.259122][ T30] audit: type=1400 audit(1742314340.606:626): avc: denied { write } for pid=4349 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.278388][ T30] audit: type=1400 audit(1742314340.606:627): avc: denied { append } for pid=4355 comm="syz.5.363" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.302032][ T30] audit: type=1400 audit(1742314340.606:628): avc: denied { open } for pid=4355 comm="syz.5.363" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.327734][ T30] audit: type=1400 audit(1742314340.606:629): avc: denied { ioctl } for pid=4355 comm="syz.5.363" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.445802][ T30] audit: type=1400 audit(1742314340.866:630): avc: denied { mount } for pid=4359 comm="syz.4.367" name="/" dev="hugetlbfs" ino=7518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 50.506876][ T4365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.513658][ T4367] loop0: detected capacity change from 0 to 512 [ 50.529806][ T30] audit: type=1400 audit(1742314340.946:631): avc: denied { create } for pid=4366 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.562073][ T4367] ext3: Unknown parameter 'obj_type' [ 50.576154][ T30] audit: type=1400 audit(1742314340.956:632): avc: denied { execute } for pid=4366 comm="syz.4.370" path="/81/cpu.stat" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.626451][ T4367] netlink: 'syz.0.368': attribute type 4 has an invalid length. [ 50.683754][ T4374] xt_CT: No such helper "snmp_trap" [ 50.725488][ T4381] loop5: detected capacity change from 0 to 128 [ 50.803363][ T4387] geneve2: entered promiscuous mode [ 50.808710][ T4387] geneve2: entered allmulticast mode [ 50.844951][ T4381] bio_check_eod: 1092 callbacks suppressed [ 50.844965][ T4381] syz.5.376: attempt to access beyond end of device [ 50.844965][ T4381] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 50.938093][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 51.146244][ T4392] program syz.4.381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.296342][ T4419] xt_CT: No such helper "snmp_trap" [ 51.352553][ T4430] loop4: detected capacity change from 0 to 512 [ 51.388737][ T4430] EXT4-fs (loop4): 1 orphan inode deleted [ 51.398288][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 51.411442][ T4430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.427535][ T29] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 1 [ 51.442520][ T4430] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.453878][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.463140][ T4434] batadv_slave_0: entered promiscuous mode [ 51.510414][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.529843][ T111] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 51.590350][ T4441] xt_hashlimit: size too large, truncated to 1048576 [ 51.855397][ T4455] geneve2: entered promiscuous mode [ 51.860869][ T4455] geneve2: entered allmulticast mode [ 51.906641][ T4457] loop0: detected capacity change from 0 to 2048 [ 51.950029][ T4457] EXT4-fs: Ignoring removed bh option [ 51.992911][ T4457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.014668][ T4461] wg2: entered promiscuous mode [ 52.020039][ T4461] wg2: entered allmulticast mode [ 52.307078][ T4484] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 52.350386][ T4484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.390959][ T4491] loop2: detected capacity change from 0 to 128 [ 52.408050][ T4489] bond1: (slave veth3): Enslaving as an active interface with a down link [ 52.439745][ T4484] ip6erspan0: entered promiscuous mode [ 52.465407][ T4484] bond1: (slave ip6erspan0): making interface the new active one [ 52.476895][ T4491] syz.2.422: attempt to access beyond end of device [ 52.476895][ T4491] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 52.497055][ T4484] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 52.531638][ T3419] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.548132][ T3419] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 52.561087][ T3419] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.561087][ T3419] [ 52.562034][ T4495] geneve2: entered promiscuous mode [ 52.570948][ T3419] EXT4-fs (loop0): Total free blocks count 0 [ 52.576246][ T4495] geneve2: entered allmulticast mode [ 52.587951][ T3419] EXT4-fs (loop0): Free/Dirty block details [ 52.595251][ T3419] EXT4-fs (loop0): free_blocks=2415919104 [ 52.604095][ T3419] EXT4-fs (loop0): dirty_blocks=8224 [ 52.612143][ T3419] EXT4-fs (loop0): Block reservation details [ 52.619758][ T3419] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 52.631737][ T3419] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 52.674825][ T4498] loop2: detected capacity change from 0 to 512 [ 52.697728][ T4498] ext3: Unknown parameter 'obj_type' [ 52.725386][ T4498] netlink: 'syz.2.425': attribute type 4 has an invalid length. [ 52.855769][ T4512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.867059][ T4512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.891182][ T4511] pim6reg1: entered promiscuous mode [ 52.899305][ T4511] pim6reg1: entered allmulticast mode [ 53.013216][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.434'. [ 53.309454][ T2117] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 53.379086][ T4540] loop5: detected capacity change from 0 to 2048 [ 53.421881][ T4540] EXT4-fs: Ignoring removed bh option [ 53.437048][ T4546] loop4: detected capacity change from 0 to 512 [ 53.442980][ T4540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.504048][ T4550] syz.2.448 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.519329][ T4546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.533153][ T4546] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.585479][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.865424][ T4578] loop4: detected capacity change from 0 to 128 [ 53.866048][ T3419] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.888814][ T3419] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.902732][ T3419] EXT4-fs (loop5): This should not happen!! Data will be lost [ 53.902732][ T3419] [ 53.913835][ T3419] EXT4-fs (loop5): Total free blocks count 0 [ 53.920521][ T3419] EXT4-fs (loop5): Free/Dirty block details [ 53.928164][ T3419] EXT4-fs (loop5): free_blocks=2415919104 [ 53.934941][ T3419] EXT4-fs (loop5): dirty_blocks=8224 [ 53.940470][ T3419] EXT4-fs (loop5): Block reservation details [ 53.947957][ T3419] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 53.961231][ T3419] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 53.972894][ T4578] syz.4.459: attempt to access beyond end of device [ 53.972894][ T4578] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 54.101608][ T4585] loop0: detected capacity change from 0 to 128 [ 54.139334][ T4585] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.181918][ T4593] loop2: detected capacity change from 0 to 1024 [ 54.194259][ T4593] EXT4-fs: Ignoring removed nobh option [ 54.201915][ T4593] EXT4-fs: Ignoring removed bh option [ 54.216702][ T4585] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.265897][ T4593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.348956][ T4593] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 54.403195][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.421478][ T4593] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 54.486783][ T4605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'. [ 54.502888][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.554679][ T4609] loop2: detected capacity change from 0 to 2048 [ 54.565153][ T4609] EXT4-fs: Ignoring removed bh option [ 54.574238][ T4615] loop0: detected capacity change from 0 to 128 [ 54.610386][ T4621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.476'. [ 54.622807][ T4609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.642914][ T4621] bridge0: entered promiscuous mode [ 54.656293][ T4621] bridge0: left promiscuous mode [ 54.712733][ T4615] syz.0.473: attempt to access beyond end of device [ 54.712733][ T4615] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 54.975915][ T4632] vlan3: entered allmulticast mode [ 55.002821][ T4632] bond0: entered allmulticast mode [ 55.012033][ T4632] bond_slave_0: entered allmulticast mode [ 55.018624][ T4632] bond_slave_1: entered allmulticast mode [ 55.066123][ T4632] bond0: left allmulticast mode [ 55.071475][ T4632] bond_slave_0: left allmulticast mode [ 55.077478][ T4632] bond_slave_1: left allmulticast mode [ 55.113102][ T4581] syz.5.460 (4581) used greatest stack depth: 7088 bytes left [ 55.134098][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 55.134131][ T30] audit: type=1400 audit(1742314345.556:843): avc: denied { bind } for pid=4640 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.222089][ T4651] loop4: detected capacity change from 0 to 1024 [ 55.230999][ T30] audit: type=1326 audit(1742314345.636:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 55.261617][ T30] audit: type=1326 audit(1742314345.636:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 55.290125][ T30] audit: type=1326 audit(1742314345.636:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 55.298892][ T4651] EXT4-fs: Ignoring removed orlov option [ 55.318265][ T30] audit: type=1326 audit(1742314345.636:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 55.324543][ T4651] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.362517][ T30] audit: type=1326 audit(1742314345.636:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 55.389847][ T30] audit: type=1326 audit(1742314345.636:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 55.423987][ T30] audit: type=1326 audit(1742314345.636:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 55.452175][ T30] audit: type=1326 audit(1742314345.636:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 55.478865][ T30] audit: type=1326 audit(1742314345.636:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4650 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 55.507250][ T4651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.526323][ T3419] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.545762][ T3419] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.558829][ T3419] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.558829][ T3419] [ 55.568908][ T3419] EXT4-fs (loop2): Total free blocks count 0 [ 55.574983][ T3419] EXT4-fs (loop2): Free/Dirty block details [ 55.581313][ T3419] EXT4-fs (loop2): free_blocks=2415919104 [ 55.587423][ T3419] EXT4-fs (loop2): dirty_blocks=8224 [ 55.593590][ T3419] EXT4-fs (loop2): Block reservation details [ 55.601095][ T3419] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 55.635338][ T3419] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 55.654013][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.697051][ T4658] delete_channel: no stack [ 55.860259][ T4673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'. [ 55.961217][ T4680] netem: change failed [ 56.205670][ T4704] loop1: detected capacity change from 0 to 512 [ 56.216999][ T4704] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.251956][ T4704] EXT4-fs (loop1): 1 truncate cleaned up [ 56.258572][ T4704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.320054][ T4710] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 56.330704][ T4710] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 56.341608][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.654930][ T4727] bridge: RTM_NEWNEIGH with invalid ether address [ 56.655157][ T4722] SELinux: ebitmap: truncated map [ 56.669865][ T4722] SELinux: failed to load policy [ 56.694466][ T4728] loop5: detected capacity change from 0 to 512 [ 56.718383][ T4732] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=4732 comm=syz.0.525 [ 56.726069][ T4728] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 56.752383][ T4728] EXT4-fs (loop5): 1 truncate cleaned up [ 56.759278][ T4728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.775958][ T4730] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 56.820882][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.900957][ T4747] serio: Serial port ptm1 [ 57.149194][ T4770] program syz.2.541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.536227][ T4815] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.634498][ T4818] xt_CT: No such helper "pptp" [ 57.759549][ T4837] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.767846][ T4837] vhci_hcd: default hub control req: 1f14 v080b i0002 l0 [ 57.947421][ T4855] program syz.0.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.081221][ T4866] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.566'. [ 58.151641][ T4844] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.566'. [ 58.406100][ T4870] pim6reg1: entered promiscuous mode [ 58.411721][ T4870] pim6reg1: entered allmulticast mode [ 58.571101][ T4877] SELinux: syz.2.578 (4877) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.693156][ T4886] vlan1: entered allmulticast mode [ 58.832634][ T4892] atomic_op ffff88811b4b9128 conn xmit_atomic 0000000000000000 [ 58.865613][ T4902] loop2: detected capacity change from 0 to 1024 [ 58.927542][ T4902] EXT4-fs: Ignoring removed nobh option [ 58.933689][ T4902] EXT4-fs: Ignoring removed bh option [ 59.012521][ T4902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.051999][ T4898] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 59.106646][ T4920] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.595'. [ 59.117670][ T4920] netlink: zone id is out of range [ 59.122977][ T4920] netlink: zone id is out of range [ 59.134526][ T4920] netlink: zone id is out of range [ 59.170992][ T4920] netlink: set zone limit has 8 unknown bytes [ 59.212917][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.322496][ T4934] serio: Serial port ptm0 [ 59.451238][ T4949] IPv6: Can't replace route, no match found [ 59.573808][ T4958] all: renamed from bridge_slave_0 (while UP) [ 59.807317][ T4977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.622'. [ 59.830784][ T4979] loop1: detected capacity change from 0 to 128 [ 59.848132][ T4979] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ' [ 59.994311][ T4994] loop1: detected capacity change from 0 to 256 [ 60.147628][ T30] kauditd_printk_skb: 455 callbacks suppressed [ 60.147666][ T30] audit: type=1326 audit(1742314350.566:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a2c9c4127 code=0x7ffc0000 [ 60.203597][ T5002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 60.215108][ T5002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 60.244711][ T30] audit: type=1326 audit(1742314350.566:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a2c969359 code=0x7ffc0000 [ 60.269819][ T30] audit: type=1326 audit(1742314350.566:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 60.296570][ T30] audit: type=1326 audit(1742314350.576:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a2c9c4127 code=0x7ffc0000 [ 60.323464][ T30] audit: type=1326 audit(1742314350.576:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a2c969359 code=0x7ffc0000 [ 60.349863][ T30] audit: type=1326 audit(1742314350.576:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 60.374827][ T30] audit: type=1326 audit(1742314350.576:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a2c9c4127 code=0x7ffc0000 [ 60.402076][ T30] audit: type=1326 audit(1742314350.576:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a2c969359 code=0x7ffc0000 [ 60.432718][ T30] audit: type=1326 audit(1742314350.576:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 60.462269][ T30] audit: type=1326 audit(1742314350.576:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.4.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a2c9c4127 code=0x7ffc0000 [ 60.634865][ T5013] mmap: syz.4.637 (5013) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.731010][ T5019] netlink: 996 bytes leftover after parsing attributes in process `syz.5.640'. [ 60.771801][ T5019] syz_tun: refused to change device tx_queue_len [ 60.861943][ T5030] loop4: detected capacity change from 0 to 1024 [ 60.905487][ T5030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.927615][ T5030] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.644: Allocating blocks 497-513 which overlap fs metadata [ 60.955520][ T2117] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 60.962065][ T5042] loop2: detected capacity change from 0 to 1024 [ 60.974065][ T36] IPVS: starting estimator thread 0... [ 60.986332][ T5043] EXT4-fs (loop4): pa ffff888106971690: logic 16, phys. 145, len 23 [ 60.996974][ T5043] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 61.011639][ T5043] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 61.025469][ T5043] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.025469][ T5043] [ 61.035723][ T5043] EXT4-fs (loop4): Total free blocks count 0 [ 61.042985][ T5043] EXT4-fs (loop4): Free/Dirty block details [ 61.049835][ T5043] EXT4-fs (loop4): free_blocks=16 [ 61.055682][ T5043] EXT4-fs (loop4): dirty_blocks=0 [ 61.062029][ T5043] EXT4-fs (loop4): Block reservation details [ 61.068211][ T5043] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 61.075968][ T5042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.092155][ T5042] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.109926][ T5040] IPVS: using max 2016 ests per chain, 100800 per kthread [ 61.142110][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.185894][ T5051] loop4: detected capacity change from 0 to 2048 [ 61.197389][ T5051] EXT4-fs: Ignoring removed bh option [ 61.221972][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.547469][ T5056] Set syz1 is full, maxelem 65536 reached [ 61.675396][ T5063] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.734523][ T5073] pim6reg1: entered promiscuous mode [ 61.741145][ T5073] pim6reg1: entered allmulticast mode [ 61.758232][ T5063] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 61.772170][ T5063] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.772170][ T5063] [ 61.783786][ T5063] EXT4-fs (loop4): Total free blocks count 0 [ 61.790023][ T5063] EXT4-fs (loop4): Free/Dirty block details [ 61.796612][ T5063] EXT4-fs (loop4): free_blocks=2415919104 [ 61.803214][ T5063] EXT4-fs (loop4): dirty_blocks=8224 [ 61.808558][ T5063] EXT4-fs (loop4): Block reservation details [ 61.815408][ T5063] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 61.871549][ T2117] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 61.874226][ T5082] bridge_slave_0: left allmulticast mode [ 61.893013][ T5082] bridge_slave_0: left promiscuous mode [ 61.899772][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.933767][ T5082] bridge_slave_1: left allmulticast mode [ 61.940600][ T5082] bridge_slave_1: left promiscuous mode [ 61.946741][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.989341][ T5082] bond0: (slave bond_slave_0): Releasing backup interface [ 62.029455][ T5082] bond0: (slave bond_slave_1): Releasing backup interface [ 62.051789][ T5082] team0: Port device team_slave_0 removed [ 62.065944][ T5082] team0: Port device team_slave_1 removed [ 62.073381][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.082049][ T5082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.090099][ T5082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.113381][ T5082] team0: Port device netdevsim1 removed [ 62.123445][ T5094] loop4: detected capacity change from 0 to 512 [ 62.133510][ T5094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.135443][ T5087] macvlan1: entered promiscuous mode [ 62.150749][ T5094] EXT4-fs (loop4): 1 truncate cleaned up [ 62.156994][ T5094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.159825][ T5087] ipvlan0: entered promiscuous mode [ 62.194864][ T5087] ipvlan0: left promiscuous mode [ 62.202019][ T5087] macvlan1: left promiscuous mode [ 62.228884][ T5077] @: renamed from vlan0 (while UP) [ 62.328485][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.360961][ T5105] pim6reg1: entered promiscuous mode [ 62.367091][ T5105] pim6reg1: entered allmulticast mode [ 62.542031][ T5119] pim6reg1: entered promiscuous mode [ 62.548068][ T5119] pim6reg1: entered allmulticast mode [ 62.680458][ T5127] program syz.5.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.808223][ T5141] bridge: RTM_NEWNEIGH with invalid ether address [ 62.887635][ T5157] loop4: detected capacity change from 0 to 128 [ 62.895081][ T5157] EXT4-fs: Ignoring removed nobh option [ 62.903951][ T5157] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.978323][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.000595][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 63.010025][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 63.019459][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 63.155584][ T5182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.703'. [ 63.164683][ T5182] netlink: 'syz.0.703': attribute type 7 has an invalid length. [ 63.172571][ T5182] netlink: 'syz.0.703': attribute type 8 has an invalid length. [ 63.180640][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 63.190634][ T5182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.703'. [ 63.200209][ T5182] netlink: 'syz.0.703': attribute type 7 has an invalid length. [ 63.208927][ T5182] netlink: 'syz.0.703': attribute type 8 has an invalid length. [ 63.217083][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 63.363181][ T5195] SELinux: failed to load policy [ 63.388758][ T5197] netlink: 96 bytes leftover after parsing attributes in process `syz.0.709'. [ 63.453482][ T5203] IPv4: Oversized IP packet from 127.202.26.0 [ 63.637765][ T5212] netlink: 996 bytes leftover after parsing attributes in process `syz.0.715'. [ 63.649775][ T5212] syz_tun: left promiscuous mode [ 63.872090][ T5227] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5227 comm=syz.2.721 [ 63.885773][ T5227] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5227 comm=syz.2.721 [ 64.236033][ T5259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 64.246138][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.253481][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.342149][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 64.943782][ T5307] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 64.980249][ T5307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.002741][ T5307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.011593][ T5307] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 65.113952][ T5307] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 65.205990][ T5325] IPv4: Oversized IP packet from 127.202.26.0 [ 65.289051][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 65.507742][ T5350] vlan2: entered allmulticast mode [ 65.528770][ T5350] bond0: entered allmulticast mode [ 65.536192][ T5350] bond_slave_0: entered allmulticast mode [ 65.543167][ T5350] bond_slave_1: entered allmulticast mode [ 65.568601][ T5350] bond0: left allmulticast mode [ 65.573629][ T5350] bond_slave_0: left allmulticast mode [ 65.579175][ T5350] bond_slave_1: left allmulticast mode [ 65.612584][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 65.612603][ T30] audit: type=1400 audit(65.595:1489): avc: denied { mounton } for pid=5355 comm="syz.0.780" path="/177/file0" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 65.823404][ T3376] kernel write not supported for file /396/attr/exec (pid: 3376 comm: kworker/1:4) [ 65.835595][ T5377] loop4: detected capacity change from 0 to 128 [ 65.977586][ T5387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.792'. [ 66.031472][ T30] audit: type=1326 audit(65.995:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 66.054458][ T30] audit: type=1326 audit(65.995:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 66.077158][ T30] audit: type=1326 audit(65.995:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 66.100071][ T30] audit: type=1326 audit(65.995:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 66.123061][ T30] audit: type=1326 audit(65.995:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 66.145903][ T30] audit: type=1326 audit(65.995:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 66.170006][ T30] audit: type=1326 audit(65.995:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 66.194414][ T30] audit: type=1326 audit(65.995:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 66.219179][ T30] audit: type=1326 audit(65.995:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.0.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8604cd169 code=0x7ffc0000 [ 66.245113][ T5394] ref_ctr increment failed for inode: 0x3be offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005b180 [ 66.280306][ T5393] uprobe: syz.0.795:5393 failed to unregister, leaking uprobe [ 66.444104][ T5410] gretap0: entered promiscuous mode [ 66.452022][ T5410] 0ªX¹¦D: renamed from gretap0 [ 66.458883][ T5410] 0ªX¹¦D: left promiscuous mode [ 66.464077][ T5410] 0ªX¹¦D: entered allmulticast mode [ 66.473172][ T5410] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 66.634836][ T5423] vlan3: entered allmulticast mode [ 66.645988][ T5423] bond0: entered allmulticast mode [ 66.656061][ T5423] bond0: left allmulticast mode [ 66.679689][ T5427] macvlan1: entered promiscuous mode [ 66.687016][ T5427] ipvlan0: entered promiscuous mode [ 66.695011][ T5427] ipvlan0: left promiscuous mode [ 66.700906][ T5427] macvlan1: left promiscuous mode [ 66.868055][ T5452] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.920223][ T5450] loop4: detected capacity change from 0 to 512 [ 66.921948][ T5452] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.940565][ T5450] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.955460][ T5450] EXT4-fs (loop4): 1 truncate cleaned up [ 66.963295][ T5450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.013835][ T5459] SELinux: Context system_u:object_r:tty_device_t:s0 is not valid (left unmapped). [ 67.043830][ T5450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.074368][ T5452] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.147044][ T5452] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.250928][ T5452] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.277038][ T5452] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.315100][ T5452] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.336749][ T5452] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.557876][ T5485] infiniband syz0: set active [ 67.562908][ T5485] infiniband syz0: added bond0 [ 67.577448][ T5485] RDS/IB: syz0: added [ 67.584696][ T5485] smc: adding ib device syz0 with port count 1 [ 67.592275][ T5485] smc: ib device syz0 port 1 has pnetid [ 67.758211][ T5492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.779889][ T5492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.925715][ T5526] bridge0: port 3(team0) entered blocking state [ 67.933557][ T5526] bridge0: port 3(team0) entered disabled state [ 67.941416][ T5526] team0: entered allmulticast mode [ 67.946876][ T5526] team_slave_0: entered allmulticast mode [ 67.955116][ T5526] team_slave_1: entered allmulticast mode [ 67.965223][ T5526] team0: entered promiscuous mode [ 67.970870][ T5526] team_slave_0: entered promiscuous mode [ 67.977411][ T5526] team_slave_1: entered promiscuous mode [ 67.986951][ T5526] bridge0: port 3(team0) entered blocking state [ 67.993659][ T5526] bridge0: port 3(team0) entered forwarding state [ 68.130842][ T5542] loop1: detected capacity change from 0 to 2048 [ 68.184065][ T5542] loop1: p1 < > p4 [ 68.188894][ T5542] loop1: p4 size 8388608 extends beyond EOD, truncated [ 68.637547][ T5574] loop1: detected capacity change from 0 to 512 [ 68.666309][ T5576] pim6reg1: entered promiscuous mode [ 68.666403][ T5576] pim6reg1: entered allmulticast mode [ 68.688409][ T5574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.044589][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.329295][ T5591] loop5: detected capacity change from 0 to 1024 [ 69.340479][ T5591] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.352258][ T5591] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.381428][ T5591] JBD2: no valid journal superblock found [ 69.388315][ T5591] EXT4-fs (loop5): Could not load journal inode [ 69.402749][ T5597] pim6reg1: entered promiscuous mode [ 69.409279][ T5597] pim6reg1: entered allmulticast mode [ 69.642712][ T5615] loop5: detected capacity change from 0 to 2048 [ 69.702987][ T5615] loop5: p3 p4 < > [ 69.768633][ T5620] tmpfs: Bad value for 'mpol' [ 69.983687][ T5638] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 69.995692][ T5638] netlink: 'syz.2.902': attribute type 10 has an invalid length. [ 70.006521][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.014988][ T5638] bridge0: port 2(bridge_slave_1) entered listening state [ 70.023506][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.032568][ T5638] bridge0: port 1(bridge_slave_0) entered listening state [ 70.042077][ T5638] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 70.056818][ T5634] Illegal XDP return value 4294967274 on prog (id 848) dev syz_tun, expect packet loss! [ 70.254654][ T5647] loop1: detected capacity change from 0 to 128 [ 70.269642][ T5647] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.328174][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.339573][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.416908][ T5660] loop5: detected capacity change from 0 to 512 [ 70.425479][ T5660] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.441434][ T5660] EXT4-fs (loop5): 1 truncate cleaned up [ 70.448515][ T5660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.514220][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.538053][ T5668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=5668 comm=syz.5.911 [ 70.704106][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 70.704127][ T30] audit: type=1400 audit(70.675:1734): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 70.738051][ T30] audit: type=1400 audit(70.675:1735): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.764214][ T30] audit: type=1400 audit(70.675:1736): avc: denied { append } for pid=2982 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.791182][ T30] audit: type=1400 audit(70.675:1737): avc: denied { open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.816649][ T30] audit: type=1400 audit(70.675:1738): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.921492][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.932810][ T30] audit: type=1400 audit(70.895:1739): avc: denied { setopt } for pid=5677 comm="syz.5.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.978489][ T5680] pim6reg1: entered promiscuous mode [ 70.984619][ T5680] pim6reg1: entered allmulticast mode [ 71.054740][ T30] audit: type=1400 audit(71.035:1740): avc: denied { write } for pid=5683 comm="syz.0.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.074950][ T30] audit: type=1400 audit(71.035:1741): avc: denied { connect } for pid=5683 comm="syz.0.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.096959][ T30] audit: type=1400 audit(71.035:1742): avc: denied { name_connect } for pid=5683 comm="syz.0.919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 71.121795][ T30] audit: type=1400 audit(71.105:1743): avc: denied { setopt } for pid=5683 comm="syz.0.919" laddr=172.20.20.11 lport=40713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.195696][ T5691] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 71.283730][ T5700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5700 comm=syz.0.926 [ 71.323898][ T5700] __nla_validate_parse: 6 callbacks suppressed [ 71.323918][ T5700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.926'. [ 71.391465][ T5706] SELinux: failed to load policy [ 71.627157][ T5730] team0: left allmulticast mode [ 71.632668][ T5730] team_slave_0: left allmulticast mode [ 71.639578][ T5730] team_slave_1: left allmulticast mode [ 71.646025][ T5730] team0: left promiscuous mode [ 71.650955][ T5730] team_slave_0: left promiscuous mode [ 71.656668][ T5730] team_slave_1: left promiscuous mode [ 71.664992][ T5730] bridge0: port 3(team0) entered disabled state [ 71.681189][ T5730] bridge_slave_0: left allmulticast mode [ 71.690036][ T5730] bridge_slave_0: left promiscuous mode [ 71.697152][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.712515][ T5730] bridge_slave_1: left allmulticast mode [ 71.718806][ T5730] bridge_slave_1: left promiscuous mode [ 71.725003][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.737190][ T5730] bond0: (slave bond_slave_0): Releasing backup interface [ 71.748875][ T5730] bond0: (slave bond_slave_1): Releasing backup interface [ 71.763797][ T5730] team0: Port device team_slave_0 removed [ 71.765291][ T5737] netlink: 40 bytes leftover after parsing attributes in process `syz.5.941'. [ 71.782126][ T5730] team0: Port device team_slave_1 removed [ 71.789985][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.797752][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.807785][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.816875][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.934426][ T5741] loop1: detected capacity change from 0 to 2048 [ 71.972585][ T5741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.988626][ T5741] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.012019][ T5741] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 72.025033][ T5741] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.025033][ T5741] [ 72.035262][ T5741] EXT4-fs (loop1): Total free blocks count 0 [ 72.041940][ T5741] EXT4-fs (loop1): Free/Dirty block details [ 72.048036][ T5741] EXT4-fs (loop1): free_blocks=2415919104 [ 72.053981][ T5741] EXT4-fs (loop1): dirty_blocks=16 [ 72.059210][ T5741] EXT4-fs (loop1): Block reservation details [ 72.066408][ T5741] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 72.080136][ T5741] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 72.239376][ T5761] loop1: detected capacity change from 0 to 2048 [ 72.253297][ T5761] EXT4-fs: Ignoring removed orlov option [ 72.292140][ T5761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.323862][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.892215][ T5786] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 72.907468][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 72.953945][ T5787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.063098][ T5787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.082977][ T5793] loop2: detected capacity change from 0 to 512 [ 73.104186][ T5793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.143758][ T5787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.156352][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.220723][ T5787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.290627][ T5787] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.311825][ T5787] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.336990][ T5787] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.355011][ T5787] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.316205][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.978'. [ 74.330928][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.339945][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.360778][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.369216][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.525538][ T5861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 74.575547][ T5866] netlink: 96 bytes leftover after parsing attributes in process `syz.5.989'. [ 74.731461][ T5888] tun0: tun_chr_ioctl cmd 1074025678 [ 74.737028][ T5888] tun0: group set to 0 [ 74.765868][ T5891] pim6reg1: entered promiscuous mode [ 74.771400][ T5891] pim6reg1: entered allmulticast mode [ 74.870825][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 75.055611][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 75.278335][ T5922] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 75.341221][ T5924] bridge: RTM_NEWNEIGH with invalid ether address [ 75.376269][ T5926] vlan1: entered allmulticast mode [ 75.386692][ T5926] bond0: entered allmulticast mode [ 75.392117][ T5926] bond_slave_0: entered allmulticast mode [ 75.398308][ T5926] bond_slave_1: entered allmulticast mode [ 75.404471][ T5926] bridge0: entered allmulticast mode [ 75.422410][ T5926] bond0: left allmulticast mode [ 75.427408][ T5926] bond_slave_0: left allmulticast mode [ 75.433079][ T5926] bond_slave_1: left allmulticast mode [ 75.438581][ T5926] bridge0: left allmulticast mode [ 75.706201][ T5951] loop5: detected capacity change from 0 to 256 [ 75.714446][ T5951] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 75.842444][ T5956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5956 comm=syz.1.1026 [ 75.929847][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 75.929863][ T30] audit: type=1400 audit(75.905:1883): avc: denied { setopt } for pid=5959 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.084261][ T5968] serio: Serial port ptm0 [ 76.094310][ T30] audit: type=1400 audit(76.075:1884): avc: denied { read } for pid=5969 comm="syz.2.1034" path="socket:[13440]" dev="sockfs" ino=13440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.232687][ T30] audit: type=1400 audit(76.215:1885): avc: denied { listen } for pid=5984 comm="syz.0.1040" lport=40793 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.255281][ T30] audit: type=1400 audit(76.215:1886): avc: denied { accept } for pid=5984 comm="syz.0.1040" lport=40793 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.277924][ T30] audit: type=1400 audit(76.215:1887): avc: denied { write } for pid=5984 comm="syz.0.1040" lport=40793 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 76.301462][ T30] audit: type=1400 audit(76.215:1888): avc: denied { setopt } for pid=5984 comm="syz.0.1040" lport=40793 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 76.358186][ T5987] loop1: detected capacity change from 0 to 4096 [ 76.412013][ T5987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.462277][ T30] audit: type=1400 audit(76.445:1889): avc: denied { name_bind } for pid=5998 comm="syz.0.1043" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 76.574526][ T6005] SELinux: failed to load policy [ 76.592832][ T6016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6016 comm=syz.2.1049 [ 76.619025][ T30] audit: type=1326 audit(76.595:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 76.642062][ T30] audit: type=1326 audit(76.595:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 76.665716][ T30] audit: type=1326 audit(76.595:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.4.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 76.691666][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1049'. [ 76.740858][ T6020] pim6reg1: entered promiscuous mode [ 76.746248][ T6020] pim6reg1: entered allmulticast mode [ 76.882673][ T6015] cgroup: fork rejected by pids controller in /syz0 [ 77.038638][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.202852][ T6120] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1056'. [ 77.216103][ T6041] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1056'. [ 77.311840][ T6324] SELinux: failed to load policy [ 77.511717][ T6425] loop1: detected capacity change from 0 to 1024 [ 77.519330][ T6425] EXT4-fs: Ignoring removed orlov option [ 77.525678][ T6425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.591948][ T6425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.640721][ T6447] all: renamed from bridge_slave_0 (while UP) [ 77.669171][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.695075][ T6452] loop1: detected capacity change from 0 to 128 [ 77.719506][ T6452] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.780516][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.798461][ T6462] serio: Serial port ptm0 [ 77.948829][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 77.963446][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 78.797678][ T6517] SELinux: syz.1.1089 (6517) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 78.820815][ T6519] loop2: detected capacity change from 0 to 128 [ 78.831308][ T6519] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.938767][ T6533] loop5: detected capacity change from 0 to 1024 [ 78.947520][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.968824][ T6533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.017359][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.294396][ T6570] loop1: detected capacity change from 0 to 512 [ 79.313478][ T6570] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.346236][ T6576] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 79.368405][ T6576] netlink: 'syz.5.1112': attribute type 10 has an invalid length. [ 79.559963][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.567253][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.602086][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.609402][ T6576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.616786][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.624282][ T6576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.706989][ T6576] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 79.722331][ T6570] EXT4-fs (loop1): 1 truncate cleaned up [ 79.731443][ T6570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.836241][ T6580] loop5: detected capacity change from 0 to 512 [ 79.853767][ T6580] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.881437][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.915804][ T6578] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1111'. [ 79.937976][ T6574] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1111'. [ 79.943648][ T6580] EXT4-fs (loop5): 1 truncate cleaned up [ 79.974296][ T6580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.999605][ T6587] pim6reg1: entered promiscuous mode [ 80.006868][ T6587] pim6reg1: entered allmulticast mode [ 80.192019][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.211381][ T6599] pim6reg1: entered promiscuous mode [ 80.217002][ T6599] pim6reg1: entered allmulticast mode [ 80.447176][ T6614] xt_CT: No such helper "pptp" [ 80.549444][ T6607] @: renamed from vlan0 (while UP) [ 80.749533][ T6636] xt_CT: No such helper "pptp" [ 80.875453][ T6591] 9pnet_fd: p9_fd_create_tcp (6591): problem connecting socket to 127.0.0.1 [ 80.913427][ T6650] loop4: detected capacity change from 0 to 128 [ 80.935502][ T6650] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.950782][ T30] kauditd_printk_skb: 307 callbacks suppressed [ 80.950800][ T30] audit: type=1326 audit(80.935:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac54a54127 code=0x7ffc0000 [ 80.950869][ T30] audit: type=1326 audit(80.935:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac549f9359 code=0x7ffc0000 [ 80.950900][ T30] audit: type=1326 audit(80.935:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fac54a5d169 code=0x7ffc0000 [ 80.959838][ T30] audit: type=1326 audit(80.945:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac54a54127 code=0x7ffc0000 [ 80.960024][ T30] audit: type=1326 audit(80.945:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac549f9359 code=0x7ffc0000 [ 80.960057][ T30] audit: type=1326 audit(80.945:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fac54a5d169 code=0x7ffc0000 [ 80.989949][ T30] audit: type=1326 audit(80.975:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac54a54127 code=0x7ffc0000 [ 80.990073][ T30] audit: type=1326 audit(80.975:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac549f9359 code=0x7ffc0000 [ 80.990106][ T30] audit: type=1326 audit(80.975:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fac54a5d169 code=0x7ffc0000 [ 81.015397][ T30] audit: type=1326 audit(80.975:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.5.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac54a54127 code=0x7ffc0000 [ 81.122205][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.716843][ T6689] loop5: detected capacity change from 0 to 128 [ 81.734186][ T6687] macvlan1: entered promiscuous mode [ 81.756978][ T6687] ipvlan0: entered promiscuous mode [ 81.764169][ T6689] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.777743][ T6687] ipvlan0: left promiscuous mode [ 81.784447][ T6687] macvlan1: left promiscuous mode [ 81.830134][ T3848] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.854805][ T6691] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1148'. [ 81.881273][ T6675] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1148'. [ 82.063853][ T6701] loop5: detected capacity change from 0 to 128 [ 82.080546][ T6701] EXT4-fs: Ignoring removed nobh option [ 82.093517][ T6701] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.138246][ T3848] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.410088][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 82.514898][ T6744] vlan3: entered allmulticast mode [ 82.542536][ T6744] bond0: entered allmulticast mode [ 82.547806][ T6744] bond_slave_0: entered allmulticast mode [ 82.554430][ T6744] bond_slave_1: entered allmulticast mode [ 82.571137][ T6744] bond0: left allmulticast mode [ 82.576169][ T6744] bond_slave_0: left allmulticast mode [ 82.581840][ T6744] bond_slave_1: left allmulticast mode [ 82.847937][ T6760] vlan3: entered allmulticast mode [ 82.871135][ T6760] bond0: entered allmulticast mode [ 82.877209][ T6760] bond_slave_0: entered allmulticast mode [ 82.884233][ T6760] bond_slave_1: entered allmulticast mode [ 82.896613][ T6760] bond0: left allmulticast mode [ 82.903198][ T6760] bond_slave_0: left allmulticast mode [ 82.909194][ T6760] bond_slave_1: left allmulticast mode [ 83.058087][ T6773] loop2: detected capacity change from 0 to 512 [ 83.077523][ T6773] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.125449][ T6773] EXT4-fs (loop2): 1 truncate cleaned up [ 83.139374][ T6773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.165238][ T6773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.356096][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1201'. [ 83.377424][ T6802] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1216'. [ 83.403158][ T6802] gretap0: entered promiscuous mode [ 83.450817][ T6802] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1216'. [ 83.460970][ T6802] 0ªX¹¦D: renamed from gretap0 [ 83.467853][ T6802] 0ªX¹¦D: left promiscuous mode [ 83.473141][ T6802] 0ªX¹¦D: entered allmulticast mode [ 83.481308][ T6802] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 83.923420][ T6825] loop1: detected capacity change from 0 to 512 [ 83.938748][ T6825] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.967198][ T6825] EXT4-fs (loop1): 1 truncate cleaned up [ 83.979770][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.007781][ T6825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.143658][ T6829] vlan1: entered allmulticast mode [ 84.149965][ T6829] bond0: entered allmulticast mode [ 84.155430][ T6829] bond_slave_0: entered allmulticast mode [ 84.161231][ T6829] bond_slave_1: entered allmulticast mode [ 84.167634][ T6829] bridge0: entered allmulticast mode [ 84.177946][ T6829] bond0: left allmulticast mode [ 84.182994][ T6829] bond_slave_0: left allmulticast mode [ 84.188622][ T6829] bond_slave_1: left allmulticast mode [ 84.194484][ T6829] bridge0: left allmulticast mode [ 84.205341][ T6831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1227'. [ 84.215013][ T6831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1227'. [ 84.372630][ T6843] macvlan1: entered promiscuous mode [ 84.379684][ T6843] ipvlan0: entered promiscuous mode [ 84.387305][ T51] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x4d [ 84.400177][ T6843] ipvlan0: left promiscuous mode [ 84.408167][ T6843] macvlan1: left promiscuous mode [ 84.523444][ T6847] bridge0: port 3(team0) entered blocking state [ 84.530497][ T6847] bridge0: port 3(team0) entered disabled state [ 84.564672][ T6847] team0: entered allmulticast mode [ 84.569933][ T6847] team_slave_0: entered allmulticast mode [ 84.576495][ T6847] team_slave_1: entered allmulticast mode [ 84.601144][ T6847] team0: entered promiscuous mode [ 84.606986][ T6847] team_slave_0: entered promiscuous mode [ 84.613432][ T6847] team_slave_1: entered promiscuous mode [ 84.628741][ T6847] bridge0: port 3(team0) entered blocking state [ 84.635630][ T6847] bridge0: port 3(team0) entered forwarding state [ 84.974588][ T6816] syz.0.1208 (6816) used greatest stack depth: 6176 bytes left [ 85.021184][ T6860] blktrace: Concurrent blktraces are not allowed on loop9 [ 85.394016][ T6898] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 85.512031][ T6901] loop5: detected capacity change from 0 to 512 [ 85.529779][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 85.536966][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 85.568735][ T6901] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.598046][ T6901] EXT4-fs (loop5): 1 truncate cleaned up [ 85.619093][ T6901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.711044][ T6901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.724041][ T6912] loop2: detected capacity change from 0 to 512 [ 85.731248][ T6912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.755484][ T6912] EXT4-fs (loop2): 1 truncate cleaned up [ 85.761622][ T6912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.924755][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.099175][ T30] kauditd_printk_skb: 721 callbacks suppressed [ 86.099194][ T30] audit: type=1400 audit(86.075:2931): avc: denied { create } for pid=6934 comm="syz.4.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.125547][ T30] audit: type=1400 audit(86.075:2932): avc: denied { setopt } for pid=6939 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.146551][ T30] audit: type=1400 audit(86.075:2933): avc: denied { bind } for pid=6939 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.167099][ T30] audit: type=1400 audit(86.075:2934): avc: denied { name_bind } for pid=6939 comm="syz.0.1261" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 86.189453][ T30] audit: type=1400 audit(86.075:2935): avc: denied { node_bind } for pid=6939 comm="syz.0.1261" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 86.210654][ T30] audit: type=1400 audit(86.075:2936): avc: denied { write } for pid=6939 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.229566][ T30] audit: type=1400 audit(86.075:2937): avc: denied { connect } for pid=6939 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.249018][ T30] audit: type=1400 audit(86.075:2938): avc: denied { name_connect } for pid=6939 comm="syz.0.1261" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 86.274676][ T30] audit: type=1400 audit(86.215:2939): avc: denied { name_connect } for pid=6934 comm="syz.4.1260" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 86.349782][ T30] audit: type=1400 audit(86.315:2940): avc: denied { create } for pid=6944 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.417925][ T6955] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 86.518017][ T6961] loop2: detected capacity change from 0 to 512 [ 86.537532][ T6961] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.600665][ T6961] EXT4-fs (loop2): 1 truncate cleaned up [ 86.606890][ T6961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.771807][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.830409][ T6974] 9pnet_fd: p9_fd_create_tcp (6974): problem connecting socket to 127.0.0.1 [ 87.835217][ T7004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1288'. [ 87.925852][ T7008] loop5: detected capacity change from 0 to 2048 [ 87.943430][ T7012] loop4: detected capacity change from 0 to 164 [ 87.981428][ T7008] Alternate GPT is invalid, using primary GPT. [ 87.988026][ T7008] loop5: p1 p2 p3 [ 88.004126][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1292'. [ 88.194941][ T7024] tmpfs: Bad value for 'mpol' [ 88.317011][ T7032] loop5: detected capacity change from 0 to 512 [ 88.333152][ T7032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.359114][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.380519][ T7041] loop5: detected capacity change from 0 to 512 [ 88.388272][ T7041] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 88.411639][ T7041] EXT4-fs (loop5): 1 truncate cleaned up [ 88.418778][ T7041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.465852][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.601702][ T7044] cgroup: fork rejected by pids controller in /syz4 [ 88.631926][ T7084] loop5: detected capacity change from 0 to 128 [ 88.884381][ T7325] IPv6: Can't replace route, no match found [ 88.901905][ T7318] pim6reg1: entered promiscuous mode [ 88.908405][ T7318] pim6reg1: entered allmulticast mode [ 88.989763][ T7422] netlink: 'syz.5.1311': attribute type 1 has an invalid length. [ 89.008817][ T7422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.048565][ T7422] bond1: (slave veth3): Enslaving as an active interface with a down link [ 89.069573][ T7422] ip6erspan0: entered promiscuous mode [ 89.080053][ T7422] bond1: (slave ip6erspan0): making interface the new active one [ 89.091874][ T7422] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 89.598648][ T7668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.663381][ T7668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.743728][ T7668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.813088][ T7668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.869103][ T7668] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.887882][ T7668] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.904449][ T7668] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.925357][ T7668] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.018770][ T7535] syz.5.1314 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 90.034896][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.5.1314 Tainted: G W 6.14.0-rc7-syzkaller-00067-g76b6905c11fd #0 [ 90.034937][ T7535] Tainted: [W]=WARN [ 90.034946][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.034968][ T7535] Call Trace: [ 90.034975][ T7535] [ 90.034984][ T7535] dump_stack_lvl+0xf2/0x150 [ 90.035021][ T7535] dump_stack+0x15/0x1a [ 90.035043][ T7535] dump_header+0x83/0x2d0 [ 90.035117][ T7535] oom_kill_process+0x341/0x4c0 [ 90.035159][ T7535] out_of_memory+0x9af/0xbe0 [ 90.035191][ T7535] ? css_next_descendant_pre+0x11c/0x140 [ 90.035252][ T7535] mem_cgroup_out_of_memory+0x13e/0x190 [ 90.035298][ T7535] try_charge_memcg+0x508/0x7f0 [ 90.035323][ T7535] obj_cgroup_charge_pages+0xbd/0x1a0 [ 90.035399][ T7535] __memcg_kmem_charge_page+0x9d/0x170 [ 90.035422][ T7535] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 90.035464][ T7535] alloc_pages_mpol+0xb4/0x260 [ 90.035490][ T7535] alloc_pages_noprof+0xe8/0x130 [ 90.035513][ T7535] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 90.035663][ T7535] __kvmalloc_node_noprof+0x121/0x170 [ 90.035694][ T7535] ? ip_set_alloc+0x1f/0x30 [ 90.035721][ T7535] ip_set_alloc+0x1f/0x30 [ 90.035746][ T7535] hash_netiface_create+0x273/0x730 [ 90.035811][ T7535] ? __nla_parse+0x40/0x60 [ 90.035845][ T7535] ? __pfx_hash_netiface_create+0x10/0x10 [ 90.035873][ T7535] ip_set_create+0x3b1/0x970 [ 90.035911][ T7535] ? __nla_parse+0x40/0x60 [ 90.035954][ T7535] nfnetlink_rcv_msg+0x4a9/0x570 [ 90.036067][ T7535] netlink_rcv_skb+0x12c/0x230 [ 90.036099][ T7535] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 90.036151][ T7535] nfnetlink_rcv+0x16c/0x15d0 [ 90.036173][ T7535] ? kmem_cache_free+0xdc/0x2d0 [ 90.036204][ T7535] ? nlmon_xmit+0x51/0x60 [ 90.036237][ T7535] ? __kfree_skb+0x102/0x150 [ 90.036313][ T7535] ? consume_skb+0x49/0x160 [ 90.036433][ T7535] ? nlmon_xmit+0x51/0x60 [ 90.036466][ T7535] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 90.036567][ T7535] ? __dev_queue_xmit+0xb6e/0x2090 [ 90.036593][ T7535] ? ref_tracker_free+0x3a5/0x410 [ 90.036627][ T7535] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 90.036738][ T7535] netlink_unicast+0x599/0x670 [ 90.036769][ T7535] netlink_sendmsg+0x5cc/0x6e0 [ 90.036790][ T7535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.036808][ T7535] __sock_sendmsg+0x140/0x180 [ 90.036882][ T7535] ____sys_sendmsg+0x326/0x4b0 [ 90.036911][ T7535] __sys_sendmsg+0x19d/0x230 [ 90.036970][ T7535] __x64_sys_sendmsg+0x46/0x50 [ 90.036995][ T7535] x64_sys_call+0x2734/0x2dc0 [ 90.037091][ T7535] do_syscall_64+0xc9/0x1c0 [ 90.037123][ T7535] ? clear_bhb_loop+0x55/0xb0 [ 90.037151][ T7535] ? clear_bhb_loop+0x55/0xb0 [ 90.037179][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.037206][ T7535] RIP: 0033:0x7fac54a5d169 [ 90.037222][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.037240][ T7535] RSP: 002b:00007fac530c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.037323][ T7535] RAX: ffffffffffffffda RBX: 00007fac54c75fa0 RCX: 00007fac54a5d169 [ 90.037335][ T7535] RDX: 0000000000000800 RSI: 0000400000000040 RDI: 0000000000000003 [ 90.037347][ T7535] RBP: 00007fac54ade2a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.037359][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.037370][ T7535] R13: 0000000000000000 R14: 00007fac54c75fa0 R15: 00007ffe64c30dc8 [ 90.037387][ T7535] [ 90.037475][ T7535] memory: usage 307200kB, limit 307200kB, failcnt 93 [ 90.407750][ T7535] memory+swap: usage 307736kB, limit 9007199254740988kB, failcnt 0 [ 90.416128][ T7535] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 90.424513][ T7535] Memory cgroup stats for /syz5: [ 90.426412][ T7535] cache 0 [ 90.436460][ T7535] rss 4096 [ 90.439753][ T7535] shmem 0 [ 90.442978][ T7535] mapped_file 0 [ 90.447422][ T7535] dirty 0 [ 90.451222][ T7535] writeback 0 [ 90.454804][ T7535] workingset_refault_anon 69 [ 90.459640][ T7535] workingset_refault_file 0 [ 90.467486][ T7535] swap 548864 [ 90.471038][ T7535] swapcached 12288 [ 90.474876][ T7535] pgpgin 48703 [ 90.478316][ T7535] pgpgout 48700 [ 90.482241][ T7535] pgfault 62617 [ 90.485971][ T7535] pgmajfault 38 [ 90.489634][ T7535] inactive_anon 12288 [ 90.493963][ T7535] active_anon 0 [ 90.497711][ T7535] inactive_file 0 [ 90.501920][ T7535] active_file 0 [ 90.505967][ T7535] unevictable 0 [ 90.509576][ T7535] hierarchical_memory_limit 314572800 [ 90.515530][ T7535] hierarchical_memsw_limit 9223372036854771712 [ 90.522190][ T7535] total_cache 0 [ 90.525823][ T7535] total_rss 4096 [ 90.529662][ T7535] total_shmem 0 [ 90.533786][ T7535] total_mapped_file 0 [ 90.538208][ T7535] total_dirty 0 [ 90.542056][ T7535] total_writeback 0 [ 90.546155][ T7535] total_workingset_refault_anon 69 [ 90.551424][ T7535] total_workingset_refault_file 0 [ 90.557397][ T7535] total_swap 548864 [ 90.561521][ T7535] total_swapcached 12288 [ 90.565761][ T7535] total_pgpgin 48703 [ 90.570035][ T7535] total_pgpgout 48700 [ 90.574384][ T7535] total_pgfault 62617 [ 90.578626][ T7535] total_pgmajfault 38 [ 90.582725][ T7535] total_inactive_anon 12288 [ 90.587657][ T7535] total_active_anon 0 [ 90.591704][ T7535] total_inactive_file 0 [ 90.596470][ T7535] total_active_file 0 [ 90.600920][ T7535] total_unevictable 0 [ 90.605094][ T7535] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1314,pid=7533,uid=0 [ 90.620992][ T7535] Memory cgroup out of memory: Killed process 7533 (syz.5.1314) total-vm:95760kB, anon-rss:1044kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 90.666282][ T7683] tun0: tun_chr_ioctl cmd 1074025678 [ 90.672028][ T7683] tun0: group set to 0 [ 90.701588][ T7686] IPv6: Can't replace route, no match found [ 91.221670][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 91.221690][ T30] audit: type=1400 audit(91.185:2981): avc: denied { create } for pid=7726 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.274596][ T7698] cgroup: fork rejected by pids controller in /syz5 [ 91.684361][ T7689] syz.2.1337 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 91.699012][ T7689] CPU: 0 UID: 0 PID: 7689 Comm: syz.2.1337 Tainted: G W 6.14.0-rc7-syzkaller-00067-g76b6905c11fd #0 [ 91.699048][ T7689] Tainted: [W]=WARN [ 91.699056][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.699072][ T7689] Call Trace: [ 91.699079][ T7689] [ 91.699089][ T7689] dump_stack_lvl+0xf2/0x150 [ 91.699199][ T7689] dump_stack+0x15/0x1a [ 91.699245][ T7689] dump_header+0x83/0x2d0 [ 91.699290][ T7689] oom_kill_process+0x341/0x4c0 [ 91.699336][ T7689] out_of_memory+0x9af/0xbe0 [ 91.699374][ T7689] ? css_next_descendant_pre+0x11c/0x140 [ 91.699520][ T7689] mem_cgroup_out_of_memory+0x13e/0x190 [ 91.699565][ T7689] try_charge_memcg+0x508/0x7f0 [ 91.699598][ T7689] obj_cgroup_charge_pages+0xbd/0x1a0 [ 91.699627][ T7689] __memcg_kmem_charge_page+0x9d/0x170 [ 91.699724][ T7689] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 91.699842][ T7689] alloc_pages_mpol+0xb4/0x260 [ 91.699875][ T7689] alloc_pages_noprof+0xe8/0x130 [ 91.699907][ T7689] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 91.699964][ T7689] __kvmalloc_node_noprof+0x121/0x170 [ 91.700032][ T7689] ? ip_set_alloc+0x1f/0x30 [ 91.700068][ T7689] ip_set_alloc+0x1f/0x30 [ 91.700101][ T7689] hash_netiface_create+0x273/0x730 [ 91.700204][ T7689] ? __nla_parse+0x40/0x60 [ 91.700280][ T7689] ? __pfx_hash_netiface_create+0x10/0x10 [ 91.700317][ T7689] ip_set_create+0x3b1/0x970 [ 91.700368][ T7689] ? __nla_parse+0x40/0x60 [ 91.700467][ T7689] nfnetlink_rcv_msg+0x4a9/0x570 [ 91.700517][ T7689] netlink_rcv_skb+0x12c/0x230 [ 91.700604][ T7689] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 91.700638][ T7689] nfnetlink_rcv+0x16c/0x15d0 [ 91.700717][ T7689] ? kmem_cache_free+0xdc/0x2d0 [ 91.700747][ T7689] ? nlmon_xmit+0x51/0x60 [ 91.700790][ T7689] ? __kfree_skb+0x102/0x150 [ 91.700861][ T7689] ? consume_skb+0x49/0x160 [ 91.700888][ T7689] ? nlmon_xmit+0x51/0x60 [ 91.700934][ T7689] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 91.700985][ T7689] ? __dev_queue_xmit+0xb6e/0x2090 [ 91.701019][ T7689] ? rb_insert_color+0x6a/0x290 [ 91.701066][ T7689] ? ref_tracker_free+0x3a5/0x410 [ 91.701110][ T7689] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 91.701185][ T7689] netlink_unicast+0x599/0x670 [ 91.701222][ T7689] netlink_sendmsg+0x5cc/0x6e0 [ 91.701284][ T7689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.701309][ T7689] __sock_sendmsg+0x140/0x180 [ 91.701372][ T7689] ____sys_sendmsg+0x326/0x4b0 [ 91.701488][ T7689] __sys_sendmsg+0x19d/0x230 [ 91.701553][ T7689] __x64_sys_sendmsg+0x46/0x50 [ 91.701587][ T7689] x64_sys_call+0x2734/0x2dc0 [ 91.701622][ T7689] do_syscall_64+0xc9/0x1c0 [ 91.701717][ T7689] ? clear_bhb_loop+0x55/0xb0 [ 91.701749][ T7689] ? clear_bhb_loop+0x55/0xb0 [ 91.701784][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.701866][ T7689] RIP: 0033:0x7f85f41cd169 [ 91.701887][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.701917][ T7689] RSP: 002b:00007f85f2837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.701940][ T7689] RAX: ffffffffffffffda RBX: 00007f85f43e5fa0 RCX: 00007f85f41cd169 [ 91.701955][ T7689] RDX: 0000000000000800 RSI: 0000400000000040 RDI: 0000000000000003 [ 91.701971][ T7689] RBP: 00007f85f424e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.701986][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.702002][ T7689] R13: 0000000000000000 R14: 00007f85f43e5fa0 R15: 00007ffe0a8d6328 [ 91.702027][ T7689] [ 92.065862][ T7689] memory: usage 307200kB, limit 307200kB, failcnt 188 [ 92.073086][ T7689] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 92.081491][ T7689] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 92.089402][ T7689] Memory cgroup stats for /syz2: [ 92.090409][ T7689] cache 4096 [ 92.099047][ T7689] rss 0 [ 92.102344][ T7689] shmem 0 [ 92.105916][ T7689] mapped_file 0 [ 92.109857][ T7689] dirty 0 [ 92.113046][ T7689] writeback 8192 [ 92.116966][ T7689] workingset_refault_anon 29 [ 92.121820][ T7689] workingset_refault_file 141 [ 92.126913][ T7689] swap 376832 [ 92.130426][ T7689] swapcached 8192 [ 92.134092][ T7689] pgpgin 48956 [ 92.137559][ T7689] pgpgout 48953 [ 92.141822][ T7689] pgfault 71141 [ 92.145703][ T7689] pgmajfault 19 [ 92.149316][ T7689] inactive_anon 8192 [ 92.153808][ T7689] active_anon 0 [ 92.157372][ T7689] inactive_file 0 [ 92.161451][ T7689] active_file 0 [ 92.165194][ T7689] unevictable 0 [ 92.169400][ T7689] hierarchical_memory_limit 314572800 [ 92.175302][ T7689] hierarchical_memsw_limit 9223372036854771712 [ 92.181692][ T7689] total_cache 4096 [ 92.185738][ T7689] total_rss 0 [ 92.189949][ T7689] total_shmem 0 [ 92.193481][ T7689] total_mapped_file 0 [ 92.198140][ T7689] total_dirty 0 [ 92.201827][ T7689] total_writeback 8192 [ 92.206344][ T7689] total_workingset_refault_anon 29 [ 92.210229][ T8292] loop4: detected capacity change from 0 to 2048 [ 92.211788][ T7689] total_workingset_refault_file 141 [ 92.225261][ T7689] total_swap 376832 [ 92.229954][ T7689] total_swapcached 8192 [ 92.235334][ T7689] total_pgpgin 48956 [ 92.239610][ T7689] total_pgpgout 48953 [ 92.244522][ T7689] total_pgfault 71141 [ 92.248918][ T7689] total_pgmajfault 19 [ 92.253679][ T7689] total_inactive_anon 8192 [ 92.258266][ T7689] total_active_anon 0 [ 92.263116][ T7689] total_inactive_file 0 [ 92.267410][ T7689] total_active_file 0 [ 92.271633][ T7689] total_unevictable 0 [ 92.275715][ T7689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1337,pid=7688,uid=0 [ 92.291597][ T7689] Memory cgroup out of memory: Killed process 7688 (syz.2.1337) total-vm:95760kB, anon-rss:916kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 92.350725][ T8292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.373219][ T8292] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.392561][ T30] audit: type=1400 audit(92.345:2982): avc: denied { sqpoll } for pid=8299 comm="syz.5.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.519782][ T30] audit: type=1400 audit(92.375:2983): avc: denied { create } for pid=8300 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.542009][ T30] audit: type=1400 audit(92.395:2984): avc: denied { create } for pid=8299 comm="syz.5.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.562979][ T30] audit: type=1400 audit(92.395:2985): avc: denied { listen } for pid=8299 comm="syz.5.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.601164][ T8292] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 92.613793][ T8292] EXT4-fs (loop4): This should not happen!! Data will be lost [ 92.613793][ T8292] [ 92.623840][ T8292] EXT4-fs (loop4): Total free blocks count 0 [ 92.629870][ T8292] EXT4-fs (loop4): Free/Dirty block details [ 92.635872][ T8292] EXT4-fs (loop4): free_blocks=2415919104 [ 92.642139][ T8292] EXT4-fs (loop4): dirty_blocks=16 [ 92.647319][ T8292] EXT4-fs (loop4): Block reservation details [ 92.653542][ T8292] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 92.679780][ T30] audit: type=1400 audit(92.575:2986): avc: denied { connect } for pid=8300 comm="syz.0.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.699285][ T30] audit: type=1400 audit(92.575:2987): avc: denied { write } for pid=8300 comm="syz.0.1351" path="socket:[15319]" dev="sockfs" ino=15319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.768292][ T30] audit: type=1400 audit(92.745:2988): avc: denied { ioctl } for pid=8308 comm="syz.1.1341" path="socket:[15323]" dev="sockfs" ino=15323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.793692][ T30] audit: type=1400 audit(92.745:2989): avc: denied { read } for pid=8308 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.821149][ T8292] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 93.041856][ T8315] loop4: detected capacity change from 0 to 4096 [ 93.058947][ T8315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.110814][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.159110][ T30] audit: type=1400 audit(93.135:2990): avc: denied { ioctl } for pid=8324 comm="syz.4.1349" path="socket:[15848]" dev="sockfs" ino=15848 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.346074][ T8333] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.362482][ T8333] vhci_hcd: default hub control req: 1f14 v080b i0002 l0 [ 93.490618][ T8340] loop2: detected capacity change from 0 to 256 [ 93.505488][ T8340] FAT-fs (loop2): bogus number of FAT sectors [ 93.506128][ T8342] netlink: 'syz.5.1358': attribute type 12 has an invalid length. [ 93.512460][ T8340] FAT-fs (loop2): Can't find a valid FAT filesystem [ 93.735114][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 93.772014][ T8361] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 93.780323][ T8361] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 93.801789][ T8361] xt_hashlimit: max too large, truncated to 1048576 [ 94.030177][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 94.965579][ T8430] loop2: detected capacity change from 0 to 512 [ 95.008648][ T8430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.048775][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.080813][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1398'. [ 95.123880][ T8443] IPv4: Oversized IP packet from 127.202.26.0 [ 95.145721][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 95.155555][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 95.545973][ T8482] netlink: 'syz.0.1428': attribute type 12 has an invalid length. [ 95.562191][ T8470] usb usb1: usbfs: process 8470 (syz.2.1413) did not claim interface 0 before use [ 95.584741][ T8483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8483 comm=syz.1.1418 [ 95.894479][ T8515] netlink: 'syz.4.1431': attribute type 12 has an invalid length. [ 96.570707][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 96.570724][ T30] audit: type=1400 audit(96.555:3071): avc: denied { create } for pid=8517 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.861637][ T8532] usb usb1: usbfs: process 8532 (syz.4.1435) did not claim interface 0 before use [ 96.924805][ T30] audit: type=1326 audit(96.905:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 96.949674][ T30] audit: type=1326 audit(96.905:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 97.019988][ T30] audit: type=1326 audit(96.905:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 97.043536][ T30] audit: type=1326 audit(96.905:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 97.068792][ T30] audit: type=1326 audit(96.905:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 97.092887][ T30] audit: type=1326 audit(96.965:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 97.117247][ T30] audit: type=1326 audit(96.965:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 97.140382][ T30] audit: type=1326 audit(96.965:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 97.164581][ T30] audit: type=1326 audit(96.965:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 97.194426][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1446'. [ 97.219655][ T8559] netlink: 'syz.2.1448': attribute type 12 has an invalid length. [ 97.372284][ T8573] loop4: detected capacity change from 0 to 1024 [ 97.410399][ T8573] EXT4-fs: Ignoring removed nobh option [ 97.421743][ T8573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.711854][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1461'. [ 97.779380][ T8592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8592 comm=syz.2.1461 [ 97.845792][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.866773][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 97.875010][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.894585][ T8605] loop2: detected capacity change from 0 to 1024 [ 97.924553][ T8611] loop4: detected capacity change from 0 to 128 [ 97.930225][ T8605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.954702][ T8605] EXT4-fs: Mount option(s) incompatible with ext2 [ 98.008254][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.008254][ T8616] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 98.025185][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.025185][ T8616] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 98.039360][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.039360][ T8616] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 98.054641][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.054641][ T8616] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 98.085964][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.085964][ T8616] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 98.109583][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.109583][ T8616] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 98.124516][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.124516][ T8616] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 98.154001][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.154001][ T8616] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 98.171239][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.171239][ T8616] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 98.187412][ T8616] syz.4.1465: attempt to access beyond end of device [ 98.187412][ T8616] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 98.265164][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1477'. [ 98.333615][ T8630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8630 comm=syz.1.1477 [ 98.420722][ T8647] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 98.430219][ T8647] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 98.470653][ T8655] loop5: detected capacity change from 0 to 512 [ 98.497743][ T8655] /dev/loop5: Can't open blockdev [ 98.924813][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 98.944878][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 99.032151][ T8689] loop4: detected capacity change from 0 to 512 [ 99.051973][ T8689] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.075475][ T8689] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1503: bg 0: block 248: padding at end of block bitmap is not set [ 99.151567][ T8689] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1503: Failed to acquire dquot type 1 [ 99.193037][ T8689] EXT4-fs (loop4): 1 truncate cleaned up [ 99.234706][ T8689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.288198][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.324895][ T8712] netlink: 'syz.2.1513': attribute type 4 has an invalid length. [ 99.363992][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.372269][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.381733][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.390344][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.398662][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.406838][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.409132][ T8722] netlink: 'syz.4.1517': attribute type 39 has an invalid length. [ 99.414874][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x4 [ 99.430786][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.438722][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.446698][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.454784][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x4 [ 99.462681][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.470577][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.478555][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x4 [ 99.487807][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.495608][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.503562][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x4 [ 99.511786][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.520083][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.528118][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.536079][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.543893][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.552047][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.560019][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.568326][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.576238][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.584955][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.593629][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.601989][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.610879][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.619281][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.627473][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.635407][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.643458][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.651700][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.659464][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.667623][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.675459][ T10] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 99.684636][ T10] hid-generic 0000:0000:20000000.0005: hidraw0: HID v0.01 Device [syz0] on syz1 [ 99.695928][ T8722] veth1_macvtap: left promiscuous mode [ 99.918614][ T8755] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1532'. [ 99.950388][ T8752] bond_slave_0: entered promiscuous mode [ 99.957508][ T8752] bond_slave_1: entered promiscuous mode [ 99.964920][ T8752] bridge0: entered promiscuous mode [ 99.984531][ T8756] loop4: detected capacity change from 0 to 164 [ 100.015921][ T8756] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 100.115853][ T8763] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 100.578034][ T8782] IPVS: Error connecting to the multicast addr [ 100.807672][ T8791] loop5: detected capacity change from 0 to 2048 [ 100.842174][ T8791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.889773][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.897257][ C0] bridge0: topology change detected, propagating [ 100.904026][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.912535][ C0] bridge0: topology change detected, propagating [ 101.024265][ T8806] pim6reg1: entered promiscuous mode [ 101.029744][ T8806] pim6reg1: entered allmulticast mode [ 101.364705][ T51] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 101.382627][ T51] EXT4-fs (loop5): Remounting filesystem read-only [ 101.391082][ T111] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4883: inode #15: block 9: len 7: ext4_ext_map_blocks returned -5 [ 101.511865][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.551311][ T8844] ip6gretap0: entered promiscuous mode [ 101.557278][ T8844] vlan3: entered promiscuous mode [ 101.565709][ T8844] ip6gretap0: left promiscuous mode [ 101.793224][ T30] kauditd_printk_skb: 279 callbacks suppressed [ 101.793241][ T30] audit: type=1326 audit(101.755:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6ec3d169 code=0x7ffc0000 [ 101.841428][ T30] audit: type=1326 audit(101.805:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6ec3d169 code=0x7ffc0000 [ 101.897974][ T30] audit: type=1326 audit(101.875:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7faa6ec3d169 code=0x7ffc0000 [ 101.924696][ T30] audit: type=1326 audit(101.875:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6ec3d169 code=0x7ffc0000 [ 101.952199][ T30] audit: type=1326 audit(101.875:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6ec3d169 code=0x7ffc0000 [ 102.174044][ T8887] netlink: 'syz.2.1581': attribute type 39 has an invalid length. [ 102.182831][ T8887] veth1_macvtap: left promiscuous mode [ 102.199407][ T8886] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 102.317825][ T30] audit: type=1326 audit(102.275:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 102.341668][ T30] audit: type=1326 audit(102.275:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 102.355962][ T8891] loop4: detected capacity change from 0 to 512 [ 102.367077][ T30] audit: type=1326 audit(102.275:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 102.367113][ T30] audit: type=1326 audit(102.275:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 102.367146][ T30] audit: type=1326 audit(102.275:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f41cd169 code=0x7ffc0000 [ 102.456191][ T8895] loop2: detected capacity change from 0 to 164 [ 102.478845][ T8895] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 102.499638][ T8895] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 102.554846][ T8891] EXT4-fs (loop4): 1 truncate cleaned up [ 102.572660][ T8891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.595263][ T8904] loop2: detected capacity change from 0 to 512 [ 102.612345][ T8904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.662451][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.676370][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.851389][ T8921] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 102.862918][ T8918] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1596'. [ 102.961937][ T8931] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1600'. [ 103.033512][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1606'. [ 103.071340][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 103.224970][ T8955] loop4: detected capacity change from 0 to 1024 [ 103.235743][ T8958] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.1621'. [ 103.245831][ T8958] netlink: zone id is out of range [ 103.251105][ T8958] netlink: zone id is out of range [ 103.258603][ T8955] EXT4-fs: Ignoring removed bh option [ 103.261362][ T8958] netlink: zone id is out of range [ 103.269471][ T8958] netlink: zone id is out of range [ 103.275230][ T8958] netlink: zone id is out of range [ 103.284311][ T8958] netlink: set zone limit has 8 unknown bytes [ 103.298403][ T8955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 103.564174][ T8991] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1624'. [ 103.902220][ T9013] loop2: detected capacity change from 0 to 512 [ 103.913611][ T9015] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1635'. [ 103.959532][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 103.979338][ T9013] EXT4-fs (loop2): 1 truncate cleaned up [ 103.995329][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1637'. [ 104.012305][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 104.014926][ T9013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.073385][ T9025] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.1639'. [ 104.099755][ T9025] netlink: zone id is out of range [ 104.106168][ T9025] netlink: zone id is out of range [ 104.136138][ T9025] netlink: zone id is out of range [ 104.145268][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.158165][ T9025] netlink: zone id is out of range [ 104.224713][ T9040] loop4: detected capacity change from 0 to 128 [ 104.277226][ T9042] batadv_slave_1: entered promiscuous mode [ 104.287712][ T9048] bio_check_eod: 77 callbacks suppressed [ 104.287735][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.287735][ T9048] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 104.310350][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.310350][ T9048] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 104.325818][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.325818][ T9048] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 104.340625][ T9042] batadv_slave_1: left promiscuous mode [ 104.367513][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.367513][ T9048] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 104.385333][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.385333][ T9048] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 104.401827][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.401827][ T9048] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 104.449049][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1650'. [ 104.467865][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.467865][ T9048] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 104.487371][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.487371][ T9048] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 104.504155][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.504155][ T9048] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 104.519614][ T9048] syz.4.1646: attempt to access beyond end of device [ 104.519614][ T9048] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 104.736494][ T9072] pim6reg1: entered promiscuous mode [ 104.742384][ T9072] pim6reg1: entered allmulticast mode [ 104.754543][ T9077] macsec1: entered promiscuous mode [ 104.760111][ T9077] team0: entered promiscuous mode [ 104.768484][ T9077] team0: left promiscuous mode [ 104.802578][ T9074] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.1658'. [ 104.848456][ T9083] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 104.860968][ T9080] IPVS: stopping master sync thread 9083 ... [ 104.902248][ T9085] netlink: '+}[@': attribute type 1 has an invalid length. [ 104.967818][ T9085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.183464][ T9114] Process accounting resumed [ 105.199543][ T9120] netlink: '+}[@': attribute type 1 has an invalid length. [ 105.228937][ T9120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.858723][ T9151] 9pnet_fd: Insufficient options for proto=fd [ 105.947362][ T9153] netlink: '+}[@': attribute type 1 has an invalid length. [ 105.957484][ T9155] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 105.972624][ T9153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.255799][ T9169] loop5: detected capacity change from 0 to 512 [ 106.306103][ T9169] EXT4-fs (loop5): 1 truncate cleaned up [ 106.316335][ T9181] loop2: detected capacity change from 0 to 512 [ 106.325397][ T9169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.343094][ T9181] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1700: bg 0: block 35: padding at end of block bitmap is not set [ 106.371884][ T9181] EXT4-fs (loop2): Remounting filesystem read-only [ 106.378585][ T9181] EXT4-fs (loop2): 1 truncate cleaned up [ 106.385196][ T9181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.399769][ T9181] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 106.407720][ T9181] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.440505][ T3848] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.462614][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 106.580760][ T9197] netlink: 'syz.4.1709': attribute type 4 has an invalid length. [ 106.592651][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1708'. [ 106.633164][ T9197] netlink: 'syz.4.1709': attribute type 4 has an invalid length. [ 106.686518][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 106.700938][ T9205] team0: Port device team_slave_0 removed [ 106.823646][ T9211] No control pipe specified [ 106.848224][ T30] kauditd_printk_skb: 529 callbacks suppressed [ 106.848243][ T30] audit: type=1326 audit(106.825:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 106.880684][ T30] audit: type=1326 audit(106.825:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 106.912357][ T30] audit: type=1326 audit(106.865:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 106.941172][ T30] audit: type=1326 audit(106.865:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 106.971880][ T30] audit: type=1326 audit(106.865:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 106.996222][ T30] audit: type=1326 audit(106.865:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 107.020274][ T30] audit: type=1326 audit(106.865:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 107.044114][ T30] audit: type=1326 audit(106.865:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 107.069666][ T30] audit: type=1326 audit(106.865:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 107.095668][ T30] audit: type=1326 audit(106.895:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2c9cd169 code=0x7ffc0000 [ 107.176224][ T9221] team_slave_0: entered promiscuous mode [ 107.183622][ T9221] team_slave_1: entered promiscuous mode [ 107.190518][ T9221] macsec0: entered promiscuous mode [ 107.197404][ T9221] team0: entered promiscuous mode [ 107.205233][ T9221] team0: left promiscuous mode [ 107.210677][ T9221] team_slave_0: left promiscuous mode [ 107.217919][ T9221] team_slave_1: left promiscuous mode [ 107.311033][ T9228] loop2: detected capacity change from 0 to 1024 [ 107.367615][ T9228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.517694][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'. [ 107.552904][ T9239] SET target dimension over the limit! [ 107.641724][ T9244] netlink: 'syz.0.1723': attribute type 4 has an invalid length. [ 107.650770][ T9244] netlink: 'syz.0.1723': attribute type 4 has an invalid length. [ 107.907811][ T9232] ================================================================== [ 107.916318][ T9232] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 107.923866][ T9232] [ 107.926575][ T9232] write to 0xffff888106b25da4 of 4 bytes by task 9228 on cpu 1: [ 107.936092][ T9232] xas_set_mark+0x131/0x150 [ 107.941092][ T9232] __folio_start_writeback+0x1e8/0x430 [ 107.947646][ T9232] ext4_bio_write_folio+0x591/0x9d0 [ 107.953181][ T9232] mpage_process_page_bufs+0x486/0x5d0 [ 107.958877][ T9232] mpage_prepare_extent_to_map+0x788/0xb80 [ 107.965075][ T9232] ext4_do_writepages+0xa20/0x2130 [ 107.970589][ T9232] ext4_writepages+0x159/0x2e0 [ 107.975779][ T9232] do_writepages+0x1d8/0x480 [ 107.980809][ T9232] file_write_and_wait_range+0x168/0x2f0 [ 107.986656][ T9232] generic_buffers_fsync_noflush+0x46/0x120 [ 107.992656][ T9232] ext4_sync_file+0x1ff/0x6c0 [ 107.997553][ T9232] vfs_fsync_range+0x116/0x130 [ 108.002374][ T9232] ext4_buffered_write_iter+0x358/0x3c0 [ 108.009154][ T9232] ext4_file_write_iter+0x383/0xf20 [ 108.014488][ T9232] iter_file_splice_write+0x5f1/0x980 [ 108.020193][ T9232] direct_splice_actor+0x160/0x2c0 [ 108.026214][ T9232] splice_direct_to_actor+0x302/0x670 [ 108.032150][ T9232] do_splice_direct+0xd7/0x150 [ 108.037355][ T9232] do_sendfile+0x398/0x660 [ 108.042794][ T9232] __x64_sys_sendfile64+0x110/0x150 [ 108.048311][ T9232] x64_sys_call+0xfbd/0x2dc0 [ 108.053307][ T9232] do_syscall_64+0xc9/0x1c0 [ 108.058054][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.064160][ T9232] [ 108.066617][ T9232] read to 0xffff888106b25da4 of 4 bytes by task 9232 on cpu 0: [ 108.074537][ T9232] xas_find_marked+0x608/0x650 [ 108.079547][ T9232] find_get_entry+0x54/0x390 [ 108.084170][ T9232] filemap_get_folios_tag+0x9e/0x210 [ 108.090905][ T9232] mpage_prepare_extent_to_map+0x329/0xb80 [ 108.097809][ T9232] ext4_do_writepages+0xa20/0x2130 [ 108.103645][ T9232] ext4_writepages+0x159/0x2e0 [ 108.108559][ T9232] do_writepages+0x1d8/0x480 [ 108.113189][ T9232] file_write_and_wait_range+0x168/0x2f0 [ 108.118906][ T9232] generic_buffers_fsync_noflush+0x46/0x120 [ 108.124845][ T9232] ext4_sync_file+0x1ff/0x6c0 [ 108.129866][ T9232] vfs_fsync_range+0x116/0x130 [ 108.134923][ T9232] ext4_buffered_write_iter+0x358/0x3c0 [ 108.141406][ T9232] ext4_file_write_iter+0x383/0xf20 [ 108.147210][ T9232] iter_file_splice_write+0x5f1/0x980 [ 108.153396][ T9232] direct_splice_actor+0x160/0x2c0 [ 108.158543][ T9232] splice_direct_to_actor+0x302/0x670 [ 108.164017][ T9232] do_splice_direct+0xd7/0x150 [ 108.168822][ T9232] do_sendfile+0x398/0x660 [ 108.174489][ T9232] __x64_sys_sendfile64+0x110/0x150 [ 108.180073][ T9232] x64_sys_call+0xfbd/0x2dc0 [ 108.184692][ T9232] do_syscall_64+0xc9/0x1c0 [ 108.189332][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.195345][ T9232] [ 108.197757][ T9232] value changed: 0x0a000021 -> 0x04000021 [ 108.203771][ T9232] [ 108.206731][ T9232] Reported by Kernel Concurrency Sanitizer on: [ 108.213461][ T9232] CPU: 0 UID: 0 PID: 9232 Comm: syz.2.1718 Tainted: G W 6.14.0-rc7-syzkaller-00067-g76b6905c11fd #0 [ 108.226930][ T9232] Tainted: [W]=WARN [ 108.231275][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.242607][ T9232] ================================================================== [ 108.306983][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.318029][ T9250] No control pipe specified