last executing test programs: 2.245620814s ago: executing program 1 (id=1573): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x18) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) open(0x0, 0x141042, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x48800) shutdown(r4, 0x2) 1.995491458s ago: executing program 3 (id=1575): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000400001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009ea10000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 1.995291748s ago: executing program 4 (id=1576): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r1) ptrace(0x11, r1) ptrace(0xffffffffffffffff, 0x0) 1.993866228s ago: executing program 1 (id=1584): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x2d02) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x400, 0x2800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x0, &(0x7f00000002c0), &(0x7f0000000340)='GPL\x00', 0x5, 0x63, &(0x7f0000000380)=""/99, 0x41100, 0x70, '\x00', 0x0, @fallback=0x12, r3, 0x8, &(0x7f0000000400)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000480)=[r3, r3, r4, r3, r3], 0x0, 0x10, 0xd}, 0x94) r5 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 1.941829739s ago: executing program 4 (id=1578): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) ioctl$TCXONC(r2, 0x540a, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x0, 0x200000000}], 0x0) 1.941034789s ago: executing program 1 (id=1579): read$eventfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) write(r0, 0x0, 0x0) 1.87575581s ago: executing program 3 (id=1580): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00"/17, @ANYRES32=0x1], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) 1.85317668s ago: executing program 0 (id=1582): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.844032561s ago: executing program 1 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0a1414ac"}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.782841822s ago: executing program 1 (id=1585): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket(0x2b, 0x6, 0x401) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000001880)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @remote}, 0x210, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000800)='veth0_vlan\x00', 0x3, 0x7, 0x1000}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ebd700e000000001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff010500180001"], 0x44}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000740)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xffffffff, @loopback, 0x6}, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2}, r5, 0x9}}, 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x20}}, 0x40082) 1.781899271s ago: executing program 0 (id=1586): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x2, 0x1, 0x8, 0x1020005, 0x2b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pivot_root(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x90) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) clock_gettime(0x3, &(0x7f0000000280)) shutdown(r1, 0x1) 1.755308622s ago: executing program 3 (id=1587): r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "260a3f1c6761ea7f0e7f562db8f255c66a41f09d077b10ce411d4eac21777d53d0a10625d85213df3fbccdb7ab644a11284e949ee5b18db018baf92337a29766", 0x30}, 0x48, 0xfffffffffffffffc) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000240), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0x3}) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x88) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000010680)={0x1, 0x7, 0x5, 0x10001, @vifc_lcl_ifindex, @local}, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x30, 0x0, 0x32, 0x36, 0x35, 0x32, 0x31, 0x36, 0x39, 0x0, 0xcb, 0x62, 0x31, 0x31, 0x64, 0x34]}, &(0x7f0000000080)={0x0, "e3ab92805ddba0afb86d025549f10db9f168c71e546cff0483b6250b85fee39aee3a565abdbf025f8b582a81dd97b8c637c0d967db7172e92e7326ae600d133a", 0x28}, 0x48, r0) 1.671474144s ago: executing program 3 (id=1588): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x1) 1.667318934s ago: executing program 0 (id=1589): pivot_root(0x0, 0x0) umount2(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x5) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 1.095711323s ago: executing program 4 (id=1590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000380)=0x7ffd) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000002040000000000000000000009030000000000000061"], 0x0, 0x5b}, 0x28) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x5, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810d8, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 1.083294883s ago: executing program 2 (id=1591): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x10112, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x3c8, 0xc79}, 0x200, 0x10000, 0x1000, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x10, &(0x7f0000000340)={&(0x7f0000000580)={0x6, 0x12, 0x7fff, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x6, 0x3, 0x0, 0x0, "4139074a5356fda4b9f654d43f37a47b5ec39b32538c55cc9eae5d73d9904b031a1de6d66d90d79aed08be1bbf7e0b23aaef079acbada8f2e85a931d20e6126f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x4040000) 1.023351434s ago: executing program 2 (id=1592): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) unshare(0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="db74", 0x2}, {0x0}], 0x2, 0x0) 1.022698384s ago: executing program 4 (id=1593): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) creat(&(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) fchdir(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.016941514s ago: executing program 4 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r3, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) 966.260555ms ago: executing program 1 (id=1595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 815.233317ms ago: executing program 3 (id=1596): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000002d80)={'ip_vti0\x00', &(0x7f0000002c80)=@ethtool_rxnfc={0x2a, 0x11, 0xe8, {0x4, @hdata="4ccbebb4add1395ee325a350b1e8d5aa4bc8f864be3e8b34fc5684fd0ad87b3e9ebdb22bfff77549fba411b6983ce1727dffae91", {0x0, @empty, 0xa3b7, 0x3, [0x100, 0x3ff]}, @udp_ip4_spec={@multicast1, @remote, 0x4e21, 0x4e22}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0xfff9, 0x7ff, [0x1000, 0x40]}, 0xe, 0x3ff}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000003c0012800b00010067656e65766500002c00028005000a000000000005000400020000000500080000000000b2fd05004e210000060005004e21000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="f05ea444cefee624bee8bfa52eb18c1fc6fe8ad42058fb32e6ac69b8c5221dc062b7ea60e4827eaf94bf1a50b3515c1b911b739bb8c3e92b330a63fbf7ed82391ea43f1d510376e2dc63cadb21a27773dbfaf4d6499f753918835d8ccfc911e91fb283738efeb438dd0a63ec17471619391f6b9b057397b864554bd3d5a88fa174dfe5e69bb8a7e720f68cdd2b5800552b9d392d490ddb83573d04b20fa42b09893e53afba9bc28104435935d4ba13d49d00cfb8e87f072ceccedff656d3f5015ea130425b665d73a354c1eef1bc06a2647a37d92e287d9489391488ce17564266a8f02dbf90"], 0x6c}}, 0x0) 646.53607ms ago: executing program 0 (id=1597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 568.801611ms ago: executing program 0 (id=1598): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) cachestat(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() 519.451782ms ago: executing program 3 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 242.556456ms ago: executing program 0 (id=1600): syz_emit_ethernet(0x9a, &(0x7f0000000c00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x6}, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x5c, 0x6, 0x1, @empty, @local, {[@hopopts={0x1, 0x6, '\x00', [@generic={0x3, 0x2f, "1c77ec50c8a5260b9657f14c0b4d5f8413ff4eb8537049fd4ebef9682fb13788a5a2d1164b5a0c737fe04631c13502"}]}, @fragment={0x5e, 0x0, 0x5, 0x0, 0x0, 0x19, 0x65}], {{0x4e21, 0x4e1e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x13}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=0x2) socket$inet6(0xa, 0x3, 0xff) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00'}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") chmod(&(0x7f0000000340)='./file1\x00', 0x0) 218.581297ms ago: executing program 2 (id=1601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz7GJAkEABdA/d9zBwh1cJVeAkU2YGFmEuduJuVVsZA82YWRgsDCyjOA2ICK8l8znM/Nhwkt9XH7rJCXZd8t8p2ZYfGXIWB+3Sjv62s2rn9nOLv/3dE5JuSb5nF7069b+5bRtaZMy5tgmVodn/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3sEtAAD//5OFFa8=") r3 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x4, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000004b, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4040000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0), 0xc) mq_timedreceive(r3, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x0, 0x40, 0x1, 0x100, {{0xd, 0x4, 0x0, 0xf, 0x34, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x7, 0x1a, [@empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xa0, [@local, @loopback]}, @noop, @generic={0x89, 0x7, "abc04d1ec5"}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001200)={@mcast2, 0x34, r4}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 127.527129ms ago: executing program 4 (id=1602): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000fad, &(0x7f0000000440)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x24, 0x0) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}, 0x4}], 0x1, 0x40012022, 0x0) 72.159739ms ago: executing program 2 (id=1603): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, r1, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) 17.19804ms ago: executing program 2 (id=1604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0xffffffffffffffff}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000500), 0x7fffffff, 0x48003) fcntl$getownex(r3, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000640)={'\x00', 0x10, 0x7fffffff, 0x8a17, 0x1, 0x0, r5}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="7fff0000", @ANYRES16, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c30081ffffff"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='!\x00\x00\x00\f', @ANYRESDEC], 0x50) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) 0s ago: executing program 2 (id=1605): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="04010000", @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20f"], 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) pwrite64(r3, &(0x7f0000000000)="fd4e09b370ad518c46af1dc2b8e01940dc8f25e60e723d810be7083e416328bf84ecead4d163f65e705a625c6a5dbbc9875d3f05003650bab25f58ce8c508cdb", 0x40, 0x8000c61) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): T5821] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.391033][ T5821] syz.0.721: attempt to access beyond end of device [ 97.391033][ T5821] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.405166][ T5821] syz.0.721: attempt to access beyond end of device [ 97.405166][ T5821] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.422721][ T5821] syz.0.721: attempt to access beyond end of device [ 97.422721][ T5821] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.436785][ T5821] syz.0.721: attempt to access beyond end of device [ 97.436785][ T5821] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.450709][ T5821] syz.0.721: attempt to access beyond end of device [ 97.450709][ T5821] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.464324][ T5821] syz.0.721: attempt to access beyond end of device [ 97.464324][ T5821] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 97.697981][ T5839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.728'. [ 97.717603][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 98.024423][ T5850] tipc: Failed to remove unknown binding: 66,1,1/0:397700680/397700682 [ 98.044443][ T5850] tipc: Failed to remove unknown binding: 66,1,1/0:397700680/397700682 [ 98.052774][ T5850] tipc: Failed to remove unknown binding: 66,1,1/0:397700680/397700682 [ 98.129438][ T5861] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 98.153766][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 98.164515][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'. [ 98.178876][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.186861][ T5861] bond3: (slave batadv0): Enslaving as a backup interface with an up link [ 98.215007][ T5861] bond3 (unregistering): (slave batadv0): Releasing backup interface [ 98.224117][ T5861] bond3 (unregistering): Released all slaves [ 98.235230][ T5855] lo speed is unknown, defaulting to 1000 [ 98.261208][ T5866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 98.304666][ T5870] netlink: 'syz.4.740': attribute type 4 has an invalid length. [ 98.319711][ T5870] netlink: 'syz.4.740': attribute type 4 has an invalid length. [ 98.354697][ T5875] : renamed from team_slave_1 [ 98.401832][ T5879] netlink: 156 bytes leftover after parsing attributes in process `syz.2.744'. [ 98.421225][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 98.745833][ T5897] loop3: detected capacity change from 0 to 2048 [ 98.755201][ T5899] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.772234][ T5897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.793063][ T5897] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 98.807929][ T5897] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 85 with error 28 [ 98.820307][ T5897] EXT4-fs (loop3): This should not happen!! Data will be lost [ 98.820307][ T5897] [ 98.830034][ T5897] EXT4-fs (loop3): Total free blocks count 0 [ 98.836023][ T5897] EXT4-fs (loop3): Free/Dirty block details [ 98.841937][ T5897] EXT4-fs (loop3): free_blocks=2415919504 [ 98.847661][ T5897] EXT4-fs (loop3): dirty_blocks=96 [ 98.852944][ T5897] EXT4-fs (loop3): Block reservation details [ 98.858924][ T5897] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 98.865530][ T5899] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.886852][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.910674][ T5910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.753'. [ 98.922846][ T5899] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.986726][ T5899] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.193292][ T5929] lo speed is unknown, defaulting to 1000 [ 100.160876][ T5899] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.194289][ T5899] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.425704][ T5899] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.445807][ T5941] wg2: entered promiscuous mode [ 100.450759][ T5941] wg2: entered allmulticast mode [ 100.460920][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 100.461013][ T29] audit: type=1326 audit(1751642307.253:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 100.490569][ T29] audit: type=1326 audit(1751642307.253:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 100.513850][ T29] audit: type=1326 audit(1751642307.253:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc98fe9e963 code=0x7ffc0000 [ 100.538503][ T5943] loop4: detected capacity change from 0 to 128 [ 100.563223][ T5899] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.626655][ T5949] loop1: detected capacity change from 0 to 512 [ 100.633229][ T29] audit: type=1326 audit(1751642307.333:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc98fe9d3df code=0x7ffc0000 [ 100.656461][ T29] audit: type=1326 audit(1751642307.333:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc98fe9e9b7 code=0x7ffc0000 [ 100.680225][ T29] audit: type=1326 audit(1751642307.333:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc98fe9d290 code=0x7ffc0000 [ 100.703703][ T29] audit: type=1326 audit(1751642307.333:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc98fe9e52b code=0x7ffc0000 [ 100.726927][ T29] audit: type=1326 audit(1751642307.353:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc98fe9d58a code=0x7ffc0000 [ 100.750121][ T29] audit: type=1326 audit(1751642307.353:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc98fe9d58a code=0x7ffc0000 [ 100.773401][ T29] audit: type=1326 audit(1751642307.353:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc98fe9d197 code=0x7ffc0000 [ 100.820040][ T5949] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 100.864394][ T5949] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.766: invalid indirect mapped block 2683928664 (level 1) [ 100.895437][ T5949] EXT4-fs (loop1): Remounting filesystem read-only [ 100.902595][ T5949] EXT4-fs (loop1): 1 truncate cleaned up [ 100.908705][ T5949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.925110][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 100.978369][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 100.979919][ T5957] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 100.995211][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 101.006064][ T5957] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 101.503766][ T5979] loop3: detected capacity change from 0 to 512 [ 101.532291][ T5979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.539333][ T5980] lo speed is unknown, defaulting to 1000 [ 101.560905][ T5979] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.585323][ T5979] syz_tun: entered allmulticast mode [ 101.597287][ T5978] syz_tun: left allmulticast mode [ 101.644536][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.103793][ T6004] loop0: detected capacity change from 0 to 1024 [ 102.121411][ T6004] EXT4-fs: Ignoring removed i_version option [ 102.132495][ T6004] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.162847][ T6004] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.794: Invalid block bitmap block 0 in block_group 0 [ 102.187104][ T6004] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.794: Failed to acquire dquot type 0 [ 102.205678][ T6004] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.794: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.219673][ T6004] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.794: Invalid inode bitmap blk 0 in block_group 0 [ 102.232469][ T3918] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:46: Failed to release dquot type 0 [ 102.245129][ T6004] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 102.256127][ T6004] EXT4-fs (loop0): 1 orphan inode deleted [ 102.263096][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.461132][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.498827][ T6013] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.552416][ T6013] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.602152][ T6013] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.702394][ T6013] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.770588][ T6013] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.786182][ T6013] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.802488][ T6013] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.817432][ T6013] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.373100][ T6024] loop1: detected capacity change from 0 to 128 [ 103.428030][ T6021] loop3: detected capacity change from 0 to 8192 [ 103.512553][ T6034] wg2: entered promiscuous mode [ 103.517468][ T6034] wg2: entered allmulticast mode [ 103.676376][ T6043] loop1: detected capacity change from 0 to 128 [ 103.696932][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.700202][ T6043] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 103.713817][ T6043] FAT-fs (loop1): Filesystem has been set read-only [ 103.721294][ T6043] bio_check_eod: 15753 callbacks suppressed [ 103.721308][ T6043] syz.1.799: attempt to access beyond end of device [ 103.721308][ T6043] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 103.747981][ T6047] loop0: detected capacity change from 0 to 512 [ 103.753031][ T6045] lo speed is unknown, defaulting to 1000 [ 103.755138][ T6043] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 103.767875][ T6043] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 103.776048][ T6043] syz.1.799: attempt to access beyond end of device [ 103.776048][ T6043] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.789481][ T6043] syz.1.799: attempt to access beyond end of device [ 103.789481][ T6043] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.802866][ T6043] syz.1.799: attempt to access beyond end of device [ 103.802866][ T6043] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.816211][ T6043] syz.1.799: attempt to access beyond end of device [ 103.816211][ T6043] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.829765][ T6043] syz.1.799: attempt to access beyond end of device [ 103.829765][ T6043] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.843308][ T6043] syz.1.799: attempt to access beyond end of device [ 103.843308][ T6043] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.856822][ T6043] syz.1.799: attempt to access beyond end of device [ 103.856822][ T6043] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.870342][ T6043] syz.1.799: attempt to access beyond end of device [ 103.870342][ T6043] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.871208][ T6047] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.883742][ T6043] syz.1.799: attempt to access beyond end of device [ 103.883742][ T6043] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 103.905189][ T6047] EXT4-fs (loop0): mount failed [ 104.348520][ T6054] xt_CT: No such helper "snmp_trap" [ 104.673714][ T6071] lo speed is unknown, defaulting to 1000 [ 104.745866][ T6077] loop1: detected capacity change from 0 to 128 [ 104.963351][ T6084] loop0: detected capacity change from 0 to 8192 [ 104.976858][ T6093] loop4: detected capacity change from 0 to 128 [ 104.985480][ T6093] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.998432][ T6093] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.011558][ T6093] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 105.034441][ T6092] lo speed is unknown, defaulting to 1000 [ 105.041068][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.135560][ T6107] tipc: Failed to remove unknown binding: 66,1,1/0:1640299634/1640299636 [ 105.157269][ T6107] tipc: Failed to remove unknown binding: 66,1,1/0:1640299634/1640299636 [ 105.165995][ T6107] tipc: Failed to remove unknown binding: 66,1,1/0:1640299634/1640299636 [ 105.346900][ T6119] lo speed is unknown, defaulting to 1000 [ 105.409960][ T6125] loop3: detected capacity change from 0 to 128 [ 105.471954][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 105.471968][ T29] audit: type=1400 audit(1751642312.273:5729): avc: denied { ioctl } for pid=6129 comm="syz.2.828" path="socket:[16065]" dev="sockfs" ino=16065 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.522772][ T6133] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6133 comm=syz.2.830 [ 105.538381][ T29] audit: type=1400 audit(1751642312.333:5730): avc: denied { audit_write } for pid=6132 comm="syz.2.830" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 105.559747][ T29] audit: type=1107 audit(1751642312.333:5731): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 105.573317][ T29] audit: type=1400 audit(1751642312.363:5732): avc: denied { watch watch_reads } for pid=6132 comm="syz.2.830" path="/186" dev="tmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 105.612831][ T6124] lo speed is unknown, defaulting to 1000 [ 105.633076][ T29] audit: type=1400 audit(1751642312.433:5733): avc: denied { create } for pid=6135 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.665086][ T29] audit: type=1400 audit(1751642312.453:5734): avc: denied { read } for pid=6135 comm="syz.3.832" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.686207][ T29] audit: type=1400 audit(1751642312.453:5735): avc: denied { open } for pid=6135 comm="syz.3.832" path="net:[4026532631]" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.709370][ T29] audit: type=1400 audit(1751642312.453:5736): avc: denied { create } for pid=6135 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.728991][ T29] audit: type=1400 audit(1751642312.463:5737): avc: denied { create } for pid=6135 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.749163][ T29] audit: type=1400 audit(1751642312.463:5738): avc: denied { name_bind } for pid=6135 comm="syz.3.832" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.794825][ T6139] lo speed is unknown, defaulting to 1000 [ 105.887054][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 106.118308][ T6152] loop1: detected capacity change from 0 to 512 [ 106.118788][ T6153] netlink: 'syz.0.848': attribute type 4 has an invalid length. [ 106.132346][ T6153] netlink: 17 bytes leftover after parsing attributes in process `syz.0.848'. [ 106.142074][ T6152] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 106.157139][ T6152] EXT4-fs (loop1): mount failed [ 106.171644][ T6157] tipc: Failed to remove unknown binding: 66,1,1/0:2967455650/2967455652 [ 106.238217][ T6160] tipc: Failed to remove unknown binding: 66,1,1/0:2967455650/2967455652 [ 106.246876][ T6160] tipc: Failed to remove unknown binding: 66,1,1/0:2967455650/2967455652 [ 106.382301][ T6163] netlink: 256 bytes leftover after parsing attributes in process `syz.1.838'. [ 106.531787][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.841'. [ 106.533851][ T6167] netlink: 'syz.2.840': attribute type 4 has an invalid length. [ 106.548442][ T6167] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.840'. [ 106.613880][ T3900] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 107.120357][ T6175] lo speed is unknown, defaulting to 1000 [ 107.165251][ T6178] netlink: 260 bytes leftover after parsing attributes in process `syz.1.843'. [ 107.174263][ T6178] netlink: 260 bytes leftover after parsing attributes in process `syz.1.843'. [ 107.282547][ T6181] sd 0:0:1:0: device reset [ 107.355660][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.377409][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.499231][ T6203] netlink: 'syz.3.852': attribute type 4 has an invalid length. [ 107.506993][ T6203] netlink: 17 bytes leftover after parsing attributes in process `syz.3.852'. [ 107.624292][ T6209] bond0: (slave veth0_to_hsr): Enslaving as an active interface with a down link [ 108.288444][ T6223] tipc: Failed to remove unknown binding: 66,1,1/0:1140841957/1140841959 [ 108.298340][ T6223] tipc: Failed to remove unknown binding: 66,1,1/0:1140841957/1140841959 [ 108.306867][ T6223] tipc: Failed to remove unknown binding: 66,1,1/0:1140841957/1140841959 [ 108.440808][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 108.459612][ T6231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.466879][ T6231] IPv6: NLM_F_CREATE should be set when creating new route [ 108.512872][ T6231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.520296][ T6231] IPv6: NLM_F_CREATE should be set when creating new route [ 108.631942][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 108.691833][ T6244] loop3: detected capacity change from 0 to 256 [ 108.901955][ T6251] tipc: Failed to obtain node identity [ 108.907451][ T6251] tipc: Enabling of bearer rejected, failed to enable media [ 108.939005][ T6255] loop3: detected capacity change from 0 to 512 [ 108.964923][ T6255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.979126][ T6255] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.997630][ T6255] EXT4-fs error (device loop3): ext4_get_first_dir_block:3547: inode #12: comm syz.3.866: directory missing '..' [ 109.022473][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.317049][ T6270] bridge0: entered allmulticast mode [ 109.640061][ T6276] tipc: Started in network mode [ 109.645018][ T6276] tipc: Node identity f2a3bba5daff, cluster identity 4711 [ 109.652256][ T6276] tipc: Enabled bearer , priority 0 [ 110.071066][ T6275] tipc: Resetting bearer [ 110.094652][ T6275] tipc: Disabling bearer [ 110.313860][ T6302] netlink: 'syz.2.885': attribute type 4 has an invalid length. [ 110.334987][ T6304] loop3: detected capacity change from 0 to 1024 [ 110.351075][ T6304] EXT4-fs: Ignoring removed orlov option [ 110.409776][ T6304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.481930][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 110.482024][ T29] audit: type=1400 audit(1751642317.283:6488): avc: denied { read write } for pid=6303 comm="+}[@" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.510514][ T29] audit: type=1400 audit(1751642317.283:6489): avc: denied { open } for pid=6303 comm="+}[@" path="/161/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.650828][ T29] audit: type=1400 audit(1751642317.343:6490): avc: denied { remove_name } for pid=3313 comm="syz-executor" name="memory.events" dev="tmpfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 110.678597][ T29] audit: type=1400 audit(1751642317.343:6491): avc: denied { unlink } for pid=3313 comm="syz-executor" name="memory.events" dev="tmpfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.701651][ T29] audit: type=1400 audit(1751642317.343:6492): avc: denied { rmdir } for pid=3313 comm="syz-executor" name="198" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 110.727902][ T29] audit: type=1400 audit(1751642317.353:6493): avc: denied { create } for pid=6314 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.747214][ T29] audit: type=1400 audit(1751642317.403:6494): avc: denied { read } for pid=6303 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.794709][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.833525][ T6318] xt_hashlimit: size too large, truncated to 1048576 [ 110.931460][ T6323] __nla_validate_parse: 4 callbacks suppressed [ 110.931476][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 111.950288][ T29] audit: type=1400 audit(1751642318.743:6495): avc: denied { map } for pid=6336 comm="syz.1.897" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.964546][ T6338] loop3: detected capacity change from 0 to 512 [ 111.974426][ T29] audit: type=1400 audit(1751642318.743:6496): avc: denied { read write } for pid=6336 comm="syz.1.897" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.048549][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 112.148426][ T29] audit: type=1400 audit(1751642318.943:6497): avc: denied { read } for pid=6344 comm="syz.3.911" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.949313][ T6371] lo speed is unknown, defaulting to 1000 [ 113.252232][ T6379] : renamed from vlan0 [ 113.536206][ T6399] netem: change failed [ 113.552642][ T6395] loop0: detected capacity change from 0 to 8192 [ 113.613292][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'. [ 113.641096][ T6403] lo speed is unknown, defaulting to 1000 [ 113.671101][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.684626][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.932073][ T6413] C: renamed from team_slave_0 [ 113.944710][ T6413] netlink: 'syz.2.921': attribute type 3 has an invalid length. [ 113.952937][ T6413] netlink: 152 bytes leftover after parsing attributes in process `syz.2.921'. [ 113.962150][ T6413] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 114.739044][ T6426] lo speed is unknown, defaulting to 1000 [ 114.988139][ T6445] loop3: detected capacity change from 0 to 512 [ 114.999219][ T6445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.057572][ T6445] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.065128][ T6445] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.932: bg 0: block 248: padding at end of block bitmap is not set [ 115.079996][ T6445] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.932: Failed to acquire dquot type 1 [ 115.092447][ T6445] EXT4-fs (loop3): 1 truncate cleaned up [ 115.099689][ T6445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.275438][ T6441] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 115.572347][ T6453] netlink: 100 bytes leftover after parsing attributes in process `syz.0.935'. [ 115.648443][ T6454] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 115.881125][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 115.902364][ T6459] loop0: detected capacity change from 0 to 164 [ 115.922124][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 116.145515][ T6459] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.184554][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 116.184568][ T29] audit: type=1400 audit(1751642322.973:6696): avc: denied { mount } for pid=6458 comm="syz.0.937" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 116.215149][ T29] audit: type=1400 audit(1751642322.973:6697): avc: denied { mounton } for pid=6458 comm="syz.0.937" path="/194/file0" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 116.238325][ T29] audit: type=1400 audit(1751642322.983:6698): avc: denied { create } for pid=6458 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 116.726765][ T6459] lo speed is unknown, defaulting to 1000 [ 116.884143][ T29] audit: type=1400 audit(1751642322.993:6699): avc: denied { sys_admin } for pid=6458 comm="syz.0.937" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 116.937061][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.064231][ T6482] bridge0: entered allmulticast mode [ 117.244056][ T29] audit: type=1400 audit(1751642324.043:6700): avc: denied { create } for pid=6484 comm="syz.2.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.284580][ T29] audit: type=1400 audit(1751642324.063:6701): avc: denied { setopt } for pid=6484 comm="syz.2.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.693040][ T29] audit: type=1326 audit(1751642325.493:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 118.698376][ T6495] netlink: 48 bytes leftover after parsing attributes in process `syz.4.949'. [ 118.723107][ T29] audit: type=1326 audit(1751642325.493:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 118.725319][ T6495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.949'. [ 118.748549][ T29] audit: type=1326 audit(1751642325.493:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 118.780748][ T29] audit: type=1326 audit(1751642325.493:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.4.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 118.780892][ T6498] loop1: detected capacity change from 0 to 2048 [ 118.807403][ T6502] veth0: entered promiscuous mode [ 118.812852][ T6503] netlink: 'syz.4.949': attribute type 21 has an invalid length. [ 118.823565][ T6503] netlink: 'syz.4.949': attribute type 20 has an invalid length. [ 118.831928][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 118.848007][ T6499] veth0 (unregistering): left promiscuous mode [ 118.848626][ T6498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.867535][ T36] IPVS: starting estimator thread 0... [ 118.886124][ T6507] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.951'. [ 118.896791][ T6498] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.909766][ T6512] netem: change failed [ 118.944202][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'. [ 118.953378][ T6498] netlink: 4284 bytes leftover after parsing attributes in process `syz.1.950'. [ 118.962516][ T6510] IPVS: using max 2688 ests per chain, 134400 per kthread [ 118.978828][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.011348][ T6520] loop3: detected capacity change from 0 to 512 [ 119.013452][ T6524] netlink: 100 bytes leftover after parsing attributes in process `syz.1.955'. [ 119.034991][ T6520] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.035664][ T6524] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 119.047827][ T6520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.956: bg 0: block 248: padding at end of block bitmap is not set [ 119.070594][ T6520] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.956: Failed to acquire dquot type 1 [ 119.084474][ T6531] loop1: detected capacity change from 0 to 512 [ 119.086980][ T6520] EXT4-fs (loop3): 1 truncate cleaned up [ 119.092422][ T6531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 119.104656][ T6531] System zones: 1-12 [ 119.108990][ T6520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.109012][ T6531] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.960: invalid indirect mapped block 8 (level 2) [ 119.135289][ T6531] EXT4-fs (loop1): Remounting filesystem read-only [ 119.142742][ T6531] EXT4-fs (loop1): 1 truncate cleaned up [ 119.149080][ T6531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.161977][ T6520] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 119.199738][ T6538] loop4: detected capacity change from 0 to 1024 [ 119.221674][ T6520] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 119.231445][ T6538] EXT4-fs: Ignoring removed i_version option [ 119.240259][ T6531] netlink: 'syz.1.960': attribute type 39 has an invalid length. [ 119.253217][ T6538] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.265495][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 119.286963][ T6538] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.961: Invalid block bitmap block 0 in block_group 0 [ 119.311743][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.323597][ T6538] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.961: Failed to acquire dquot type 0 [ 119.336430][ T6538] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.961: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.351231][ T6538] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.961: Invalid inode bitmap blk 0 in block_group 0 [ 119.370642][ T6538] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 119.370958][ T3879] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0 [ 119.390825][ T6538] EXT4-fs (loop4): 1 orphan inode deleted [ 119.402608][ T6538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.427655][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.443764][ T6549] loop3: detected capacity change from 0 to 8192 [ 119.493014][ T6553] loop1: detected capacity change from 0 to 256 [ 119.511141][ T6553] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.531761][ T6553] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.540510][ T6553] FAT-fs (loop1): Filesystem has been set read-only [ 119.636114][ T6559] veth0: entered promiscuous mode [ 119.658471][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 119.682437][ T6559] veth0 (unregistering): left promiscuous mode [ 119.814941][ T6566] pimreg: entered allmulticast mode [ 119.847565][ T6566] netlink: 'syz.1.968': attribute type 10 has an invalid length. [ 119.883982][ T6566] team0: Port device dummy0 added [ 119.903010][ T6571] netlink: 'syz.1.968': attribute type 10 has an invalid length. [ 119.941839][ T6571] team0: Port device dummy0 removed [ 119.952421][ T6571] $H: (slave dummy0): Enslaving as an active interface with an up link [ 119.993913][ T6566] pimreg: left allmulticast mode [ 120.113730][ T6580] veth0_to_bond: left allmulticast mode [ 120.119406][ T6580] veth0_to_bond: left promiscuous mode [ 120.125165][ T6580] bridge0: port 1(veth0_to_bond) entered disabled state [ 120.363504][ T6591] veth0: entered promiscuous mode [ 120.368883][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 120.378240][ T6591] veth0 (unregistering): left promiscuous mode [ 120.460315][ T6593] loop1: detected capacity change from 0 to 512 [ 120.467883][ T6593] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 120.500823][ T6595] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.509216][ T6595] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.517718][ T6595] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.526128][ T6595] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.550488][ T6595] $H: (slave geneve1): Releasing backup interface [ 120.557274][ T6595] $H: (slave geneve1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:41 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 120.824781][ T6605] lo speed is unknown, defaulting to 1000 [ 122.042321][ T6622] syzkaller0: entered allmulticast mode [ 122.054504][ T6622] syzkaller0 (unregistering): left allmulticast mode [ 122.210913][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 122.210929][ T29] audit: type=1400 audit(1751642329.003:7109): avc: denied { mount } for pid=6624 comm="syz.1.994" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 122.290296][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.349989][ T29] audit: type=1400 audit(1751642329.143:7110): avc: denied { create } for pid=6630 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.380191][ T29] audit: type=1400 audit(1751642329.173:7111): avc: denied { bind } for pid=6630 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.399376][ T29] audit: type=1400 audit(1751642329.173:7112): avc: denied { write } for pid=6630 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.148572][ T6649] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 123.158553][ T29] audit: type=1400 audit(1751642329.953:7113): avc: denied { relabelto } for pid=6648 comm="syz.0.1001" name="file0" dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_mac_exec_t:s0" [ 123.205452][ T29] audit: type=1400 audit(1751642329.953:7114): avc: denied { associate } for pid=6648 comm="syz.0.1001" name="file0" dev="tmpfs" ino=1106 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_mac_exec_t:s0" [ 123.233149][ T29] audit: type=1326 audit(1751642329.993:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 123.256775][ T29] audit: type=1326 audit(1751642329.993:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 123.266183][ T6651] loop4: detected capacity change from 0 to 2048 [ 123.280288][ T29] audit: type=1326 audit(1751642329.993:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 123.310156][ T29] audit: type=1326 audit(1751642329.993:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6650 comm="syz.4.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc98fe9e929 code=0x7ffc0000 [ 123.404086][ T6651] Alternate GPT is invalid, using primary GPT. [ 123.410438][ T6651] loop4: p1 p2 p3 [ 123.484133][ T6665] loop4: detected capacity change from 0 to 512 [ 123.491154][ T6665] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.502987][ T6665] EXT4-fs (loop4): 1 truncate cleaned up [ 123.509047][ T6665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.638746][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.953889][ T6681] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.962260][ T6681] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.970483][ T6681] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.978725][ T6681] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.987793][ T6681] vxlan0: entered promiscuous mode [ 123.993105][ T6681] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 124.033197][ T6686] syzkaller0: entered allmulticast mode [ 124.048317][ T6686] syzkaller0 (unregistering): left allmulticast mode [ 124.295928][ T6697] xt_hashlimit: max too large, truncated to 1048576 [ 124.426915][ T6709] tipc: Enabling of bearer rejected, failed to enable media [ 124.601601][ T6716] __nla_validate_parse: 1 callbacks suppressed [ 124.601617][ T6716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1026'. [ 124.616859][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1026'. [ 124.625836][ T6716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1026'. [ 124.706762][ T6716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1026'. [ 124.746784][ T6727] syzkaller0: entered allmulticast mode [ 124.845031][ T6727] syzkaller0 (unregistering): left allmulticast mode [ 124.946046][ T6733] netlink: 'syz.2.1031': attribute type 13 has an invalid length. [ 124.988826][ T6733] 8021q: adding VLAN 0 to HW filter on device $H [ 124.997139][ T6733] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.006026][ T6733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.022090][ T36] lo speed is unknown, defaulting to 1000 [ 125.027879][ T36] syz0: Port: 1 Link ACTIVE [ 125.271230][ T6748] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 125.311072][ T6750] loop1: detected capacity change from 0 to 512 [ 125.318043][ T6750] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.332450][ T6750] EXT4-fs (loop1): 1 truncate cleaned up [ 125.350305][ T6750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.383444][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.446819][ T6757] lo speed is unknown, defaulting to 1000 [ 126.169627][ T6760] Set syz1 is full, maxelem 65536 reached [ 126.186926][ T6768] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 126.275187][ T6770] syzkaller0: entered allmulticast mode [ 126.291077][ T6770] syzkaller0 (unregistering): left allmulticast mode [ 126.311046][ T6776] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 126.545775][ T6781] loop3: detected capacity change from 0 to 2048 [ 126.605739][ T6781] Alternate GPT is invalid, using primary GPT. [ 126.612168][ T6781] loop3: p1 p2 p3 [ 126.628667][ T6786] bond2: (slave gretap1): Releasing active interface [ 126.929899][ T6792] lo speed is unknown, defaulting to 1000 [ 126.964773][ T6797] loop1: detected capacity change from 0 to 512 [ 126.972500][ T6797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.982649][ T6797] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.989825][ T6797] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1051: bg 0: block 248: padding at end of block bitmap is not set [ 127.004631][ T6797] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1051: Failed to acquire dquot type 1 [ 127.017011][ T6797] EXT4-fs (loop1): 1 truncate cleaned up [ 127.024874][ T6797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.100393][ T6802] loop3: detected capacity change from 0 to 2048 [ 128.181874][ T6802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.310613][ T6802] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.356348][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.386108][ T6807] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 128.527102][ T6811] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1058'. [ 128.583628][ T6817] netlink: 'syz.0.1060': attribute type 10 has an invalid length. [ 128.604859][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 128.604888][ T29] audit: type=1400 audit(1751642335.373:7337): avc: denied { read } for pid=6814 comm="syz.2.1059" path="socket:[19703]" dev="sockfs" ino=19703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.725357][ T6823] loop4: detected capacity change from 0 to 1024 [ 128.732305][ T6823] EXT4-fs: Ignoring removed orlov option [ 128.740710][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.751045][ T6823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.752485][ T6826] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 128.765990][ T29] audit: type=1400 audit(1751642335.563:7338): avc: denied { write } for pid=6822 comm="syz.4.1063" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.777427][ T6826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.793956][ T29] audit: type=1400 audit(1751642335.573:7339): avc: denied { create } for pid=6822 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 128.841324][ T6826] netlink: 'syz.3.1056': attribute type 21 has an invalid length. [ 128.849212][ T6826] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 128.856981][ T6826] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1056'. [ 128.871940][ T6826] veth9: entered promiscuous mode [ 128.883829][ T6826] vlan2: entered allmulticast mode [ 128.889053][ T6826] bond3: entered allmulticast mode [ 128.969018][ T6835] netlink: 'syz.2.1066': attribute type 1 has an invalid length. [ 128.969882][ T6836] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 128.996250][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.996888][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.036348][ T6836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.056652][ T6840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.066807][ T6840] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 129.090150][ T6840] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 129.090588][ T29] audit: type=1400 audit(1751642335.883:7340): avc: denied { create } for pid=6833 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 129.143353][ T29] audit: type=1400 audit(1751642335.923:7341): avc: denied { write } for pid=6833 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 129.171962][ T6836] veth1: entered promiscuous mode [ 129.181037][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1074'. [ 129.182300][ T6836] bond3: (slave veth1): Enslaving as an active interface with a down link [ 129.199081][ T6847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.234724][ T6843] bond0: (slave gretap1): making interface the new active one [ 129.260302][ T6843] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 129.309555][ T6843] syz.2.1066 (6843) used greatest stack depth: 9128 bytes left [ 129.370732][ T6853] lo speed is unknown, defaulting to 1000 [ 129.390467][ T29] audit: type=1400 audit(1751642336.183:7342): avc: denied { load_policy } for pid=6857 comm="syz.1.1072" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 129.422540][ T6858] netlink: 'syz.1.1072': attribute type 13 has an invalid length. [ 129.450241][ T6858] 8021q: adding VLAN 0 to HW filter on device $H [ 129.471366][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.487071][ T6858] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 129.530996][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 129.564039][ T29] audit: type=1400 audit(1751642336.363:7343): avc: denied { setattr } for pid=6872 comm="syz.3.1077" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.611650][ T6875] loop1: detected capacity change from 0 to 512 [ 129.623744][ T6875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.637455][ T6875] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.657818][ T29] audit: type=1326 audit(1751642336.453:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 129.681396][ T29] audit: type=1326 audit(1751642336.453:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 129.704884][ T29] audit: type=1326 audit(1751642336.453:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 129.743495][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.796239][ T6887] netlink: 'syz.1.1081': attribute type 10 has an invalid length. [ 129.797237][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 129.826690][ T6887] @: entered allmulticast mode [ 129.832241][ T6887] @: left promiscuous mode [ 129.837480][ T6887] @: entered promiscuous mode [ 129.843473][ T6887] team0: Device 4@ failed to register rx_handler [ 130.460801][ T3399] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 130.468673][ T152] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 130.514642][ T6907] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 130.566475][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 130.595214][ T6908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.603727][ T6908] bond4: (slave batadv0): Enslaving as a backup interface with an up link [ 130.643937][ T6907] bond4 (unregistering): (slave batadv0): Releasing backup interface [ 130.678310][ T6907] bond4 (unregistering): Released all slaves [ 130.838030][ T6911] loop3: detected capacity change from 0 to 2048 [ 130.861880][ T6911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.967016][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.987847][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 131.152819][ T6930] lo speed is unknown, defaulting to 1000 [ 131.368506][ T6936] loop1: detected capacity change from 0 to 512 [ 131.395886][ T6936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.408709][ T6936] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.505885][ T3879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 131.513779][ T3879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 131.650626][ T3399] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 132.721468][ T6942] bond2: (slave gretap1): Releasing active interface [ 133.222546][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 133.231747][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'. [ 133.240916][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 133.250821][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 133.251876][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.272967][ T6942] bond0: (slave vxlan0): Releasing backup interface [ 133.283192][ T6942] vxlan0: left promiscuous mode [ 133.290543][ T6942] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.299004][ T6942] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.307393][ T6942] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.315818][ T6942] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.438055][ T6953] lo speed is unknown, defaulting to 1000 [ 133.700436][ T6975] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1109'. [ 133.803102][ T6978] batadv0 (unregistering): left promiscuous mode [ 134.002444][ T6973] C: renamed from team_slave_0 [ 134.012268][ T6973] netlink: 'syz.3.1107': attribute type 3 has an invalid length. [ 134.020085][ T6973] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1107'. [ 134.029154][ T6973] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 134.224634][ T6986] netlink: 'syz.0.1113': attribute type 39 has an invalid length. [ 134.380041][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 134.380056][ T29] audit: type=1400 audit(1751642341.173:7447): avc: denied { write } for pid=6991 comm="syz.3.1115" name="ip_tables_targets" dev="proc" ino=4026532816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 134.628873][ T7001] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 134.651250][ T7001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.668528][ T7001] netlink: 'syz.1.1117': attribute type 21 has an invalid length. [ 134.676468][ T7001] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 134.684231][ T7001] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1117'. [ 134.703723][ T7001] veth1: entered promiscuous mode [ 134.728064][ T7001] vlan2: entered allmulticast mode [ 134.733266][ T7001] bond3: entered allmulticast mode [ 134.785802][ T7006] loop4: detected capacity change from 0 to 1024 [ 134.814366][ T7006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.284073][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.660606][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 136.625503][ T7039] loop4: detected capacity change from 0 to 512 [ 136.645063][ T29] audit: type=1326 audit(1751642343.443:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 136.668721][ T29] audit: type=1326 audit(1751642343.443:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 136.692144][ T29] audit: type=1326 audit(1751642343.443:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 136.715740][ T29] audit: type=1326 audit(1751642343.443:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 136.739175][ T29] audit: type=1326 audit(1751642343.443:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 136.762712][ T29] audit: type=1326 audit(1751642343.443:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 136.786369][ T29] audit: type=1326 audit(1751642343.443:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 136.809855][ T29] audit: type=1326 audit(1751642343.443:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 136.834181][ T29] audit: type=1326 audit(1751642343.443:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7040 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 136.864055][ T7045] loop3: detected capacity change from 0 to 128 [ 136.873309][ T7045] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.886237][ T7039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.900718][ T7045] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.902892][ T7039] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.944985][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.968641][ T7055] netlink: 'syz.3.1131': attribute type 1 has an invalid length. [ 136.978251][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.996856][ T7055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.013368][ T7055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.020837][ T7055] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.032472][ T7055] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 137.067573][ T7057] veth11: entered promiscuous mode [ 137.074492][ T7057] bond4: (slave veth11): Enslaving as an active interface with a down link [ 137.089288][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1131'. [ 137.099140][ T7057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.207976][ T7064] loop4: detected capacity change from 0 to 256 [ 137.329818][ T7078] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 137.341206][ T7078] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 138.126800][ T7104] loop3: detected capacity change from 0 to 512 [ 138.142696][ T7104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.155437][ T7104] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.341042][ T7113] loop1: detected capacity change from 0 to 128 [ 138.348771][ T7113] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.361258][ T7113] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.384237][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.698049][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.201398][ T7134] loop4: detected capacity change from 0 to 1024 [ 139.243921][ T7134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.407457][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.576719][ T7146] netlink: 'syz.4.1162': attribute type 27 has an invalid length. [ 139.606829][ T7148] loop1: detected capacity change from 0 to 1024 [ 139.614883][ T7146] gretap1: left promiscuous mode [ 139.620828][ T7148] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 139.631723][ T7148] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 139.660692][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 139.660707][ T29] audit: type=1400 audit(1751642346.453:7524): avc: denied { append } for pid=7149 comm="syz.4.1164" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.721459][ T7153] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 139.772763][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 139.849811][ T7156] bond3 (unregistering): Released all slaves [ 140.064458][ T7148] JBD2: no valid journal superblock found [ 140.070253][ T7148] EXT4-fs (loop1): Could not load journal inode [ 140.095208][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 140.104205][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 140.167335][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 140.189919][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 140.198964][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 140.208106][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 140.235391][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 140.244310][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 140.295953][ T7169] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 140.304808][ T7172] loop4: detected capacity change from 0 to 128 [ 140.313146][ T7172] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.325707][ T7172] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.352504][ T7169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.387998][ T7166] netlink: 'syz.2.1169': attribute type 4 has an invalid length. [ 140.400203][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.528705][ T7182] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 140.540367][ T7178] bond4: (slave gretap2): making interface the new active one [ 140.550340][ T7183] loop4: detected capacity change from 0 to 2048 [ 140.555314][ T7178] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 140.565412][ T9] lo speed is unknown, defaulting to 1000 [ 140.571188][ T9] syz0: Port: 1 Link DOWN [ 140.611568][ T7183] loop4: p4 < > [ 140.709627][ T7193] tipc: New replicast peer: 255.255.255.255 [ 140.715831][ T7193] tipc: Enabled bearer , priority 10 [ 140.722380][ T29] audit: type=1400 audit(1751642347.473:7525): avc: denied { write } for pid=7181 comm="syz.4.1172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.814916][ T7198] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 140.870009][ T29] audit: type=1400 audit(1751642347.663:7526): avc: denied { kexec_image_load } for pid=7188 comm="syz.1.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 141.151839][ T7198] bond2 (unregistering): Released all slaves [ 141.624052][ T7209] loop3: detected capacity change from 0 to 512 [ 141.631455][ T7209] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.648231][ T7209] EXT4-fs (loop3): 1 truncate cleaned up [ 141.657824][ T7209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.692612][ T29] audit: type=1326 audit(1751642348.493:7527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 141.716191][ T29] audit: type=1326 audit(1751642348.493:7528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 141.753266][ T9] tipc: Node number set to 2311824374 [ 141.759138][ T29] audit: type=1326 audit(1751642348.493:7529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 141.782581][ T29] audit: type=1326 audit(1751642348.493:7530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 141.806346][ T29] audit: type=1326 audit(1751642348.493:7531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 141.829923][ T29] audit: type=1326 audit(1751642348.493:7532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 141.853367][ T29] audit: type=1326 audit(1751642348.493:7533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.3.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 141.855262][ T7226] loop4: detected capacity change from 0 to 1024 [ 141.887881][ T7219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7219 comm=syz.2.1181 [ 141.892176][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.900453][ T7219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7219 comm=syz.2.1181 [ 141.923528][ T7226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.954133][ T7231] loop3: detected capacity change from 0 to 128 [ 141.964606][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.975362][ T7231] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.997713][ T7231] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.146196][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.227954][ T7242] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.958710][ T7254] loop1: detected capacity change from 0 to 512 [ 142.965718][ T7254] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.977000][ T7254] EXT4-fs (loop1): 1 truncate cleaned up [ 142.986414][ T7254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.006598][ T7257] netlink: 'syz.4.1196': attribute type 4 has an invalid length. [ 143.029495][ T7257] netlink: 'syz.4.1196': attribute type 4 has an invalid length. [ 143.038563][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.090818][ T7263] netlink: 'syz.0.1194': attribute type 4 has an invalid length. [ 143.174942][ T7269] tipc: Enabling of bearer rejected, failed to enable media [ 143.556356][ T7297] lo speed is unknown, defaulting to 1000 [ 144.028580][ T7305] __nla_validate_parse: 2 callbacks suppressed [ 144.028629][ T7305] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1220'. [ 144.096005][ T7308] dvmrp1: entered allmulticast mode [ 144.246012][ T7329] loop1: detected capacity change from 0 to 128 [ 144.254074][ T7329] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.266457][ T7329] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.300581][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 144.340450][ T7331] loop3: detected capacity change from 0 to 512 [ 144.402509][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.452995][ T7331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.465574][ T7331] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.671235][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 144.671249][ T29] audit: type=1326 audit(1751642351.473:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4744c58e7 code=0x7ffc0000 [ 144.701969][ T29] audit: type=1326 audit(1751642351.503:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb47446ab19 code=0x7ffc0000 [ 144.725404][ T29] audit: type=1326 audit(1751642351.503:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4744c58e7 code=0x7ffc0000 [ 144.749206][ T29] audit: type=1326 audit(1751642351.503:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb47446ab19 code=0x7ffc0000 [ 144.772553][ T29] audit: type=1326 audit(1751642351.503:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb4744ce929 code=0x7ffc0000 [ 144.797215][ T29] audit: type=1326 audit(1751642351.593:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4744c58e7 code=0x7ffc0000 [ 144.820642][ T29] audit: type=1326 audit(1751642351.593:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb47446ab19 code=0x7ffc0000 [ 144.843959][ T29] audit: type=1326 audit(1751642351.593:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb4744ce929 code=0x7ffc0000 [ 144.867958][ T29] audit: type=1326 audit(1751642351.663:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4744c58e7 code=0x7ffc0000 [ 144.891401][ T29] audit: type=1326 audit(1751642351.663:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb47446ab19 code=0x7ffc0000 [ 145.609426][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 145.635991][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 145.840074][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.069483][ T7368] netlink: 'syz.2.1232': attribute type 4 has an invalid length. [ 146.145254][ T7372] : renamed from bridge_slave_0 [ 146.236218][ T7376] tipc: New replicast peer: 10.1.1.2 [ 146.241735][ T7376] tipc: Enabled bearer , priority 10 [ 146.368270][ T7383] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 146.376443][ T7383] tipc: Enabled bearer , priority 10 [ 146.405051][ T7388] loop3: detected capacity change from 0 to 512 [ 146.420082][ T7388] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.455013][ T7388] EXT4-fs (loop3): 1 truncate cleaned up [ 146.474083][ T7388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.483570][ T7362] syz.0.1231 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 146.496933][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.0.1231 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 146.496963][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.496974][ T7362] Call Trace: [ 146.496979][ T7362] [ 146.496985][ T7362] __dump_stack+0x1d/0x30 [ 146.497003][ T7362] dump_stack_lvl+0xe8/0x140 [ 146.497038][ T7362] dump_stack+0x15/0x1b [ 146.497053][ T7362] dump_header+0x81/0x220 [ 146.497082][ T7362] oom_kill_process+0x334/0x3f0 [ 146.497125][ T7362] out_of_memory+0x979/0xb80 [ 146.497223][ T7362] try_charge_memcg+0x5e6/0x9e0 [ 146.497250][ T7362] charge_memcg+0x51/0xc0 [ 146.497278][ T7362] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 146.497324][ T7362] __read_swap_cache_async+0x1df/0x350 [ 146.497353][ T7362] swap_cluster_readahead+0x277/0x3e0 [ 146.497407][ T7362] swapin_readahead+0xde/0x6f0 [ 146.497459][ T7362] ? __filemap_get_folio+0x4f7/0x6b0 [ 146.497487][ T7362] ? swap_cache_get_folio+0x77/0x200 [ 146.497513][ T7362] do_swap_page+0x301/0x2430 [ 146.497533][ T7362] ? css_rstat_updated+0xcd/0x5b0 [ 146.497609][ T7362] ? __pfx_default_wake_function+0x10/0x10 [ 146.497633][ T7362] handle_mm_fault+0x9a5/0x2be0 [ 146.497655][ T7362] ? mas_walk+0xf2/0x120 [ 146.497754][ T7362] do_user_addr_fault+0x636/0x1090 [ 146.497780][ T7362] ? fpregs_restore_userregs+0xe2/0x1d0 [ 146.497865][ T7362] ? switch_fpu_return+0xe/0x20 [ 146.497954][ T7362] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 146.497980][ T7362] exc_page_fault+0x62/0xa0 [ 146.498005][ T7362] asm_exc_page_fault+0x26/0x30 [ 146.498024][ T7362] RIP: 0033:0x7f0264a8538c [ 146.498043][ T7362] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 146.498113][ T7362] RSP: 002b:00007ffc3c978c10 EFLAGS: 00010202 [ 146.498172][ T7362] RAX: 0000000000000000 RBX: 00007f0264dd5fa0 RCX: 0000000000000000 [ 146.498183][ T7362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558ae00808 [ 146.498195][ T7362] RBP: 00007f0264dd7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 146.498207][ T7362] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000023cb5 [ 146.498220][ T7362] R13: 00007f0264dd6080 R14: ffffffffffffffff R15: 00007ffc3c978d20 [ 146.498238][ T7362] [ 146.498323][ T7362] memory: usage 307200kB, limit 307200kB, failcnt 219 [ 146.731190][ T7362] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 146.739189][ T7362] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 146.746641][ T7362] Memory cgroup stats for /syz0: [ 146.746924][ T7362] cache 0 [ 146.754916][ T7362] rss 0 [ 146.757742][ T7362] shmem 0 [ 146.760706][ T7362] mapped_file 0 [ 146.764218][ T7362] dirty 0 [ 146.767148][ T7362] writeback 8192 [ 146.770717][ T7362] workingset_refault_anon 38 [ 146.775315][ T7362] workingset_refault_file 32 [ 146.779957][ T7362] swap 286720 [ 146.783264][ T7362] swapcached 8192 [ 146.786887][ T7362] pgpgin 191117 [ 146.790340][ T7362] pgpgout 191115 [ 146.793937][ T7362] pgfault 176997 [ 146.797601][ T7362] pgmajfault 24 [ 146.801093][ T7362] inactive_anon 8192 [ 146.804981][ T7362] active_anon 0 [ 146.808430][ T7362] inactive_file 0 [ 146.812132][ T7362] active_file 0 [ 146.815650][ T7362] unevictable 0 [ 146.819140][ T7362] hierarchical_memory_limit 314572800 [ 146.824521][ T7362] hierarchical_memsw_limit 9223372036854771712 [ 146.830689][ T7362] total_cache 0 [ 146.834143][ T7362] total_rss 0 [ 146.837418][ T7362] total_shmem 0 [ 146.840881][ T7362] total_mapped_file 0 [ 146.844858][ T7362] total_dirty 0 [ 146.848307][ T7362] total_writeback 8192 [ 146.852404][ T7362] total_workingset_refault_anon 38 [ 146.857502][ T7362] total_workingset_refault_file 32 [ 146.862620][ T7362] total_swap 286720 [ 146.866497][ T7362] total_swapcached 8192 [ 146.870663][ T7362] total_pgpgin 191117 [ 146.874639][ T7362] total_pgpgout 191115 [ 146.878693][ T7362] total_pgfault 176997 [ 146.882771][ T7362] total_pgmajfault 24 [ 146.886745][ T7362] total_inactive_anon 8192 [ 146.891177][ T7362] total_active_anon 0 [ 146.895152][ T7362] total_inactive_file 0 [ 146.899300][ T7362] total_active_file 0 [ 146.903289][ T7362] total_unevictable 0 [ 146.907308][ T7362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1231,pid=7362,uid=0 [ 146.922008][ T7362] Memory cgroup out of memory: Killed process 7362 (syz.0.1231) total-vm:93756kB, anon-rss:940kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 146.969986][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.078260][ T7401] loop4: detected capacity change from 0 to 512 [ 147.116566][ T7401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.149983][ T7401] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.348026][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.370559][ T36] tipc: Node number set to 677165989 [ 147.370676][ T9] tipc: Node number set to 2798212787 [ 147.390853][ T7363] syz.0.1231 (7363) used greatest stack depth: 7000 bytes left [ 147.475346][ T7417] loop3: detected capacity change from 0 to 1024 [ 147.491255][ T7417] EXT4-fs: Ignoring removed orlov option [ 147.508933][ T7417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.900600][ T7430] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 147.907152][ T7430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.914705][ T7430] vhci_hcd vhci_hcd.0: Device attached [ 147.932766][ T7430] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 147.939383][ T7430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 147.947103][ T7430] vhci_hcd vhci_hcd.0: Device attached [ 147.964732][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.994102][ T7437] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 148.000652][ T7437] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.008187][ T7437] vhci_hcd vhci_hcd.0: Device attached [ 148.040646][ T7430] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(8) [ 148.047224][ T7430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.054973][ T7430] vhci_hcd vhci_hcd.0: Device attached [ 148.091046][ T7430] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 148.097696][ T7430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.105303][ T7430] vhci_hcd vhci_hcd.0: Device attached [ 148.141513][ T7441] vhci_hcd: connection closed [ 148.141589][ T7444] vhci_hcd: connection closed [ 148.146406][ T31] vhci_hcd: stop threads [ 148.155535][ T31] vhci_hcd: release socket [ 148.159993][ T31] vhci_hcd: disconnect device [ 148.164921][ T7431] vhci_hcd: connection closed [ 148.165018][ T7434] vhci_hcd: connection closed [ 148.169732][ T7438] vhci_hcd: connection closed [ 148.170641][ T36] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 148.197753][ T31] vhci_hcd: stop threads [ 148.200613][ T7432] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 148.202167][ T31] vhci_hcd: release socket [ 148.212490][ T31] vhci_hcd: disconnect device [ 148.217374][ T31] vhci_hcd: stop threads [ 148.221664][ T31] vhci_hcd: release socket [ 148.226079][ T31] vhci_hcd: disconnect device [ 148.231203][ T31] vhci_hcd: stop threads [ 148.235510][ T31] vhci_hcd: release socket [ 148.239926][ T31] vhci_hcd: disconnect device [ 148.245598][ T31] vhci_hcd: stop threads [ 148.249865][ T31] vhci_hcd: release socket [ 148.254355][ T31] vhci_hcd: disconnect device [ 148.521389][ T7461] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7461 comm=syz.0.1260 [ 148.533934][ T7461] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7461 comm=syz.0.1260 [ 148.623711][ T7470] netlink: 'syz.1.1259': attribute type 11 has an invalid length. [ 148.631621][ T7470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1259'. [ 148.645525][ T7470] loop1: detected capacity change from 0 to 1024 [ 148.652273][ T7470] EXT4-fs: Ignoring removed nobh option [ 148.657842][ T7470] EXT4-fs: Ignoring removed nobh option [ 148.665348][ T7470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.680602][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 148.798495][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.881334][ T7485] loop3: detected capacity change from 0 to 2048 [ 148.888210][ T7485] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.916435][ T7485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.949338][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1268'. [ 148.967301][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.991220][ T7501] loop3: detected capacity change from 0 to 512 [ 149.001784][ T7501] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1272: casefold flag without casefold feature [ 149.032262][ T7501] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1272: couldn't read orphan inode 15 (err -117) [ 149.104723][ T7509] binfmt_misc: register: failed to install interpreter file ./file0 [ 149.107847][ T7501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.134338][ T7501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.181532][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1273'. [ 149.269262][ T7517] loop4: detected capacity change from 0 to 512 [ 149.294857][ T7517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.308024][ T7517] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.324120][ T7523] loop3: detected capacity change from 0 to 1024 [ 149.337515][ T7523] EXT4-fs: Ignoring removed nobh option [ 149.353323][ T7523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.370454][ T7523] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1288: Allocating blocks 385-513 which overlap fs metadata [ 149.389629][ T7523] EXT4-fs (loop3): pa ffff888106e4e540: logic 16, phys. 129, len 24 [ 149.397841][ T7523] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 149.422911][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.922636][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.937117][ T7541] loop1: detected capacity change from 0 to 512 [ 149.944122][ T7541] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.954991][ T7541] EXT4-fs (loop1): 1 truncate cleaned up [ 149.961299][ T7541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.490696][ T7551] syz.3.1282 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 150.859117][ T7550] lo speed is unknown, defaulting to 1000 [ 150.937007][ T7549] lo speed is unknown, defaulting to 1000 [ 150.983508][ T7556] loop4: detected capacity change from 0 to 512 [ 150.995643][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.007471][ T7556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.063546][ T7556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.076561][ T7556] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.095940][ T7556] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1285: corrupted xattr block 19: overlapping e_value [ 151.143925][ T7556] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 151.153116][ T7556] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1285: corrupted xattr block 19: overlapping e_value [ 151.161774][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 151.161788][ T29] audit: type=1326 audit(1751642357.963:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.196885][ T29] audit: type=1326 audit(1751642357.973:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.220358][ T29] audit: type=1326 audit(1751642357.973:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.243815][ T29] audit: type=1326 audit(1751642357.973:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.267287][ T29] audit: type=1326 audit(1751642357.973:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.290722][ T29] audit: type=1326 audit(1751642357.973:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.314183][ T29] audit: type=1326 audit(1751642357.973:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.337775][ T29] audit: type=1326 audit(1751642357.973:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.361187][ T29] audit: type=1326 audit(1751642357.973:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.384574][ T29] audit: type=1326 audit(1751642357.973:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 151.420909][ T7570] loop1: detected capacity change from 0 to 512 [ 151.428255][ T7556] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 151.438492][ T7556] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1285: corrupted xattr block 19: overlapping e_value [ 151.457878][ T7570] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1289: casefold flag without casefold feature [ 151.471728][ T7570] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1289: couldn't read orphan inode 15 (err -117) [ 151.485398][ T7570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.604297][ T7569] lo speed is unknown, defaulting to 1000 [ 151.624110][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.658748][ T7573] loop1: detected capacity change from 0 to 128 [ 151.683744][ T7573] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.698026][ T7573] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.709503][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.725147][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.743851][ T7580] wireguard0: entered promiscuous mode [ 151.749378][ T7580] wireguard0: entered allmulticast mode [ 152.199227][ T7622] netlink: 'syz.2.1311': attribute type 11 has an invalid length. [ 152.207220][ T7622] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1311'. [ 152.229601][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 152.842486][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 152.864045][ T7631] hsr_slave_0 (unregistering): left promiscuous mode [ 152.877898][ T7632] netlink: 'syz.1.1313': attribute type 13 has an invalid length. [ 152.901506][ T7632] erspan0: refused to change device tx_queue_len [ 152.907926][ T7632] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 152.994157][ T7641] netlink: 'syz.0.1327': attribute type 4 has an invalid length. [ 153.023460][ T7641] netlink: 'syz.0.1327': attribute type 4 has an invalid length. [ 153.064970][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 153.081034][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 153.148150][ T7652] loop3: detected capacity change from 0 to 512 [ 153.165617][ T7652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.191185][ T7652] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.232152][ T7658] loop1: detected capacity change from 0 to 128 [ 153.260658][ T36] usb 9-1: enqueue for inactive port 0 [ 153.266256][ T36] usb 9-1: enqueue for inactive port 0 [ 153.306833][ T7658] bio_check_eod: 10604 callbacks suppressed [ 153.306850][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.306850][ T7658] loop1: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 153.641502][ T36] vhci_hcd: vhci_device speed not set [ 153.647177][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.647177][ T7658] loop1: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 153.660847][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.660847][ T7658] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 153.674283][ T7658] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 153.682917][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.682917][ T7658] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 153.696312][ T7658] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 153.705119][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.705119][ T7658] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 153.718579][ T7658] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 153.760306][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.760306][ T7658] loop1: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 153.773845][ T7658] Buffer I/O error on dev loop1, logical block 145, lost async page write [ 153.820695][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.820695][ T7658] loop1: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 153.834190][ T7658] Buffer I/O error on dev loop1, logical block 146, lost async page write [ 153.847062][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.847062][ T7658] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 153.860646][ T7658] Buffer I/O error on dev loop1, logical block 147, lost async page write [ 153.869512][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.869512][ T7658] loop1: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 153.870832][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.882957][ T7658] Buffer I/O error on dev loop1, logical block 156, lost async page write [ 153.902887][ T7658] syz.1.1323: attempt to access beyond end of device [ 153.902887][ T7658] loop1: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 153.916343][ T7658] Buffer I/O error on dev loop1, logical block 157, lost async page write [ 153.925322][ T7658] Buffer I/O error on dev loop1, logical block 160, lost async page write [ 153.939411][ T7658] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 154.011437][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 154.458182][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 154.543291][ T7690] lo speed is unknown, defaulting to 1000 [ 154.601805][ T7692] lo speed is unknown, defaulting to 1000 [ 154.671314][ T7694] loop4: detected capacity change from 0 to 1024 [ 154.678086][ T7694] EXT4-fs: Ignoring removed orlov option [ 154.685936][ T7694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.874931][ T7703] hub 6-0:1.0: USB hub found [ 154.879760][ T7703] hub 6-0:1.0: 8 ports detected [ 154.929129][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.990381][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 154.992652][ T7718] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1338'. [ 155.019462][ T7718] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1338'. [ 155.036938][ T7725] 9pnet_fd: Insufficient options for proto=fd [ 155.973230][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 156.000620][ T7835] hsr_slave_0: left promiscuous mode [ 156.016466][ T7835] hsr_slave_1: left promiscuous mode [ 156.326352][ T7866] loop1: detected capacity change from 0 to 512 [ 156.352388][ T7866] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.396553][ T7866] EXT4-fs (loop1): 1 truncate cleaned up [ 156.409220][ T7866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.556089][ T7886] lo speed is unknown, defaulting to 1000 [ 156.993758][ T7914] $H: renamed from bond0 [ 157.045634][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.080076][ T29] kauditd_printk_skb: 861 callbacks suppressed [ 157.080167][ T29] audit: type=1400 audit(1751642363.873:8728): avc: denied { read } for pid=7921 comm="syz.1.1361" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.305945][ T7932] 9pnet: p9_errstr2errno: server reported unknown error [ 157.320924][ T29] audit: type=1400 audit(1751642364.093:8729): avc: denied { read } for pid=7927 comm="syz.3.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.827166][ T29] audit: type=1400 audit(1751642364.623:8730): avc: denied { getopt } for pid=7942 comm="syz.1.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.860064][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1368'. [ 157.888646][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 157.898072][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 158.101223][ T7964] netlink: 'syz.4.1374': attribute type 13 has an invalid length. [ 158.110342][ T7964] gretap0: refused to change device tx_queue_len [ 158.116724][ T7964] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 158.171061][ T29] audit: type=1326 audit(1751642364.973:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 158.194691][ T29] audit: type=1326 audit(1751642364.973:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 158.218876][ T29] audit: type=1326 audit(1751642364.993:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 158.242613][ T29] audit: type=1326 audit(1751642364.993:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 158.266117][ T29] audit: type=1326 audit(1751642364.993:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 158.289552][ T29] audit: type=1326 audit(1751642364.993:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 158.313259][ T29] audit: type=1326 audit(1751642364.993:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c2a6e929 code=0x7ffc0000 [ 158.320974][ T7973] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 158.345925][ T7953] lo speed is unknown, defaulting to 1000 [ 158.362305][ T7975] loop1: detected capacity change from 0 to 1024 [ 158.379871][ T7975] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 158.422716][ T7975] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 158.617326][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 159.712192][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 159.737230][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 159.751683][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1385'. [ 159.760722][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 159.786867][ T8010] netlink: 'syz.1.1385': attribute type 10 has an invalid length. [ 159.798843][ T8010] bridge0: port 1(team0) entered blocking state [ 159.805323][ T8010] bridge0: port 1(team0) entered disabled state [ 159.816482][ T8010] team0: entered allmulticast mode [ 159.868111][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1381'. [ 159.969393][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 159.999716][ T8032] loop4: detected capacity change from 0 to 1024 [ 160.007003][ T8032] EXT4-fs: Ignoring removed nobh option [ 160.012644][ T8032] EXT4-fs: Ignoring removed bh option [ 160.692330][ T8039] lo speed is unknown, defaulting to 1000 [ 160.831201][ T8032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.914278][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 161.030965][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.041679][ T8044] netlink: 'syz.2.1397': attribute type 13 has an invalid length. [ 161.148362][ T8048] loop4: detected capacity change from 0 to 8192 [ 161.185129][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'. [ 161.199374][ T8055] loop3: detected capacity change from 0 to 1024 [ 161.216589][ T8058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1404'. [ 161.217237][ T8055] EXT4-fs: Ignoring removed oldalloc option [ 161.225691][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 161.231538][ T8055] EXT4-fs: Ignoring removed bh option [ 161.262369][ T8055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.283693][ T8058] netlink: 'syz.2.1404': attribute type 10 has an invalid length. [ 161.301188][ T8058] bridge2: port 1(team0) entered blocking state [ 161.307624][ T8058] bridge2: port 1(team0) entered disabled state [ 161.313990][ T8058] team0: entered allmulticast mode [ 161.447994][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.519040][ T8075] loop1: detected capacity change from 0 to 1024 [ 161.542492][ T8075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.554804][ T8075] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.580581][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 161.619336][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.007393][ T8097] loop3: detected capacity change from 0 to 1024 [ 162.045712][ T8097] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 162.111213][ T8097] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 162.128390][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 162.128405][ T29] audit: type=1326 audit(1751642368.923:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37dcd4d290 code=0x7ffc0000 [ 162.189461][ T29] audit: type=1326 audit(1751642368.963:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37dcd4e52b code=0x7ffc0000 [ 162.212910][ T29] audit: type=1326 audit(1751642368.963:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f37dcd4d58a code=0x7ffc0000 [ 162.236372][ T29] audit: type=1326 audit(1751642368.963:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 162.259760][ T29] audit: type=1326 audit(1751642368.963:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 162.283328][ T29] audit: type=1326 audit(1751642368.963:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 162.306535][ T29] audit: type=1326 audit(1751642368.963:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 162.329938][ T29] audit: type=1326 audit(1751642368.963:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 162.353412][ T29] audit: type=1326 audit(1751642368.963:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 162.376770][ T29] audit: type=1326 audit(1751642368.963:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcd4e929 code=0x7ffc0000 [ 162.613721][ T8126] loop3: detected capacity change from 0 to 128 [ 162.624105][ T8126] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.636446][ T8126] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.815299][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.846603][ T8139] siw: device registration error -23 [ 162.990723][ T8142] lo speed is unknown, defaulting to 1000 [ 163.049922][ T8143] lo speed is unknown, defaulting to 1000 [ 163.378351][ T8154] netlink: 'syz.2.1434': attribute type 4 has an invalid length. [ 163.396603][ T8154] netlink: 'syz.2.1434': attribute type 4 has an invalid length. [ 163.486534][ T9] lo speed is unknown, defaulting to 1000 [ 163.492379][ T9] syz0: Port: 1 Link ACTIVE [ 164.140189][ T8176] loop1: detected capacity change from 0 to 128 [ 165.233116][ T8181] kthread_run failed with err -4 [ 165.253448][ T8190] loop3: detected capacity change from 0 to 512 [ 165.272875][ T8176] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.285720][ T8176] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.298148][ T8190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.311191][ T8190] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.331633][ T8195] loop4: detected capacity change from 0 to 1024 [ 165.349107][ T8195] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 165.371329][ T8195] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 165.400446][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.442449][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.518365][ T8207] __nla_validate_parse: 12 callbacks suppressed [ 165.518379][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 165.603835][ T8211] netlink: 52 bytes leftover after parsing attributes in process `'. [ 166.767181][ T8235] lo speed is unknown, defaulting to 1000 [ 167.153072][ T8237] lo speed is unknown, defaulting to 1000 [ 168.056468][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 168.056482][ T29] audit: type=1326 audit(1751642374.853:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.104676][ T29] audit: type=1326 audit(1751642374.883:9134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.128155][ T29] audit: type=1326 audit(1751642374.883:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.135616][ T8243] loop1: detected capacity change from 0 to 512 [ 168.151640][ T29] audit: type=1326 audit(1751642374.883:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.151685][ T29] audit: type=1326 audit(1751642374.883:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.151707][ T29] audit: type=1326 audit(1751642374.883:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.228062][ T29] audit: type=1326 audit(1751642374.883:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.251608][ T29] audit: type=1326 audit(1751642374.883:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.275211][ T29] audit: type=1326 audit(1751642374.883:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.275254][ T8252] loop4: detected capacity change from 0 to 1024 [ 168.298653][ T29] audit: type=1326 audit(1751642374.883:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 168.336470][ T8244] netlink: 'syz.2.1472': attribute type 4 has an invalid length. [ 168.362976][ T8252] EXT4-fs: Ignoring removed orlov option [ 168.369079][ T8252] EXT4-fs: Invalid want_extra_isize 132 [ 168.383605][ T9] lo speed is unknown, defaulting to 1000 [ 168.389378][ T9] syz0: Port: 1 Link DOWN [ 168.408080][ T8243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.421331][ T8243] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.444473][ T8271] netlink: 'syz.0.1470': attribute type 4 has an invalid length. [ 168.458369][ T8271] netlink: 'syz.0.1470': attribute type 4 has an invalid length. [ 168.509113][ T8275] 9pnet_virtio: no channels available for device 127.0.0.1 [ 168.556538][ T8287] lo speed is unknown, defaulting to 1000 [ 168.619560][ T8283] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000007 [ 168.619720][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.056482][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 169.151962][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1492'. [ 169.177323][ T8327] bridge0: entered promiscuous mode [ 169.183146][ T8327] team0: entered promiscuous mode [ 169.194884][ T8327] bridge0: port 2(macvlan2) entered blocking state [ 169.202130][ T8327] bridge0: port 2(macvlan2) entered disabled state [ 169.210751][ T8327] macvlan2: entered allmulticast mode [ 169.216597][ T8327] bridge0: entered allmulticast mode [ 169.227160][ T8327] macvlan2: left allmulticast mode [ 169.234676][ T8327] bridge0: left allmulticast mode [ 169.250040][ T8327] bridge0: left promiscuous mode [ 169.255438][ T8327] team0: left promiscuous mode [ 169.280456][ T8335] loop4: detected capacity change from 0 to 128 [ 169.303561][ T8335] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.326263][ T8335] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.379693][ T8343] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 169.410228][ T8343] dummy0: entered promiscuous mode [ 169.423153][ T8343] $H: (slave dummy0): Enslaving as an active interface with an up link [ 169.481475][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.554338][ T8347] loop3: detected capacity change from 0 to 256 [ 169.640468][ T8355] loop3: detected capacity change from 0 to 512 [ 169.651446][ T8355] EXT4-fs: test_dummy_encryption option not supported [ 169.678625][ T8355] loop3: detected capacity change from 0 to 512 [ 169.693892][ T8355] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.721891][ T8361] netlink: 'syz.0.1502': attribute type 14 has an invalid length. [ 169.739410][ T8355] EXT4-fs (loop3): mount failed [ 169.924834][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'. [ 169.975766][ T8374] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 169.975766][ T8374] The task syz.0.1505 (8374) triggered the difference, watch for misbehavior. [ 169.993877][ T8373] loop1: detected capacity change from 0 to 1024 [ 170.000878][ T8373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.012004][ T8373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.060340][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.137201][ T8383] lo speed is unknown, defaulting to 1000 [ 170.363292][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1511'. [ 170.490040][ T8392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8392 comm=syz.4.1513 [ 170.506971][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 170.523169][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 170.667056][ T8403] loop3: detected capacity change from 0 to 512 [ 170.681592][ T8403] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.699310][ T8403] EXT4-fs (loop3): 1 truncate cleaned up [ 170.714237][ T8403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.792275][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.855026][ T8412] loop3: detected capacity change from 0 to 1024 [ 170.872493][ T8412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.915683][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.401724][ T8447] loop3: detected capacity change from 0 to 512 [ 171.408916][ T8447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.429165][ T8447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.460716][ T8447] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.484870][ T8447] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1533: corrupted xattr block 19: overlapping e_value [ 171.529727][ T8447] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 171.557252][ T8447] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1533: corrupted xattr block 19: overlapping e_value [ 171.589193][ T8447] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 171.615567][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.621763][ T8447] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1533: corrupted xattr block 19: overlapping e_value [ 171.635513][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.675878][ T8460] netlink: zone id is out of range [ 171.681120][ T8460] netlink: zone id is out of range [ 171.686324][ T8460] netlink: zone id is out of range [ 171.691465][ T8460] netlink: zone id is out of range [ 171.696711][ T8460] netlink: zone id is out of range [ 171.702242][ T8460] netlink: zone id is out of range [ 171.703335][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 171.707412][ T8460] netlink: zone id is out of range [ 171.707424][ T8460] netlink: zone id is out of range [ 171.727322][ T8460] netlink: zone id is out of range [ 171.732629][ T8460] netlink: zone id is out of range [ 171.755362][ T8455] lo speed is unknown, defaulting to 1000 [ 172.188361][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.305505][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 172.324117][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 172.944091][ T8518] Unknown options in mask 5 [ 173.039074][ T8523] loop1: detected capacity change from 0 to 512 [ 173.076143][ T8523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.088750][ T29] kauditd_printk_skb: 690 callbacks suppressed [ 173.088765][ T29] audit: type=1400 audit(1751642379.883:9832): avc: denied { write } for pid=8521 comm="syz.4.1559" name="file0" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.117509][ T29] audit: type=1400 audit(1751642379.883:9833): avc: denied { open } for pid=8521 comm="syz.4.1559" path="/309/file0" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 173.141011][ T29] audit: type=1326 audit(1751642379.923:9834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 173.164501][ T29] audit: type=1326 audit(1751642379.923:9835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 173.165667][ T8523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.187917][ T29] audit: type=1326 audit(1751642379.923:9836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 173.223654][ T29] audit: type=1326 audit(1751642379.923:9837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 173.247079][ T29] audit: type=1326 audit(1751642379.923:9838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 173.270544][ T29] audit: type=1326 audit(1751642379.923:9839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 173.293938][ T29] audit: type=1326 audit(1751642379.923:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 173.317373][ T29] audit: type=1326 audit(1751642379.923:9841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.0.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0264bae929 code=0x7ffc0000 [ 173.341549][ T8523] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.409070][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 173.418024][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 173.430912][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 173.449561][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 173.453618][ T8523] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1558: corrupted xattr block 19: overlapping e_value [ 173.458512][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 173.499756][ T8523] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 173.517170][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 173.538822][ T8536] loop4: detected capacity change from 0 to 128 [ 173.545227][ T8523] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1558: corrupted xattr block 19: overlapping e_value [ 173.571830][ T8523] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 173.582973][ T8540] loop3: detected capacity change from 0 to 2048 [ 173.589847][ T8523] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1558: corrupted xattr block 19: overlapping e_value [ 173.621293][ T8544] bio_check_eod: 4 callbacks suppressed [ 173.621306][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.621306][ T8544] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 173.643821][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.643821][ T8544] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 173.657646][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.657646][ T8544] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 173.658416][ T8540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 173.671426][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.671426][ T8544] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 173.697390][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.697390][ T8544] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 173.710930][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.710930][ T8544] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 173.724749][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.724749][ T8544] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 173.738226][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.738226][ T8544] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 173.751819][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.751819][ T8544] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 173.765283][ T8544] syz.4.1563: attempt to access beyond end of device [ 173.765283][ T8544] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 173.789830][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.834340][ T8549] loop1: detected capacity change from 0 to 512 [ 173.870050][ T8549] EXT4-fs (loop1): too many log groups per flexible block group [ 173.877879][ T8549] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 173.900547][ T8549] EXT4-fs (loop1): mount failed [ 173.971431][ T8553] bond3: entered promiscuous mode [ 173.976504][ T8553] bond3: entered allmulticast mode [ 173.998004][ T8553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.022988][ T36] IPVS: starting estimator thread 0... [ 174.031901][ T8553] bond3 (unregistering): Released all slaves [ 174.059074][ T8498] syz.2.1551 (8498) used greatest stack depth: 6784 bytes left [ 174.150805][ T8560] IPVS: using max 2640 ests per chain, 132000 per kthread [ 174.426664][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 174.557302][ T8593] loop3: detected capacity change from 0 to 2048 [ 174.699068][ T8611] program syz.3.1587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.504860][ T8633] hub 6-0:1.0: USB hub found [ 175.509592][ T8633] hub 6-0:1.0: 8 ports detected [ 175.620082][ T8650] __nla_validate_parse: 4 callbacks suppressed [ 175.620100][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1596'. [ 175.688543][ T8650] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.700483][ T8650] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.709566][ T8650] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.718570][ T8650] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.747656][ T8650] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.757797][ T8650] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.768197][ T8650] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.777587][ T8650] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.809216][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1597'. [ 175.833936][ T8685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8685 comm=syz.0.1597 [ 175.999186][ T8714] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1599'. [ 176.010473][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1599'. [ 176.730606][ T8787] ================================================================== [ 176.738719][ T8787] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 176.746020][ T8787] [ 176.748342][ T8787] write to 0xffff88810387c6c0 of 4 bytes by task 8788 on cpu 0: [ 176.755964][ T8787] touch_atime+0x1e8/0x340 [ 176.760379][ T8787] shmem_file_splice_read+0x5b1/0x600 [ 176.765747][ T8787] splice_direct_to_actor+0x26f/0x680 [ 176.771133][ T8787] do_splice_direct+0xda/0x150 [ 176.775907][ T8787] do_sendfile+0x380/0x650 [ 176.780322][ T8787] __x64_sys_sendfile64+0x105/0x150 [ 176.785516][ T8787] x64_sys_call+0xb39/0x2fb0 [ 176.790117][ T8787] do_syscall_64+0xd2/0x200 [ 176.794643][ T8787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.800537][ T8787] [ 176.802860][ T8787] read to 0xffff88810387c6c0 of 4 bytes by task 8787 on cpu 1: [ 176.810400][ T8787] atime_needs_update+0x25f/0x3e0 [ 176.815438][ T8787] touch_atime+0x4a/0x340 [ 176.819775][ T8787] shmem_file_splice_read+0x5b1/0x600 [ 176.825156][ T8787] splice_direct_to_actor+0x26f/0x680 [ 176.830542][ T8787] do_splice_direct+0xda/0x150 [ 176.835313][ T8787] do_sendfile+0x380/0x650 [ 176.839726][ T8787] __x64_sys_sendfile64+0x105/0x150 [ 176.844929][ T8787] x64_sys_call+0xb39/0x2fb0 [ 176.849523][ T8787] do_syscall_64+0xd2/0x200 [ 176.854024][ T8787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.859912][ T8787] [ 176.862230][ T8787] value changed: 0x1f3284eb -> 0x1fcb1b6b [ 176.867941][ T8787] [ 176.870259][ T8787] Reported by Kernel Concurrency Sanitizer on: [ 176.876405][ T8787] CPU: 1 UID: 0 PID: 8787 Comm: syz.2.1605 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 176.888813][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.898870][ T8787] ==================================================================