last executing test programs: 1m54.012276628s ago: executing program 1 (id=2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000150019092dbd7000fddbdf250a182000", @ANYRES32=r0, @ANYBLOB="14000200ff0100000000000000000000000000011400060004000000451805dd06000000400e0379d9dc4e1d99d2cd000000080008001000000008000a0002000000"], 0x50}, 0x1, 0x0, 0x0, 0x80cf}, 0x400c040) syz_clone(0x6200, &(0x7f0000000500)="629be414ca395ef185b3e81a89c033ef6cb805b16b4690501a54e6d401293007b9d33af751419d52b965a49a40a2ae98352f9dca47990be709ee150786d39b3da0f6dbd06cade44a94d5da94904b1c0749ecca89ca140c5c267e9822e707ea0dc66272945640b05297be0a84604caf0703fd3b5803e531542c8c6d303e18f8373b722afbefaf1380208e5753e4fe6f77009406b2ec46341d95c12d7796fe9259618b31c2d9a5f9639af3a49539e7b23a0af684dd8af328cbdb39cc86b4358ebf", 0xc0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x20}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r3, r1, 0x0, 0x5) read(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m53.81599384s ago: executing program 1 (id=6): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m53.270461869s ago: executing program 1 (id=9): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2000400) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x2) sync_file_range(r0, 0x6, 0x10000000000000, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000a00000000000000000000000800010002"], 0x20}, 0x1, 0x0, 0x0, 0x200008c4}, 0x0) 1m51.675449362s ago: executing program 1 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="6115"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x50a5, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x22, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x45bc, 0x0, 0x0, 0x0, 0x0) 1m51.653495302s ago: executing program 32 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="6115"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x50a5, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x22, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x45bc, 0x0, 0x0, 0x0, 0x0) 5.355882141s ago: executing program 4 (id=1074): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x3) socket$packet(0x11, 0x2, 0x300) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) getpgrp(0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x401, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f00000000c0)=""/14, 0xe}], 0x2, 0x33, 0x2) 4.976306857s ago: executing program 0 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000480) 4.299367117s ago: executing program 5 (id=1082): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x88) fcntl$notify(r2, 0x402, 0x8000001f) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000063) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x800}}) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) 4.036415121s ago: executing program 0 (id=1086): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@delalloc}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47a, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, 0x0}, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x100) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r4, 0x10, 0x3, 0x7c27) read(r2, &(0x7f0000001400)=""/4096, 0x1000) 3.886367403s ago: executing program 4 (id=1087): r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}, 0x1c, 0x0}}], 0x1, 0x10) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x20008053) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000340)=""/189, &(0x7f0000000180)=0xbd) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 3.559497058s ago: executing program 4 (id=1088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 3.314371921s ago: executing program 5 (id=1100): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x7, @loopback, 0xec7}], 0x38) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 3.171129504s ago: executing program 0 (id=1092): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@s}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) rt_sigpending(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.102454805s ago: executing program 2 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0xaa4ae000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x113b0, 0x0, 0x3, 0x0, 0x7, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x4e) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x2710], 0x80}}, 0x0) read(r0, &(0x7f0000000180)=""/187, 0xbb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 2.807294469s ago: executing program 3 (id=1094): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.091557509s ago: executing program 2 (id=1095): unshare(0x20040600) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbbdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.0912444s ago: executing program 4 (id=1096): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1f20, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), r1) r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x202) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0], 0x2, 0x6}) timer_create(0x7, &(0x7f0000001740)={0x0, 0x2c, 0x2, @thr={&(0x7f0000000680)="81fc7c5d1b3459d8c9114db6dad4ee9aaecc4b8975a1926ddc80b74c1a8f4e2ee511dcd4c4f34a82960eaeea3dbc2c6c42206ea176bc7ecfc56a8cce90c47e4cd7b5f33b92110b28e505d7b411c55ae0103e892371ddb6a81cab21397e3222097116867778b81d6fe1e3b2102d370a2b73daefee7a7e674d102832c78913728196fa3da09f25523cb2ade96ae1defda7baef196de46c5959e7dd0568584e0b16f5dc24c42f1d87ef01030fc1b761134221", &(0x7f0000000740)="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"}}, &(0x7f0000001780)) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024000780080005"], 0x108}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1.853097693s ago: executing program 0 (id=1097): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000180)={@id={0x2, 0x0, @auto="19a0a2478c43dedf2826fd69f35add16"}}) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) brk(0x689d80000000) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 1.767123024s ago: executing program 3 (id=1098): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x388, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0xa000000000200000, 0x0, 0x6, 0x7effffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x40080000000000, 0xffffffffffffffff, 0x9) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007000000ab0a873f594ad7acc1d2dbf0f398b308e9ef02851cd47f1c5b0b316a75dc80e920def842824cafa18cc506c59fdc5ecae1df9de79845af099ee5a58a04790855b5265373a8558ef6521dec734f354692f891d28a2c5b0cc8534f03579fa82b8531920dd03d0e6b"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.704214955s ago: executing program 5 (id=1099): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setparam(r0, &(0x7f0000000340)=0x5) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) 1.627300756s ago: executing program 3 (id=1101): timerfd_gettime(0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = getpid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x5}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x1654c2) lseek(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9) 1.565227407s ago: executing program 3 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e9, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') fsync(0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1.466106228s ago: executing program 2 (id=1103): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$igmp6(0xa, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.38361023s ago: executing program 2 (id=1104): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 854.824257ms ago: executing program 5 (id=1105): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000680)={[{@errors_remount}, {@bh}, {@test_dummy_encryption}, {@minixdf}, {@data_journal}, {@stripe={'stripe', 0x3d, 0x15f}}, {@nogrpid}], [{@euid_gt}]}, 0x3, 0x461, &(0x7f00000001c0)="$eJzs3M9rHFUcAPDv7CZp0x8mlvqjP9RoFYM/kiattQcvioIHBUEP9RiTtNRuG2ki2FI0itSjFLyLR8G/wJNeRD0JXvUuhSK9tIqHkdmdaXY3m2033bgx+/nApO+9meG978y83TfzOhtA3xrL/iQRuyLit4gYqWUbNxir/XPz+qXZv65fmk0iTd/8M6lud+P6pdli02K/nUVmIKL0aRIHWtS7eOHimZlKZf58np9cOvve5OKFi8+ePjtzav7U/Lnp48ePHpl6/tj0c6v2zetZ7iTOLK4b+z9cOLjv1bevvD574so7P32TFPE3xdElY+1WPpGmXa6ut3bXpZOBHjaEjpRr3TQGq/1/JMqxcvJG4pVPeto4YEOlaZrev/bq5RTYwpLodQuA3ii+6LP732JpP2Do6vCj5669WLsByuK+mS+1NQNRyrcZbLq/7aaxiDix/PeX2RIb8xwCAKDBd9n455lW479S1D8XuiefQxmNiHsjYk9EHIuIvRFxX0R12wci4sEO62+eJFk9/ildXVdgdygb/72Qz201jv+K0V+MlvPc7mr8g8nJ05X5w/kxGY/BbVl+qk0d37/86+erS4eqf+vHf9mS1V+MBfN2XB3Y1rjn3MzSzN3GXbj2ccT+gVbxJ7dmApKI2BcR+9dZx+mnvj641rrbx99a9ZB0YZ4p/Sriydr5X46m+AtJ+/nJye1RmT88WVwVq/38y+U31qp/vfF3S3b+d7S8/m/FP5rUz9cudl7H5d8/W/OeZr3X/1DyVkPZBzNLS+enIoaS12qNri+fbtpuemX7LP7xQ637/55YORIHIiK7iB+KiIcj4pG87Y9GxGMRcahN/D++9Pi7DQXjuzqIf2Nl8c91dP5XEkPRXFJNZPs0lJTP/PBtQ6Wj0UH82fk/Wk2N5yV38vnXol0tE3d5+AAAAOB/oRQRuyIpTdxKl0oTE7X/w783dpQqC4tLT59ceP/cXO0dgdEYLBVPukbqnodO5bf1RX66KX8kf278RXm4mp+YXajM9Tp46HM71+j/mT/KvW4dsOG8rwX9S/+H/qX/Q//S/6F/tej/w6uL/ml6ZRDYClp9/3/Ug3YA/72m/m/aD/qI+3/oX/o/9C/9H/rS4nDc/iX5/k2kaVp9ELpZ2rOJElHaFM3Y+MT21j9zsQUSw+1+JqPXn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//y0k7SY=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000180001fdfeffffff000008000a13e000000300000100020014000200"], 0x44}}, 0x0) r2 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='@\x00', 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) r4 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) 854.379008ms ago: executing program 2 (id=1106): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r4 = dup2(r3, r3) write$tun(r4, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 854.032408ms ago: executing program 4 (id=1107): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0x38}}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x151, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0xff23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 852.197617ms ago: executing program 0 (id=1115): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x12, 0x60a, 0x138, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x6, 0x0, 0x0, 0x4c}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0b0500dd2f808bcbf5a552fd64a72ee561b24c479377004898fbe1cefa63"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r1, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x2, @time={0x80, 0x1}, 0x7, {0x2, 0xbb}, 0x3d, 0x2, 0x6}) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x1) 778.876518ms ago: executing program 2 (id=1108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff2d, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r5) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x4) 575.605392ms ago: executing program 3 (id=1109): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x3) socket$packet(0x11, 0x2, 0x300) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) getpgrp(0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x401, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f00000000c0)=""/14, 0xe}], 0x2, 0x33, 0x2) 398.502654ms ago: executing program 4 (id=1110): ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESHEX, @ANYRES16=r3], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r5}) 247.949566ms ago: executing program 5 (id=1111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 160.153318ms ago: executing program 5 (id=1112): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000001000085000000cb00000095000000000000005b76bd95121d12ff61d9386b23b8a265055efa546f6a90cf000000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@mblk_io_submit}, {@abort}, {@nodiscard}, {@noinit_itable}]}, 0x64, 0x51a, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x445, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) 107.521218ms ago: executing program 3 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x10000000, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a2e2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) socket$nl_route(0x10, 0x3, 0x0) 52.994839ms ago: executing program 33 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x10000000, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a2e2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=1116): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_adjtime(0x0, &(0x7f00000004c0)={0x37db, 0xf423f, 0xfffffffffffffffc, 0x5d646dc, 0xfffffffffffffffa, 0x9, 0x60000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595329bd7000000000086b"], 0x30}}, 0x0) dup2(r0, r0) kernel console output (not intermixed with test programs): ext system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 72.314460][ T4925] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 72.358113][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.415717][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.425924][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.443667][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.473537][ T4947] loop3: detected capacity change from 0 to 128 [ 72.530438][ T4951] loop3: detected capacity change from 0 to 2048 [ 72.549284][ T4956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.477'. [ 72.585289][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 72.595017][ T4951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.622982][ T4956] hsr_slave_0: left promiscuous mode [ 72.637917][ T4956] hsr_slave_1: left promiscuous mode [ 72.738022][ T4959] EXT4-fs (loop3): shut down requested (1) [ 72.801174][ T4942] loop0: detected capacity change from 0 to 8192 [ 72.809241][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.861351][ T4942] loop0: p2 p3 p4 [ 72.881330][ T4942] loop0: p2 start 452985600 is beyond EOD, truncated [ 72.889211][ T4942] loop0: p3 size 33554432 extends beyond EOD, truncated [ 72.896963][ T4965] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.906015][ T4942] loop0: p4 start 8388607 is beyond EOD, truncated [ 72.966236][ T4965] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.978503][ T4967] tipc: Enabled bearer , priority 0 [ 72.995132][ T4966] tipc: Resetting bearer [ 73.028922][ T4966] tipc: Disabling bearer [ 73.044116][ T4965] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.064672][ T4970] lo speed is unknown, defaulting to 1000 [ 73.123079][ T4965] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.195961][ T4965] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.217090][ T4965] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.226918][ T4980] loop0: detected capacity change from 0 to 512 [ 73.243967][ T4965] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.269367][ T4980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.299720][ T4980] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.315097][ T4965] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.501206][ T4996] netlink: 96 bytes leftover after parsing attributes in process `syz.2.493'. [ 73.595456][ T4992] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 73.637442][ T4992] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 73.689174][ T4992] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 73.735177][ T4992] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 73.771439][ T4992] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 73.816469][ T5007] netlink: 'syz.3.498': attribute type 8 has an invalid length. [ 73.840471][ T4992] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 73.902163][ T5017] loop4: detected capacity change from 0 to 256 [ 74.036333][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.275815][ T5040] bridge_slave_0: left allmulticast mode [ 74.281546][ T5040] bridge_slave_0: left promiscuous mode [ 74.287505][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.304871][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 74.304890][ T29] audit: type=1326 audit(1748847531.817:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5084a5927 code=0x7ffc0000 [ 74.335283][ T5040] bridge_slave_1: left allmulticast mode [ 74.335573][ T29] audit: type=1326 audit(1748847531.848:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd50844ab39 code=0x7ffc0000 [ 74.341275][ T5040] bridge_slave_1: left promiscuous mode [ 74.364642][ T29] audit: type=1326 audit(1748847531.848:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5084a5927 code=0x7ffc0000 [ 74.370391][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.393727][ T29] audit: type=1326 audit(1748847531.848:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd50844ab39 code=0x7ffc0000 [ 74.424283][ T29] audit: type=1326 audit(1748847531.848:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 74.450589][ T29] audit: type=1326 audit(1748847531.969:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5084a5927 code=0x7ffc0000 [ 74.474554][ T29] audit: type=1326 audit(1748847531.969:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd50844ab39 code=0x7ffc0000 [ 74.474750][ T5043] loop0: detected capacity change from 0 to 128 [ 74.498491][ T29] audit: type=1326 audit(1748847531.969:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 74.499039][ T29] audit: type=1326 audit(1748847532.019:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5084a5927 code=0x7ffc0000 [ 74.553311][ T29] audit: type=1326 audit(1748847532.019:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.3.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd50844ab39 code=0x7ffc0000 [ 74.577609][ T5040] bond0: (slave bond_slave_0): Releasing backup interface [ 74.587868][ T5040] bond0: (slave bond_slave_1): Releasing backup interface [ 74.597139][ T5043] syz.0.513: attempt to access beyond end of device [ 74.597139][ T5043] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 74.614645][ T5040] team0: Port device team_slave_0 removed [ 74.621908][ T5040] team0: Port device team_slave_1 removed [ 74.628330][ T5040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.636344][ T5040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.657346][ T5039] syz.0.513: attempt to access beyond end of device [ 74.657346][ T5039] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 74.672976][ T5041] syz.0.513: attempt to access beyond end of device [ 74.672976][ T5041] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 74.687787][ T5041] syz.0.513: attempt to access beyond end of device [ 74.687787][ T5041] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 74.701334][ T5041] syz.0.513: attempt to access beyond end of device [ 74.701334][ T5041] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 74.714793][ T5041] syz.0.513: attempt to access beyond end of device [ 74.714793][ T5041] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 74.733825][ T5041] syz.0.513: attempt to access beyond end of device [ 74.733825][ T5041] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 74.781160][ T5047] netlink: 304 bytes leftover after parsing attributes in process `syz.2.515'. [ 74.791929][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 74.804335][ T5049] bridge_slave_0: entered promiscuous mode [ 74.896215][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.527'. [ 74.949312][ T5059] vlan0: entered promiscuous mode [ 75.019465][ T5065] lo speed is unknown, defaulting to 1000 [ 75.054873][ T5067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 75.069972][ T5069] netlink: 'syz.2.525': attribute type 27 has an invalid length. [ 75.106459][ T5069] lo: left promiscuous mode [ 75.127046][ T5069] tunl0: left promiscuous mode [ 75.136946][ T5069] gre0: left promiscuous mode [ 75.146948][ T5069] gretap0: left promiscuous mode [ 75.154246][ T5069] erspan0: left promiscuous mode [ 75.161365][ T5069] ip_vti0: left promiscuous mode [ 75.168769][ T5069] ip6_vti0: left promiscuous mode [ 75.175313][ T5069] sit0: left promiscuous mode [ 75.180903][ T5079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5079 comm=syz.2.525 [ 75.184271][ T5069] ip6tnl0: left promiscuous mode [ 75.195122][ T5081] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 75.201044][ T5069] ip6gre0: left promiscuous mode [ 75.217004][ T5069] syz_tun: left promiscuous mode [ 75.224940][ T5069] ip6gretap0: left promiscuous mode [ 75.232257][ T5069] vcan0: left promiscuous mode [ 75.237860][ T5069] bond0: left promiscuous mode [ 75.242731][ T5069] bond_slave_0: left promiscuous mode [ 75.248685][ T5069] bond_slave_1: left promiscuous mode [ 75.256158][ T5069] team0: left promiscuous mode [ 75.261165][ T5069] team_slave_0: left promiscuous mode [ 75.267289][ T5069] team_slave_1: left promiscuous mode [ 75.274666][ T5069] dummy0: left promiscuous mode [ 75.281400][ T5069] nlmon0: left promiscuous mode [ 75.287544][ T5069] caif0: left promiscuous mode [ 75.312451][ T5084] loop3: detected capacity change from 0 to 1024 [ 75.321881][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.332860][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.342766][ T5084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.353527][ T5069] tipc: Resetting bearer [ 75.372036][ T5069] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.381338][ T5069] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.390403][ T5069] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.399097][ T5069] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.409703][ T5074] batadv_slave_1: entered promiscuous mode [ 75.415966][ T5074] batadv_slave_1: left promiscuous mode [ 75.421997][ T5072] tipc: Enabled bearer , priority 0 [ 75.431176][ T5071] tipc: Resetting bearer [ 75.456278][ T5071] tipc: Disabling bearer [ 75.476985][ T5075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.485316][ T5075] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.494351][ T5075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.524949][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.535065][ T5081] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 75.628798][ T5096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 75.704931][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.134447][ T5111] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.547'. [ 76.194301][ T5111] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.547'. [ 76.368703][ T5222] lo speed is unknown, defaulting to 1000 [ 76.407741][ T5226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 76.489311][ T5226] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5226 comm=syz.4.541 [ 76.582373][ T5234] lo speed is unknown, defaulting to 1000 [ 76.786594][ T5246] loop0: detected capacity change from 0 to 128 [ 76.805242][ T5246] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 76.833747][ T5246] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.871913][ T5250] SET target dimension over the limit! [ 77.336171][ T5259] loop3: detected capacity change from 0 to 256 [ 77.363348][ T5262] loop5: detected capacity change from 0 to 512 [ 77.391134][ T5262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.414946][ T5262] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.483400][ T5262] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.553: corrupted inode contents [ 77.502250][ T5262] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.553: mark_inode_dirty error [ 77.515694][ T5262] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.553: corrupted inode contents [ 77.553249][ T5268] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.553: corrupted inode contents [ 77.565197][ T5268] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.553: mark_inode_dirty error [ 77.567262][ T5272] netlink: 304 bytes leftover after parsing attributes in process `syz.3.556'. [ 77.585748][ T5268] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.553: corrupted inode contents [ 77.598675][ T5268] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.553: mark_inode_dirty error [ 77.610101][ T5268] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.553: corrupted inode contents [ 77.622770][ T5268] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.553: mark_inode_dirty error [ 77.635408][ T5262] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.553: corrupted inode contents [ 77.635707][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.674904][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.765847][ T5278] loop0: detected capacity change from 0 to 1024 [ 77.797207][ T5278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.833811][ T5278] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 77.852953][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.398955][ T5306] lo speed is unknown, defaulting to 1000 [ 78.504212][ T5311] lo speed is unknown, defaulting to 1000 [ 78.960576][ T5317] netlink: 'syz.3.568': attribute type 27 has an invalid length. [ 79.352159][ T5322] 9pnet_virtio: no channels available for device [ 79.403663][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.428553][ T5320] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.473931][ T5320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.621098][ T5317] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.629705][ T5317] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.638241][ T5317] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.646657][ T5317] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.723036][ T5317] bond1: left promiscuous mode [ 79.727940][ T5317] ip6gretap1: left promiscuous mode [ 79.733378][ T5317] bond1: left allmulticast mode [ 79.738351][ T5317] ip6gretap1: left allmulticast mode [ 79.877374][ T5326] __nla_validate_parse: 3 callbacks suppressed [ 79.877395][ T5326] netlink: 304 bytes leftover after parsing attributes in process `syz.5.571'. [ 79.897522][ T29] kauditd_printk_skb: 527 callbacks suppressed [ 79.897536][ T29] audit: type=1400 audit(1748847537.468:4308): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.958400][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.571'. [ 80.074394][ T5329] loop3: detected capacity change from 0 to 512 [ 80.092358][ T29] audit: type=1326 audit(1748847537.660:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.5.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 80.135880][ T5329] EXT4-fs: inline encryption not supported [ 80.158634][ T5329] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.178227][ T29] audit: type=1326 audit(1748847537.660:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.5.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 80.202035][ T29] audit: type=1326 audit(1748847537.690:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.5.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 80.228217][ T29] audit: type=1326 audit(1748847537.690:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.5.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 80.252199][ T29] audit: type=1326 audit(1748847537.690:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.5.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 80.275845][ T29] audit: type=1326 audit(1748847537.690:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.5.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 80.299329][ T29] audit: type=1326 audit(1748847537.690:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.5.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 80.322742][ T29] audit: type=1326 audit(1748847537.690:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.5.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 80.346094][ T29] audit: type=1326 audit(1748847537.690:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5330 comm="syz.5.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 80.375895][ T5329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 80.403412][ T5329] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.403959][ T5340] netlink: '+}[@': attribute type 13 has an invalid length. [ 80.459307][ T5329] xt_cgroup: invalid path, errno=-2 [ 80.480581][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 80.594941][ T5337] loop4: detected capacity change from 0 to 512 [ 80.618611][ T5337] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.646060][ T5337] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.686590][ T4199] IPVS: starting estimator thread 0... [ 80.711826][ T5337] EXT4-fs (loop4): 1 truncate cleaned up [ 80.719079][ T5355] Invalid ELF header type: 2 != 1 [ 80.760607][ T5359] loop0: detected capacity change from 0 to 1024 [ 80.764559][ T5337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.780770][ T5353] IPVS: using max 2256 ests per chain, 112800 per kthread [ 80.805175][ T5359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.822376][ T5359] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.844921][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.870955][ T5365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.584'. [ 80.873261][ T5359] netlink: 'syz.0.583': attribute type 10 has an invalid length. [ 80.880376][ T5365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.584'. [ 80.910623][ T5365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.584'. [ 80.919973][ T5365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.584'. [ 80.966777][ T5365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.584'. [ 80.987483][ T5365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.584'. [ 81.003157][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.063998][ T5379] netlink: 'syz.4.588': attribute type 10 has an invalid length. [ 81.075411][ T5379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.085287][ T5379] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 81.159511][ T5381] loop4: detected capacity change from 0 to 1024 [ 81.180042][ T5381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.261974][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.652281][ T5397] lo speed is unknown, defaulting to 1000 [ 81.777496][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.594'. [ 81.787502][ T5401] netlink: 'syz.5.594': attribute type 10 has an invalid length. [ 81.899159][ T5403] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.909231][ T5403] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.964072][ T5403] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.973981][ T5403] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.025269][ T5406] loop3: detected capacity change from 0 to 512 [ 82.034941][ T5406] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.044228][ T5406] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.061088][ T5406] EXT4-fs (loop3): 1 truncate cleaned up [ 82.070782][ T5403] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.077394][ T5406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.080683][ T5403] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.126381][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.162959][ T5403] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.172873][ T5403] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.229464][ T5403] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.237838][ T5403] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.249436][ T5403] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.257837][ T5403] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.270718][ T5403] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.279149][ T5403] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.291946][ T5403] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.300365][ T5403] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.352014][ T5410] netlink: 'syz.2.597': attribute type 27 has an invalid length. [ 82.371989][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 82.385386][ T5410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.393856][ T5410] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.403692][ T5410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.405325][ T5415] loop3: detected capacity change from 0 to 1024 [ 82.428769][ T5415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.471742][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.481485][ T5410] 9pnet_virtio: no channels available for device [ 82.495833][ T5419] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.506141][ T5419] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.525642][ T4189] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.540202][ T5422] loop3: detected capacity change from 0 to 1024 [ 82.543291][ T4189] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.547963][ T5422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.567081][ T5425] netlink: 'syz.2.604': attribute type 8 has an invalid length. [ 82.576501][ T5419] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.586435][ T5419] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.598285][ T5422] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.611062][ T5422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.664670][ T5433] loop2: detected capacity change from 0 to 2048 [ 82.672633][ T5419] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.682589][ T5419] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.700304][ T5433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.739749][ T5419] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.749635][ T5419] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.800850][ T5438] EXT4-fs (loop2): shut down requested (1) [ 82.811318][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.844349][ T5440] loop3: detected capacity change from 0 to 764 [ 82.852263][ T5440] rock: directory entry would overflow storage [ 82.858611][ T5440] rock: sig=0x4654, size=5, remaining=4 [ 82.903714][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.928541][ T5443] netlink: 'syz.3.608': attribute type 4 has an invalid length. [ 83.025052][ T5445] dvmrp1: entered allmulticast mode [ 83.041743][ T5445] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 83.051537][ T5445] team0 (unregistering): Port device team_slave_0 removed [ 83.061484][ T5445] team0 (unregistering): Port device 26 removed [ 83.069766][ T5445] team0 (unregistering): Port device geneve1 removed [ 83.197497][ T5450] netlink: 'syz.3.610': attribute type 27 has an invalid length. [ 83.258416][ T5450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.277401][ T5452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5452 comm=syz.3.610 [ 83.315090][ T5452] 9pnet_virtio: no channels available for device [ 83.321677][ T5450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.539855][ T5456] syzkaller0: entered promiscuous mode [ 83.545569][ T5456] syzkaller0: entered allmulticast mode [ 83.766298][ T5466] wg2: left promiscuous mode [ 83.771004][ T5466] wg2: left allmulticast mode [ 83.777821][ T5466] vlan0: left promiscuous mode [ 83.816964][ T5466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.826687][ T5466] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.838605][ T5466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.870237][ T5469] 9pnet_virtio: no channels available for device [ 84.000284][ T5468] tipc: Enabled bearer , priority 0 [ 84.008719][ T5447] syz.2.607 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 84.020150][ T5447] CPU: 0 UID: 0 PID: 5447 Comm: syz.2.607 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 84.020194][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.020211][ T5447] Call Trace: [ 84.020220][ T5447] [ 84.020230][ T5447] __dump_stack+0x1d/0x30 [ 84.020257][ T5447] dump_stack_lvl+0xe8/0x140 [ 84.020348][ T5447] dump_stack+0x15/0x1b [ 84.020367][ T5447] dump_header+0x81/0x220 [ 84.020399][ T5447] oom_kill_process+0x334/0x3f0 [ 84.020512][ T5447] out_of_memory+0x979/0xb80 [ 84.020547][ T5447] try_charge_memcg+0x5e6/0x9e0 [ 84.020657][ T5447] charge_memcg+0x51/0xc0 [ 84.020678][ T5447] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 84.020709][ T5447] __read_swap_cache_async+0x1df/0x350 [ 84.020849][ T5447] swap_cluster_readahead+0x277/0x3e0 [ 84.020902][ T5447] swapin_readahead+0xde/0x6f0 [ 84.020977][ T5447] ? __filemap_get_folio+0x49f/0x650 [ 84.021002][ T5447] ? __rcu_read_unlock+0x34/0x70 [ 84.021027][ T5447] ? swap_cache_get_folio+0x77/0x200 [ 84.021099][ T5447] do_swap_page+0x301/0x2430 [ 84.021133][ T5447] ? finish_task_switch+0xb6/0x2b0 [ 84.021156][ T5447] ? css_rstat_updated+0xcd/0x5b0 [ 84.021199][ T5447] ? __pfx_default_wake_function+0x10/0x10 [ 84.021234][ T5447] handle_mm_fault+0x9a5/0x2be0 [ 84.021269][ T5447] ? mas_walk+0xf2/0x120 [ 84.021331][ T5447] do_user_addr_fault+0x636/0x1090 [ 84.021373][ T5447] exc_page_fault+0x62/0xa0 [ 84.021406][ T5447] asm_exc_page_fault+0x26/0x30 [ 84.021494][ T5447] RIP: 0033:0x7f16941053ac [ 84.021518][ T5447] Code: 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 84.021555][ T5447] RSP: 002b:00007ffcd9fedfc0 EFLAGS: 00010283 [ 84.021570][ T5447] RAX: 0000000000000000 RBX: 00007f1694456080 RCX: 0000000000000000 [ 84.021586][ T5447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555d5f7808 [ 84.021602][ T5447] RBP: 00007f1694457ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 84.021618][ T5447] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001498f [ 84.021632][ T5447] R13: 00007f1694456080 R14: ffffffffffffffff R15: 00007ffcd9fee0d0 [ 84.021696][ T5447] [ 84.021705][ T5447] memory: usage 307200kB, limit 307200kB, failcnt 328 [ 84.250264][ T5447] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 84.258231][ T5447] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 84.265540][ T5447] Memory cgroup stats for /syz2: [ 84.266311][ T5447] cache 0 [ 84.274263][ T5447] rss 4096 [ 84.277322][ T5447] shmem 0 [ 84.280454][ T5447] mapped_file 0 [ 84.284166][ T5447] dirty 0 [ 84.287143][ T5447] writeback 4096 [ 84.290948][ T5447] workingset_refault_anon 22 [ 84.295639][ T5447] workingset_refault_file 163 [ 84.300444][ T5447] swap 368640 [ 84.303772][ T5447] swapcached 12288 [ 84.307491][ T5447] nr_memmap_boot_pages 50707 [ 84.312165][ T5447] pgpgin 50703 [ 84.315535][ T5447] pglazyfree 81705 [ 84.319265][ T5447] pgfault 19 [ 84.322482][ T5447] a_other 4096 [ 84.325854][ T5447] inactive_anon 8192 [ 84.329782][ T5447] active_anon 0 [ 84.333263][ T5447] inactive_file 4096 [ 84.337158][ T5447] active_file 0 [ 84.340655][ T5447] hierarchical_memory_limit 314572800 [ 84.346135][ T5447] hierarchical_memsw_limit 9223372036854771712 [ 84.352499][ T5447] total_cache 0 [ 84.356884][ T5447] total_rss 4096 [ 84.360979][ T5447] total_shmem 0 [ 84.364632][ T5447] total_mapped_file 0 [ 84.368760][ T5447] total_dirty 0 [ 84.372242][ T5447] total_writeback 4096 [ 84.376418][ T5447] total_workingset_refault_anon 22 [ 84.381623][ T5447] total_workingset_refault_file 163 [ 84.387043][ T5447] total_swap 368640 [ 84.391429][ T5447] total_swapcached 12288 [ 84.395809][ T5447] total_nr_memmap_boot_pages 50707 [ 84.401315][ T5447] total_pgpgin 50703 [ 84.405659][ T5447] total_pglazyfree 81705 [ 84.410151][ T5447] total_pgfault 19 [ 84.414061][ T5447] total_a_other 4096 [ 84.418033][ T5447] total_inactive_anon 8192 [ 84.422518][ T5447] total_active_anon 0 [ 84.426669][ T5447] total_inactive_file 4096 [ 84.431136][ T5447] total_active_file 0 [ 84.435366][ T5447] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.607,pid=5447,uid=0 [ 84.450011][ T5447] Memory cgroup out of memory: Killed process 5447 (syz.2.607) total-vm:95796kB, anon-rss:972kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 84.468566][ T5467] tipc: Resetting bearer [ 84.485196][ T5467] tipc: Disabling bearer [ 84.722630][ T5481] loop4: detected capacity change from 0 to 2048 [ 84.739304][ T5481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.739387][ T5483] loop2: detected capacity change from 0 to 512 [ 84.758684][ T5483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.778371][ T5483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.791225][ T5483] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.820735][ T5490] EXT4-fs (loop4): shut down requested (1) [ 84.835265][ T3452] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 84.865761][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.935826][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 84.935914][ T29] audit: type=1400 audit(1748847542.541:4667): avc: denied { remount } for pid=5492 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.980336][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.050944][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 85.552340][ T5513] loop2: detected capacity change from 0 to 512 [ 85.559245][ T5513] EXT4-fs: Ignoring removed nobh option [ 85.566736][ T5513] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 86.281500][ T5525] loop4: detected capacity change from 0 to 512 [ 86.517006][ T5525] EXT4-fs: inline encryption not supported [ 86.542880][ T5525] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.577999][ T5525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.591371][ T5525] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.608594][ T5525] xt_cgroup: invalid path, errno=-2 [ 86.635208][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.740529][ T5537] loop5: detected capacity change from 0 to 512 [ 86.747573][ T5537] EXT4-fs: Ignoring removed oldalloc option [ 86.747906][ T5535] lo speed is unknown, defaulting to 1000 [ 86.754242][ T5537] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 86.773726][ T5537] EXT4-fs (loop5): 1 truncate cleaned up [ 86.780891][ T5537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.844822][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.076284][ T5543] SET target dimension over the limit! [ 87.106894][ T5546] loop2: detected capacity change from 0 to 256 [ 87.123000][ T5546] syzkaller1: entered promiscuous mode [ 87.128928][ T5546] syzkaller1: entered allmulticast mode [ 87.159237][ T5548] loop5: detected capacity change from 0 to 512 [ 87.167926][ T5548] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.176719][ T5548] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.194238][ T5548] EXT4-fs (loop5): 1 truncate cleaned up [ 87.202119][ T5548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.235140][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.253676][ T5553] loop2: detected capacity change from 0 to 128 [ 87.264702][ T5553] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 87.280007][ T5553] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.458842][ T29] audit: type=1326 audit(1748847545.064:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 87.482934][ T29] audit: type=1326 audit(1748847545.064:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 87.509095][ T29] audit: type=1326 audit(1748847545.064:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 87.515433][ T5419] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.532884][ T29] audit: type=1326 audit(1748847545.064:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 87.541083][ T5419] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.564631][ T29] audit: type=1326 audit(1748847545.064:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 87.577388][ T5419] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.596618][ T29] audit: type=1326 audit(1748847545.104:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 87.605030][ T5419] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.628308][ T29] audit: type=1326 audit(1748847545.104:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 87.628360][ T29] audit: type=1326 audit(1748847545.104:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 87.641343][ T5419] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.660524][ T29] audit: type=1326 audit(1748847545.104:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 87.716104][ T5419] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.722833][ T5562] loop4: detected capacity change from 0 to 128 [ 87.729563][ T5419] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.739677][ T5419] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.094129][ T3327] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.313462][ T5568] loop2: detected capacity change from 0 to 512 [ 88.320730][ T5568] EXT4-fs: inline encryption not supported [ 88.329212][ T5568] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.351154][ T5568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.364531][ T5568] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.388238][ T5568] xt_cgroup: invalid path, errno=-2 [ 88.407922][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 88.589336][ T5576] syzkaller0: entered promiscuous mode [ 88.594899][ T5576] syzkaller0: entered allmulticast mode [ 88.668287][ T5578] validate_nla: 1 callbacks suppressed [ 88.668353][ T5578] netlink: 'syz.4.650': attribute type 27 has an invalid length. [ 88.735822][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.759947][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.779514][ T5581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5581 comm=syz.4.650 [ 88.792362][ T5578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.810349][ T5581] 9pnet_virtio: no channels available for device [ 88.954536][ T5588] lo speed is unknown, defaulting to 1000 [ 91.306434][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 91.306453][ T29] audit: type=1326 audit(1748847548.929:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 91.336246][ T29] audit: type=1326 audit(1748847548.939:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 91.365152][ T5598] loop3: detected capacity change from 0 to 128 [ 91.372404][ T5598] vfat: Unknown parameter 'GPL' [ 91.421945][ T5596] loop0: detected capacity change from 0 to 512 [ 91.438695][ T5596] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.468184][ T5596] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.484359][ T29] audit: type=1400 audit(1748847548.990:5178): avc: denied { read write } for pid=5595 comm="syz.3.657" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.508471][ T29] audit: type=1400 audit(1748847548.990:5179): avc: denied { open } for pid=5595 comm="syz.3.657" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.532544][ T29] audit: type=1400 audit(1748847548.990:5180): avc: denied { ioctl } for pid=5595 comm="syz.3.657" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.559224][ T29] audit: type=1326 audit(1748847549.000:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 91.583675][ T29] audit: type=1326 audit(1748847549.000:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 91.607079][ T29] audit: type=1326 audit(1748847549.000:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 91.630454][ T29] audit: type=1400 audit(1748847549.000:5184): avc: denied { mounton } for pid=5595 comm="syz.3.657" path="/124/file0" dev="tmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.653080][ T29] audit: type=1326 audit(1748847549.010:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5590 comm="syz.4.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 91.722733][ T5615] capability: warning: `syz.2.659' uses 32-bit capabilities (legacy support in use) [ 91.738999][ T5615] loop2: detected capacity change from 0 to 512 [ 91.796657][ T5615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.820219][ T5615] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.659: bad orphan inode 11 [ 91.834960][ T5596] EXT4-fs (loop0): 1 truncate cleaned up [ 91.842827][ T5615] ext4_test_bit(bit=10, block=4) = 1 [ 91.848304][ T5615] is_bad_inode(inode)=0 [ 91.852698][ T5615] NEXT_ORPHAN(inode)=2080374784 [ 91.857749][ T5615] max_ino=32 [ 91.861052][ T5615] i_nlink=0 [ 91.875262][ T5596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.916679][ T5621] netlink: 60 bytes leftover after parsing attributes in process `syz.5.660'. [ 91.933952][ T5615] EXT4-fs (loop2): 1 truncate cleaned up [ 91.948156][ T5621] netlink: 60 bytes leftover after parsing attributes in process `syz.5.660'. [ 92.097897][ T5615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.710888][ T5621] netlink: 60 bytes leftover after parsing attributes in process `syz.5.660'. [ 92.720110][ T5621] netlink: 60 bytes leftover after parsing attributes in process `syz.5.660'. [ 92.788913][ T5630] netlink: 3 bytes leftover after parsing attributes in process `syz.2.659'. [ 93.110587][ T5630] 0X: renamed from caif0 [ 93.124615][ T5630] 0X: entered allmulticast mode [ 93.130166][ T5630] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 93.233540][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.711327][ T5635] netlink: 'syz.5.665': attribute type 27 has an invalid length. [ 93.742971][ T5635] bridge1: left allmulticast mode [ 93.772692][ T3452] lo speed is unknown, defaulting to 1000 [ 93.778856][ T3452] syz0: Port: 1 Link DOWN [ 93.839511][ T5635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.865210][ T3452] lo speed is unknown, defaulting to 1000 [ 93.871272][ T3452] syz0: Port: 1 Link ACTIVE [ 93.889181][ T5636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5636 comm=syz.5.665 [ 93.970784][ T5635] 9pnet_virtio: no channels available for device [ 94.013613][ T5639] loop0: detected capacity change from 0 to 512 [ 94.222668][ T5639] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.241340][ T5643] loop4: detected capacity change from 0 to 512 [ 94.318364][ T5639] EXT4-fs (loop0): 1 truncate cleaned up [ 94.339674][ T5643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.402003][ T5639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.469142][ T5643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.545776][ T5643] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.617024][ T4198] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.824868][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.024457][ T5657] openvswitch: netlink: Message has 6 unknown bytes. [ 95.186325][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.112033][ T5665] random: crng reseeded on system resumption [ 97.093839][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 97.093854][ T29] audit: type=1326 audit(1748847554.737:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.161621][ T5675] loop5: detected capacity change from 0 to 1024 [ 97.199616][ T5675] EXT4-fs: inline encryption not supported [ 97.219980][ T29] audit: type=1326 audit(1748847554.777:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.243721][ T29] audit: type=1326 audit(1748847554.777:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.267274][ T29] audit: type=1326 audit(1748847554.777:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.291093][ T29] audit: type=1326 audit(1748847554.777:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.298395][ T5675] EXT4-fs: Ignoring removed bh option [ 97.314627][ T29] audit: type=1326 audit(1748847554.777:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.343813][ T29] audit: type=1326 audit(1748847554.777:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.367579][ T29] audit: type=1326 audit(1748847554.777:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.391107][ T29] audit: type=1326 audit(1748847554.777:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.414594][ T29] audit: type=1326 audit(1748847554.777:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5674 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 97.458013][ T5679] vlan2: entered promiscuous mode [ 97.463196][ T5679] bond0: entered promiscuous mode [ 97.468280][ T5679] batadv0: entered promiscuous mode [ 97.479133][ T5675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.540922][ T5684] netlink: 'syz.4.681': attribute type 27 has an invalid length. [ 97.598380][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.717150][ T5688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.725438][ T5688] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.773290][ T5688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.812705][ T5691] lo speed is unknown, defaulting to 1000 [ 98.093052][ T5684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5684 comm=syz.4.681 [ 98.152208][ T5684] 9pnet_virtio: no channels available for device [ 98.672268][ T5705] syzkaller0: entered promiscuous mode [ 98.677920][ T5705] syzkaller0: entered allmulticast mode [ 98.792911][ T5707] lo speed is unknown, defaulting to 1000 [ 99.396567][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 99.427212][ T5713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.463863][ T5713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.674618][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.058598][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.699'. [ 100.067481][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.699'. [ 100.090181][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.699'. [ 100.143059][ T5744] loop5: detected capacity change from 0 to 512 [ 100.172144][ T5744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.183732][ T5744] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.418320][ T5744] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 100.429248][ T5752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.704'. [ 100.435083][ T5744] EXT4-fs (loop5): 1 truncate cleaned up [ 100.442349][ T5752] netlink: 72 bytes leftover after parsing attributes in process `syz.3.704'. [ 100.450348][ T5744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.614460][ T5758] netlink: 168 bytes leftover after parsing attributes in process `syz.4.706'. [ 100.990587][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.861710][ T5806] lo speed is unknown, defaulting to 1000 [ 102.167366][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 102.167388][ T29] audit: type=1326 audit(1748847559.818:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f11955927 code=0x7ffc0000 [ 102.287977][ T5813] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.723' sets config #1 [ 102.301436][ T5810] netlink: 'syz.0.722': attribute type 4 has an invalid length. [ 102.330115][ T29] audit: type=1326 audit(1748847559.858:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f118fab39 code=0x7ffc0000 [ 102.353868][ T29] audit: type=1326 audit(1748847559.858:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f11955927 code=0x7ffc0000 [ 102.377209][ T29] audit: type=1326 audit(1748847559.858:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f118fab39 code=0x7ffc0000 [ 102.400755][ T29] audit: type=1326 audit(1748847559.858:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 102.424337][ T29] audit: type=1326 audit(1748847559.858:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f11955927 code=0x7ffc0000 [ 102.447699][ T29] audit: type=1326 audit(1748847559.858:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f118fab39 code=0x7ffc0000 [ 102.469206][ T5806] netlink: 'syz.0.722': attribute type 4 has an invalid length. [ 102.471103][ T29] audit: type=1326 audit(1748847559.858:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 102.502111][ T29] audit: type=1326 audit(1748847559.868:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f11955927 code=0x7ffc0000 [ 102.525619][ T29] audit: type=1326 audit(1748847559.868:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.4.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f118fab39 code=0x7ffc0000 [ 102.685428][ T5820] tmpfs: Bad value for 'mpol' [ 102.692607][ T5818] lo speed is unknown, defaulting to 1000 [ 102.720834][ T5820] loop0: detected capacity change from 0 to 512 [ 102.787331][ T5820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.878980][ T5820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.902261][ T5829] lo speed is unknown, defaulting to 1000 [ 102.908303][ T5820] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.055148][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.071161][ T5836] loop2: detected capacity change from 0 to 128 [ 103.249491][ T5838] Cannot find add_set index 0 as target [ 103.381461][ T5840] lo speed is unknown, defaulting to 1000 [ 103.396689][ T5836] syz.2.731: attempt to access beyond end of device [ 103.396689][ T5836] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 103.486318][ T5849] loop0: detected capacity change from 0 to 128 [ 103.493984][ T4724] kworker/u8:66: attempt to access beyond end of device [ 103.493984][ T4724] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 103.516739][ T5849] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 103.530772][ T5849] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.637136][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.705971][ T5859] loop2: detected capacity change from 0 to 512 [ 103.714334][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 103.729401][ T5859] ext4: Unknown parameter 'fsmagic' [ 103.739948][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 103.750271][ T5865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.743'. [ 103.754403][ T5866] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.824594][ T5871] loop4: detected capacity change from 0 to 1024 [ 103.855727][ T5871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.883833][ T5871] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 103.956026][ T5871] EXT4-fs (loop4): Remounting filesystem read-only [ 103.979730][ T5871] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 104.137567][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.101099][ T5900] lo speed is unknown, defaulting to 1000 [ 105.311993][ T5903] loop0: detected capacity change from 0 to 2048 [ 105.321132][ T5907] syz.4.755 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.548462][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.557536][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.655688][ T5921] loop4: detected capacity change from 0 to 512 [ 105.676350][ T5921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.706709][ T5928] loop3: detected capacity change from 0 to 256 [ 105.730550][ T5921] EXT4-fs (loop4): 1 truncate cleaned up [ 105.736444][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 105.746057][ T5921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.759334][ T5928] FAT-fs (loop3): IO charset cp775 not found [ 105.767163][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 105.815377][ T5928] loop3: detected capacity change from 0 to 2048 [ 105.822718][ T5928] EXT4-fs: Ignoring removed i_version option [ 105.836390][ T5928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.854529][ T5928] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.867537][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 105.877750][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 105.888626][ T5928] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.765: bg 0: block 345: padding at end of block bitmap is not set [ 105.904169][ T5928] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 105.916808][ T5928] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.916808][ T5928] [ 105.947611][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.980457][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 105.991269][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 106.069530][ T5941] loop5: detected capacity change from 0 to 512 [ 106.117622][ T5941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.143587][ T5941] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.205796][ T5947] loop3: detected capacity change from 0 to 8192 [ 106.761544][ T5956] lo speed is unknown, defaulting to 1000 [ 107.796629][ T5961] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 107.868479][ T5961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.889760][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 107.889777][ T29] audit: type=1400 audit(1748847565.556:6140): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 107.946403][ T5963] vlan0: entered promiscuous mode [ 107.951653][ T5963] bond3: entered promiscuous mode [ 107.957027][ T5963] vlan0: entered allmulticast mode [ 107.962221][ T5963] bond3: entered allmulticast mode [ 107.979780][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.001800][ T29] audit: type=1400 audit(1748847565.596:6141): avc: denied { create } for pid=5960 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 108.022222][ T29] audit: type=1400 audit(1748847565.596:6142): avc: denied { write } for pid=5960 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 108.692543][ T29] audit: type=1326 audit(1748847566.357:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 108.716017][ T29] audit: type=1326 audit(1748847566.357:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 108.795806][ T29] audit: type=1326 audit(1748847566.407:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 108.819643][ T29] audit: type=1326 audit(1748847566.407:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 108.843059][ T29] audit: type=1326 audit(1748847566.407:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 108.947779][ T29] audit: type=1326 audit(1748847566.597:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169422e969 code=0x7ffc0000 [ 108.971238][ T29] audit: type=1326 audit(1748847566.597:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f169422e969 code=0x7ffc0000 [ 110.047396][ T5993] syzkaller0: entered promiscuous mode [ 110.052981][ T5993] syzkaller0: entered allmulticast mode [ 110.112020][ T5994] lo speed is unknown, defaulting to 1000 [ 110.451253][ T5999] loop2: detected capacity change from 0 to 128 [ 110.523243][ T5999] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.523901][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.541406][ T5999] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.622175][ T6005] loop5: detected capacity change from 0 to 128 [ 111.857225][ T3327] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.961331][ T6026] lo speed is unknown, defaulting to 1000 [ 111.983844][ T6028] lo speed is unknown, defaulting to 1000 [ 112.043916][ T6030] netlink: 'syz.4.796': attribute type 4 has an invalid length. [ 112.119019][ T6030] netlink: 'syz.4.796': attribute type 4 has an invalid length. [ 112.608413][ T6048] loop5: detected capacity change from 0 to 512 [ 112.638769][ T6048] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.649229][ T6050] loop4: detected capacity change from 0 to 128 [ 112.689417][ T6050] syz.4.802: attempt to access beyond end of device [ 112.689417][ T6050] loop4: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 112.756164][ T6050] syz.4.802: attempt to access beyond end of device [ 112.756164][ T6050] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 112.769838][ T6050] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 112.808143][ T6050] syz.4.802: attempt to access beyond end of device [ 112.808143][ T6050] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 112.810752][ T6048] EXT4-fs (loop5): 1 truncate cleaned up [ 112.821537][ T6050] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 112.828766][ T6048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.868331][ T6050] syz.4.802: attempt to access beyond end of device [ 112.868331][ T6050] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 112.881807][ T6050] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 112.904033][ T6050] syz.4.802: attempt to access beyond end of device [ 112.904033][ T6050] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 112.918016][ T6050] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 112.919440][ T29] kauditd_printk_skb: 792 callbacks suppressed [ 112.919459][ T29] audit: type=1400 audit(1748847570.591:6942): avc: denied { watch watch_reads } for pid=6057 comm="syz.0.804" path="/158/control" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 112.927285][ T6050] syz.4.802: attempt to access beyond end of device [ 112.927285][ T6050] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 112.943364][ T6056] loop3: detected capacity change from 0 to 512 [ 112.956577][ T6050] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 112.985269][ T6050] syz.4.802: attempt to access beyond end of device [ 112.985269][ T6050] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 112.998638][ T6050] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 113.007696][ T6050] syz.4.802: attempt to access beyond end of device [ 113.007696][ T6050] loop4: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 113.021069][ T6050] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 113.030867][ T6050] syz.4.802: attempt to access beyond end of device [ 113.030867][ T6050] loop4: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 113.044574][ T6050] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 113.053763][ T6050] syz.4.802: attempt to access beyond end of device [ 113.053763][ T6050] loop4: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 113.067469][ T6050] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 113.076496][ T29] audit: type=1400 audit(1748847570.752:6943): avc: denied { bind } for pid=6061 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.100723][ T6056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.111661][ T6050] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 113.122382][ T6056] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.183824][ T29] audit: type=1400 audit(1748847570.752:6944): avc: denied { write } for pid=6061 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.203218][ T29] audit: type=1326 audit(1748847570.772:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 113.227156][ T29] audit: type=1326 audit(1748847570.772:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 113.228710][ T6067] loop0: detected capacity change from 0 to 512 [ 113.250695][ T29] audit: type=1326 audit(1748847570.772:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 113.250735][ T29] audit: type=1326 audit(1748847570.772:6948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 113.303848][ T29] audit: type=1326 audit(1748847570.772:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 113.327190][ T29] audit: type=1326 audit(1748847570.772:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 113.350829][ T29] audit: type=1326 audit(1748847570.772:6951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd9b4e969 code=0x7ffc0000 [ 113.402635][ T6067] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.806: casefold flag without casefold feature [ 113.415567][ T6067] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.806: couldn't read orphan inode 15 (err -117) [ 113.428153][ T6067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.499996][ T6072] loop4: detected capacity change from 0 to 8192 [ 113.582458][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.641343][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.720687][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 113.854195][ T6088] loop3: detected capacity change from 0 to 1024 [ 113.869000][ T6088] EXT4-fs: Ignoring removed nobh option [ 113.874686][ T6088] EXT4-fs: Ignoring removed bh option [ 113.914996][ T6088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.186518][ T6087] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 114.361449][ T6099] loop2: detected capacity change from 0 to 764 [ 114.541418][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.061131][ T6107] loop2: detected capacity change from 0 to 2048 [ 115.126730][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.149138][ T6107] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.820: iget: bogus i_mode (4355) [ 115.186057][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.227051][ T6117] loop4: detected capacity change from 0 to 512 [ 115.234711][ T6117] EXT4-fs: Ignoring removed bh option [ 115.240156][ T6117] EXT4-fs: test_dummy_encryption option not supported [ 115.550182][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.824'. [ 115.614391][ T6115] Set syz1 is full, maxelem 65536 reached [ 115.776280][ T6130] loop0: detected capacity change from 0 to 2048 [ 115.785284][ T6130] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.839475][ T6130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.859813][ T6140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.889716][ T6130] random: crng reseeded on system resumption [ 116.112961][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.133037][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.174389][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.193125][ T6149] loop5: detected capacity change from 0 to 128 [ 116.259511][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 116.418758][ T6162] loop2: detected capacity change from 0 to 1024 [ 116.427813][ T6162] EXT4-fs: Ignoring removed nobh option [ 116.433519][ T6162] EXT4-fs: Ignoring removed bh option [ 116.449858][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 116.462562][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.483867][ T6162] netlink: 'syz.2.837': attribute type 1 has an invalid length. [ 116.593108][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.617665][ T6183] loop2: detected capacity change from 0 to 736 [ 116.632646][ T6185] loop5: detected capacity change from 0 to 512 [ 116.639938][ T6183] rock: directory entry would overflow storage [ 116.643432][ T6185] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 116.646264][ T6183] rock: sig=0x3b10, size=4, remaining=3 [ 116.659026][ T6185] EXT4-fs (loop5): 1 truncate cleaned up [ 116.665624][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 116.676977][ T6185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.701513][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.720109][ T6185] lo speed is unknown, defaulting to 1000 [ 116.807035][ T6193] lo speed is unknown, defaulting to 1000 [ 116.839503][ T6195] netlink: 4 bytes leftover after parsing attributes in process `+}[@ڟN7'. [ 116.895090][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.986526][ T6205] loop2: detected capacity change from 0 to 2048 [ 117.036498][ T6207] loop5: detected capacity change from 0 to 2048 [ 117.059543][ T6207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.347822][ T6222] loop0: detected capacity change from 0 to 1024 [ 117.354765][ T6222] EXT4-fs: Ignoring removed nobh option [ 117.360378][ T6222] EXT4-fs: Ignoring removed bh option [ 117.373249][ T6222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.459557][ T6222] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 117.597813][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.620258][ T6240] loop3: detected capacity change from 0 to 128 [ 117.653551][ T6240] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.673440][ T6240] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.866195][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.131439][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 118.131460][ T29] audit: type=1400 audit(1748847575.795:7192): avc: denied { block_suspend } for pid=6246 comm="syz.5.864" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.556043][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.718912][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.875'. [ 118.755284][ T29] audit: type=1400 audit(1748847576.426:7193): avc: denied { execute } for pid=6267 comm="syz.4.873" path="/178/cpu.stat" dev="tmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.918255][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 119.335890][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.346313][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.354372][ T29] audit: type=1400 audit(1748847577.026:7194): avc: denied { bind } for pid=6283 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.373661][ T29] audit: type=1400 audit(1748847577.026:7195): avc: denied { name_bind } for pid=6283 comm="syz.0.879" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 119.395427][ T29] audit: type=1400 audit(1748847577.026:7196): avc: denied { node_bind } for pid=6283 comm="syz.0.879" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 119.516456][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'. [ 119.612730][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'. [ 119.639217][ T29] audit: type=1400 audit(1748847577.306:7197): avc: denied { firmware_load } for pid=6276 comm="syz.4.877" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 119.806781][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.882'. [ 120.141536][ T29] audit: type=1326 audit(1748847577.737:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 120.165274][ T29] audit: type=1326 audit(1748847577.737:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 120.188670][ T29] audit: type=1326 audit(1748847577.737:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 120.212442][ T29] audit: type=1326 audit(1748847577.737:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.3.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 121.539927][ T6328] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 121.572675][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 121.585862][ T6328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.633480][ T6333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.660083][ T6333] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.713174][ T6333] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 121.757382][ T6328] veth3: entered promiscuous mode [ 121.785673][ T6328] bond2: (slave veth3): Enslaving as an active interface with a down link [ 121.809951][ T6337] erspan0: entered allmulticast mode [ 121.826993][ T6337] bond2: (slave erspan0): making interface the new active one [ 121.858272][ T6337] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 121.937026][ T6341] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 122.265353][ T6354] loop3: detected capacity change from 0 to 1024 [ 122.274964][ T6354] EXT4-fs: Ignoring removed i_version option [ 122.680741][ T6354] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.699031][ T6354] EXT4-fs: Ignoring removed nobh option [ 122.704692][ T6354] EXT4-fs: Ignoring removed bh option [ 122.736583][ T6354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.797332][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.853059][ T6367] xt_hashlimit: size too large, truncated to 1048576 [ 122.954379][ T6368] xt_hashlimit: size too large, truncated to 1048576 [ 123.144044][ T6375] loop5: detected capacity change from 0 to 512 [ 123.165077][ T6375] EXT4-fs: Ignoring removed oldalloc option [ 123.194662][ T6375] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.219633][ T6375] EXT4-fs (loop5): 1 truncate cleaned up [ 123.238817][ T6375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.377965][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 123.377984][ T29] audit: type=1400 audit(1748847581.058:7230): avc: denied { bind } for pid=6373 comm="syz.5.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.493268][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.645229][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.912'. [ 123.949186][ T29] audit: type=1400 audit(1748847581.088:7231): avc: denied { map } for pid=6373 comm="syz.5.908" path="/151/bus/blkio.bfq.io_serviced_recursive" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.973999][ T29] audit: type=1400 audit(1748847581.088:7232): avc: denied { write } for pid=6373 comm="syz.5.908" path="socket:[15486]" dev="sockfs" ino=15486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.997518][ T29] audit: type=1326 audit(1748847581.278:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.4.913" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f1195e969 code=0x0 [ 124.021039][ T29] audit: type=1400 audit(1748847581.308:7234): avc: denied { connect } for pid=6389 comm="syz.5.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.040527][ T29] audit: type=1400 audit(1748847581.308:7235): avc: denied { write } for pid=6389 comm="syz.5.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.080282][ T29] audit: type=1400 audit(1748847581.759:7236): avc: denied { validate_trans } for pid=6397 comm="syz.5.916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 124.128303][ T29] audit: type=1400 audit(1748847581.809:7237): avc: denied { read } for pid=6400 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.263032][ T29] audit: type=1400 audit(1748847581.939:7238): avc: denied { mount } for pid=6407 comm="syz.5.920" name="/" dev="rpc_pipefs" ino=15168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 124.290617][ T6406] loop3: detected capacity change from 0 to 8192 [ 124.382864][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.391531][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.950009][ T6425] loop2: detected capacity change from 0 to 1024 [ 124.958435][ T6425] ext4: Unknown parameter 'nojourn' [ 124.993220][ T6425] loop2: detected capacity change from 0 to 1024 [ 125.008231][ T6425] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 125.017388][ T6425] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.926: Failed to acquire dquot type 0 [ 125.032546][ T6425] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 125.049517][ T6425] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.926: corrupted inode contents [ 125.064231][ T6425] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #13: comm syz.2.926: mark_inode_dirty error [ 125.107022][ T6425] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.926: corrupted inode contents [ 125.127929][ T6425] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.926: mark_inode_dirty error [ 125.155648][ T6425] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.926: corrupted inode contents [ 125.243137][ T6425] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 125.253571][ T6425] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.926: corrupted inode contents [ 125.277921][ T6425] EXT4-fs error (device loop2): ext4_truncate:4597: inode #13: comm syz.2.926: mark_inode_dirty error [ 125.397059][ T6425] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 125.426964][ T6425] EXT4-fs (loop2): 1 truncate cleaned up [ 125.433255][ T6425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.479131][ T6443] loop3: detected capacity change from 0 to 512 [ 125.487275][ T6443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.488668][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.498388][ T6443] EXT4-fs (loop3): 1 truncate cleaned up [ 125.518586][ T6443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.776843][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 125.785816][ T6455] netlink: 'syz.2.936': attribute type 30 has an invalid length. [ 125.895743][ T6455] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.904118][ T6455] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.912365][ T6455] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.920635][ T6455] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.950078][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 125.959302][ T6455] netlink: 'syz.2.936': attribute type 30 has an invalid length. [ 126.236817][ T6469] loop5: detected capacity change from 0 to 256 [ 126.254301][ T6469] FAT-fs (loop5): codepage cp850 not found [ 126.409121][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.5.949'. [ 126.421678][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.5.949'. [ 126.606233][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.610422][ T6478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.954'. [ 126.624299][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.954'. [ 126.633223][ T6478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.954'. [ 126.643455][ T6478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.954'. [ 126.664287][ T6480] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.717673][ T6480] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.788359][ T6480] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.827714][ T6480] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.895828][ T6480] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.904551][ T6490] lo speed is unknown, defaulting to 1000 [ 126.908652][ T6480] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.921731][ T6480] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.952789][ T6480] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.153411][ T6496] loop5: detected capacity change from 0 to 256 [ 127.199031][ T6500] loop4: detected capacity change from 0 to 128 [ 127.812909][ T6515] netlink: 'syz.0.957': attribute type 4 has an invalid length. [ 127.926451][ T6526] netlink: 'syz.2.959': attribute type 2 has an invalid length. [ 127.962423][ T6524] hub 4-0:1.0: USB hub found [ 127.967993][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 127.973713][ T6524] hub 4-0:1.0: 8 ports detected [ 127.982417][ T6529] loop3: detected capacity change from 0 to 1024 [ 127.985546][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 128.008858][ T6529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.029525][ T6524] SELinux: syz.0.960 (6524) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 128.645915][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 128.645938][ T29] audit: type=1400 audit(1748847586.320:7354): avc: denied { name_bind } for pid=6567 comm="syz.4.979" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 128.673844][ T29] audit: type=1326 audit(1748847586.320:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 128.697251][ T29] audit: type=1326 audit(1748847586.320:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 128.710581][ T6571] syzkaller0: entered promiscuous mode [ 128.720600][ T29] audit: type=1326 audit(1748847586.320:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 128.726092][ T6571] syzkaller0: entered allmulticast mode [ 128.749402][ T29] audit: type=1326 audit(1748847586.320:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 128.749517][ T29] audit: type=1326 audit(1748847586.320:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 128.801920][ T29] audit: type=1326 audit(1748847586.320:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 128.825356][ T29] audit: type=1326 audit(1748847586.320:7361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 128.848609][ T29] audit: type=1326 audit(1748847586.320:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 128.872129][ T29] audit: type=1326 audit(1748847586.320:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f9f1195e969 code=0x7ffc0000 [ 128.933113][ T6582] loop0: detected capacity change from 0 to 512 [ 128.951785][ T6582] EXT4-fs: Ignoring removed bh option [ 128.957336][ T6582] EXT4-fs: test_dummy_encryption option not supported [ 129.007989][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.130676][ T6595] netlink: 'syz.5.995': attribute type 10 has an invalid length. [ 129.376853][ T6611] lo speed is unknown, defaulting to 1000 [ 129.626240][ T6622] loop3: detected capacity change from 0 to 256 [ 129.679894][ T6622] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.771698][ T6622] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 129.780365][ T6622] FAT-fs (loop3): Filesystem has been set read-only [ 129.942359][ T6634] loop2: detected capacity change from 0 to 512 [ 129.965228][ T6634] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.987336][ T6634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.010964][ T6634] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.100632][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.116250][ T6644] loop5: detected capacity change from 0 to 4096 [ 130.126439][ T6644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.311655][ T6654] loop2: detected capacity change from 0 to 512 [ 130.312963][ T6630] lo speed is unknown, defaulting to 1000 [ 130.328793][ T6654] EXT4-fs: Ignoring removed bh option [ 130.334274][ T6654] EXT4-fs: test_dummy_encryption option not supported [ 130.393368][ T6658] netlink: zone id is out of range [ 130.398792][ T6658] netlink: zone id is out of range [ 130.404026][ T6658] netlink: zone id is out of range [ 130.409196][ T6658] netlink: zone id is out of range [ 130.414407][ T6658] netlink: del zone limit has 8 unknown bytes [ 130.992993][ T6659] Set syz1 is full, maxelem 65536 reached [ 131.015649][ T6654] __nla_validate_parse: 6 callbacks suppressed [ 131.015669][ T6654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1004'. [ 131.041030][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.180985][ T6672] netlink: 'syz.3.1008': attribute type 39 has an invalid length. [ 132.300914][ T6681] loop0: detected capacity change from 0 to 512 [ 132.307974][ T6681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.320443][ T6681] EXT4-fs (loop0): 1 truncate cleaned up [ 132.326773][ T6681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.487844][ T6688] lo speed is unknown, defaulting to 1000 [ 132.550182][ T6692] netlink: 'syz.3.1012': attribute type 21 has an invalid length. [ 133.082488][ T6698] loop5: detected capacity change from 0 to 512 [ 133.096682][ T6698] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.102273][ T6704] loop2: detected capacity change from 0 to 512 [ 133.122593][ T6704] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.565198][ T6704] EXT4-fs (loop2): 1 truncate cleaned up [ 133.565619][ T6698] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 133.581371][ T6704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.589688][ T6698] System zones: 0-2, 18-18, 34-34 [ 133.625907][ T6698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.642696][ T6698] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.656990][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 133.657007][ T29] audit: type=1326 audit(1748847591.342:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b166ed2d0 code=0x7ffc0000 [ 133.686861][ T29] audit: type=1326 audit(1748847591.342:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0b166ed6b7 code=0x7ffc0000 [ 133.710910][ T29] audit: type=1326 audit(1748847591.342:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b166ed2d0 code=0x7ffc0000 [ 133.714748][ T6710] loop3: detected capacity change from 0 to 512 [ 133.736429][ T29] audit: type=1326 audit(1748847591.342:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 133.736496][ T29] audit: type=1326 audit(1748847591.342:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6696 comm="syz.5.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b166ee969 code=0x7ffc0000 [ 133.843522][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.860492][ T6710] EXT4-fs (loop3): too many log groups per flexible block group [ 133.861159][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.868297][ T6710] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 133.868404][ T6710] EXT4-fs (loop3): mount failed [ 133.901472][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.910912][ T6716] loop2: detected capacity change from 0 to 128 [ 133.922321][ T29] audit: type=1400 audit(1748847591.602:7653): avc: denied { read write } for pid=6715 comm="syz.2.1020" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 133.946706][ T29] audit: type=1400 audit(1748847591.602:7654): avc: denied { open } for pid=6715 comm="syz.2.1020" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 133.972073][ T29] audit: type=1400 audit(1748847591.602:7655): avc: denied { read } for pid=6715 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.102474][ T6726] loop3: detected capacity change from 0 to 512 [ 134.109336][ T6726] EXT4-fs: Ignoring removed orlov option [ 134.116210][ T6726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.127038][ T6726] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.135193][ T6726] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1023: bg 0: block 248: padding at end of block bitmap is not set [ 134.150416][ T6726] Quota error (device loop3): write_blk: dquota write failed [ 134.158036][ T6726] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 134.168022][ T6726] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1023: Failed to acquire dquot type 1 [ 134.190595][ T6729] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1022'. [ 134.200797][ T6726] EXT4-fs (loop3): 1 truncate cleaned up [ 134.619918][ T6726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.645974][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.813434][ T6742] netlink: 'syz.2.1026': attribute type 4 has an invalid length. [ 134.821290][ T6742] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1026'. [ 135.217216][ T6754] loop5: detected capacity change from 0 to 512 [ 135.242111][ T6746] lo speed is unknown, defaulting to 1000 [ 135.268139][ T6754] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 135.330592][ T6754] EXT4-fs (loop5): 1 truncate cleaned up [ 135.368795][ T6754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.655402][ T6761] loop3: detected capacity change from 0 to 512 [ 135.684748][ T6761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.809496][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1032'. [ 135.821421][ T6766] bond0: (slave batadv0): Releasing backup interface [ 135.831018][ T6766] batadv0 (unregistering): left promiscuous mode [ 135.967135][ T6770] lo speed is unknown, defaulting to 1000 [ 136.155238][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.421889][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 136.453930][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 136.545425][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.548134][ T6783] lo speed is unknown, defaulting to 1000 [ 136.580846][ T6791] loop0: detected capacity change from 0 to 1024 [ 136.627036][ T6793] loop3: detected capacity change from 0 to 1024 [ 136.853321][ T6791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.868802][ T6793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.991717][ T6801] lo speed is unknown, defaulting to 1000 [ 137.420033][ T6804] loop5: detected capacity change from 0 to 512 [ 137.439987][ T6804] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.474262][ T6804] EXT4-fs (loop5): 1 truncate cleaned up [ 137.526205][ T6804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.631770][ T6810] loop4: detected capacity change from 0 to 2048 [ 137.714727][ T6810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.729127][ T6810] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.751715][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.771479][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.344335][ T4699] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:43: bg 0: block 345: padding at end of block bitmap is not set [ 138.372437][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.382357][ T4699] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 347 with error 117 [ 138.394956][ T4699] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.394956][ T4699] [ 138.422155][ T6825] loop2: detected capacity change from 0 to 512 [ 138.432641][ T6825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.452058][ T6825] EXT4-fs (loop2): 1 truncate cleaned up [ 138.463719][ T6825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.480202][ T6830] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1052'. [ 138.489854][ T6830] netlink: zone id is out of range [ 138.496870][ T6830] netlink: zone id is out of range [ 138.502121][ T6830] netlink: zone id is out of range [ 138.520361][ T6830] netlink: zone id is out of range [ 138.526692][ T6830] netlink: del zone limit has 8 unknown bytes [ 138.672715][ T6810] syz.4.1046 (6810) used greatest stack depth: 5736 bytes left [ 138.758385][ T4685] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 363 with max blocks 3 with error 117 [ 138.770921][ T4685] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.770921][ T4685] [ 138.804981][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.824908][ T6838] syzkaller0: entered promiscuous mode [ 138.830498][ T6838] syzkaller0: entered allmulticast mode [ 139.038345][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 139.038440][ T29] audit: type=1326 audit(1748847596.723:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.049080][ T6845] loop5: detected capacity change from 0 to 2048 [ 139.069970][ T29] audit: type=1326 audit(1748847596.753:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.118904][ T29] audit: type=1326 audit(1748847596.783:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.120120][ T6845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.142707][ T29] audit: type=1326 audit(1748847596.783:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.178234][ T29] audit: type=1326 audit(1748847596.783:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.201836][ T29] audit: type=1326 audit(1748847596.793:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.225356][ T29] audit: type=1326 audit(1748847596.793:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.248826][ T29] audit: type=1326 audit(1748847596.793:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.272558][ T29] audit: type=1326 audit(1748847596.793:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.296584][ T29] audit: type=1326 audit(1748847596.793:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 139.343904][ T6851] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 139.368730][ T6851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.395144][ T4699] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:43: bg 0: block 234: padding at end of block bitmap is not set [ 139.411128][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 139.422435][ T6851] bond1 (unregistering): Released all slaves [ 139.430034][ T4699] EXT4-fs (loop5): Remounting filesystem read-only [ 139.479461][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.567531][ T6858] loop4: detected capacity change from 0 to 512 [ 139.602161][ T6858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.633293][ T6858] EXT4-fs (loop4): 1 truncate cleaned up [ 139.639510][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.698609][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.820710][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.864121][ T6871] loop0: detected capacity change from 0 to 512 [ 139.870928][ T6871] EXT4-fs: Ignoring removed oldalloc option [ 139.877426][ T6871] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.885443][ T6871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.895410][ T6871] EXT4-fs (loop0): orphan cleanup on readonly fs [ 139.902276][ T6871] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1065: Failed to acquire dquot type 1 [ 139.915150][ T6871] EXT4-fs (loop0): 1 truncate cleaned up [ 139.921309][ T6871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.944372][ T6871] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.1065: iget: bad i_size value: 360287970189639690 [ 139.972177][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.024315][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1067'. [ 140.913055][ T6906] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1073'. [ 140.946100][ T6908] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 140.952744][ T6908] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.955486][ T6899] lo speed is unknown, defaulting to 1000 [ 140.961025][ T6908] vhci_hcd vhci_hcd.0: Device attached [ 141.074784][ T4196] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 141.087266][ T4196] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.203051][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1076'. [ 141.212443][ T4199] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 141.224595][ T6916] loop0: detected capacity change from 0 to 512 [ 141.231580][ T6916] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.243268][ T6916] EXT4-fs (loop0): 1 truncate cleaned up [ 141.249350][ T6916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.319003][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.375812][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 141.585291][ T6933] lo speed is unknown, defaulting to 1000 [ 141.812446][ T6909] vhci_hcd: connection reset by peer [ 141.825921][ T4663] vhci_hcd: stop threads [ 141.830216][ T4663] vhci_hcd: release socket [ 141.834709][ T4663] vhci_hcd: disconnect device [ 142.001683][ T6936] loop5: detected capacity change from 0 to 512 [ 142.013156][ T6936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.271087][ T6947] loop0: detected capacity change from 0 to 1024 [ 142.277965][ T6947] EXT4-fs: Ignoring removed i_version option [ 142.284324][ T6947] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.289368][ T6948] netlink: 'syz.2.1085': attribute type 4 has an invalid length. [ 142.290847][ T6947] EXT4-fs: Ignoring removed nobh option [ 142.304246][ T6947] EXT4-fs: Ignoring removed bh option [ 142.871754][ T3550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.884185][ T6947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.081727][ T6965] loop3: detected capacity change from 0 to 512 [ 143.097084][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.146820][ T6965] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.197028][ T6965] EXT4-fs (loop3): 1 truncate cleaned up [ 143.221808][ T6965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.244820][ T6969] loop2: detected capacity change from 0 to 512 [ 143.267278][ T6969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.319758][ T6969] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.493556][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.176776][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.203421][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 144.203440][ T29] audit: type=1400 audit(1748847601.884:8011): avc: denied { read write } for pid=6986 comm="syz.4.1096" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.233710][ T29] audit: type=1400 audit(1748847601.884:8012): avc: denied { open } for pid=6986 comm="syz.4.1096" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.259441][ T29] audit: type=1400 audit(1748847601.944:8013): avc: denied { ioctl } for pid=6986 comm="syz.4.1096" path="/dev/usbmon8" dev="devtmpfs" ino=166 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.285007][ T6990] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1096'. [ 144.295248][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1096'. [ 144.323832][ T6990] loop4: detected capacity change from 0 to 128 [ 144.395444][ T6990] bio_check_eod: 9 callbacks suppressed [ 144.395466][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.395466][ T6990] loop4: rw=2049, sector=129, nr_sectors = 16 limit=128 [ 144.422802][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.422802][ T6990] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 144.451570][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.451570][ T6990] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 144.492397][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.492397][ T6990] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 144.557026][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.557026][ T6990] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 144.591052][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.591052][ T6990] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 144.606638][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.606638][ T6990] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 144.620759][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.620759][ T6990] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 144.635277][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.635277][ T6990] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 144.664182][ T6990] syz.4.1096: attempt to access beyond end of device [ 144.664182][ T6990] loop4: rw=2049, sector=281, nr_sectors = 9 limit=128 [ 144.684595][ T29] audit: type=1326 audit(1748847602.364:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 144.737367][ T7003] loop3: detected capacity change from 0 to 1024 [ 144.744645][ T29] audit: type=1326 audit(1748847602.394:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 144.768104][ T29] audit: type=1326 audit(1748847602.394:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 144.792019][ T29] audit: type=1326 audit(1748847602.394:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 144.812457][ T6993] lo speed is unknown, defaulting to 1000 [ 144.815539][ T29] audit: type=1326 audit(1748847602.394:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 144.844802][ T29] audit: type=1326 audit(1748847602.394:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 144.868341][ T29] audit: type=1326 audit(1748847602.394:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.3.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5084ae969 code=0x7ffc0000 [ 144.901456][ T7003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.916270][ T7008] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.951437][ T7011] netlink: 'syz.2.1104': attribute type 10 has an invalid length. [ 144.959582][ T7011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1104'. [ 144.975424][ T7011] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.983756][ T7011] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.992062][ T7011] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.045577][ T7011] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 145.056259][ T7011] team0: Failed to send options change via netlink (err -105) [ 145.063960][ T7011] team0: Port device geneve1 added [ 145.080903][ T7008] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.090911][ T7008] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.144292][ T7008] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.154182][ T7008] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.206712][ T7008] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.216605][ T7008] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.274849][ T7008] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.283141][ T7008] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.295558][ T7008] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.303938][ T7008] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.316496][ T7008] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.324874][ T7008] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.337125][ T7008] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.345416][ T7008] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.471239][ T7022] loop5: detected capacity change from 0 to 512 [ 145.481790][ T7022] EXT4-fs: Ignoring removed bh option [ 145.487318][ T7022] EXT4-fs: test_dummy_encryption option not supported [ 145.502575][ T7023] netlink: 'syz.4.1107': attribute type 10 has an invalid length. [ 145.510474][ T7023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1107'. [ 145.594391][ T7023] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.604365][ T7023] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 145.622102][ T7023] team0: Failed to send options change via netlink (err -105) [ 145.629622][ T7023] team0: Port device geneve1 added [ 145.677544][ T3323] EXT4-fs error (device loop3): __ext4_iget:5379: inode #13: block 127754: comm syz-executor: invalid block [ 145.690406][ T7018] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.692279][ T3323] EXT4-fs error (device loop3): __ext4_iget:5379: inode #13: block 127754: comm syz-executor: invalid block [ 145.780061][ T7018] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.792094][ T7018] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.804032][ T7018] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.816204][ T7018] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.873214][ T4770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.916854][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1105'. [ 145.984852][ T7031] loop4: detected capacity change from 0 to 8192 [ 146.111706][ T4707] bridge_slave_1: left allmulticast mode [ 146.117555][ T4707] bridge_slave_1: left promiscuous mode [ 146.123350][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.142059][ T4707] bridge_slave_0: left allmulticast mode [ 146.147775][ T4707] bridge_slave_0: left promiscuous mode [ 146.153670][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.166450][ T7039] loop5: detected capacity change from 0 to 512 [ 146.181588][ T7039] EXT4-fs: Ignoring removed oldalloc option [ 146.189350][ T7039] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.196046][ T4707] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 146.205893][ T4707] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 146.217177][ T7039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.243170][ T4707] bond2 (unregistering): (slave erspan0): Releasing active interface [ 146.252597][ T7039] EXT4-fs (loop5): orphan cleanup on readonly fs [ 146.259652][ T7039] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1112: Failed to acquire dquot type 1 [ 146.305892][ T4663] ================================================================== [ 146.314032][ T4663] BUG: KCSAN: data-race in copy_page_from_iter_atomic / fat16_ent_put [ 146.322497][ T4663] [ 146.324826][ T4663] write to 0xffff88813da2e580 of 2 bytes by task 7031 on cpu 1: [ 146.332476][ T4663] fat16_ent_put+0x28/0x60 [ 146.336929][ T4663] fat_alloc_clusters+0x4ce/0xa80 [ 146.341971][ T4663] fat_get_block+0x258/0x5e0 [ 146.346607][ T4663] __block_write_begin_int+0x3fd/0xf90 [ 146.352084][ T4663] cont_write_begin+0x5fc/0x970 [ 146.356951][ T4663] fat_write_begin+0x4f/0xe0 [ 146.361567][ T4663] generic_perform_write+0x184/0x490 [ 146.366967][ T4663] __generic_file_write_iter+0x9e/0x120 [ 146.372532][ T4663] generic_file_write_iter+0x8d/0x2f0 [ 146.377922][ T4663] vfs_write+0x4a0/0x8e0 [ 146.382182][ T4663] ksys_write+0xda/0x1a0 [ 146.386535][ T4663] __x64_sys_write+0x40/0x50 [ 146.391149][ T4663] x64_sys_call+0x2cdd/0x2fb0 [ 146.395844][ T4663] do_syscall_64+0xd2/0x200 [ 146.400378][ T4663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.406285][ T4663] [ 146.408619][ T4663] read to 0xffff88813da2e400 of 512 bytes by task 4663 on cpu 0: [ 146.416343][ T4663] copy_page_from_iter_atomic+0x7af/0x1060 [ 146.422174][ T4663] generic_perform_write+0x2c2/0x490 [ 146.427510][ T4663] shmem_file_write_iter+0xc5/0xf0 [ 146.432642][ T4663] lo_rw_aio+0x5f7/0x7c0 [ 146.436899][ T4663] loop_process_work+0x52d/0xa60 [ 146.441890][ T4663] loop_workfn+0x31/0x40 [ 146.446142][ T4663] process_scheduled_works+0x4cb/0x9d0 [ 146.451626][ T4663] worker_thread+0x582/0x770 [ 146.456241][ T4663] kthread+0x486/0x510 [ 146.460335][ T4663] ret_from_fork+0xda/0x150 [ 146.464863][ T4663] ret_from_fork_asm+0x1a/0x30 [ 146.469648][ T4663] [ 146.472061][ T4663] Reported by Kernel Concurrency Sanitizer on: [ 146.478236][ T4663] CPU: 0 UID: 0 PID: 4663 Comm: kworker/u8:9 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 146.490490][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.500675][ T4663] Workqueue: loop4 loop_workfn [ 146.505459][ T4663] ================================================================== [ 146.522630][ T7039] EXT4-fs (loop5): 1 truncate cleaned up [ 146.530206][ T4199] vhci_hcd: vhci_device speed not set [ 146.548086][ T4707] dvmrp1 (unregistering): left allmulticast mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.555657][ T7039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.579487][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1116'. [ 146.602412][ T7039] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.1112: iget: bad i_size value: 360287970189639690 [ 146.672185][ T4707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.687737][ T4707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.729687][ T4707] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 146.739309][ T4027] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.739489][ T4707] bond0 (unregistering): Released all slaves [ 146.756979][ T4707] bond1 (unregistering): Released all slaves [ 146.766352][ T4707] bond2 (unregistering): (slave veth3): Releasing active interface [ 146.776011][ T4707] bond2 (unregistering): Released all slaves [ 146.825348][ T4707] tipc: Left network mode [ 146.854934][ T4707] hsr_slave_0: left promiscuous mode [ 146.860682][ T4707] hsr_slave_1: left promiscuous mode [ 146.866471][ T4707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.874768][ T4707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.204370][ T4707] IPVS: stop unused estimator thread 0... [ 147.264087][ T4707] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.274082][ T4707] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.303135][ T4707] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.313222][ T4707] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.351989][ T4707] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.362061][ T4707] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.400447][ T4707] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.410249][ T4707] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.635641][ T4707] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.645627][ T4707] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.681541][ T4707] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.691444][ T4707] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.739508][ T4707] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.749330][ T4707] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.787778][ T4707] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.797704][ T4707] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.992066][ T4707] bond0 (unregistering): Released all slaves [ 148.000857][ T4707] bond1 (unregistering): Released all slaves [ 148.009376][ T4707] bond2 (unregistering): Released all slaves [ 148.019699][ T4707] bond3 (unregistering): Released all slaves [ 148.029738][ T4707] ip6gretap0 (unregistering): left promiscuous mode [ 148.052666][ T4707] bridge0 (unregistering): left promiscuous mode [ 148.182202][ T4707] team0: Port device geneve1 removed [ 148.303182][ T4707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.312630][ T4707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.321701][ T4707] bond0 (unregistering): Released all slaves [ 148.362161][ T4707] tipc: Disabling bearer [ 148.367236][ T4707] tipc: Left network mode [ 148.377993][ T4707] tipc: Disabling bearer [ 148.383230][ T4707] tipc: Left network mode [ 148.387971][ T4707] tipc: Disabling bearer [ 148.393429][ T4707] tipc: Left network mode [ 148.408387][ T4707] veth1_macvtap: left promiscuous mode [ 148.414065][ T4707] veth0_macvtap: left promiscuous mode [ 148.419733][ T4707] veth1_vlan: left promiscuous mode [ 148.424990][ T4707] veth0_vlan: left promiscuous mode [ 148.564825][ T4707] team0 (unregistering): Port device team_slave_1 removed [ 148.574328][ T4707] team0 (unregistering): Port device team_slave_0 removed [ 148.604834][ T4196] lo speed is unknown, defaulting to 1000 [ 148.610596][ T4196] infiniband syz0: ib_query_port failed (-19) [ 149.189873][ T4707] IPVS: stop unused estimator thread 0... [ 149.196142][ T4707] IPVS: stop unused estimator thread 0... [ 149.263509][ T4707] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.340671][ T4707] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.379747][ T4707] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.447660][ T4707] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.560690][ T4707] team0: Port device geneve1 removed [ 149.594679][ T4707] bond0 (unregistering): Released all slaves [ 149.653126][ T4707] IPVS: stopping backup sync thread 3783 ... [ 149.661207][ T4707] hsr_slave_0: left promiscuous mode [ 149.666964][ T4707] hsr_slave_1: left promiscuous mode