last executing test programs: 50.790320945s ago: executing program 3 (id=267): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x125101, 0x0) 50.757930806s ago: executing program 3 (id=268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 50.726223706s ago: executing program 3 (id=271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_free\x00', r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 50.670559677s ago: executing program 3 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 50.606741708s ago: executing program 3 (id=280): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r0) 50.433324871s ago: executing program 1 (id=288): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r2, r2) 50.399511741s ago: executing program 1 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) 50.309371873s ago: executing program 3 (id=292): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) 50.302844003s ago: executing program 32 (id=292): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) 50.268770073s ago: executing program 1 (id=294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000001f80)=ANY=[@ANYBLOB="18450000fbffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000007668"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97}, {&(0x7f0000000240)=""/121}, {&(0x7f0000000340)=""/107}, {&(0x7f00000001c0)=""/12}, {&(0x7f00000003c0)=""/124}, {&(0x7f0000001cc0)=""/213}, {&(0x7f0000000580)=""/181}], 0x0, &(0x7f00000009c0)=""/4096}, 0xbac00000}, {{&(0x7f00000006c0), 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214}, {&(0x7f0000000840)=""/201}]}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207}], 0x0, &(0x7f0000001b40)=""/173}, 0x7a}], 0x400000000000273, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 50.130204926s ago: executing program 1 (id=299): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 49.430970006s ago: executing program 1 (id=307): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x547a, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x94, 0x0, 0x0) 49.069385102s ago: executing program 1 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 49.069242392s ago: executing program 33 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 22.546606912s ago: executing program 6 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1, 0x0, 0xc6e9}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 22.470189963s ago: executing program 6 (id=1257): r0 = io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0xb1d4, 0x400, 0x2, 0x200019f}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) read(r1, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 22.312169875s ago: executing program 6 (id=1258): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000180000040"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 22.071000619s ago: executing program 6 (id=1269): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x20100, 0x10b) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 21.762138914s ago: executing program 6 (id=1289): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.542218008s ago: executing program 6 (id=1293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x7}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x4, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x100000}, {}, {0x0, 0x8, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x3, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9, 0x1000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x372d}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x1}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0xf36, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3, 0x40000000, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0xffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffe, 0x0, 0x4, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 21.542003977s ago: executing program 34 (id=1293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x7}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x4, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x100000}, {}, {0x0, 0x8, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x3, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9, 0x1000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x372d}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x1}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0xf36, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3, 0x40000000, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0xffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffe, 0x0, 0x4, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1.473611417s ago: executing program 5 (id=1986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1.454076087s ago: executing program 5 (id=1987): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @b={0x2, 0x6, 0x1, 0x2, {0x1, "ef"}, 0x2}}, 0xa) 1.022319615s ago: executing program 7 (id=2006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x600}) 919.686636ms ago: executing program 7 (id=2010): r0 = memfd_create(0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) 842.528647ms ago: executing program 7 (id=2016): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x9, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f00007d0000)) 797.504848ms ago: executing program 7 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) 745.083388ms ago: executing program 7 (id=2022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 557.889271ms ago: executing program 7 (id=2027): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="6109060203010203ef8e4902"], 0xc) 557.701011ms ago: executing program 5 (id=2028): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000000000000000000003000000000000000000000001fe0000000000000a"], 0xb8}}, 0x0) 557.293861ms ago: executing program 0 (id=2029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x10}}, 0x0) 496.990622ms ago: executing program 0 (id=2033): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 491.744403ms ago: executing program 2 (id=2034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="3c0000002000010300000000feffffff02101400fd0000020100000008000200e0000002080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1000) 474.554903ms ago: executing program 5 (id=2035): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x8}, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x7b04, 0x3080, 0x8003, 0x25f}, &(0x7f0000000380)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r0, 0x6e2, 0x620, 0x1, 0x0, 0x0) 436.664423ms ago: executing program 0 (id=2036): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) 427.119563ms ago: executing program 2 (id=2037): timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r1, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x6, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0xffffffffffffff20, 0x0, 0x0, 0x0, 0x8001}) 400.060624ms ago: executing program 0 (id=2039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) acct(0x0) 397.392454ms ago: executing program 2 (id=2040): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 300.976935ms ago: executing program 5 (id=2042): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 295.092275ms ago: executing program 2 (id=2043): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0xc0f85403, 0x0) 263.110956ms ago: executing program 0 (id=2044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 220.682086ms ago: executing program 2 (id=2046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 211.974537ms ago: executing program 0 (id=2047): r0 = socket$packet(0x11, 0x3, 0x300) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x28, 0x2c, 0x66, 0x0, 0xe2, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}}, {0x4e23, 0x4e24, 0x18, 0x0, @wg=@data={0x4, 0x6, 0x25}}}}}}, 0x0) 185.857398ms ago: executing program 4 (id=2048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 181.000207ms ago: executing program 2 (id=2049): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x2002c840) 159.757478ms ago: executing program 4 (id=2050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) 141.952938ms ago: executing program 4 (id=2051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x104) 68.497329ms ago: executing program 4 (id=2052): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 68.087749ms ago: executing program 4 (id=2053): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 22.63776ms ago: executing program 4 (id=2054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r1, 0x0, 0x800, 0x2000402) 0s ago: executing program 5 (id=2055): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$eJzs3c9vG1kdAPDvOHGTZt1NF/YACNiyLBRU6vzobrRaDnQvILRaCbFCQuLQDYk3imLXUZwsTcghPXJHohIn+BO4cUDqiQM3bnDjUg5IBSJQg8Rh0IyniZvEdWiTeGt/PtJ45r1x/H3PznvP8xznBTC0rkTETkRciIgPI2KyyE+KLW62t+x+j3a3F/Z2txeSSNMP/pHk57O86PiZzEvFY45HxPe/E/Hj5Gjc1ubWyny9Xlsr0lPrjdWp1ubW9eVSkTM7NzM3/faNt2ZPra6vNX7z8NvL7/3gd7/9woM/7nz9p1mxKj+7lJ/rrMdpale9HJWOvNGIeO8sgvXJaPH7w4sna22fiojX8/Y/GSP5qwkADLI0nYx0sjMNAAy67Pq/EkmpWswFVKJUqlbbc3ivxkSp3mytX5tsbtxejHwO63KUSx8t12vTxVzh5SgnWXomPz5Izx5K34iIVyLi52MX83R1oVlf7OcbHwAYYi8dGv//PdYe/wGAATfe7wIAAOfO+A8Aw8f4DwDD5/8Y/307EAAGhOt/ABg+xn8AGD49x/+751MOAOBcfO/997Mt3Sv+//Xix5sb36x8fH2x1lqpNjYWqgvNtdXqUrO5VK9VF9K01+PVm83VmTf3k63NrVuN5sbt9VvLjfml2q1a+YzrAwD09spr9/+cRMTOOxfzLTrWcjBWw2ArPZE6ZqEeYGCN9LsAQN/4Pg8MrxNc45sGgAHX68q/658I3bP4K7yorn7W/D8Mq1K/CwD0zbPN/3/r1MsBnD/z/zC80jSx5j8ADBlz/MCzfP7/wyg+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVcm3pFTN1wLfyW5L1WrEpYi4HOXko+V6bToiXo6IP42Vx7L0TL8LDQA8p9LfkmL9r6uTb1QOn72Q/Gcs30fET375wS/uzK+vr81k+f/cz1+/V+TPXuhHBQCATjePZrXH6WLfcSH/aHd74fF2nkV8+G57cdEs7l6xtc+Mxmi+H49yREz8KynSbdn7lZFTiL9zNyI+c1D/Ox0RKvkcSHvl08Pxs9iXziD+wfOfRJqm6UH80hPxS3nZsn05fy4+fQplgWFz/912P5m1u4u721kTK9pfKa7k++Pb/3jeQz2/x/3f3pH+r7Tf/40ciZ/kbf7KfvrpJXn45u+/eyQznWyfuxvxudHj4if78ZMu/e8bJ6zjXz7/xde7nUt/FXE1jo/f1si72an1xupUa3Pr+nJjfqm2VLs9Ozs3Mzf99o23ZqfyOer27R+Oi/H3d6693C1+Vv+JLvHHe9T/Kyes/6//++GPvvSU+F/78vGv/6tPiZ+NiV89Yfz5iZvHLd+9H3+xS/17vf7XThj/wV+3Fk94VwDgHLQ2t1bm6/XaWo+D7L1mr/s4eDEPYifinIN+YzziE1F3B90O+t0zAWftoNH3uyQAAAAAAAAAAAAAAEA3rc2tlbE4268T9buOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK7/BQAA//+TAtDE") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000080)=ANY=[], 0x841, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) dup2(r0, r0) mkdir(&(0x7f0000000040)='./file0/bus\x00', 0x0) kernel console output (not intermixed with test programs): left promiscuous mode [ 51.556531][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.577445][ T37] bridge_slave_0: left allmulticast mode [ 51.583161][ T37] bridge_slave_0: left promiscuous mode [ 51.589020][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.703441][ T29] audit: type=1326 audit(1751995752.327:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005a7e929 code=0x7ffc0000 [ 51.727000][ T29] audit: type=1326 audit(1751995752.327:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005a7e929 code=0x7ffc0000 [ 51.776575][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.784985][ T29] audit: type=1326 audit(1751995752.327:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8005a7e929 code=0x7ffc0000 [ 51.808598][ T29] audit: type=1326 audit(1751995752.327:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005a7e929 code=0x7ffc0000 [ 51.832096][ T29] audit: type=1326 audit(1751995752.327:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8005a7e929 code=0x7ffc0000 [ 51.855482][ T29] audit: type=1326 audit(1751995752.327:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005a7e929 code=0x7ffc0000 [ 51.881994][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.891945][ T37] bond0 (unregistering): Released all slaves [ 51.943384][ T37] hsr_slave_0: left promiscuous mode [ 51.953043][ T37] hsr_slave_1: left promiscuous mode [ 51.959512][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.967050][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.975076][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.982550][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.994668][ T37] veth1_macvtap: left promiscuous mode [ 52.000360][ T37] veth0_macvtap: left promiscuous mode [ 52.006042][ T37] veth1_vlan: left promiscuous mode [ 52.011419][ T37] veth0_vlan: left promiscuous mode [ 52.118021][ T37] team0 (unregistering): Port device team_slave_1 removed [ 52.129327][ T37] team0 (unregistering): Port device team_slave_0 removed [ 52.226681][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.250237][ T4261] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.262365][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.269590][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.291794][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.299017][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.404302][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.435800][ T4406] wireguard0: entered promiscuous mode [ 52.441364][ T4406] wireguard0: entered allmulticast mode [ 52.517022][ T4414] loop0: detected capacity change from 0 to 512 [ 52.539798][ T4414] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 52.553761][ T4414] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.569910][ T4414] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.365: corrupted inode contents [ 52.586378][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.593900][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.594319][ T4414] EXT4-fs (loop0): Remounting filesystem read-only [ 52.601456][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.615449][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.622983][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.630669][ T4261] veth0_vlan: entered promiscuous mode [ 52.630775][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.643705][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.651270][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.658888][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.660834][ T4261] veth1_vlan: entered promiscuous mode [ 52.666355][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.673954][ T4414] EXT4-fs (loop0): 1 truncate cleaned up [ 52.679224][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.692474][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.699953][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.700174][ T1727] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.707370][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.718040][ T1727] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.725468][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.743440][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.751008][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.758494][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.759810][ T4261] veth0_macvtap: entered promiscuous mode [ 52.765956][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.779175][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.786667][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.794098][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.795441][ T4426] loop5: detected capacity change from 0 to 2048 [ 52.801649][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.815529][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.821031][ T4261] veth1_macvtap: entered promiscuous mode [ 52.822940][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.822989][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.823013][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.829030][ T1727] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 52.836288][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.852161][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.861243][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.874330][ T4414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.875917][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.899605][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.903188][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.918090][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.925562][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.932995][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.940622][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.940705][ T4261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.948094][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.956838][ T4261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.964421][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.973041][ T4261] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.973071][ T4261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.998813][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.006254][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.013716][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.021191][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.028648][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.036093][ T3401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.043946][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.046102][ T3401] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 53.090250][ T4430] loop5: p2 p3 p7 [ 53.108793][ T4434] loop0: detected capacity change from 0 to 764 [ 53.118499][ T4434] rock: directory entry would overflow storage [ 53.124840][ T4434] rock: sig=0x4654, size=5, remaining=4 [ 53.130742][ T4437] loop4: detected capacity change from 0 to 1024 [ 53.135857][ T4426] loop5: p2 p3 p7 [ 53.146632][ T4437] EXT4-fs: Ignoring removed nobh option [ 53.155990][ T4437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.197311][ T4437] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 53.302758][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.313919][ T4460] loop0: detected capacity change from 0 to 2048 [ 53.354659][ T4460] loop0: p4 < > [ 53.392223][ T4473] loop4: detected capacity change from 0 to 512 [ 53.402552][ T4473] EXT4-fs: Ignoring removed orlov option [ 53.409506][ T4473] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.425364][ T4473] EXT4-fs (loop4): 1 orphan inode deleted [ 53.431210][ T4473] EXT4-fs (loop4): 1 truncate cleaned up [ 53.440810][ T4473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.477541][ T4473] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 53.493719][ T4473] EXT4-fs (loop4): Remounting filesystem read-only [ 53.500596][ T4473] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1597: inode #17: comm syz.4.385: cleanup dec ref error -28 [ 53.516139][ T4473] syz.4.385 (4473) used greatest stack depth: 10312 bytes left [ 53.579880][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.799221][ T4506] loop5: detected capacity change from 0 to 512 [ 54.031597][ T4536] loop0: detected capacity change from 0 to 1024 [ 54.045831][ T4538] loop2: detected capacity change from 0 to 512 [ 54.047140][ T4536] EXT4-fs: Ignoring removed bh option [ 54.057911][ T4538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.068573][ T4536] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.070956][ T4540] serio: Serial port ptm0 [ 54.075185][ T4536] EXT4-fs: Ignoring removed bh option [ 54.085792][ T4538] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.105981][ T4538] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.417: bg 0: block 248: padding at end of block bitmap is not set [ 54.127684][ T4538] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.417: Failed to acquire dquot type 1 [ 54.152876][ T4536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.160280][ T4538] EXT4-fs (loop2): 1 truncate cleaned up [ 54.197629][ T4538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.219224][ T4538] syz.2.417 (4538) used greatest stack depth: 9304 bytes left [ 54.226241][ T4536] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.416: Allocating blocks 449-513 which overlap fs metadata [ 54.271009][ T4535] EXT4-fs (loop0): pa ffff8881069920e0: logic 48, phys. 177, len 21 [ 54.279196][ T4535] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 54.289869][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.327993][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.367435][ T4562] ------------[ cut here ]------------ [ 54.372981][ T4562] WARNING: CPU: 1 PID: 4562 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 54.383280][ T4562] Modules linked in: [ 54.387298][ T4562] CPU: 1 UID: 0 PID: 4562 Comm: syz.6.428 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 54.399796][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.409969][ T4562] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 54.416717][ T4562] Code: 83 3d e3 4e 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 ea 46 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 54.436475][ T4562] RSP: 0018:ffffc9000150fa30 EFLAGS: 00010246 [ 54.442668][ T4562] RAX: 68068fe6c4657200 RBX: 0000000000000016 RCX: 0000000000000000 [ 54.450816][ T4562] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 54.458898][ T4562] RBP: 0000000000000dc0 R08: ffff888119766c18 R09: 0000000000000000 [ 54.466996][ T4562] R10: ffff88811e5f4148 R11: 000188811e5f4148 R12: ffffc9000150fd28 [ 54.475138][ T4562] R13: 0000000000003f20 R14: 0000000000040dc0 R15: 0000000000000000 [ 54.483157][ T4562] FS: 00007f4cd32d76c0(0000) GS:ffff8882aef2e000(0000) knlGS:0000000000000000 [ 54.492169][ T4562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.499059][ T4562] CR2: 0000200000005000 CR3: 0000000119a98000 CR4: 00000000003506f0 [ 54.507111][ T4562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.515149][ T4562] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 54.523153][ T4562] Call Trace: [ 54.526522][ T4562] [ 54.529500][ T4562] __alloc_pages_noprof+0x9/0x20 [ 54.534535][ T4562] ___kmalloc_large_node+0x73/0x140 [ 54.539789][ T4562] __kmalloc_large_node_noprof+0x16/0xa0 [ 54.541892][ T4574] loop2: detected capacity change from 0 to 512 [ 54.545504][ T4562] __kmalloc_noprof+0x2ab/0x3e0 [ 54.545543][ T4562] ? hashtab_init+0x9b/0xe0 [ 54.561290][ T4562] ? common_read+0x3f/0x300 [ 54.566008][ T4562] hashtab_init+0x9b/0xe0 [ 54.570412][ T4562] symtab_init+0x2c/0x40 [ 54.574843][ T4562] common_read+0x10b/0x300 [ 54.579325][ T4562] ? __pfx_common_read+0x10/0x10 [ 54.584412][ T4562] policydb_read+0x64f/0x1330 [ 54.589196][ T4562] security_load_policy+0xba/0x890 [ 54.594451][ T4562] ? rep_movs_alternative+0x4a/0x90 [ 54.596495][ T4574] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 54.599683][ T4562] sel_write_load+0x1d4/0x380 [ 54.612855][ T4562] ? __pfx_sel_write_load+0x10/0x10 [ 54.618271][ T4562] vfs_write+0x266/0x8e0 [ 54.622582][ T4562] ? __rcu_read_unlock+0x4f/0x70 [ 54.627721][ T4562] ? __fget_files+0x184/0x1c0 [ 54.632462][ T4562] ksys_write+0xda/0x1a0 [ 54.636858][ T4562] __x64_sys_write+0x40/0x50 [ 54.641629][ T4562] x64_sys_call+0x2cdd/0x2fb0 [ 54.646384][ T4562] do_syscall_64+0xd2/0x200 [ 54.650952][ T4562] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.657137][ T4562] ? clear_bhb_loop+0x40/0x90 [ 54.661863][ T4562] ? clear_bhb_loop+0x40/0x90 [ 54.666623][ T4562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.672644][ T4562] RIP: 0033:0x7f4cd4c6e929 [ 54.677204][ T4562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.696933][ T4562] RSP: 002b:00007f4cd32d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.705443][ T4562] RAX: ffffffffffffffda RBX: 00007f4cd4e95fa0 RCX: 00007f4cd4c6e929 [ 54.713588][ T4562] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000003 [ 54.721649][ T4562] RBP: 00007f4cd4cf0b39 R08: 0000000000000000 R09: 0000000000000000 [ 54.729723][ T4562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.738000][ T4562] R13: 0000000000000000 R14: 00007f4cd4e95fa0 R15: 00007fff4591eb18 [ 54.746120][ T4562] [ 54.749168][ T4562] ---[ end trace 0000000000000000 ]--- [ 54.768367][ T4562] SELinux: failed to load policy [ 54.808429][ T4572] netlink: 128 bytes leftover after parsing attributes in process `syz.2.431'. [ 54.843489][ T4584] loop4: detected capacity change from 0 to 1024 [ 54.909407][ T4597] loop0: detected capacity change from 0 to 764 [ 54.920875][ T4591] loop2: detected capacity change from 0 to 512 [ 54.933134][ T4584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.947187][ T4591] EXT4-fs: Ignoring removed nobh option [ 54.953876][ T4597] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 54.962457][ T4591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.048158][ T4591] EXT4-fs (loop2): 1 truncate cleaned up [ 55.059940][ T4591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.076868][ T4591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.090297][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.123433][ T4614] loop0: detected capacity change from 0 to 128 [ 55.137897][ T4614] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.173498][ T4619] loop5: detected capacity change from 0 to 1024 [ 55.189470][ T4614] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.224845][ T4619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.260353][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 55.278482][ T4619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.299066][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.332215][ T4187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.345613][ T4627] xt_hashlimit: size too large, truncated to 1048576 [ 55.685035][ T4655] syz.2.461: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 55.699882][ T4655] CPU: 0 UID: 0 PID: 4655 Comm: syz.2.461 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 55.699942][ T4655] Tainted: [W]=WARN [ 55.699948][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.699961][ T4655] Call Trace: [ 55.699966][ T4655] [ 55.699973][ T4655] __dump_stack+0x1d/0x30 [ 55.699995][ T4655] dump_stack_lvl+0xe8/0x140 [ 55.700018][ T4655] dump_stack+0x15/0x1b [ 55.700034][ T4655] warn_alloc+0x12b/0x1a0 [ 55.700098][ T4655] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 55.700136][ T4655] ? enqueue_task_fair+0x35e/0x980 [ 55.700168][ T4655] __vmalloc_node_range_noprof+0x9c/0xe00 [ 55.700206][ T4655] ? probe_sched_wakeup+0x85/0xa0 [ 55.700259][ T4655] ? ttwu_do_activate+0x1cf/0x210 [ 55.700298][ T4655] ? __rcu_read_unlock+0x4f/0x70 [ 55.700365][ T4655] ? avc_has_perm_noaudit+0x1b1/0x200 [ 55.700400][ T4655] ? should_fail_ex+0x30/0x280 [ 55.700437][ T4655] ? xskq_create+0x36/0xe0 [ 55.700508][ T4655] vmalloc_user_noprof+0x7d/0xb0 [ 55.700541][ T4655] ? xskq_create+0x80/0xe0 [ 55.700568][ T4655] xskq_create+0x80/0xe0 [ 55.700594][ T4655] xsk_init_queue+0x95/0xf0 [ 55.700672][ T4655] xsk_setsockopt+0x3de/0x510 [ 55.700692][ T4655] ? __pfx_xsk_setsockopt+0x10/0x10 [ 55.700711][ T4655] __sys_setsockopt+0x184/0x200 [ 55.700773][ T4655] __x64_sys_setsockopt+0x64/0x80 [ 55.700857][ T4655] x64_sys_call+0x2bd5/0x2fb0 [ 55.700884][ T4655] do_syscall_64+0xd2/0x200 [ 55.700924][ T4655] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.700961][ T4655] ? clear_bhb_loop+0x40/0x90 [ 55.700985][ T4655] ? clear_bhb_loop+0x40/0x90 [ 55.701012][ T4655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.701038][ T4655] RIP: 0033:0x7f2b783ee929 [ 55.701057][ T4655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.701093][ T4655] RSP: 002b:00007f2b76a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 55.701117][ T4655] RAX: ffffffffffffffda RBX: 00007f2b78615fa0 RCX: 00007f2b783ee929 [ 55.701130][ T4655] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 55.701142][ T4655] RBP: 00007f2b78470b39 R08: 0000000000000004 R09: 0000000000000000 [ 55.701153][ T4655] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 55.701232][ T4655] R13: 0000000000000000 R14: 00007f2b78615fa0 R15: 00007ffcd901a828 [ 55.701255][ T4655] [ 55.701275][ T4655] Mem-Info: [ 55.764802][ T4657] bond0: entered promiscuous mode [ 55.770361][ T4655] active_anon:3951 inactive_anon:7 isolated_anon:0 [ 55.770361][ T4655] active_file:5809 inactive_file:2195 isolated_file:0 [ 55.770361][ T4655] unevictable:0 dirty:285 writeback:0 [ 55.770361][ T4655] slab_reclaimable:2995 slab_unreclaimable:14465 [ 55.770361][ T4655] mapped:28793 shmem:250 pagetables:990 [ 55.770361][ T4655] sec_pagetables:0 bounce:0 [ 55.770361][ T4655] kernel_misc_reclaimable:0 [ 55.770361][ T4655] free:1893525 free_pcp:18713 free_cma:0 [ 55.775728][ T4657] bond_slave_0: entered promiscuous mode [ 55.780677][ T4655] Node 0 active_anon:15804kB inactive_anon:28kB active_file:23236kB inactive_file:8780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115172kB dirty:1140kB writeback:0kB shmem:1000kB writeback_tmp:0kB kernel_stack:3264kB pagetables:3960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 55.785867][ T4657] bond_slave_1: entered promiscuous mode [ 55.791075][ T4655] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 56.067242][ T4655] lowmem_reserve[]: 0 2882 7860 7860 [ 56.072622][ T4655] Node 0 DMA32 free:2947840kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951368kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 56.103005][ T4655] lowmem_reserve[]: 0 0 4978 4978 [ 56.108138][ T4655] Node 0 Normal free:4610204kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27288kB inactive_anon:28kB active_file:23236kB inactive_file:8780kB unevictable:0kB writepending:1148kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:60348kB local_pcp:50176kB free_cma:0kB [ 56.140495][ T4655] lowmem_reserve[]: 0 0 0 0 [ 56.145244][ T4655] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 56.158199][ T4655] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947840kB [ 56.174629][ T4655] Node 0 Normal: 1*4kB (E) 3*8kB (UM) 6*16kB (UME) 3*32kB (UME) 15*64kB (UM) 4*128kB (UME) 2*256kB (UE) 4*512kB (UM) 4*1024kB (UME) 7*2048kB (UME) 1120*4096kB (UM) = 4610204kB [ 56.192747][ T4655] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 56.202103][ T4655] 9595 total pagecache pages [ 56.206833][ T4655] 14 pages in swap cache [ 56.211155][ T4655] Free swap = 124940kB [ 56.215353][ T4655] Total swap = 124996kB [ 56.219533][ T4655] 2097051 pages RAM [ 56.223364][ T4655] 0 pages HighMem/MovableOnly [ 56.228088][ T4655] 80809 pages reserved [ 56.235652][ T4657] bond0: left promiscuous mode [ 56.240724][ T4657] bond_slave_0: left promiscuous mode [ 56.246315][ T4657] bond_slave_1: left promiscuous mode [ 56.303950][ T4666] loop6: detected capacity change from 0 to 1024 [ 56.313973][ T4666] EXT4-fs: Ignoring removed orlov option [ 56.319815][ T4666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.376940][ T4666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.530242][ T4261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.576949][ T4695] loop4: detected capacity change from 0 to 512 [ 56.622379][ T4702] loop0: detected capacity change from 0 to 1024 [ 56.630040][ T4702] EXT4-fs: Ignoring removed oldalloc option [ 56.636267][ T4702] EXT4-fs: Ignoring removed orlov option [ 56.646452][ T4695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.663656][ T4695] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.684086][ T4702] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 56.721485][ T4695] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.480: iget: bad i_size value: 2533274857506816 [ 56.748784][ T4695] EXT4-fs (loop4): Remounting filesystem read-only [ 56.790461][ T4702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.806607][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.847567][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.853912][ T4722] vlan2: entered allmulticast mode [ 56.861894][ T4722] bond0: entered allmulticast mode [ 56.867151][ T4722] bond_slave_0: entered allmulticast mode [ 56.872900][ T4722] bond_slave_1: entered allmulticast mode [ 56.898646][ T4726] loop0: detected capacity change from 0 to 512 [ 56.934138][ T4726] EXT4-fs (loop0): 1 orphan inode deleted [ 56.948979][ T4726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.962324][ T1727] __quota_error: 63 callbacks suppressed [ 56.962341][ T1727] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 56.977918][ T1727] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 56.986255][ T4726] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.007957][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.020356][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.109883][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.122901][ T29] audit: type=1400 audit(1751995757.757:683): avc: denied { mount } for pid=4737 comm="syz.6.496" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.573593][ T29] audit: type=1400 audit(1751995758.197:684): avc: denied { create } for pid=4789 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.030433][ T29] audit: type=1400 audit(1751995758.227:685): avc: denied { connect } for pid=4789 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.168487][ T29] audit: type=1326 audit(1751995758.797:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4872 comm="syz.5.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6454f5e929 code=0x7ffc0000 [ 58.192174][ T29] audit: type=1326 audit(1751995758.797:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4872 comm="syz.5.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6454f5e929 code=0x7ffc0000 [ 58.218655][ T29] audit: type=1326 audit(1751995758.797:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4872 comm="syz.5.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f6454f5e929 code=0x7ffc0000 [ 58.242109][ T29] audit: type=1326 audit(1751995758.797:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4872 comm="syz.5.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6454f5e929 code=0x7ffc0000 [ 58.265604][ T29] audit: type=1326 audit(1751995758.797:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4872 comm="syz.5.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6454f5e929 code=0x7ffc0000 [ 58.314286][ T29] audit: type=1326 audit(1751995758.927:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4775 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b783ee929 code=0x7fc00000 [ 58.388007][ T4897] loop5: detected capacity change from 0 to 512 [ 58.398494][ T4897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 58.407935][ T4897] System zones: 1-12 [ 58.424522][ T4897] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.516: error while reading EA inode 32 err=-116 [ 58.445523][ T4897] EXT4-fs (loop5): Remounting filesystem read-only [ 58.452148][ T4897] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 58.468354][ T4897] EXT4-fs (loop5): 1 orphan inode deleted [ 58.476234][ T4897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.506594][ T4187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.556458][ T4916] loop4: detected capacity change from 0 to 512 [ 58.567674][ T4916] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.584640][ T4916] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.521: Failed to acquire dquot type 1 [ 58.606045][ T4916] EXT4-fs (loop4): 1 truncate cleaned up [ 58.613609][ T4916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.630766][ T4926] loop0: detected capacity change from 0 to 512 [ 58.639606][ T4916] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 58.650235][ T4916] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 58.689661][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.959486][ T4976] loop4: detected capacity change from 0 to 128 [ 59.010969][ T4981] loop0: detected capacity change from 0 to 512 [ 59.027554][ T4981] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.542: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 59.049334][ T4981] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.542: Bad quota inode: 3, type: 0 [ 59.061749][ T4981] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 59.078135][ T4981] EXT4-fs (loop0): mount failed [ 59.093544][ T4988] ALSA: seq fatal error: cannot create timer (-19) [ 59.120160][ T4991] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.545'. [ 59.133450][ T4993] program syz.5.546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.223797][ T5009] bond0: (slave bond_slave_0): Releasing backup interface [ 59.232703][ T5009] bond_slave_0: left allmulticast mode [ 59.243834][ T5009] bond0: (slave bond_slave_1): Releasing backup interface [ 59.253766][ T5009] bond_slave_1: left allmulticast mode [ 59.257368][ T3387] IPVS: starting estimator thread 0... [ 59.261977][ T5013] netlink: 'syz.4.551': attribute type 10 has an invalid length. [ 59.267015][ T5007] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 59.282609][ T5009] team0: Port device team_slave_0 removed [ 59.291837][ T5009] team0: Port device team_slave_1 removed [ 59.299407][ T5009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.306900][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.316937][ T5009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.324482][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.364532][ T5012] IPVS: using max 2352 ests per chain, 117600 per kthread [ 59.376883][ T5009] bond1: (slave batadv1): Releasing backup interface [ 59.383684][ T5009] batadv1: left promiscuous mode [ 59.407813][ T5013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.415611][ T5013] team0: Port device bond0 added [ 59.476964][ T5027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.558'. [ 59.510861][ T5029] loop0: detected capacity change from 0 to 512 [ 59.520161][ T5029] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.535817][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.561'. [ 59.544685][ T5029] EXT4-fs (loop0): 1 truncate cleaned up [ 59.545241][ T5029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.551204][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.561'. [ 59.578269][ T5036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.562'. [ 59.588821][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.640956][ T5041] netlink: 'syz.6.565': attribute type 3 has an invalid length. [ 59.837058][ T5059] SELinux: failed to load policy [ 59.842515][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 59.856887][ T5067] netlink: 16 bytes leftover after parsing attributes in process `syz.6.576'. [ 59.868433][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 59.997693][ T5082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 60.075411][ T5084] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 60.083522][ T3394] IPVS: starting estimator thread 0... [ 60.125677][ T5098] netlink: 24 bytes leftover after parsing attributes in process `syz.6.589'. [ 60.188168][ T5092] IPVS: using max 2352 ests per chain, 117600 per kthread [ 60.216258][ T5112] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.285116][ T5116] loop5: detected capacity change from 0 to 4096 [ 60.316506][ T5116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.334850][ T5123] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 60.352734][ T3394] IPVS: starting estimator thread 0... [ 60.365538][ T5128] bridge_slave_0: left allmulticast mode [ 60.371259][ T5128] bridge_slave_0: left promiscuous mode [ 60.377161][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.386882][ T5128] bridge_slave_1: left allmulticast mode [ 60.392575][ T5128] bridge_slave_1: left promiscuous mode [ 60.398525][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.417940][ T5128] $H: (slave bond_slave_0): Releasing backup interface [ 60.454641][ T5128] bond_slave_0: left promiscuous mode [ 60.460306][ T5129] IPVS: using max 1776 ests per chain, 88800 per kthread [ 60.469704][ T5132] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 60.485838][ T5128] $H: (slave bond_slave_1): Releasing backup interface [ 60.497532][ T5128] bond_slave_1: left promiscuous mode [ 60.513606][ T5128] team0: Port device C removed [ 60.592729][ T5128] team0: Port device team_slave_1 removed [ 60.600173][ T5128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.607761][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.616905][ T5128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.624584][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.661815][ T5132] $H: left promiscuous mode [ 60.677103][ T5132] 8021q: adding VLAN 0 to HW filter on device $H [ 60.711640][ T5132] team0: Port device $H added [ 60.785320][ T5149] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 60.804010][ T5148] 8021q: adding VLAN 0 to HW filter on device team1 [ 60.804341][ T5146] IPVS: stopping master sync thread 5149 ... [ 60.860767][ T5153] Cannot find add_set index 0 as target [ 60.976676][ T5165] netlink: 'syz.4.615': attribute type 1 has an invalid length. [ 61.219729][ T4187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.391098][ T5204] openvswitch: netlink: Message has 6 unknown bytes. [ 61.433813][ T5207] loop4: detected capacity change from 0 to 4096 [ 61.448221][ T5207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.714520][ T5248] IPVS: stopping master sync thread 5249 ... [ 61.720660][ T5249] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 61.901750][ T5269] loop6: detected capacity change from 0 to 512 [ 61.925013][ T5269] EXT4-fs (loop6): 1 orphan inode deleted [ 61.931221][ T5269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.944578][ T56] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 61.968555][ T5269] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.994028][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 61.994074][ T29] audit: type=1400 audit(1751995762.617:859): avc: denied { write } for pid=5274 comm="syz.5.664" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.028068][ T5279] netlink: 'syz.0.666': attribute type 16 has an invalid length. [ 62.032178][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.045046][ T29] audit: type=1400 audit(1751995762.627:860): avc: denied { read } for pid=5268 comm="syz.6.660" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 62.069200][ T29] audit: type=1400 audit(1751995762.627:861): avc: denied { open } for pid=5268 comm="syz.6.660" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 62.093704][ T29] audit: type=1400 audit(1751995762.627:862): avc: denied { ioctl } for pid=5268 comm="syz.6.660" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 62.152980][ T29] audit: type=1400 audit(1751995762.777:863): avc: denied { create } for pid=5285 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.173183][ T29] audit: type=1400 audit(1751995762.777:864): avc: denied { write } for pid=5285 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.268441][ T5295] Cannot find add_set index 0 as target [ 62.344114][ T4261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.382833][ T5307] loop6: detected capacity change from 0 to 512 [ 62.389983][ T5307] EXT4-fs: Ignoring removed nobh option [ 62.427088][ T5310] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.431043][ T5307] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.678: iget: bad i_size value: 38620345925642 [ 62.457444][ T5307] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.678: couldn't read orphan inode 15 (err -117) [ 62.482232][ T5307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.508422][ T29] audit: type=1400 audit(1751995763.137:865): avc: denied { write open } for pid=5306 comm="syz.6.678" path="/54/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.509420][ T5307] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.678: bg 0: block 5: invalid block bitmap [ 62.608708][ T5307] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 62.621203][ T5307] EXT4-fs (loop6): This should not happen!! Data will be lost [ 62.621203][ T5307] [ 62.631096][ T5307] EXT4-fs (loop6): Total free blocks count 0 [ 62.637309][ T5307] EXT4-fs (loop6): Free/Dirty block details [ 62.643319][ T5307] EXT4-fs (loop6): free_blocks=0 [ 62.648310][ T5307] EXT4-fs (loop6): dirty_blocks=4 [ 62.653365][ T5307] EXT4-fs (loop6): Block reservation details [ 62.659654][ T5307] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 62.749609][ T4261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.000879][ T29] audit: type=1400 audit(1751995763.627:866): avc: denied { create } for pid=5323 comm="syz.5.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.021237][ T29] audit: type=1400 audit(1751995763.627:867): avc: denied { write } for pid=5323 comm="syz.5.685" path="socket:[10441]" dev="sockfs" ino=10441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.187641][ T5333] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 63.196752][ T5333] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 63.203572][ T5333] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 63.210406][ T5333] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 63.217180][ T5333] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 63.223976][ T5333] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 63.285596][ T5335] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 63.365989][ T29] audit: type=1400 audit(1751995763.997:868): avc: denied { read write } for pid=5339 comm="syz.4.693" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.383283][ T5335] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 63.544061][ T5352] lo speed is unknown, defaulting to 1000 [ 63.566217][ T5352] lo speed is unknown, defaulting to 1000 [ 63.580877][ T5352] lo speed is unknown, defaulting to 1000 [ 63.600456][ T5352] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.622236][ T5352] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 63.663992][ T5352] lo speed is unknown, defaulting to 1000 [ 63.692648][ T5352] lo speed is unknown, defaulting to 1000 [ 63.709024][ T5352] lo speed is unknown, defaulting to 1000 [ 63.719713][ T5365] loop4: detected capacity change from 0 to 512 [ 63.741665][ T5365] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.781571][ T5352] lo speed is unknown, defaulting to 1000 [ 63.799482][ T5352] lo speed is unknown, defaulting to 1000 [ 63.807071][ T5365] EXT4-fs (loop4): 1 truncate cleaned up [ 63.813292][ T5365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.867874][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.959935][ T5390] smc: net device bond0 applied user defined pnetid SYZ2 [ 63.982282][ T5390] smc: net device bond0 erased user defined pnetid SYZ2 [ 63.992996][ T5394] syzkaller1: entered promiscuous mode [ 63.998655][ T5394] syzkaller1: entered allmulticast mode [ 64.279217][ T5421] xt_hashlimit: max too large, truncated to 1048576 [ 64.303483][ T5423] __nla_validate_parse: 4 callbacks suppressed [ 64.303503][ T5423] netlink: 140 bytes leftover after parsing attributes in process `+}[@'. [ 64.545208][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.552584][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.660292][ T5446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.686659][ T5446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.779960][ T5446] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.788990][ T5446] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.798325][ T5446] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.807404][ T5446] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.938006][ T5472] syzkaller1: entered promiscuous mode [ 64.943596][ T5472] syzkaller1: entered allmulticast mode [ 65.267052][ T5496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.765'. [ 65.345265][ T5507] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 65.363717][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.382004][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.389603][ T5507] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 65.401678][ T5507] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 65.470322][ T5522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.584845][ T5537] loop5: detected capacity change from 0 to 512 [ 65.597567][ T5537] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.783: iget: bad i_size value: 38620345925642 [ 65.614739][ T5537] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.783: couldn't read orphan inode 15 (err -117) [ 65.688170][ T5537] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.783: bg 0: block 5: invalid block bitmap [ 65.702437][ T5537] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 65.714736][ T5537] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.714736][ T5537] [ 65.724420][ T5537] EXT4-fs (loop5): Total free blocks count 0 [ 65.730432][ T5537] EXT4-fs (loop5): Free/Dirty block details [ 65.736378][ T5537] EXT4-fs (loop5): free_blocks=0 [ 65.741337][ T5537] EXT4-fs (loop5): dirty_blocks=1 [ 65.744458][ T37] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 65.746459][ T5537] EXT4-fs (loop5): Block reservation details [ 65.762509][ T5537] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 66.571897][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.803'. [ 66.752386][ T5609] netlink: 'syz.5.813': attribute type 1 has an invalid length. [ 66.762622][ T5607] program syz.6.812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.772137][ T5607] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 66.802353][ T5609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.822884][ T5611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.830553][ T5611] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 66.844017][ T5611] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 67.023663][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 67.023679][ T29] audit: type=1400 audit(1751995767.647:1008): avc: denied { write } for pid=5636 comm="syz.6.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.083787][ T5643] loop6: detected capacity change from 0 to 512 [ 67.117810][ T29] audit: type=1400 audit(1751995767.747:1009): avc: denied { mounton } for pid=5642 comm="syz.6.829" path="/82/file1" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.178188][ T5643] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.189087][ T29] audit: type=1400 audit(1751995767.777:1010): avc: denied { create } for pid=5646 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.208592][ T29] audit: type=1400 audit(1751995767.787:1011): avc: denied { setopt } for pid=5646 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.228531][ T29] audit: type=1400 audit(1751995767.787:1012): avc: denied { write } for pid=5646 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.247978][ T29] audit: type=1400 audit(1751995767.787:1013): avc: denied { connect } for pid=5646 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.267580][ T29] audit: type=1400 audit(1751995767.787:1014): avc: denied { name_connect } for pid=5646 comm="syz.5.831" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 67.289703][ T29] audit: type=1400 audit(1751995767.807:1015): avc: denied { mount } for pid=5642 comm="syz.6.829" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.327530][ T29] audit: type=1400 audit(1751995767.957:1016): avc: denied { read execute } for pid=5642 comm="syz.6.829" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.364085][ T29] audit: type=1400 audit(1751995767.987:1017): avc: denied { unmount } for pid=4261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.404720][ T5661] netlink: 24 bytes leftover after parsing attributes in process `syz.6.835'. [ 67.573358][ T5674] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 67.674322][ T5655] loop5: detected capacity change from 0 to 32768 [ 67.687279][ T5689] binfmt_misc: register: failed to install interpreter file ./file2 [ 67.706930][ T5655] loop5: p1 p2 p3 < > [ 67.711194][ T5655] loop5: p1 size 242222080 extends beyond EOD, truncated [ 67.727608][ T5655] loop5: p2 start 4294967295 is beyond EOD, truncated [ 67.823451][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 67.870514][ T5706] syzkaller0: entered promiscuous mode [ 67.876413][ T5706] syzkaller0: entered allmulticast mode [ 67.918737][ T3394] kernel write not supported for file /ppp (pid: 3394 comm: kworker/1:3) [ 68.117523][ T5738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5738 comm=syz.6.870 [ 68.246092][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.877'. [ 68.255035][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.877'. [ 68.274252][ T5752] wireguard0: entered promiscuous mode [ 68.279871][ T5752] wireguard0: entered allmulticast mode [ 68.569871][ T5789] loop6: detected capacity change from 0 to 1024 [ 68.687549][ T5806] loop9: detected capacity change from 0 to 7 [ 68.698714][ T5806] buffer_io_error: 1 callbacks suppressed [ 68.698731][ T5806] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.720322][ T5806] Buffer I/O error on dev loop9, logical block 0, async page read [ 68.728286][ T5806] loop9: unable to read partition table [ 68.736937][ T5806] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 68.736937][ T5806] ) failed (rc=-5) [ 68.861366][ T5830] loop5: detected capacity change from 0 to 1024 [ 68.907435][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 68.982370][ T5849] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.921'. [ 68.992990][ T5849] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 69.041090][ T5853] netlink: 'syz.4.925': attribute type 1 has an invalid length. [ 69.117027][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 69.148693][ T5876] SELinux: Context w is not valid (left unmapped). [ 69.166413][ T5878] SELinux: Context is not valid (left unmapped). [ 69.504238][ T5929] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 69.510835][ T5929] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.518376][ T5929] vhci_hcd vhci_hcd.0: Device attached [ 69.529258][ T5930] vhci_hcd: connection closed [ 69.529458][ T51] vhci_hcd: stop threads [ 69.538927][ T51] vhci_hcd: release socket [ 69.543411][ T51] vhci_hcd: disconnect device [ 69.808906][ T5972] syzkaller1: entered promiscuous mode [ 69.814538][ T5972] syzkaller1: entered allmulticast mode [ 69.885288][ T5979] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 69.988871][ T5991] netlink: 532 bytes leftover after parsing attributes in process `syz.2.987'. [ 70.031415][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 70.040494][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 70.069779][ T5997] wireguard0: entered promiscuous mode [ 70.075394][ T5997] wireguard0: entered allmulticast mode [ 70.174669][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 71.170819][ T6099] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 71.208577][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 71.219800][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 71.318094][ T6118] smc: net device bond0 applied user defined pnetid SYZ2 [ 71.325801][ T6118] smc: net device bond0 erased user defined pnetid SYZ2 [ 71.400078][ T6127] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 71.417593][ T6129] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 71.424096][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.434280][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.441987][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.449822][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.457511][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.464971][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.472528][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.480034][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.487572][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.495038][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.502544][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.510150][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.517631][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.525115][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.532716][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.540981][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.548740][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.556175][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.563817][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.571263][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.578687][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.586147][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.593545][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.601065][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.608531][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.615984][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.623399][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.630945][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.638432][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.645924][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.653375][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.660880][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.668317][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.675748][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.683246][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.690686][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.698129][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.705583][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.712988][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.720425][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.727858][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.735330][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.742738][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.750172][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.757714][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.765155][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.772564][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.779998][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.787566][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.794990][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.802398][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.809827][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.817324][ T3409] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 71.825686][ T3409] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 71.959409][ T6155] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 71.973430][ T6158] random: crng reseeded on system resumption [ 72.093207][ T6174] loop5: detected capacity change from 0 to 164 [ 72.101535][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 72.101555][ T29] audit: type=1400 audit(1751995772.727:1286): avc: denied { create } for pid=6177 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.127676][ T29] audit: type=1400 audit(1751995772.727:1287): avc: denied { write } for pid=6177 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.148775][ T6174] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 72.175030][ T29] audit: type=1400 audit(1751995772.797:1288): avc: denied { mount } for pid=6173 comm="syz.5.1063" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 72.199473][ T6174] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 72.210190][ T6174] Symlink component flag not implemented [ 72.216004][ T6174] Symlink component flag not implemented [ 72.230364][ T29] audit: type=1400 audit(1751995772.837:1289): avc: denied { bind } for pid=6179 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.249791][ T29] audit: type=1400 audit(1751995772.837:1290): avc: denied { node_bind } for pid=6179 comm="syz.4.1070" saddr=172.20.20.187 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 72.276139][ T6174] Symlink component flag not implemented (7) [ 72.282266][ T6174] Symlink component flag not implemented (116) [ 72.296544][ T6192] random: crng reseeded on system resumption [ 72.323393][ T29] audit: type=1400 audit(1751995772.947:1291): avc: denied { unmount } for pid=4187 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 72.512910][ T29] audit: type=1400 audit(1751995773.137:1292): avc: denied { block_suspend } for pid=6213 comm="syz.5.1085" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.578899][ T29] audit: type=1400 audit(1751995773.207:1293): avc: denied { write } for pid=6219 comm="syz.5.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.710147][ T6234] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 72.761765][ T6240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6240 comm=syz.6.1097 [ 72.774406][ T6240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6240 comm=syz.6.1097 [ 72.797341][ T29] audit: type=1400 audit(1751995773.427:1294): avc: denied { write } for pid=3394 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13858 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.825089][ T29] audit: type=1326 audit(1751995773.457:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.6.1098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd4c6e929 code=0x7ffc0000 [ 73.165479][ T6263] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 73.262301][ T6275] loop4: detected capacity change from 0 to 512 [ 73.272851][ T6275] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1113: bad orphan inode 17 [ 73.283569][ T6275] ext4_test_bit(bit=16, block=4) = 1 [ 73.286894][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 73.288972][ T6275] is_bad_inode(inode)=0 [ 73.302186][ T6275] NEXT_ORPHAN(inode)=0 [ 73.306302][ T6275] max_ino=32 [ 73.306751][ T6280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.309497][ T6275] i_nlink=1 [ 73.310037][ T6275] EXT4-fs mount: 8 callbacks suppressed [ 73.310054][ T6275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.341800][ T6280] bond1: (slave batadv1): Opening slave failed [ 73.358407][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.376578][ T6284] SELinux: security_context_str_to_sid () failed with errno=-22 [ 73.417494][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1117'. [ 73.444188][ T6290] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1118'. [ 73.491509][ T6296] netlink: 'syz.5.1121': attribute type 21 has an invalid length. [ 73.499606][ T6296] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1121'. [ 73.512167][ T6298] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 73.583074][ T6309] loop4: detected capacity change from 0 to 164 [ 73.590463][ T6309] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 73.605810][ T6309] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 73.615470][ T6309] Symlink component flag not implemented [ 73.621155][ T6309] Symlink component flag not implemented [ 73.625698][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 73.627006][ T6309] Symlink component flag not implemented (7) [ 73.641830][ T6309] Symlink component flag not implemented (116) [ 73.650288][ T6315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.672055][ T6315] bond1: (slave batadv1): Opening slave failed [ 73.867068][ T6343] loop4: detected capacity change from 0 to 128 [ 73.937894][ T6343] bio_check_eod: 16 callbacks suppressed [ 73.937928][ T6343] syz.4.1142: attempt to access beyond end of device [ 73.937928][ T6343] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 73.957279][ T6343] syz.4.1142: attempt to access beyond end of device [ 73.957279][ T6343] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 73.971008][ T6343] syz.4.1142: attempt to access beyond end of device [ 73.971008][ T6343] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 73.984839][ T6343] syz.4.1142: attempt to access beyond end of device [ 73.984839][ T6343] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 73.998353][ T6343] syz.4.1142: attempt to access beyond end of device [ 73.998353][ T6343] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 74.011935][ T6343] syz.4.1142: attempt to access beyond end of device [ 74.011935][ T6343] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 74.025698][ T6343] syz.4.1142: attempt to access beyond end of device [ 74.025698][ T6343] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 74.039330][ T6343] syz.4.1142: attempt to access beyond end of device [ 74.039330][ T6343] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 74.054804][ T6343] syz.4.1142: attempt to access beyond end of device [ 74.054804][ T6343] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 74.070143][ T6343] syz.4.1142: attempt to access beyond end of device [ 74.070143][ T6343] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 74.142915][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.150557][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.158634][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.166169][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.173740][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.181271][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.188751][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.196311][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.203932][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.211423][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.219004][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.226455][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.233869][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.241369][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.248820][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.256581][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.264146][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.271648][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.279111][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.286598][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.294207][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.301738][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.309339][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.316815][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.324433][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.331952][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.339457][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.346988][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.354456][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.358922][ T2959] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 74.361860][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.369310][ T2959] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 74.376704][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.384061][ T2959] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 74.391458][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.406419][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.413845][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.421375][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.428860][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.436374][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.436633][ T2959] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 74.443777][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.443806][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.467785][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.475489][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.483468][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.490946][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.498516][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.506149][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.513840][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.521306][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.528832][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.536286][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.543868][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.551407][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.559076][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.566569][ T3409] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0 [ 74.574702][ T6375] program syz.5.1155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.584540][ T3409] hid-generic 0008:0006:0007.0004: hidraw0: HID v0.0b Device [syz1] on syz1 [ 74.585534][ T6375] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 74.736320][ T6391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.789042][ T6397] bond2: (slave batadv1): Opening slave failed [ 74.801949][ T6401] netlink: 'syz.4.1169': attribute type 12 has an invalid length. [ 74.839439][ T6405] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.846984][ T6405] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.014996][ T6430] lo speed is unknown, defaulting to 1000 [ 75.135115][ T6452] rdma_op ffff888111330980 conn xmit_rdma 0000000000000000 [ 75.343911][ T6472] __nla_validate_parse: 2 callbacks suppressed [ 75.343930][ T6472] netlink: 172796 bytes leftover after parsing attributes in process `+}[@'. [ 75.383632][ T6475] netlink: 'syz.0.1201': attribute type 1 has an invalid length. [ 75.420910][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 75.430263][ T6480] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1204'. [ 75.439472][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 75.581463][ T6505] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1216'. [ 75.592982][ T6505] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1216'. [ 76.122955][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881043c4800: rx timeout, send abort [ 76.210623][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 76.245585][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1252'. [ 76.369588][ T6595] netlink: 'syz.6.1256': attribute type 10 has an invalid length. [ 76.377547][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1256'. [ 76.386584][ T6595] dummy0: entered promiscuous mode [ 76.392358][ T6595] bridge0: port 3(dummy0) entered blocking state [ 76.398833][ T6595] bridge0: port 3(dummy0) entered disabled state [ 76.405464][ T6595] dummy0: entered allmulticast mode [ 76.411396][ T6595] bridge0: port 3(dummy0) entered blocking state [ 76.417887][ T6595] bridge0: port 3(dummy0) entered forwarding state [ 76.623021][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881043c4000: rx timeout, send abort [ 76.631420][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881043c4800: abort rx timeout. Force session deactivation [ 76.660616][ T6604] netlink: 'syz.2.1259': attribute type 21 has an invalid length. [ 76.668575][ T6604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1259'. [ 76.711179][ T6608] Falling back ldisc for ttyS3. [ 76.872676][ T6627] loop6: detected capacity change from 0 to 256 [ 76.960802][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.969342][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.131319][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881043c4000: abort rx timeout. Force session deactivation [ 77.146318][ T4261] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 77.153977][ T4261] FAT-fs (loop6): Filesystem has been set read-only [ 77.165426][ T4261] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 77.237318][ T6671] geneve0: entered allmulticast mode [ 77.338698][ T51] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.405070][ T51] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.420358][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 77.420377][ T29] audit: type=1400 audit(1751995778.037:1553): avc: denied { mounton } for pid=6679 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.474053][ T29] audit: type=1400 audit(1751995778.097:1554): avc: denied { sys_module } for pid=6679 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.513526][ T6684] loop4: detected capacity change from 0 to 1024 [ 77.521334][ T6684] EXT4-fs: Ignoring removed nobh option [ 77.526983][ T6684] EXT4-fs: Ignoring removed bh option [ 77.544833][ T51] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.597542][ T51] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.610420][ T6684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.661888][ T29] audit: type=1400 audit(1751995778.277:1555): avc: denied { create } for pid=6683 comm="syz.4.1296" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.682299][ T29] audit: type=1400 audit(1751995778.287:1556): avc: denied { read write } for pid=6683 comm="syz.4.1296" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.705018][ T29] audit: type=1400 audit(1751995778.287:1557): avc: denied { open } for pid=6683 comm="syz.4.1296" path="/265/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.740431][ T6679] lo speed is unknown, defaulting to 1000 [ 77.768796][ T6684] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1296: Allocating blocks 385-513 which overlap fs metadata [ 77.772862][ T29] audit: type=1400 audit(1751995778.297:1558): avc: denied { map } for pid=6683 comm="syz.4.1296" path="/265/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.805993][ T29] audit: type=1400 audit(1751995778.297:1559): avc: denied { execute } for pid=6683 comm="syz.4.1296" path="/265/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.830897][ T6684] EXT4-fs (loop4): pa ffff888106992150: logic 16, phys. 129, len 24 [ 77.839096][ T6684] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 77.849804][ T29] audit: type=1400 audit(1751995778.417:1560): avc: denied { getopt } for pid=6683 comm="syz.4.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.931718][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.952007][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 77.975571][ T51] dummy0: left allmulticast mode [ 77.984632][ T51] bridge0: port 3(dummy0) entered disabled state [ 77.996102][ T51] bridge_slave_1: left allmulticast mode [ 78.001870][ T51] bridge_slave_1: left promiscuous mode [ 78.007632][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.025327][ T51] bridge_slave_0: left allmulticast mode [ 78.031058][ T51] bridge_slave_0: left promiscuous mode [ 78.036925][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.058447][ C1] hrtimer: interrupt took 27105 ns [ 78.068612][ T6721] loop4: detected capacity change from 0 to 512 [ 78.107026][ T6721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.122461][ T6725] loop5: detected capacity change from 0 to 128 [ 78.131120][ T6725] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.131443][ T6721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.145672][ T6725] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.168069][ T6721] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.178926][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.190270][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.190347][ T29] audit: type=1400 audit(1751995778.827:1561): avc: denied { setattr } for pid=6724 comm="syz.5.1311" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.220997][ T29] audit: type=1400 audit(1751995778.847:1562): avc: denied { ioctl open } for pid=6724 comm="syz.5.1311" path="/190/mnt/mnt" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.223145][ T51] bond0 (unregistering): Released all slaves [ 78.267452][ T4187] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.304813][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.338639][ T51] hsr_slave_0: left promiscuous mode [ 78.353974][ T51] hsr_slave_1: left promiscuous mode [ 78.364480][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.371951][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.381697][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.389277][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.403609][ T51] veth1_macvtap: left promiscuous mode [ 78.410149][ T51] veth0_macvtap: left promiscuous mode [ 78.417674][ T51] veth1_vlan: left promiscuous mode [ 78.423140][ T51] veth0_vlan: left promiscuous mode [ 78.452732][ T6742] xt_hashlimit: max too large, truncated to 1048576 [ 78.531846][ T51] team0 (unregistering): Port device team_slave_1 removed [ 78.543398][ T6755] SELinux: GPL (6755) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 78.558218][ T51] team0 (unregistering): Port device team_slave_0 removed [ 78.645589][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.652746][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.681440][ T6679] bridge_slave_0: entered allmulticast mode [ 78.705937][ T6679] bridge_slave_0: entered promiscuous mode [ 78.717701][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.724923][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.732395][ T6679] bridge_slave_1: entered allmulticast mode [ 78.739384][ T6679] bridge_slave_1: entered promiscuous mode [ 78.765992][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.788793][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.818790][ T6779] pim6reg: entered allmulticast mode [ 78.826124][ T6679] team0: Port device team_slave_0 added [ 78.833468][ T6783] loop5: detected capacity change from 0 to 164 [ 78.836476][ T6679] team0: Port device team_slave_1 added [ 78.860930][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.868127][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.894488][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.906427][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.913607][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.939735][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.953435][ T6779] pim6reg: left allmulticast mode [ 78.961938][ T6788] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 78.995556][ T51] IPVS: stop unused estimator thread 0... [ 79.029056][ T6679] hsr_slave_0: entered promiscuous mode [ 79.035601][ T6679] hsr_slave_1: entered promiscuous mode [ 79.059026][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 79.070739][ T6796] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 79.170230][ T6805] block device autoloading is deprecated and will be removed. [ 79.176848][ T6679] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 79.195423][ T6679] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 79.206446][ T6679] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 79.234087][ T6679] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 79.268564][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.275724][ T6679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.283063][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.290178][ T6679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.387143][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.412934][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.431759][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.467529][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.586276][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.593523][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.620964][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.628144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.662862][ T6679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.744337][ T6679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.946080][ T6679] veth0_vlan: entered promiscuous mode [ 79.956648][ T6679] veth1_vlan: entered promiscuous mode [ 79.972568][ T6679] veth0_macvtap: entered promiscuous mode [ 79.980058][ T6679] veth1_macvtap: entered promiscuous mode [ 79.993012][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.006901][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.017742][ T6679] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.018525][ T6894] netlink: 'syz.0.1375': attribute type 21 has an invalid length. [ 80.026674][ T6679] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.043283][ T6679] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.052193][ T6679] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.703013][ T6977] SELinux: ebitmap: truncated map [ 80.708815][ T6977] SELinux: failed to load policy [ 80.868677][ T6990] __nla_validate_parse: 3 callbacks suppressed [ 80.868694][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 80.884064][ T6990] netlink: 'syz.4.1387': attribute type 15 has an invalid length. [ 80.891996][ T6990] netlink: 'syz.4.1387': attribute type 18 has an invalid length. [ 80.928667][ T6990] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.937567][ T6990] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.946441][ T6990] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.955388][ T6990] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.977485][ T6990] vxlan0: entered promiscuous mode [ 80.998961][ T6992] loop5: detected capacity change from 0 to 1024 [ 81.041804][ T6992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.127293][ T4187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.281980][ T7008] loop7: detected capacity change from 0 to 1024 [ 81.296456][ T6996] loop0: detected capacity change from 0 to 32768 [ 81.313568][ T7008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.338628][ T7015] netem: change failed [ 81.365314][ T6996] loop0: p1 p2 p3 < p5 p6 > [ 81.370098][ T6996] loop0: p1 size 242222080 extends beyond EOD, truncated [ 81.378030][ T6996] loop0: p2 start 4294967295 is beyond EOD, truncated [ 81.386749][ T6679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.538520][ T7027] SELinux: failed to load policy [ 81.603982][ T7037] syzkaller1: entered promiscuous mode [ 81.609666][ T7037] syzkaller1: entered allmulticast mode [ 81.807938][ T7065] nfs: Bad value for 'source' [ 81.895991][ T7077] loop0: detected capacity change from 0 to 1024 [ 81.902848][ T7077] EXT4-fs: Ignoring removed oldalloc option [ 81.909121][ T7077] EXT4-fs: Ignoring removed orlov option [ 81.915930][ T7077] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 81.937768][ T7077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.966737][ T7077] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 82.018750][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.302637][ T7094] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 82.337747][ T7096] loop0: detected capacity change from 0 to 256 [ 82.346065][ T7096] FAT-fs (loop0): bogus number of FAT sectors [ 82.352231][ T7096] FAT-fs (loop0): Can't find a valid FAT filesystem [ 82.382717][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 82.449450][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1439'. [ 82.529813][ T7115] 9pnet: p9_errstr2errno: server reported unknown error pA; [ 82.561793][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 82.561811][ T29] audit: type=1326 audit(1751995783.187:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 82.621627][ T29] audit: type=1326 audit(1751995783.227:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 82.645243][ T29] audit: type=1326 audit(1751995783.227:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 82.669013][ T29] audit: type=1326 audit(1751995783.227:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 82.692523][ T29] audit: type=1326 audit(1751995783.227:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 82.716402][ T29] audit: type=1326 audit(1751995783.227:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 82.739886][ T29] audit: type=1326 audit(1751995783.227:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 82.849891][ T7141] netlink: 'syz.4.1456': attribute type 3 has an invalid length. [ 82.890267][ T7148] loop7: detected capacity change from 0 to 1024 [ 82.927180][ T29] audit: type=1400 audit(1751995783.327:1617): avc: denied { mount } for pid=7125 comm="syz.2.1451" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 82.949739][ T29] audit: type=1400 audit(1751995783.327:1618): avc: denied { watch } for pid=7125 comm="syz.2.1451" path="/290/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 82.972540][ T29] audit: type=1326 audit(1751995783.407:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7129 comm="syz.4.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8005a7e929 code=0x7ffc0000 [ 83.027865][ T7148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.045404][ T7148] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 83.058323][ T7148] EXT4-fs (loop7): This should not happen!! Data will be lost [ 83.058323][ T7148] [ 83.068046][ T7148] EXT4-fs (loop7): Total free blocks count 0 [ 83.074074][ T7148] EXT4-fs (loop7): Free/Dirty block details [ 83.080090][ T7148] EXT4-fs (loop7): free_blocks=0 [ 83.085170][ T7148] EXT4-fs (loop7): dirty_blocks=0 [ 83.090278][ T7148] EXT4-fs (loop7): Block reservation details [ 83.096368][ T7148] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 83.130211][ T6679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.161528][ T7174] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 83.214263][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 83.269633][ T7185] loop7: detected capacity change from 0 to 764 [ 83.290122][ T7185] Symlink component flag not implemented [ 83.298286][ T7185] Symlink component flag not implemented (7) [ 83.389446][ T7203] hub 9-0:1.0: USB hub found [ 83.394596][ T7203] hub 9-0:1.0: 8 ports detected [ 83.875523][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 83.894683][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 84.233902][ T7283] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1518'. [ 84.382621][ T7306] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1524'. [ 84.397650][ T7305] loop5: detected capacity change from 0 to 1024 [ 84.400169][ T7295] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1524'. [ 84.423566][ T7305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.460904][ T4187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.485226][ T7322] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 84.536907][ T7328] lo speed is unknown, defaulting to 1000 [ 84.661180][ T7341] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.1541'. [ 84.677301][ T7337] dvmrp1: entered allmulticast mode [ 84.691504][ T7337] dvmrp1: left allmulticast mode [ 84.787307][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1548'. [ 84.881062][ T7370] loop5: detected capacity change from 0 to 512 [ 84.907823][ T7373] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 84.914415][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.922060][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 84.936079][ T7370] EXT4-fs (loop5): orphan cleanup on readonly fs [ 84.943052][ T7370] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1557: bg 0: block 248: padding at end of block bitmap is not set [ 84.959297][ T7377] netem: change failed [ 84.959369][ T7373] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 84.969979][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.977717][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 84.991303][ T7370] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1557: Failed to acquire dquot type 1 [ 85.003890][ T7373] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 85.010452][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.018010][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 85.029910][ T7370] EXT4-fs (loop5): 1 truncate cleaned up [ 85.049791][ T7370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.088803][ T7370] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1557: deleted inode referenced: 12 [ 85.114340][ T7373] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 85.120986][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.128746][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 85.156942][ T4187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.167210][ T7373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.176496][ T7373] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 85.183129][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.190796][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 85.200559][ T7391] vhci_hcd: connection closed [ 85.200855][ T6941] vhci_hcd: stop threads [ 85.201073][ T7388] vhci_hcd: connection closed [ 85.205625][ T6941] vhci_hcd: release socket [ 85.219139][ T6941] vhci_hcd: disconnect device [ 85.223996][ T2959] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 85.225342][ T7380] vhci_hcd: connection closed [ 85.231542][ T7382] vhci_hcd: connection closed [ 85.233300][ T7374] vhci_hcd: connection closed [ 85.237297][ T7375] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 85.321711][ T6941] vhci_hcd: stop threads [ 85.326051][ T6941] vhci_hcd: release socket [ 85.330548][ T6941] vhci_hcd: disconnect device [ 85.350750][ T6941] vhci_hcd: stop threads [ 85.355164][ T6941] vhci_hcd: release socket [ 85.359679][ T6941] vhci_hcd: disconnect device [ 85.392912][ T6941] vhci_hcd: stop threads [ 85.397306][ T6941] vhci_hcd: release socket [ 85.401870][ T6941] vhci_hcd: disconnect device [ 85.436563][ T6941] vhci_hcd: stop threads [ 85.440902][ T6941] vhci_hcd: release socket [ 85.445498][ T6941] vhci_hcd: disconnect device [ 85.512562][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 85.691615][ T7435] serio: Serial port ptm0 [ 85.789437][ T7440] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 85.795524][ T7440] syzkaller0: owner set to 6 [ 85.901351][ T7462] loop0: detected capacity change from 0 to 512 [ 85.916859][ T7462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.929484][ T7462] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.970058][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.091422][ T7476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7476 comm=syz.5.1594 [ 86.104132][ T7476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7476 comm=syz.5.1594 [ 86.149098][ T7480] loop5: detected capacity change from 0 to 1024 [ 86.156552][ T7480] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 86.173151][ T7480] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 86.261509][ T7488] __nla_validate_parse: 3 callbacks suppressed [ 86.261538][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'. [ 86.277129][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'. [ 86.309318][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'. [ 86.318484][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'. [ 86.383183][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'. [ 86.392367][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'. [ 86.425619][ T7506] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 86.523048][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'. [ 86.534736][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'. [ 86.737935][ T7540] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 86.744284][ T7541] netlink: 'syz.0.1624': attribute type 10 has an invalid length. [ 86.754475][ T7541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1624'. [ 86.763747][ T7541] dummy0: entered promiscuous mode [ 86.789598][ T7541] bridge0: port 3(dummy0) entered blocking state [ 86.796195][ T7541] bridge0: port 3(dummy0) entered disabled state [ 86.805901][ T7541] dummy0: entered allmulticast mode [ 86.996595][ T7568] loop0: detected capacity change from 0 to 512 [ 87.013211][ T7568] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.032553][ T7568] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1637: bg 0: block 248: padding at end of block bitmap is not set [ 87.080349][ T7568] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1637: Failed to acquire dquot type 1 [ 87.102249][ T7568] EXT4-fs (loop0): 1 truncate cleaned up [ 87.110298][ T7568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.137903][ T7568] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1637: deleted inode referenced: 12 [ 87.203056][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.334436][ T7598] dvmrp1: entered allmulticast mode [ 87.350744][ T7598] dvmrp1: left allmulticast mode [ 87.390037][ T7605] netlink: 'syz.7.1653': attribute type 1 has an invalid length. [ 87.499219][ T7618] sd 0:0:1:0: device reset [ 87.505719][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1660'. [ 87.579764][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 87.579784][ T29] audit: type=1326 audit(1751995788.207:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 87.631577][ T29] audit: type=1326 audit(1751995788.207:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 87.655185][ T29] audit: type=1326 audit(1751995788.207:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 87.679021][ T29] audit: type=1326 audit(1751995788.207:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 87.702559][ T29] audit: type=1326 audit(1751995788.207:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 87.726125][ T29] audit: type=1326 audit(1751995788.207:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 87.750035][ T29] audit: type=1326 audit(1751995788.237:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 87.773544][ T29] audit: type=1326 audit(1751995788.237:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 87.797233][ T29] audit: type=1326 audit(1751995788.247:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 87.820879][ T29] audit: type=1326 audit(1751995788.247:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.7.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 88.193383][ T7686] loop7: detected capacity change from 0 to 512 [ 88.211304][ T7686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.224015][ T7686] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.267287][ T6679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.910529][ T7803] SELinux: ebitmap: truncated map [ 88.916508][ T7803] SELinux: failed to load policy [ 88.961603][ T7808] loop4: detected capacity change from 0 to 512 [ 88.968797][ T7808] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.980460][ T7808] EXT4-fs (loop4): 1 truncate cleaned up [ 88.987082][ T7808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.015077][ T7815] loop7: detected capacity change from 0 to 1024 [ 89.036131][ T7815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.036292][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.074636][ T6679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.215251][ T7835] xt_hashlimit: max too large, truncated to 1048576 [ 89.973249][ T7915] net_ratelimit: 3324 callbacks suppressed [ 89.973268][ T7915] openvswitch: netlink: Message has 6 unknown bytes. [ 90.121752][ T7930] SELinux: failed to load policy [ 90.254279][ T2959] usb 9-1: enqueue for inactive port 0 [ 90.259853][ T2959] usb 9-1: enqueue for inactive port 0 [ 90.344218][ T2959] vhci_hcd: vhci_device speed not set [ 90.549625][ T7953] lo speed is unknown, defaulting to 1000 [ 90.647463][ T7964] lo speed is unknown, defaulting to 1000 [ 90.698918][ T7964] lo speed is unknown, defaulting to 1000 [ 91.016775][ T7976] pim6reg1: entered promiscuous mode [ 91.022189][ T7976] pim6reg1: entered allmulticast mode [ 91.233871][ T7985] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 91.240500][ T7985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.248349][ T7985] vhci_hcd vhci_hcd.0: Device attached [ 91.257093][ T7985] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 91.263656][ T7985] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 91.271352][ T7985] vhci_hcd vhci_hcd.0: Device attached [ 91.278552][ T7985] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 91.285199][ T7985] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.292677][ T7985] vhci_hcd vhci_hcd.0: Device attached [ 91.300906][ T7985] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 91.307550][ T7985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.315201][ T7985] vhci_hcd vhci_hcd.0: Device attached [ 91.323441][ T7985] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.333022][ T7985] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 91.339674][ T7985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.347442][ T7985] vhci_hcd vhci_hcd.0: Device attached [ 91.354939][ T7994] vhci_hcd: connection closed [ 91.355066][ T7992] vhci_hcd: connection closed [ 91.359997][ T7990] vhci_hcd: connection closed [ 91.364808][ T7986] vhci_hcd: connection closed [ 91.369690][ T7988] vhci_hcd: connection closed [ 91.374867][ T6949] vhci_hcd: stop threads [ 91.384014][ T6949] vhci_hcd: release socket [ 91.388564][ T6949] vhci_hcd: disconnect device [ 91.393591][ T6949] vhci_hcd: stop threads [ 91.397944][ T6949] vhci_hcd: release socket [ 91.402383][ T6949] vhci_hcd: disconnect device [ 91.407439][ T6949] vhci_hcd: stop threads [ 91.411718][ T6949] vhci_hcd: release socket [ 91.416194][ T6949] vhci_hcd: disconnect device [ 91.421157][ T6949] vhci_hcd: stop threads [ 91.425531][ T6949] vhci_hcd: release socket [ 91.429982][ T6949] vhci_hcd: disconnect device [ 91.435639][ T6949] vhci_hcd: stop threads [ 91.439952][ T6949] vhci_hcd: release socket [ 91.444458][ T6949] vhci_hcd: disconnect device [ 91.449232][ T3408] vhci_hcd: vhci_device speed not set [ 91.882552][ T8005] loop7: detected capacity change from 0 to 512 [ 91.896598][ T8007] loop0: detected capacity change from 0 to 128 [ 91.906550][ T8005] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.906968][ T8007] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.919332][ T8005] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.949936][ T8007] ext4 filesystem being mounted at /414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.990307][ T8007] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 92.022205][ T8005] syz.7.1823 (8005) used greatest stack depth: 9120 bytes left [ 92.024461][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 92.040552][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.040596][ T6679] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.132197][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.139756][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.147245][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.154799][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.154830][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.154858][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.154972][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.154999][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.155023][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.155080][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.155108][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.155130][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.155155][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.155183][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.155252][ T3401] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x0 [ 92.166338][ T8026] __nla_validate_parse: 23 callbacks suppressed [ 92.166354][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1831'. [ 92.166371][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1831'. [ 92.166407][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1831'. [ 92.167660][ T8034] loop4: detected capacity change from 0 to 128 [ 92.177494][ T8034] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 92.177527][ T8034] FAT-fs (loop4): Filesystem has been set read-only [ 92.177539][ T8034] bio_check_eod: 51 callbacks suppressed [ 92.177554][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.177554][ T8034] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 92.177619][ T8034] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 92.177708][ T8034] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 92.177960][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.177960][ T8034] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.178096][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.178096][ T8034] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.178144][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.178144][ T8034] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.178252][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.178252][ T8034] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.178299][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.178299][ T8034] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.178343][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.178343][ T8034] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.178450][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.178450][ T8034] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.178498][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.178498][ T8034] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.178586][ T8034] syz.4.1835: attempt to access beyond end of device [ 92.178586][ T8034] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 92.182458][ T3401] hid-generic 00A0:0008:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 92.700568][ T8049] syzkaller0: entered allmulticast mode [ 92.708049][ T8049] syzkaller0 (unregistering): left allmulticast mode [ 92.719543][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 92.719561][ T29] audit: type=1326 audit(1751995793.347:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 92.761929][ T29] audit: type=1326 audit(1751995793.347:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 92.785536][ T29] audit: type=1326 audit(1751995793.347:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 92.809183][ T29] audit: type=1326 audit(1751995793.347:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 92.832676][ T29] audit: type=1326 audit(1751995793.347:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 92.856152][ T29] audit: type=1326 audit(1751995793.347:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 92.879589][ T29] audit: type=1326 audit(1751995793.347:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 92.903124][ T29] audit: type=1326 audit(1751995793.347:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 92.926596][ T29] audit: type=1326 audit(1751995793.347:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 92.945469][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'. [ 92.950094][ T29] audit: type=1326 audit(1751995793.367:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.7.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45a83e929 code=0x7ffc0000 [ 93.179840][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 93.188854][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 93.189691][ T8088] loop4: detected capacity change from 0 to 512 [ 93.218815][ T8088] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 93.229236][ T8088] System zones: 0-2, 18-18, 34-35 [ 93.279592][ T8088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.308294][ T8088] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.347169][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.535846][ T8128] loop5: detected capacity change from 0 to 512 [ 93.569142][ T8128] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 93.578715][ T8128] System zones: 0-2, 18-18, 34-35 [ 93.585504][ T8128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.598366][ T8128] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.633631][ T4187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.663839][ T3408] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 93.672662][ T3408] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.814273][ T8152] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 93.822648][ T8152] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 94.098208][ T8174] syzkaller0: entered allmulticast mode [ 94.105962][ T8174] syzkaller0 (unregistering): left allmulticast mode [ 94.375771][ T8189] bridge: RTM_NEWNEIGH with invalid ether address [ 94.391214][ T8193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1906'. [ 94.400296][ T8193] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1906'. [ 94.411175][ T8193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1906'. [ 94.420448][ T8193] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1906'. [ 94.584850][ T8215] SELinux: Context system_u:object is not valid (left unmapped). [ 94.672777][ T8228] loop0: detected capacity change from 0 to 128 [ 94.682183][ T8228] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 94.690124][ T8228] FAT-fs (loop0): Filesystem has been set read-only [ 94.703163][ T8228] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 94.711133][ T8228] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 94.742232][ T8233] lo speed is unknown, defaulting to 1000 [ 94.934667][ T8251] syzkaller0: entered allmulticast mode [ 94.943450][ T8251] syzkaller0 (unregistering): left allmulticast mode [ 95.009533][ T8254] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 95.887815][ T8266] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 95.899143][ T8272] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 96.167634][ T8299] loop0: detected capacity change from 0 to 8192 [ 96.694378][ T8330] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 96.702818][ T8330] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 97.003054][ T8345] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 97.009650][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.017320][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 97.030215][ T8345] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 97.036803][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.044559][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 97.087461][ T8345] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 97.094104][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.101696][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 97.117823][ T8345] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(9) [ 97.124411][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.132201][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 97.141638][ T8345] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.170249][ T8345] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(13) [ 97.176921][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.184623][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 97.204991][ T8359] infiniband syz2: set down [ 97.209619][ T8359] infiniband syz2: added veth0_to_bond [ 97.214315][ T8369] vhci_hcd: connection closed [ 97.215369][ T6941] vhci_hcd: stop threads [ 97.224593][ T6941] vhci_hcd: release socket [ 97.229075][ T6941] vhci_hcd: disconnect device [ 97.235405][ T8364] vhci_hcd: connection closed [ 97.235666][ T6941] vhci_hcd: stop threads [ 97.244719][ T6941] vhci_hcd: release socket [ 97.249184][ T6941] vhci_hcd: disconnect device [ 97.255767][ T8346] vhci_hcd: connection closed [ 97.256127][ T8350] vhci_hcd: connection closed [ 97.264321][ T4363] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 97.269391][ T6941] vhci_hcd: stop threads [ 97.280988][ T6941] vhci_hcd: release socket [ 97.285474][ T6941] vhci_hcd: disconnect device [ 97.291741][ T8357] vhci_hcd: connection closed [ 97.295929][ T6941] vhci_hcd: stop threads [ 97.305137][ T6941] vhci_hcd: release socket [ 97.309589][ T6941] vhci_hcd: disconnect device [ 97.309879][ T4363] usb 15-1: enqueue for inactive port 0 [ 97.314811][ T8359] RDS/IB: syz2: added [ 97.323939][ T8359] smc: adding ib device syz2 with port count 1 [ 97.330267][ T8359] smc: ib device syz2 port 1 has pnetid [ 97.336659][ T6941] vhci_hcd: stop threads [ 97.340956][ T6941] vhci_hcd: release socket [ 97.345496][ T6941] vhci_hcd: disconnect device [ 97.501300][ T4363] usb 15-1: enqueue for inactive port 0 [ 97.530740][ T4363] usb 15-1: enqueue for inactive port 0 [ 97.535500][ T8400] __nla_validate_parse: 6 callbacks suppressed [ 97.535524][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 97.555563][ T8400] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.564495][ T8400] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.573416][ T8400] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.582243][ T8400] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.591259][ T6934] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 97.602897][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 97.612872][ T4363] vhci_hcd: vhci_device speed not set [ 97.745226][ T8424] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 97.793828][ T8416] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.802854][ T8416] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.812207][ T8416] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.821390][ T8416] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.837273][ T8416] bond1: left promiscuous mode [ 97.843427][ T8416] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.852465][ T8416] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.861619][ T8416] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.870617][ T8416] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.879897][ T8416] vxlan0: left promiscuous mode [ 97.899182][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 97.899198][ T29] audit: type=1400 audit(1751995798.527:2163): avc: denied { attach_queue } for pid=8433 comm="syz.7.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.991054][ T29] audit: type=1400 audit(1751995798.617:2164): avc: denied { bind } for pid=8440 comm="syz.0.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.099333][ T3387] Process accounting resumed [ 98.360902][ T8488] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2028'. [ 98.370124][ T29] audit: type=1400 audit(1751995798.987:2165): avc: denied { nlmsg_read } for pid=8485 comm="syz.5.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.414874][ T8493] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 98.428792][ T29] audit: type=1400 audit(1751995799.027:2166): avc: denied { watch_reads } for pid=8490 comm="syz.2.2031" path="/409" dev="tmpfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.454383][ T8496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2034'. [ 98.520576][ T29] audit: type=1326 audit(1751995805.150:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 98.561644][ T29] audit: type=1326 audit(1751995805.150:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 98.585225][ T29] audit: type=1326 audit(1751995805.150:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 98.608656][ T29] audit: type=1326 audit(1751995805.150:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 98.632160][ T29] audit: type=1326 audit(1751995805.150:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.0.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f06fbe929 code=0x7ffc0000 [ 98.916776][ T8544] loop5: detected capacity change from 0 to 512 [ 98.955824][ T8544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.976730][ T8544] ext4 filesystem being mounted at /354/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.039004][ T8542] ================================================================== [ 99.047179][ T8542] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 99.054578][ T8544] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #4: comm syz.5.2055: corrupted inode contents [ 99.055115][ T8542] [ 99.055124][ T8542] write to 0xffffea000503aed8 of 8 bytes by task 8545 on cpu 1: [ 99.055146][ T8542] __filemap_remove_folio+0x1a5/0x2a0 [ 99.055181][ T8542] filemap_remove_folio+0x6d/0x1d0 [ 99.055205][ T8542] truncate_inode_folio+0x42/0x50 [ 99.078706][ T8544] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #4: comm syz.5.2055: mark_inode_dirty error [ 99.082293][ T8542] shmem_undo_range+0x244/0xa80 [ 99.093172][ T8544] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #4: comm syz.5.2055: corrupted inode contents [ 99.103763][ T8542] shmem_fallocate+0x799/0x840 [ 99.103796][ T8542] vfs_fallocate+0x410/0x450 [ 99.103819][ T8542] __x64_sys_fallocate+0x7a/0xd0 [ 99.103842][ T8542] x64_sys_call+0x2b88/0x2fb0 [ 99.103868][ T8542] do_syscall_64+0xd2/0x200 [ 99.103907][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.103933][ T8542] [ 99.103940][ T8542] read to 0xffffea000503aed8 of 8 bytes by task 8542 on cpu 0: [ 99.103960][ T8542] folio_mapping+0xa1/0x120 [ 99.122245][ T8544] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.2055: mark_inode_dirty error [ 99.125358][ T8542] evict_folios+0x298e/0x33d0 [ 99.125392][ T8542] try_to_shrink_lruvec+0x45a/0x7e0 [ 99.150554][ T8544] Quota error (device loop5): write_blk: dquota write failed [ 99.152408][ T8542] shrink_lruvec+0x22e/0x1b40 [ 99.152435][ T8542] shrink_node+0x686/0x2120 [ 99.160012][ T8544] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2055: Failed to acquire dquot type 1 [ 99.164486][ T8542] do_try_to_free_pages+0x3f6/0xcd0 [ 99.164513][ T8542] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 99.197004][ T8544] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #4: comm syz.5.2055: corrupted inode contents [ 99.197732][ T8542] try_charge_memcg+0x358/0x9e0 [ 99.202531][ T8544] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #4: comm syz.5.2055: mark_inode_dirty error [ 99.213467][ T8542] obj_cgroup_charge_pages+0xa6/0x150 [ 99.213512][ T8542] __memcg_kmem_charge_page+0x9f/0x170 [ 99.219157][ T8544] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #4: comm syz.5.2055: corrupted inode contents [ 99.224627][ T8542] __alloc_frozen_pages_noprof+0x188/0x360 [ 99.236678][ T8544] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.2055: mark_inode_dirty error [ 99.241230][ T8542] alloc_pages_mpol+0xb3/0x250 [ 99.255979][ T8544] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2055: Failed to acquire dquot type 1 [ 99.257824][ T8542] alloc_pages_noprof+0x90/0x130 [ 99.257865][ T8542] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 99.257896][ T8542] __kvmalloc_node_noprof+0x30f/0x4e0 [ 99.324387][ T8542] ip_set_alloc+0x1f/0x30 [ 99.328749][ T8542] hash_netiface_create+0x282/0x740 [ 99.333979][ T8542] ip_set_create+0x3c9/0x960 [ 99.338598][ T8542] nfnetlink_rcv_msg+0x4c3/0x590 [ 99.343561][ T8542] netlink_rcv_skb+0x120/0x220 [ 99.348356][ T8542] nfnetlink_rcv+0x16b/0x1690 [ 99.353077][ T8542] netlink_unicast+0x59e/0x670 [ 99.357867][ T8542] netlink_sendmsg+0x58b/0x6b0 [ 99.362665][ T8542] __sock_sendmsg+0x142/0x180 [ 99.367362][ T8542] ____sys_sendmsg+0x31e/0x4e0 [ 99.372157][ T8542] ___sys_sendmsg+0x17b/0x1d0 [ 99.376866][ T8542] __x64_sys_sendmsg+0xd4/0x160 [ 99.381747][ T8542] x64_sys_call+0x2999/0x2fb0 [ 99.386464][ T8542] do_syscall_64+0xd2/0x200 [ 99.390999][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.396913][ T8542] [ 99.399247][ T8542] value changed: 0xffff888119944aa8 -> 0x0000000000000000 [ 99.406376][ T8542] [ 99.408712][ T8542] Reported by Kernel Concurrency Sanitizer on: [ 99.414884][ T8542] CPU: 0 UID: 0 PID: 8542 Comm: syz.4.2054 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 99.428893][ T8542] Tainted: [W]=WARN [ 99.432709][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.442784][ T8542] ================================================================== [ 99.485742][ T4187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.853290][ T8542] syz.4.2054 (8542) used greatest stack depth: 6064 bytes left