last executing test programs: 58.66355441s ago: executing program 4 (id=891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) 58.089917879s ago: executing program 4 (id=895): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mknod$loop(0x0, 0x100000000000600d, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000480)={0x0}) 58.04143352s ago: executing program 4 (id=897): r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f2014f9f4", 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 57.800543734s ago: executing program 4 (id=900): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 57.799135944s ago: executing program 4 (id=901): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x5f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 54.728071191s ago: executing program 4 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r3, 0x0, 0x4}, 0x18) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000480c) 54.690490201s ago: executing program 32 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r3, 0x0, 0x4}, 0x18) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000480c) 2.115186467s ago: executing program 0 (id=2028): socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1, 0x2c3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.085935577s ago: executing program 0 (id=2029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = eventfd(0x800a6) write$eventfd(r4, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) read$eventfd(r4, &(0x7f0000000040), 0x8) 1.219226981s ago: executing program 0 (id=2047): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.110926782s ago: executing program 5 (id=2048): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f000086fff4)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x4, 0x2) close_range(r5, 0xffffffffffffffff, 0x3e00000000000000) 857.844977ms ago: executing program 2 (id=2053): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) 819.393027ms ago: executing program 2 (id=2055): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000002c0)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x803}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r0) 799.954458ms ago: executing program 3 (id=2056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x38, 0x4, @thr={&(0x7f0000000000)="8a289e048cd949747a94333b9ff3a4e2fbc029", 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x24) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 713.967379ms ago: executing program 3 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 713.036919ms ago: executing program 2 (id=2058): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 706.381389ms ago: executing program 3 (id=2059): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000600)='FREEZING\x00', 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_virt_wifi\x00', 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4f21, 0x10000, @local, 0x3ff}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 688.235269ms ago: executing program 2 (id=2060): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4008840) close(r3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x2}, 0x10) 675.224009ms ago: executing program 3 (id=2061): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x48280, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 639.66216ms ago: executing program 3 (id=2062): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) 609.47369ms ago: executing program 3 (id=2064): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800ff0f00003335f2459d8a090000000000000000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) unshare(0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 441.963263ms ago: executing program 1 (id=2067): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 412.745933ms ago: executing program 1 (id=2068): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) semget$private(0x0, 0x4000, 0x555) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) 411.610833ms ago: executing program 2 (id=2069): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 334.230215ms ago: executing program 0 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x2) write$binfmt_misc(r4, &(0x7f0000000240), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 314.851045ms ago: executing program 2 (id=2071): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(0x0, 0xd931d3864d39ddd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 259.289566ms ago: executing program 5 (id=2072): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 229.751016ms ago: executing program 5 (id=2073): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a"], 0xfc}}, 0x0) 198.567257ms ago: executing program 5 (id=2074): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1}, 0x1040c6, 0x4, 0x0, 0x9, 0x0, 0xffffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14185, 0x2e, 0xfffffbff, 0x8, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 189.694827ms ago: executing program 0 (id=2075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) close(r2) 169.587497ms ago: executing program 0 (id=2076): socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="000200000000000007"], 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 143.091807ms ago: executing program 1 (id=2077): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x40, 0x3, 0xf0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) io_uring_setup(0x2236, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 142.083447ms ago: executing program 5 (id=2078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 113.069188ms ago: executing program 1 (id=2079): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) 74.894468ms ago: executing program 5 (id=2080): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x80001}, 0x18) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) 23.258359ms ago: executing program 1 (id=2081): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "2a7606b83d57c59a", "d5d4b1f2ec11858de0f53ac1c4569a99e8f287cdf9768a7d882914429316251c", "e3ef8cd6", "634b6f89ebd017b6"}, 0x38) recvmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x87b0cc373e1cda89, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=2082): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xf) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): busy [ 86.895893][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.974910][ T6265] batadv_slave_0: entered promiscuous mode [ 86.991280][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'. [ 87.001169][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.027818][ T6265] batadv_slave_0 (unregistering): left promiscuous mode [ 87.051867][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.644214][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 87.644230][ T29] audit: type=1107 audit(1750240022.960:1934): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 87.685795][ T29] audit: type=1326 audit(1750240023.000:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 87.709353][ T29] audit: type=1326 audit(1750240023.000:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 87.732947][ T29] audit: type=1326 audit(1750240023.000:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 87.756452][ T29] audit: type=1326 audit(1750240023.000:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 87.780158][ T29] audit: type=1326 audit(1750240023.000:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 87.803784][ T29] audit: type=1326 audit(1750240023.000:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 87.827430][ T29] audit: type=1326 audit(1750240023.000:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f46818558e7 code=0x7ffc0000 [ 87.850828][ T29] audit: type=1326 audit(1750240023.000:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46817fab19 code=0x7ffc0000 [ 87.874302][ T29] audit: type=1326 audit(1750240023.000:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 87.917256][ T6323] loop2: detected capacity change from 0 to 256 [ 87.949648][ T6325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1033'. [ 88.066438][ T6332] netlink: 'syz.5.1036': attribute type 13 has an invalid length. [ 88.158175][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.165494][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.242639][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.270057][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.287790][ T6323] FAT-fs (loop2): Directory bread(block 1285) failed [ 88.319829][ T6307] FAT-fs (loop2): Directory bread(block 1285) failed [ 88.327596][ T6332] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.336679][ T6332] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.345869][ T6332] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.355172][ T6332] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.365382][ T6307] FAT-fs (loop2): Directory bread(block 1285) failed [ 88.372623][ T6307] FAT-fs (loop2): Directory bread(block 1285) failed [ 88.862098][ T6354] @: renamed from vlan0 [ 89.253642][ T6360] loop2: detected capacity change from 0 to 4096 [ 89.267409][ T6360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.302975][ T6364] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1048'. [ 89.398682][ T6364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.542043][ T6364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.572412][ T6364] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 89.587038][ T6364] bond0 (unregistering): Released all slaves [ 89.640749][ T6370] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.711297][ T6370] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.724284][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.758810][ T6372] wg2: entered promiscuous mode [ 89.763945][ T6372] wg2: entered allmulticast mode [ 89.796920][ T6370] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.822431][ T6378] loop2: detected capacity change from 0 to 1764 [ 89.861425][ T6370] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.981817][ T6370] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.015348][ T6370] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.065427][ T6370] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.105535][ T6370] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.452061][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1072'. [ 90.496385][ T6424] IPv4: Oversized IP packet from 127.202.26.0 [ 90.721481][ T6428] loop1: detected capacity change from 0 to 512 [ 90.722240][ T6427] loop0: detected capacity change from 0 to 512 [ 90.728761][ T6428] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 90.744567][ T6427] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.779571][ T3310] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 90.798044][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 90.865295][ T6435] SELinux: failed to load policy [ 91.024029][ T6459] loop5: detected capacity change from 0 to 128 [ 91.074702][ T6461] SELinux: failed to load policy [ 91.447298][ T6478] loop2: detected capacity change from 0 to 512 [ 91.455538][ T6480] lo: entered promiscuous mode [ 91.460738][ T6480] tunl0: entered promiscuous mode [ 91.465972][ T6480] gre0: entered promiscuous mode [ 91.471251][ T6480] gretap0: entered promiscuous mode [ 91.476697][ T6480] erspan0: entered promiscuous mode [ 91.482186][ T6480] ip_vti0: entered promiscuous mode [ 91.487535][ T6480] ip6_vti0: entered promiscuous mode [ 91.493045][ T6480] sit0: entered promiscuous mode [ 91.498151][ T6480] ip6tnl0: entered promiscuous mode [ 91.503514][ T6480] ip6gre0: entered promiscuous mode [ 91.508886][ T6480] syz_tun: entered promiscuous mode [ 91.514301][ T6480] ip6gretap0: entered promiscuous mode [ 91.520024][ T6480] bridge0: entered promiscuous mode [ 91.525381][ T6480] vcan0: entered promiscuous mode [ 91.530525][ T6480] bond0: entered promiscuous mode [ 91.535576][ T6480] bond_slave_0: entered promiscuous mode [ 91.541497][ T6480] bond_slave_1: entered promiscuous mode [ 91.547534][ T6480] team0: entered promiscuous mode [ 91.552732][ T6480] team_slave_0: entered promiscuous mode [ 91.558501][ T6480] team_slave_1: entered promiscuous mode [ 91.564511][ T6480] dummy0: entered promiscuous mode [ 91.569789][ T6480] nlmon0: entered promiscuous mode [ 91.575035][ T6480] caif0: entered promiscuous mode [ 91.580390][ T6480] batadv0: entered promiscuous mode [ 91.585685][ T6480] vxcan0: entered promiscuous mode [ 91.590991][ T6480] vxcan1: entered promiscuous mode [ 91.596216][ T6480] veth0: entered promiscuous mode [ 91.601439][ T6480] veth1: entered promiscuous mode [ 91.606642][ T6480] wg0: entered promiscuous mode [ 91.611739][ T6480] wg1: entered promiscuous mode [ 91.616738][ T6480] wg2: entered promiscuous mode [ 91.621748][ T6480] veth0_to_bridge: entered promiscuous mode [ 91.627920][ T6480] veth1_to_bridge: entered promiscuous mode [ 91.634364][ T6480] veth0_to_bond: entered promiscuous mode [ 91.640994][ T6480] veth1_to_bond: entered promiscuous mode [ 91.646991][ T6480] veth0_to_team: entered promiscuous mode [ 91.653041][ T6480] veth1_to_team: entered promiscuous mode [ 91.658976][ T6480] veth0_to_batadv: entered promiscuous mode [ 91.665170][ T6480] batadv_slave_0: entered promiscuous mode [ 91.671099][ T6480] veth1_to_batadv: entered promiscuous mode [ 91.677279][ T6480] batadv_slave_1: entered promiscuous mode [ 91.683285][ T6480] xfrm0: entered promiscuous mode [ 91.688458][ T6480] veth0_to_hsr: entered promiscuous mode [ 91.694350][ T6480] veth1_to_hsr: entered promiscuous mode [ 91.700198][ T6480] hsr0: entered promiscuous mode [ 91.705219][ T6480] veth1_virt_wifi: entered promiscuous mode [ 91.711314][ T6480] veth0_virt_wifi: entered promiscuous mode [ 91.717460][ T6480] vlan0: entered promiscuous mode [ 91.722658][ T6480] vlan1: entered promiscuous mode [ 91.728054][ T6480] macvlan0: entered promiscuous mode [ 91.733801][ T6480] macvlan1: entered promiscuous mode [ 91.739287][ T6480] ipvlan0: entered promiscuous mode [ 91.744606][ T6480] ipvlan1: entered promiscuous mode [ 91.750246][ T6480] macvtap0: entered promiscuous mode [ 91.755651][ T6480] macsec0: entered promiscuous mode [ 91.761029][ T6480] geneve0: entered promiscuous mode [ 91.766419][ T6480] geneve1: entered promiscuous mode [ 91.772108][ T6480] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 91.779730][ T6480] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 91.787212][ T6480] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 91.795008][ T6480] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 92.539634][ T6498] loop1: detected capacity change from 0 to 512 [ 92.550722][ T6498] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 92.700995][ T6508] tipc: Started in network mode [ 92.705972][ T6508] tipc: Node identity 2000007, cluster identity 4711 [ 92.712846][ T6508] tipc: Node number set to 33554439 [ 92.906623][ T6519] loop1: detected capacity change from 0 to 512 [ 92.969284][ T6519] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.006699][ T6519] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.035025][ T6519] EXT4-fs (loop1): 1 truncate cleaned up [ 93.042299][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.096754][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.121426][ T6532] netlink: 'syz.2.1121': attribute type 13 has an invalid length. [ 93.132449][ T6534] loop1: detected capacity change from 0 to 128 [ 93.244991][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 93.272356][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 93.427417][ T6560] loop2: detected capacity change from 0 to 512 [ 93.459766][ T6560] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 93.610684][ T6573] netlink: 'syz.1.1137': attribute type 13 has an invalid length. [ 93.627263][ T6574] netlink: 'syz.3.1138': attribute type 1 has an invalid length. [ 93.678884][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 94.077699][ T6573] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.086282][ T6573] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.094704][ T6573] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.103117][ T6573] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.145446][ T6574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.190618][ T6576] bond2 (unregistering): Released all slaves [ 94.201996][ T6578] pim6reg1: entered promiscuous mode [ 94.207350][ T6578] pim6reg1: entered allmulticast mode [ 94.281303][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 94.378990][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 94.455177][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 94.477603][ T29] kauditd_printk_skb: 762 callbacks suppressed [ 94.477618][ T29] audit: type=1400 audit(1750240029.800:2706): avc: denied { create } for pid=6603 comm="syz.0.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.601312][ T6619] wg2: left promiscuous mode [ 94.637603][ T29] audit: type=1326 audit(1750240029.960:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6622 comm="syz.0.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 94.669394][ T6619] wg2: entered promiscuous mode [ 94.674325][ T6619] wg2: entered allmulticast mode [ 94.685405][ T6625] ip6gre2: entered allmulticast mode [ 94.695718][ T29] audit: type=1326 audit(1750240029.990:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6622 comm="syz.0.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 94.719364][ T29] audit: type=1326 audit(1750240029.990:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6622 comm="syz.0.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 94.821998][ T6640] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1156'. [ 95.048662][ T29] audit: type=1326 audit(1750240030.370:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 95.075293][ T6656] netlink: 'syz.3.1162': attribute type 6 has an invalid length. [ 95.118814][ T29] audit: type=1326 audit(1750240030.400:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 95.142338][ T29] audit: type=1326 audit(1750240030.400:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 95.165958][ T29] audit: type=1326 audit(1750240030.400:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 95.189462][ T29] audit: type=1326 audit(1750240030.400:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 95.212828][ T29] audit: type=1326 audit(1750240030.400:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6657 comm="syz.2.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 95.299447][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 95.343804][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 95.423273][ T6670] ip6gre1: entered allmulticast mode [ 95.472535][ T6674] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 95.504015][ T6674] team1: entered promiscuous mode [ 95.510681][ T6674] team1: entered allmulticast mode [ 95.683890][ T6663] sch_fq: defrate 2048 ignored. [ 95.963486][ T6703] ip6gre1: entered allmulticast mode [ 96.099108][ T6713] SELinux: failed to load policy [ 96.189839][ T6725] unsupported nla_type 65024 [ 97.051536][ T6759] netlink: 'syz.0.1202': attribute type 1 has an invalid length. [ 97.102927][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.192652][ T6759] bond0 (unregistering): Released all slaves [ 97.343555][ T6769] team2: entered promiscuous mode [ 97.354143][ T6769] team2: entered allmulticast mode [ 97.831430][ T6792] tipc: Enabling of bearer rejected, already enabled [ 98.208931][ T6840] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.321473][ T6840] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.387146][ T6840] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.452937][ T6840] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.513960][ T6840] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.555177][ T6840] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.584906][ T6840] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.620673][ T6840] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.659325][ T6894] netlink: 'syz.3.1238': attribute type 27 has an invalid length. [ 98.734876][ T6920] netlink: 'syz.2.1239': attribute type 27 has an invalid length. [ 98.845697][ T6894] bond0: left promiscuous mode [ 98.850591][ T6894] bond_slave_0: left promiscuous mode [ 98.856186][ T6894] bond_slave_1: left promiscuous mode [ 98.888138][ T6894] dummy0: left promiscuous mode [ 98.920397][ T6894] wg2: left promiscuous mode [ 98.925087][ T6894] wg2: left allmulticast mode [ 98.953705][ T6933] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 99.002984][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.092318][ T6894] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.100781][ T6894] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.109203][ T6894] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.117850][ T6894] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.164793][ T6894] geneve0: left allmulticast mode [ 99.194483][ T6894] ip6gre1: left allmulticast mode [ 99.220910][ T6894] team1: left promiscuous mode [ 99.225941][ T6894] team1: left allmulticast mode [ 99.314748][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.336076][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.356103][ T6924] batman_adv: batadv0: Interface activated: team0 [ 99.371111][ T6924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.387243][ T6920] ip6gre2: left allmulticast mode [ 99.454510][ T6956] lo speed is unknown, defaulting to 1000 [ 99.486048][ T6956] lo speed is unknown, defaulting to 1000 [ 99.497642][ T6956] lo speed is unknown, defaulting to 1000 [ 99.516266][ T6956] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.542565][ T6960] loop1: detected capacity change from 0 to 736 [ 99.549321][ T6960] iso9660: Unknown parameter 'Q{UaND?sM00000000000000000000' [ 99.551500][ T6956] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.580777][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 99.580794][ T29] audit: type=1326 audit(1750240034.910:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.618920][ T29] audit: type=1326 audit(1750240034.940:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.642597][ T29] audit: type=1326 audit(1750240034.940:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.666107][ T29] audit: type=1326 audit(1750240034.940:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.689775][ T29] audit: type=1326 audit(1750240034.940:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.713285][ T29] audit: type=1326 audit(1750240034.940:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.736928][ T29] audit: type=1326 audit(1750240034.940:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.760398][ T29] audit: type=1326 audit(1750240034.940:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.784110][ T29] audit: type=1326 audit(1750240034.940:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.807739][ T29] audit: type=1326 audit(1750240034.940:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6959 comm="syz.1.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 99.852272][ T6968] tipc: Started in network mode [ 99.857388][ T6968] tipc: Node identity ac14140f, cluster identity 4711 [ 99.864607][ T6968] tipc: New replicast peer: 255.255.255.255 [ 99.870820][ T6968] tipc: Enabled bearer , priority 10 [ 99.897944][ T6956] lo speed is unknown, defaulting to 1000 [ 99.925949][ T6956] lo speed is unknown, defaulting to 1000 [ 99.963468][ T6956] lo speed is unknown, defaulting to 1000 [ 100.064734][ T6956] lo speed is unknown, defaulting to 1000 [ 100.154807][ T6956] lo speed is unknown, defaulting to 1000 [ 100.196634][ T6956] lo speed is unknown, defaulting to 1000 [ 100.346485][ T7003] netlink: 'syz.1.1272': attribute type 27 has an invalid length. [ 100.363482][ T7006] loop5: detected capacity change from 0 to 128 [ 100.363867][ T7003] dummy0: left promiscuous mode [ 100.376177][ T7003] wg2: left promiscuous mode [ 100.377089][ T7006] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.381029][ T7003] wg2: left allmulticast mode [ 100.411813][ T7006] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.464808][ T7013] siw: device registration error -23 [ 100.989879][ T37] tipc: Node number set to 2886997007 [ 100.996931][ T7077] __nla_validate_parse: 4 callbacks suppressed [ 100.996950][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 101.017788][ T7077] bridge_slave_1: left allmulticast mode [ 101.023667][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.034063][ T7077] bridge_slave_0: left allmulticast mode [ 101.040118][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.091515][ T7026] lo speed is unknown, defaulting to 1000 [ 101.184013][ T7094] siw: device registration error -23 [ 101.328279][ T7114] loop1: detected capacity change from 0 to 128 [ 101.363396][ T7114] syz.1.1298: attempt to access beyond end of device [ 101.363396][ T7114] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 101.376988][ T7114] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 101.478084][ T7141] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 102.012738][ T7170] ip6gre1: entered allmulticast mode [ 102.039817][ T7172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.047149][ T7172] IPv6: NLM_F_CREATE should be set when creating new route [ 102.109655][ T7182] bond1: entered promiscuous mode [ 102.114776][ T7182] bond1: entered allmulticast mode [ 102.120485][ T7182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.140717][ T7182] bond1 (unregistering): Released all slaves [ 102.218683][ T7192] syzkaller0: entered promiscuous mode [ 102.224302][ T7192] syzkaller0: entered allmulticast mode [ 102.292953][ T7201] netlink: 'syz.5.1319': attribute type 7 has an invalid length. [ 102.300825][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1319'. [ 102.418380][ T7211] loop2: detected capacity change from 0 to 1024 [ 102.439280][ T7211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.448108][ T7211] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.475027][ T7211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 102.491575][ T7211] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1324: lblock 2 mapped to illegal pblock 2 (length 1) [ 102.516185][ T7211] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.1324: lblock 0 mapped to illegal pblock 48 (length 1) [ 102.550682][ T7211] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1324: Failed to acquire dquot type 0 [ 102.570779][ T7211] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 102.599918][ T7211] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1324: mark_inode_dirty error [ 102.671005][ T7211] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 102.696970][ T7211] EXT4-fs (loop2): 1 orphan inode deleted [ 102.709495][ T4075] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 102.729778][ T7211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.740521][ T7228] loop1: detected capacity change from 0 to 512 [ 102.760576][ T4075] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:59: Failed to release dquot type 0 [ 102.773444][ T7211] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.774163][ T7228] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 102.784472][ T7211] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.1324: Invalid inode table block 1 in block_group 0 [ 102.805466][ T7211] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 102.815258][ T7211] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.1324: mark_inode_dirty error [ 102.864114][ T7211] loop2: detected capacity change from 0 to 1764 [ 103.110212][ T7238] loop1: detected capacity change from 0 to 256 [ 103.131954][ T7238] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.263896][ T7243] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.401324][ T7243] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.461198][ T7243] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.508138][ T7253] netlink: 'syz.5.1340': attribute type 27 has an invalid length. [ 103.516242][ T7253] lo: left promiscuous mode [ 103.520984][ T7253] tunl0: left promiscuous mode [ 103.526122][ T7253] gre0: left promiscuous mode [ 103.531029][ T7253] gretap0: left promiscuous mode [ 103.536154][ T7253] erspan0: left promiscuous mode [ 103.541246][ T7253] ip_vti0: left promiscuous mode [ 103.546593][ T7253] ip6_vti0: left promiscuous mode [ 103.551929][ T7253] sit0: left promiscuous mode [ 103.556814][ T7253] ip6tnl0: left promiscuous mode [ 103.562030][ T7253] ip6gre0: left promiscuous mode [ 103.567109][ T7253] syz_tun: left promiscuous mode [ 103.572372][ T7253] ip6gretap0: left promiscuous mode [ 103.577651][ T7253] vcan0: left promiscuous mode [ 103.582593][ T7253] bond0: left promiscuous mode [ 103.587826][ T7253] team0: left promiscuous mode [ 103.593235][ T7253] dummy0: left promiscuous mode [ 103.598200][ T7253] nlmon0: left promiscuous mode [ 103.603354][ T7253] caif0: left promiscuous mode [ 103.608287][ T7253] batadv0: left promiscuous mode [ 103.613628][ T7253] vxcan0: left promiscuous mode [ 103.618979][ T7253] vxcan1: left promiscuous mode [ 103.624443][ T7253] veth0: left promiscuous mode [ 103.629647][ T7253] veth1: left promiscuous mode [ 103.634933][ T7253] wg0: left promiscuous mode [ 103.639840][ T7253] wg1: left promiscuous mode [ 103.645169][ T7253] wg2: left promiscuous mode [ 103.650080][ T7253] wg2: left allmulticast mode [ 103.655810][ T7253] veth0_to_bridge: left promiscuous mode [ 103.661602][ T7253] bridge_slave_0: left promiscuous mode [ 103.667262][ T7253] veth1_to_bridge: left promiscuous mode [ 103.673242][ T7253] bridge_slave_1: left promiscuous mode [ 103.678950][ T7253] veth0_to_bond: left promiscuous mode [ 103.684632][ T7253] bond_slave_0: left promiscuous mode [ 103.690181][ T7253] veth1_to_bond: left promiscuous mode [ 103.695776][ T7253] bond_slave_1: left promiscuous mode [ 103.701289][ T7253] veth0_to_team: left promiscuous mode [ 103.706918][ T7253] team_slave_0: left promiscuous mode [ 103.712469][ T7253] veth1_to_team: left promiscuous mode [ 103.718115][ T7253] team_slave_1: left promiscuous mode [ 103.723691][ T7253] veth0_to_batadv: left promiscuous mode [ 103.729448][ T7253] batadv_slave_0: left promiscuous mode [ 103.735141][ T7253] veth1_to_batadv: left promiscuous mode [ 103.740917][ T7253] batadv_slave_1: left promiscuous mode [ 103.746755][ T7253] xfrm0: left promiscuous mode [ 103.751765][ T7253] veth0_to_hsr: left promiscuous mode [ 103.757418][ T7253] veth1_to_hsr: left promiscuous mode [ 103.762958][ T7253] hsr0: left promiscuous mode [ 103.767865][ T7253] veth1_virt_wifi: left promiscuous mode [ 103.773612][ T7253] veth0_virt_wifi: left promiscuous mode [ 103.779657][ T7253] vlan0: left promiscuous mode [ 103.784611][ T7253] vlan1: left promiscuous mode [ 103.789622][ T7253] macvlan0: left promiscuous mode [ 103.794776][ T7253] macvlan1: left promiscuous mode [ 103.799975][ T7253] ipvlan0: left promiscuous mode [ 103.805125][ T7253] ipvlan1: left promiscuous mode [ 103.810501][ T7253] macvtap0: left promiscuous mode [ 103.815630][ T7253] macsec0: left promiscuous mode [ 103.820764][ T7253] geneve0: left promiscuous mode [ 103.825811][ T7253] geneve1: left promiscuous mode [ 103.831215][ T7253] ip6gre1: left allmulticast mode [ 103.839272][ T7243] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.853419][ T7255] ip6gre2: entered allmulticast mode [ 103.872121][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.880248][ T7256] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.889441][ T7256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.926930][ T7243] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.942000][ T7243] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.955188][ T7243] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.982488][ T7267] loop5: detected capacity change from 0 to 512 [ 103.982612][ T7243] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.999890][ T7267] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 104.155682][ T7278] bond2: entered promiscuous mode [ 104.160886][ T7278] bond2: entered allmulticast mode [ 104.166295][ T7278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.185939][ T7278] bond2 (unregistering): Released all slaves [ 104.295729][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1352'. [ 104.361593][ T7287] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 104.373421][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 104.655467][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 104.655484][ T29] audit: type=1326 audit(1750240039.980:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 104.685467][ T29] audit: type=1326 audit(1750240039.980:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 104.709111][ T29] audit: type=1326 audit(1750240039.980:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 104.732714][ T29] audit: type=1326 audit(1750240039.980:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 104.815873][ T7323] lo speed is unknown, defaulting to 1000 [ 104.939864][ T29] audit: type=1326 audit(1750240040.040:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 104.963493][ T29] audit: type=1326 audit(1750240040.060:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 104.976601][ T7319] lo speed is unknown, defaulting to 1000 [ 104.987131][ T29] audit: type=1326 audit(1750240040.080:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 104.987183][ T29] audit: type=1326 audit(1750240040.080:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 104.987218][ T29] audit: type=1326 audit(1750240040.080:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46818911e5 code=0x7ffc0000 [ 104.987251][ T29] audit: type=1326 audit(1750240040.090:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7316 comm="syz.0.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f468185e929 code=0x7ffc0000 [ 105.228731][ T7342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.262092][ T7348] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1377'. [ 105.348488][ T7356] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1381'. [ 105.388662][ T7358] netlink: 'syz.0.1382': attribute type 1 has an invalid length. [ 105.425444][ T7358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.448683][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 105.498405][ T7358] bond0 (unregistering): Released all slaves [ 105.711448][ T7384] netlink: 'syz.3.1394': attribute type 4 has an invalid length. [ 105.757894][ T7387] loop5: detected capacity change from 0 to 1024 [ 105.764688][ T7384] netlink: 'syz.3.1394': attribute type 4 has an invalid length. [ 105.776148][ T7387] EXT4-fs: Ignoring removed orlov option [ 105.801006][ T7387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.801937][ T7394] SELinux: syz.0.1399 (7394) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 105.859547][ T7405] loop2: detected capacity change from 0 to 256 [ 105.875968][ T7405] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.884321][ T6122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.998797][ T7407] lo speed is unknown, defaulting to 1000 [ 106.571258][ T7443] netlink: 'syz.3.1417': attribute type 4 has an invalid length. [ 106.590984][ T7443] netlink: 'syz.3.1417': attribute type 4 has an invalid length. [ 106.800086][ T7454] tipc: Enabling of bearer rejected, failed to enable media [ 107.031525][ T7471] netlink: 'syz.2.1430': attribute type 27 has an invalid length. [ 107.055941][ T7471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.080812][ T7471] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.090337][ T7471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.105889][ T6588] lo speed is unknown, defaulting to 1000 [ 107.111705][ T6588] syz2: Port: 1 Link ACTIVE [ 107.285457][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'. [ 107.382377][ T7494] loop2: detected capacity change from 0 to 1024 [ 107.393228][ T7494] EXT4-fs: Ignoring removed nobh option [ 107.399008][ T7494] EXT4-fs: Ignoring removed bh option [ 107.447495][ T7494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.484709][ T7503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1437'. [ 107.502302][ T7494] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 107.542710][ T7507] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1442'. [ 107.573218][ T7494] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1440: Allocating blocks 497-513 which overlap fs metadata [ 107.642749][ T7513] loop0: detected capacity change from 0 to 512 [ 107.653375][ T7513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.683465][ T7513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.697021][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.706268][ T7513] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.731688][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 107.741822][ T7513] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 107.759967][ T7513] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 107.804658][ T7513] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.894287][ T7543] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7543 comm=syz.1.1459 [ 108.178205][ T7564] netlink: 'syz.0.1468': attribute type 1 has an invalid length. [ 108.193366][ T7562] loop1: detected capacity change from 0 to 512 [ 108.201150][ T7562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.217691][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.235031][ T7562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.248444][ T7562] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.282119][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.295827][ T7562] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 108.300922][ T7564] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.336722][ T7562] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.348217][ T7564] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 108.457592][ T7576] ip6erspan0: entered promiscuous mode [ 108.481357][ T7576] bond0: (slave ip6erspan0): making interface the new active one [ 108.504208][ T7576] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 108.665558][ T7584] loop5: detected capacity change from 0 to 1764 [ 108.705245][ T7584] iso9660: Bad value for 'block' [ 108.967509][ T7610] loop1: detected capacity change from 0 to 2048 [ 108.992069][ T7612] loop5: detected capacity change from 0 to 512 [ 109.004673][ T7612] EXT4-fs: Ignoring removed orlov option [ 109.016905][ T7610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.063703][ T7610] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.102125][ T7612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.164809][ T7612] EXT4-fs (loop5): orphan cleanup on readonly fs [ 109.182139][ T7612] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1481: bg 0: block 248: padding at end of block bitmap is not set [ 109.234831][ T7612] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1481: Failed to acquire dquot type 1 [ 109.255026][ T7612] EXT4-fs (loop5): 1 truncate cleaned up [ 109.266079][ T7612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.359390][ T7605] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 109.392296][ T7639] netlink: 'syz.0.1493': attribute type 27 has an invalid length. [ 109.405099][ T7605] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 109.426094][ T7605] ext4 filesystem being remounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.520850][ T6122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.531804][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.539227][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.600623][ T7639] wg2: left promiscuous mode [ 109.605456][ T7639] wg2: left allmulticast mode [ 109.673359][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.702922][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.743368][ T4075] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:59: bg 0: block 345: padding at end of block bitmap is not set [ 109.761574][ T4075] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 109.774405][ T4075] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.774405][ T4075] [ 109.805027][ T7639] veth1_macvtap: left allmulticast mode [ 109.814857][ T7639] macsec0: left promiscuous mode [ 109.820130][ T7639] macsec0: left allmulticast mode [ 109.861018][ T7639] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.869607][ T7639] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.874453][ T4075] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 109.878000][ T7639] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.890763][ T4075] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.890763][ T4075] [ 109.890783][ T4075] EXT4-fs (loop1): Total free blocks count 0 [ 109.890798][ T4075] EXT4-fs (loop1): Free/Dirty block details [ 109.890811][ T4075] EXT4-fs (loop1): free_blocks=0 [ 109.890825][ T4075] EXT4-fs (loop1): dirty_blocks=2048 [ 109.890839][ T4075] EXT4-fs (loop1): Block reservation details [ 109.937306][ T7639] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.971439][ T7639] ip6gre1: left allmulticast mode [ 109.980003][ T7639] team2: left promiscuous mode [ 110.006277][ T7639] team2: left allmulticast mode [ 110.016484][ T7639] ip6erspan0: left promiscuous mode [ 110.082065][ T7644] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.109501][ T7644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.219835][ T7679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7679 comm=syz.3.1500 [ 110.452184][ T7694] ref_ctr increment failed for inode: 0x5df offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88813e060000 [ 110.505425][ T7693] uprobe: syz.1.1506:7693 failed to unregister, leaking uprobe [ 110.534665][ T7696] loop2: detected capacity change from 0 to 1024 [ 110.599591][ T7696] EXT4-fs: Ignoring removed nobh option [ 110.605307][ T7696] EXT4-fs: Ignoring removed nobh option [ 110.637836][ T7701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.666481][ T7696] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 110.705785][ T7696] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.1504: inode #4294967295: comm syz.2.1504: iget: illegal inode # [ 110.734061][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 110.734080][ T29] audit: type=1400 audit(1750240046.060:3005): avc: denied { write } for pid=7707 comm="syz.1.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.802995][ T7696] EXT4-fs (loop2): no journal found [ 110.808564][ T7696] EXT4-fs (loop2): can't get journal size [ 110.819863][ T29] audit: type=1326 audit(1750240046.110:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 110.843520][ T29] audit: type=1326 audit(1750240046.110:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 110.867236][ T29] audit: type=1326 audit(1750240046.120:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 110.891681][ T29] audit: type=1326 audit(1750240046.120:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 110.915808][ T29] audit: type=1326 audit(1750240046.120:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 110.939725][ T29] audit: type=1326 audit(1750240046.120:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 110.963881][ T29] audit: type=1326 audit(1750240046.120:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 110.987726][ T29] audit: type=1326 audit(1750240046.120:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 111.011352][ T29] audit: type=1326 audit(1750240046.120:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7707 comm="syz.1.1513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 111.070601][ T7696] EXT4-fs (loop2): failed to initialize system zone (-22) [ 111.082534][ T7696] EXT4-fs (loop2): mount failed [ 111.103715][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 111.128259][ T7721] IPVS: Error joining to the multicast group [ 111.250382][ T7728] loop0: detected capacity change from 0 to 512 [ 111.258162][ T7728] EXT4-fs: Ignoring removed orlov option [ 111.269684][ T7728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.291556][ T7728] EXT4-fs (loop0): orphan cleanup on readonly fs [ 111.305073][ T7728] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1522: bg 0: block 248: padding at end of block bitmap is not set [ 111.330270][ T7728] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1522: Failed to acquire dquot type 1 [ 111.346781][ T7728] EXT4-fs (loop0): 1 truncate cleaned up [ 111.371112][ T7728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.402461][ T7728] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 111.471249][ T7728] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 111.487795][ T7728] ext4 filesystem being remounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.543096][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.678898][ T7686] syz.2.1504 (7686) used greatest stack depth: 6040 bytes left [ 111.687486][ T7754] ref_ctr increment failed for inode: 0x1f9 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88813e060b80 [ 111.702695][ T7752] uprobe: syz.5.1531:7752 failed to unregister, leaking uprobe [ 111.815721][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1532'. [ 111.817772][ T7764] loop2: detected capacity change from 0 to 1024 [ 111.838275][ T7766] syz_tun: entered promiscuous mode [ 111.844215][ T7766] macsec1: entered promiscuous mode [ 111.860307][ T7766] syz_tun: left promiscuous mode [ 111.871401][ T7764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.895885][ T7764] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 111.915873][ T7764] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 111.928342][ T7764] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.928342][ T7764] [ 111.938131][ T7764] EXT4-fs (loop2): Total free blocks count 0 [ 111.944179][ T7764] EXT4-fs (loop2): Free/Dirty block details [ 111.950159][ T7764] EXT4-fs (loop2): free_blocks=16 [ 111.955305][ T7764] EXT4-fs (loop2): dirty_blocks=0 [ 111.960414][ T7764] EXT4-fs (loop2): Block reservation details [ 111.966853][ T7764] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 112.034734][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.145688][ T7791] ref_ctr increment failed for inode: 0x615 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88813e065c00 [ 112.162553][ T7789] uprobe: syz.2.1546:7789 failed to unregister, leaking uprobe [ 112.251504][ T7801] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 112.275098][ T7804] loop0: detected capacity change from 0 to 512 [ 112.282083][ T7804] EXT4-fs: Ignoring removed nobh option [ 112.282451][ T7801] bond2: entered promiscuous mode [ 112.293044][ T7801] bond2: entered allmulticast mode [ 112.303524][ T7801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.313614][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.1559: corrupted inode contents [ 112.334507][ T7804] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.1559: mark_inode_dirty error [ 112.344218][ T7801] bridge3: entered promiscuous mode [ 112.351238][ T7801] bridge3: entered allmulticast mode [ 112.357605][ T7801] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 112.358089][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.1559: corrupted inode contents [ 112.389009][ T7804] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1559: mark_inode_dirty error [ 112.400656][ T4073] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.411933][ T7804] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1559: Failed to acquire dquot type 0 [ 112.428720][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.1559: corrupted inode contents [ 112.465545][ T7804] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.1559: mark_inode_dirty error [ 112.535887][ T4046] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.547797][ T7813] macsec1: entered promiscuous mode [ 112.549921][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.1559: corrupted inode contents [ 112.566872][ T7804] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1559: mark_inode_dirty error [ 112.578622][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.1559: corrupted inode contents [ 112.591163][ T7804] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 112.600706][ T7804] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.1559: corrupted inode contents [ 112.621155][ T7804] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.1559: mark_inode_dirty error [ 112.644986][ T7804] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 112.663002][ T7799] lo speed is unknown, defaulting to 1000 [ 112.667241][ T7804] EXT4-fs (loop0): 1 truncate cleaned up [ 112.680663][ T7804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.698903][ T7804] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.741241][ T7817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=850 sclass=netlink_route_socket pid=7817 comm=syz.3.1554 [ 112.778886][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.815006][ T7819] loop5: detected capacity change from 0 to 512 [ 112.853712][ T7825] loop0: detected capacity change from 0 to 512 [ 112.862521][ T7819] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 112.872391][ T7819] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 112.885563][ T7825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.895613][ T7819] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.1556: Invalid inode table block 0 in block_group 0 [ 112.910385][ T7819] EXT4-fs (loop5): get root inode failed [ 112.916074][ T7819] EXT4-fs (loop5): mount failed [ 112.947425][ T7825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.965470][ T7825] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.574586][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.849815][ T7819] Set syz1 is full, maxelem 65536 reached [ 113.947231][ T7869] loop0: detected capacity change from 0 to 2048 [ 113.973719][ T7869] loop0: p1 < > p4 [ 113.978138][ T7869] loop0: p4 size 8388608 extends beyond EOD, truncated [ 113.982254][ T7873] netlink: 'syz.5.1579': attribute type 10 has an invalid length. [ 113.994762][ T7874] loop2: detected capacity change from 0 to 256 [ 114.032171][ T7874] FAT-fs (loop2): bogus number of FAT sectors [ 114.038325][ T7874] FAT-fs (loop2): Can't find a valid FAT filesystem [ 114.062502][ T7873] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 114.229667][ T7887] loop0: detected capacity change from 0 to 128 [ 114.268884][ T7888] loop2: detected capacity change from 0 to 1024 [ 114.276794][ T7890] netlink: 'syz.5.1586': attribute type 10 has an invalid length. [ 114.286632][ T7887] syz.0.1585: attempt to access beyond end of device [ 114.286632][ T7887] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 114.308040][ T7888] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 114.327281][ T7887] syz.0.1585: attempt to access beyond end of device [ 114.327281][ T7887] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 114.344332][ T7888] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 114.365773][ T7888] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #32: comm syz.2.1584: iget: special inode unallocated [ 114.400450][ T7887] syz.0.1585: attempt to access beyond end of device [ 114.400450][ T7887] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 114.415975][ T7888] EXT4-fs (loop2): Remounting filesystem read-only [ 114.422696][ T7888] EXT4-fs (loop2): no journal found [ 114.428144][ T7888] EXT4-fs (loop2): can't get journal size [ 114.452486][ T7887] syz.0.1585: attempt to access beyond end of device [ 114.452486][ T7887] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 114.479319][ T7887] syz.0.1585: attempt to access beyond end of device [ 114.479319][ T7887] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 114.492888][ T7887] syz.0.1585: attempt to access beyond end of device [ 114.492888][ T7887] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 114.494877][ T7888] EXT4-fs (loop2): filesystem is read-only [ 114.506365][ T7887] syz.0.1585: attempt to access beyond end of device [ 114.506365][ T7887] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 114.516708][ T7888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.527707][ T7887] syz.0.1585: attempt to access beyond end of device [ 114.527707][ T7887] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 114.551277][ T7887] syz.0.1585: attempt to access beyond end of device [ 114.551277][ T7887] loop0: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 114.589649][ T7893] syz.0.1585: attempt to access beyond end of device [ 114.589649][ T7893] loop0: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 114.680436][ T7886] Buffer I/O error on dev loop0, logical block 305, async page read [ 114.699569][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.706563][ T7886] Buffer I/O error on dev loop0, logical block 306, async page read [ 114.731364][ T7886] Buffer I/O error on dev loop0, logical block 307, async page read [ 114.747272][ T7886] Buffer I/O error on dev loop0, logical block 308, async page read [ 114.758855][ T7901] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 114.766721][ T7886] Buffer I/O error on dev loop0, logical block 309, async page read [ 114.768410][ T7886] Buffer I/O error on dev loop0, logical block 310, async page read [ 114.793441][ T7886] Buffer I/O error on dev loop0, logical block 311, async page read [ 114.802146][ T7886] Buffer I/O error on dev loop0, logical block 312, async page read [ 114.810682][ T7886] Buffer I/O error on dev loop0, logical block 305, async page read [ 114.833902][ T7901] bond2: entered promiscuous mode [ 114.839026][ T7901] bond2: entered allmulticast mode [ 114.844640][ T7901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.848893][ T7886] Buffer I/O error on dev loop0, logical block 306, async page read [ 114.861791][ T7901] bridge0: entered promiscuous mode [ 114.867204][ T7901] bridge0: entered allmulticast mode [ 114.873242][ T7901] bond2: (slave bridge0): Enslaving as a backup interface with an up link [ 114.939294][ T4046] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.071126][ T4073] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.158827][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1601'. [ 115.167947][ T7924] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1601'. [ 115.186986][ T7928] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 115.231249][ T7928] bond2: entered promiscuous mode [ 115.236378][ T7928] bond2: entered allmulticast mode [ 115.244622][ T7928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.252667][ T7932] loop0: detected capacity change from 0 to 512 [ 115.261455][ T7928] bridge0: entered promiscuous mode [ 115.266894][ T7928] bridge0: entered allmulticast mode [ 115.274084][ T7928] bond2: (slave bridge0): Enslaving as a backup interface with an up link [ 115.287700][ T7934] syz_tun: entered allmulticast mode [ 115.301701][ T7933] syz_tun: left allmulticast mode [ 115.302378][ T7932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.330563][ T7932] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.349626][ T4046] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.382517][ T7932] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1604: corrupted inode contents [ 115.422846][ T7932] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1604: mark_inode_dirty error [ 115.436380][ T7932] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1604: corrupted inode contents [ 115.442852][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1610'. [ 115.469554][ T4079] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.488677][ T7949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7949 comm=syz.1.1610 [ 115.493537][ T7948] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1604: corrupted inode contents [ 115.519018][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.526579][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.534142][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.543007][ T7948] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1604: mark_inode_dirty error [ 115.543419][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.561856][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.569337][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.576757][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.584228][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.591868][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.599389][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.606821][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.614335][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.622007][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.629472][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.639791][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.639965][ T7948] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1604: corrupted inode contents [ 115.647294][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.666679][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.674136][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.681675][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.689263][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.696766][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.702346][ T7948] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1604: mark_inode_dirty error [ 115.704287][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.716827][ T7948] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1604: corrupted inode contents [ 115.722910][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.722937][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.738055][ T7948] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1604: mark_inode_dirty error [ 115.742600][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.768596][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.776234][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.783746][ T6582] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.792047][ T6582] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 115.802895][ T7950] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1604: corrupted inode contents [ 115.879137][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 115.887337][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.888366][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 115.951592][ T7973] loop5: detected capacity change from 0 to 2048 [ 115.958677][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 115.958690][ T29] audit: type=1326 audit(1750240051.280:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.018106][ T29] audit: type=1326 audit(1750240051.280:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.041748][ T29] audit: type=1326 audit(1750240051.280:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.065550][ T29] audit: type=1326 audit(1750240051.280:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.089278][ T29] audit: type=1326 audit(1750240051.280:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.113084][ T29] audit: type=1326 audit(1750240051.280:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.136590][ T29] audit: type=1326 audit(1750240051.280:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.160182][ T29] audit: type=1326 audit(1750240051.280:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.183685][ T29] audit: type=1326 audit(1750240051.280:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.207291][ T29] audit: type=1326 audit(1750240051.280:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7975 comm="syz.2.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 116.251298][ T7985] loop5: p1 < > p4 [ 116.255928][ T7985] loop5: p4 size 8388608 extends beyond EOD, truncated [ 116.268632][ T7973] loop5: p1 < > p4 [ 116.274648][ T7973] loop5: p4 size 8388608 extends beyond EOD, truncated [ 116.354200][ T7996] tipc: Enabled bearer , priority 0 [ 116.366521][ T7996] syzkaller0: MTU too low for tipc bearer [ 116.372557][ T7996] tipc: Disabling bearer [ 116.415034][ T8005] loop2: detected capacity change from 0 to 512 [ 116.422479][ T8005] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 116.432331][ T8005] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 116.442609][ T8005] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.1634: Invalid inode table block 0 in block_group 0 [ 116.455923][ T8005] EXT4-fs (loop2): get root inode failed [ 116.461711][ T8005] EXT4-fs (loop2): mount failed [ 117.074222][ T8005] Set syz1 is full, maxelem 65536 reached [ 117.102328][ T8015] netlink: 'syz.3.1637': attribute type 7 has an invalid length. [ 117.110406][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1637'. [ 117.302780][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 117.461615][ T8050] lo speed is unknown, defaulting to 1000 [ 117.573556][ T8060] loop2: detected capacity change from 0 to 8192 [ 117.584577][ T8060] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.065303][ T8086] loop0: detected capacity change from 0 to 1024 [ 118.084737][ T8086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.135778][ T8094] lo speed is unknown, defaulting to 1000 [ 118.158182][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.210910][ T8098] loop5: detected capacity change from 0 to 1024 [ 118.234466][ T8098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.284837][ T8106] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 118.330888][ T6122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.332445][ T8109] lo speed is unknown, defaulting to 1000 [ 118.347367][ T8110] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 118.402873][ T8106] team0: Port device dummy0 added [ 118.415671][ T8110] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.437623][ T8110] team0: Failed to send options change via netlink (err -105) [ 118.455273][ T8110] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.464643][ T8110] team0: Port device dummy0 removed [ 118.760903][ T8150] loop1: detected capacity change from 0 to 512 [ 118.788180][ T8150] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 118.798032][ T8150] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 118.823507][ T8150] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1685: Invalid inode table block 0 in block_group 0 [ 118.838631][ T8150] EXT4-fs (loop1): get root inode failed [ 118.844415][ T8150] EXT4-fs (loop1): mount failed [ 118.881030][ T8161] loop2: detected capacity change from 0 to 512 [ 118.889075][ T8161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.902351][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1688'. [ 118.913787][ T8161] EXT4-fs (loop2): 1 truncate cleaned up [ 118.927606][ T8161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.952998][ T8163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8163 comm=syz.1.1688 [ 118.982718][ T4049] bond2: (slave bridge0): link status definitely down, disabling slave [ 119.022886][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.227150][ T8180] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1696'. [ 119.342623][ T8190] loop1: detected capacity change from 0 to 128 [ 119.361001][ T8190] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.378275][ T8190] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.446677][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.570269][ T8253] loop5: detected capacity change from 0 to 512 [ 120.586464][ T8253] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.619632][ T8253] EXT4-fs (loop5): 1 truncate cleaned up [ 120.625858][ T8253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.659619][ T6122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.699256][ T8264] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1732'. [ 120.729373][ T8266] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1733'. [ 120.757291][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'. [ 120.774107][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1735'. [ 121.225840][ T8282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.233149][ T8282] IPv6: NLM_F_CREATE should be set when creating new route [ 121.272696][ T8288] loop1: detected capacity change from 0 to 1024 [ 121.284598][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 121.284615][ T29] audit: type=1400 audit(1750240062.608:3309): avc: denied { mounton } for pid=8287 comm="syz.1.1742" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 121.297418][ T8288] lo speed is unknown, defaulting to 1000 [ 121.572322][ T8301] loop0: detected capacity change from 0 to 512 [ 121.592782][ T8301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.606329][ T8301] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.775601][ T29] audit: type=1326 audit(1750240063.098:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.1752" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93109ce929 code=0x0 [ 121.871021][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.567491][ T8315] syz.5.1754 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 122.581726][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: syz.5.1754 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 122.581898][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.581914][ T8315] Call Trace: [ 122.581975][ T8315] [ 122.581984][ T8315] __dump_stack+0x1d/0x30 [ 122.582008][ T8315] dump_stack_lvl+0xe8/0x140 [ 122.582030][ T8315] dump_stack+0x15/0x1b [ 122.582052][ T8315] dump_header+0x81/0x220 [ 122.582091][ T8315] oom_kill_process+0x334/0x3f0 [ 122.582168][ T8315] out_of_memory+0x979/0xb80 [ 122.582202][ T8315] try_charge_memcg+0x5e6/0x9e0 [ 122.582282][ T8315] obj_cgroup_charge_pages+0xa6/0x150 [ 122.582314][ T8315] __memcg_kmem_charge_page+0x9f/0x170 [ 122.582356][ T8315] __alloc_frozen_pages_noprof+0x188/0x360 [ 122.582399][ T8315] alloc_pages_mpol+0xb3/0x250 [ 122.582437][ T8315] alloc_pages_noprof+0x90/0x130 [ 122.582486][ T8315] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 122.582536][ T8315] __kvmalloc_node_noprof+0x30f/0x4e0 [ 122.582589][ T8315] ? ip_set_alloc+0x1f/0x30 [ 122.582622][ T8315] ? ip_set_alloc+0x1f/0x30 [ 122.582654][ T8315] ? __kmalloc_cache_noprof+0x189/0x320 [ 122.582687][ T8315] ip_set_alloc+0x1f/0x30 [ 122.582729][ T8315] hash_netiface_create+0x282/0x740 [ 122.582766][ T8315] ? __pfx_hash_netiface_create+0x10/0x10 [ 122.582830][ T8315] ip_set_create+0x3cc/0x960 [ 122.582871][ T8315] ? __nla_parse+0x40/0x60 [ 122.582913][ T8315] nfnetlink_rcv_msg+0x4c3/0x590 [ 122.582962][ T8315] ? selinux_capable+0x1f9/0x270 [ 122.583076][ T8315] netlink_rcv_skb+0x123/0x220 [ 122.583113][ T8315] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.583149][ T8315] nfnetlink_rcv+0x16b/0x1690 [ 122.583179][ T8315] ? __kfree_skb+0x109/0x150 [ 122.583247][ T8315] ? nlmon_xmit+0x4f/0x60 [ 122.583271][ T8315] ? consume_skb+0x49/0x150 [ 122.583305][ T8315] ? nlmon_xmit+0x4f/0x60 [ 122.583329][ T8315] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 122.583439][ T8315] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 122.583566][ T8315] ? __dev_queue_xmit+0x182/0x1fb0 [ 122.583606][ T8315] ? ref_tracker_free+0x37d/0x3e0 [ 122.583648][ T8315] ? __netlink_deliver_tap+0x4dc/0x500 [ 122.583838][ T8315] netlink_unicast+0x59e/0x670 [ 122.583871][ T8315] netlink_sendmsg+0x58b/0x6b0 [ 122.583938][ T8315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.584009][ T8315] __sock_sendmsg+0x142/0x180 [ 122.584138][ T8315] ____sys_sendmsg+0x31e/0x4e0 [ 122.584173][ T8315] ___sys_sendmsg+0x17b/0x1d0 [ 122.584222][ T8315] __x64_sys_sendmsg+0xd4/0x160 [ 122.584302][ T8315] x64_sys_call+0x2999/0x2fb0 [ 122.584327][ T8315] do_syscall_64+0xd2/0x200 [ 122.584347][ T8315] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.584420][ T8315] ? clear_bhb_loop+0x40/0x90 [ 122.584459][ T8315] ? clear_bhb_loop+0x40/0x90 [ 122.584484][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.584507][ T8315] RIP: 0033:0x7f9efe7ee929 [ 122.584589][ T8315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.584610][ T8315] RSP: 002b:00007f9efce57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.584705][ T8315] RAX: ffffffffffffffda RBX: 00007f9efea15fa0 RCX: 00007f9efe7ee929 [ 122.584720][ T8315] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 122.584733][ T8315] RBP: 00007f9efe870b39 R08: 0000000000000000 R09: 0000000000000000 [ 122.584745][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.584756][ T8315] R13: 0000000000000000 R14: 00007f9efea15fa0 R15: 00007ffc3cae4dd8 [ 122.584774][ T8315] [ 122.584781][ T8315] memory: usage 307200kB, limit 307200kB, failcnt 191 [ 122.940453][ T8315] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 122.948377][ T8315] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 122.955897][ T8315] Memory cgroup stats for /syz5: [ 122.956061][ T8315] cache 0 [ 122.964047][ T8315] rss 4096 [ 122.967119][ T8315] shmem 0 [ 122.970108][ T8315] mapped_file 0 [ 122.973626][ T8315] dirty 0 [ 122.976640][ T8315] writeback 0 [ 122.979963][ T8315] workingset_refault_anon 758 [ 122.984719][ T8315] workingset_refault_file 0 [ 122.989286][ T8315] swap 188416 [ 122.992644][ T8315] swapcached 8192 [ 122.996353][ T8315] pgpgin 34224 [ 122.999800][ T8315] pgpgout 34222 [ 123.003286][ T8315] pgfault 34408 [ 123.006871][ T8315] pgmajfault 109 [ 123.010515][ T8315] inactive_anon 8192 [ 123.014504][ T8315] active_anon 0 [ 123.017988][ T8315] inactive_file 0 [ 123.021717][ T8315] active_file 0 [ 123.025198][ T8315] unevictable 0 [ 123.028688][ T8315] hierarchical_memory_limit 314572800 [ 123.034122][ T8315] hierarchical_memsw_limit 9223372036854771712 [ 123.041007][ T8315] total_cache 0 [ 123.044503][ T8315] total_rss 4096 [ 123.048172][ T8315] total_shmem 0 [ 123.051713][ T8315] total_mapped_file 0 [ 123.055791][ T8315] total_dirty 0 [ 123.059315][ T8315] total_writeback 0 [ 123.063239][ T8315] total_workingset_refault_anon 758 [ 123.068638][ T8315] total_workingset_refault_file 0 [ 123.073918][ T8315] total_swap 188416 [ 123.077761][ T8315] total_swapcached 8192 [ 123.081985][ T8315] total_pgpgin 34224 [ 123.085916][ T8315] total_pgpgout 34222 [ 123.089974][ T8315] total_pgfault 34408 [ 123.093984][ T8315] total_pgmajfault 109 [ 123.098171][ T8315] total_inactive_anon 8192 [ 123.102831][ T8315] total_active_anon 0 [ 123.106834][ T8315] total_inactive_file 0 [ 123.111047][ T8315] total_active_file 0 [ 123.115075][ T8315] total_unevictable 0 [ 123.119105][ T8315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1754,pid=8314,uid=0 [ 123.133915][ T8315] Memory cgroup out of memory: Killed process 8314 (syz.5.1754) total-vm:95800kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 123.219163][ T29] audit: type=1326 audit(1750240064.538:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93109ce929 code=0x7ffc0000 [ 123.247977][ T29] audit: type=1326 audit(1750240064.548:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f93109ce929 code=0x7ffc0000 [ 123.272098][ T29] audit: type=1326 audit(1750240064.548:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93109ce929 code=0x7ffc0000 [ 123.295626][ T29] audit: type=1326 audit(1750240064.548:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f93109ce929 code=0x7ffc0000 [ 123.319344][ T29] audit: type=1326 audit(1750240064.608:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93109ce929 code=0x7ffc0000 [ 123.343793][ T29] audit: type=1326 audit(1750240064.608:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93109ce929 code=0x7ffc0000 [ 123.467322][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1767'. [ 123.476435][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1767'. [ 123.534678][ T8353] netlink: 'syz.2.1777': attribute type 298 has an invalid length. [ 123.555005][ T8323] Cannot find add_set index 0 as target [ 123.631059][ T8357] lo speed is unknown, defaulting to 1000 [ 124.287645][ T8362] bond1: entered promiscuous mode [ 124.292795][ T8362] bond1: entered allmulticast mode [ 124.344420][ T8362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.377480][ T8362] bond1 (unregistering): Released all slaves [ 124.391150][ T8387] netlink: 'syz.3.1782': attribute type 4 has an invalid length. [ 124.627188][ T8370] loop0: detected capacity change from 0 to 512 [ 124.650384][ T8370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.673449][ T8370] EXT4-fs (loop0): 1 truncate cleaned up [ 124.691268][ T8401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1789'. [ 124.709750][ T8370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.782969][ T8404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8404 comm=syz.1.1789 [ 124.820969][ T8412] loop1: detected capacity change from 0 to 512 [ 124.848924][ T8412] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.877420][ T8412] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.948307][ T8412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 124.956454][ T8412] System zones: 1-12 [ 124.962251][ T8412] EXT4-fs (loop1): 1 truncate cleaned up [ 124.979999][ T8412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.044621][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.126420][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.209028][ T8438] lo speed is unknown, defaulting to 1000 [ 125.629822][ T8462] loop0: detected capacity change from 0 to 512 [ 125.644692][ T8462] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.666262][ T8462] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.677211][ T8462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 125.688249][ T8462] System zones: 1-12 [ 125.690027][ T8466] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 125.701909][ T8462] EXT4-fs (loop0): 1 truncate cleaned up [ 125.708043][ T8462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.773503][ T29] audit: type=1326 audit(1750240067.098:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 125.774691][ T8466] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 125.797921][ T29] audit: type=1326 audit(1750240067.098:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8471 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 125.805374][ T8466] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1815'. [ 125.857934][ T8466] team0: entered promiscuous mode [ 125.864393][ T8466] team_slave_0: entered promiscuous mode [ 125.870258][ T8466] team_slave_1: entered promiscuous mode [ 125.870854][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.876998][ T8466] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.898064][ T8476] netlink: 'syz.2.1819': attribute type 4 has an invalid length. [ 125.952099][ T3408] lo speed is unknown, defaulting to 1000 [ 125.957978][ T3408] syz2: Port: 1 Link DOWN [ 125.984049][ T8479] netlink: 'syz.2.1819': attribute type 4 has an invalid length. [ 125.994294][ T3408] lo speed is unknown, defaulting to 1000 [ 126.000142][ T3408] syz2: Port: 1 Link ACTIVE [ 126.231903][ T8488] loop2: detected capacity change from 0 to 8192 [ 126.280730][ T8490] loop0: detected capacity change from 0 to 1024 [ 126.289651][ T8488] loop2: p1 p3 p4 [ 126.293566][ T8488] loop2: p1 size 8390912 extends beyond EOD, truncated [ 126.312708][ T8490] EXT4-fs: Ignoring removed nobh option [ 126.318421][ T8490] EXT4-fs: Ignoring removed nobh option [ 126.329619][ T8488] loop2: p3 size 589824 extends beyond EOD, truncated [ 126.409630][ T8490] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 126.461591][ T8490] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.1818: inode #4294967295: comm syz.0.1818: iget: illegal inode # [ 126.550339][ T8490] EXT4-fs (loop0): no journal found [ 126.555621][ T8490] EXT4-fs (loop0): can't get journal size [ 126.573089][ T8490] EXT4-fs (loop0): failed to initialize system zone (-22) [ 126.589464][ T8490] EXT4-fs (loop0): mount failed [ 126.740653][ T8493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8493 comm=syz.2.1824 [ 126.861428][ T8507] loop2: detected capacity change from 0 to 512 [ 126.883652][ T8507] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.932278][ T8507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.960740][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1832'. [ 126.971538][ T8507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 126.980138][ T8507] System zones: 1-12 [ 126.989175][ T8507] EXT4-fs (loop2): 1 truncate cleaned up [ 127.002996][ T8507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.021602][ T8514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.031249][ T8514] bond1: (slave bond2): Enslaving as an active interface with an up link [ 127.046487][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1832'. [ 127.061519][ T8514] bond1 (unregistering): (slave bond2): Releasing backup interface [ 127.070667][ T8514] bond1 (unregistering): Released all slaves [ 127.146174][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.238447][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 127.238479][ T29] audit: type=1326 audit(1750240068.558:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 127.268823][ T29] audit: type=1326 audit(1750240068.558:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 127.315654][ T29] audit: type=1326 audit(1750240068.628:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 127.339897][ T29] audit: type=1326 audit(1750240068.628:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 127.363475][ T29] audit: type=1326 audit(1750240068.628:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 127.391864][ T8526] netlink: 'syz.0.1836': attribute type 27 has an invalid length. [ 127.468306][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.503134][ T8526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.562158][ T29] audit: type=1326 audit(1750240068.888:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.5.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe7ee929 code=0x7ffc0000 [ 127.585935][ T29] audit: type=1326 audit(1750240068.888:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.5.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe7ee929 code=0x7ffc0000 [ 127.646227][ T8545] rdma_op ffff888152379980 conn xmit_rdma 0000000000000000 [ 127.687824][ T29] audit: type=1326 audit(1750240068.888:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.5.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9efe7ee929 code=0x7ffc0000 [ 127.712174][ T29] audit: type=1326 audit(1750240068.888:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.5.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efe7ee929 code=0x7ffc0000 [ 127.735718][ T29] audit: type=1326 audit(1750240068.888:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.5.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9efe7ee929 code=0x7ffc0000 [ 128.080746][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1856'. [ 128.170030][ T8581] ip6gre2: entered allmulticast mode [ 128.402871][ T8603] loop5: detected capacity change from 0 to 512 [ 128.431649][ T8603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.444315][ T8603] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.456859][ T8603] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.475664][ T6122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.542309][ T8611] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1871'. [ 128.551681][ T8611] hsr_slave_0: left promiscuous mode [ 128.557574][ T8611] hsr_slave_1: left promiscuous mode [ 128.686101][ T8613] bridge0: port 1(macvlan2) entered blocking state [ 128.695823][ T8613] bridge0: port 1(macvlan2) entered disabled state [ 128.707114][ T8613] macvlan2: entered allmulticast mode [ 128.714476][ T8613] bridge0: entered allmulticast mode [ 128.739575][ T8613] macvlan2: left allmulticast mode [ 128.745878][ T8613] bridge0: left allmulticast mode [ 128.848276][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'. [ 128.887645][ T8620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.897477][ T8620] bond3: (slave bond4): Enslaving as an active interface with an up link [ 128.913459][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'. [ 128.940347][ T8620] bond3 (unregistering): (slave bond4): Releasing backup interface [ 128.972038][ T8620] bond3 (unregistering): Released all slaves [ 129.000668][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1880'. [ 129.058503][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1882'. [ 129.068354][ T8639] batman_adv: batadv0: Interface deactivated: team0 [ 129.078079][ T8639] batman_adv: batadv0: Removing interface: team0 [ 129.085971][ T8639] team0 (unregistering): Port device team_slave_0 removed [ 129.094104][ T8639] team0 (unregistering): Port device team_slave_1 removed [ 129.315069][ T8656] tipc: Started in network mode [ 129.320158][ T8656] tipc: Node identity f6086b8603d6, cluster identity 4711 [ 129.327332][ T8656] tipc: Enabled bearer , priority 0 [ 129.336252][ T8656] syzkaller0: MTU too low for tipc bearer [ 129.342082][ T8656] tipc: Disabling bearer [ 129.413079][ T3432] IPVS: starting estimator thread 0... [ 129.499276][ T8663] IPVS: using max 2112 ests per chain, 105600 per kthread [ 129.745244][ T8683] lo speed is unknown, defaulting to 1000 [ 129.751778][ T8683] lo speed is unknown, defaulting to 1000 [ 129.757851][ T8683] lo speed is unknown, defaulting to 1000 [ 129.764774][ T8683] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 129.775305][ T8683] lo speed is unknown, defaulting to 1000 [ 129.782130][ T8683] lo speed is unknown, defaulting to 1000 [ 129.788415][ T8683] lo speed is unknown, defaulting to 1000 [ 129.796018][ T8683] lo speed is unknown, defaulting to 1000 [ 129.802254][ T8683] lo speed is unknown, defaulting to 1000 [ 129.808461][ T8683] lo speed is unknown, defaulting to 1000 [ 130.176015][ T8702] loop5: detected capacity change from 0 to 512 [ 130.280554][ T8702] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.370980][ T8702] EXT4-fs (loop5): 1 truncate cleaned up [ 130.377208][ T8702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.530409][ T6122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.586060][ T8724] netlink: 'syz.5.1913': attribute type 4 has an invalid length. [ 130.955568][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1034 sclass=netlink_route_socket pid=8748 comm=syz.3.1925 [ 130.986725][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1034 sclass=netlink_route_socket pid=8748 comm=syz.3.1925 [ 131.146560][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.165003][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.179566][ T8760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1930'. [ 131.188707][ T8760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1930'. [ 131.191157][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'. [ 131.227651][ T8760] ip6gretap0: entered promiscuous mode [ 131.248813][ T8760] syz_tun: entered promiscuous mode [ 131.267193][ T8760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.287037][ T8760] Cannot create hsr debugfs directory [ 131.318568][ T8762] team0 (unregistering): Port device team_slave_0 removed [ 131.332537][ T8762] team0 (unregistering): Port device team_slave_1 removed [ 131.495645][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.503569][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.511414][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.519175][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.527685][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.535587][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.543395][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.551973][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.559810][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.567711][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.571763][ T8770] netlink: 'syz.2.1933': attribute type 39 has an invalid length. [ 131.575562][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.591806][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.599648][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.607411][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.615921][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.623737][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.631645][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.640141][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.648035][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.655925][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.663751][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.672290][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.680078][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.687905][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.695702][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.704141][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.711926][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.719780][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.727538][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.736086][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.743945][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.751741][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.760223][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.767998][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.775938][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.783763][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.792208][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.800000][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.807782][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.815819][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.824315][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.832185][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.840042][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 131.848587][ T1036] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.997320][ T8786] netlink: 'syz.0.1938': attribute type 4 has an invalid length. [ 132.213336][ T8802] loop1: detected capacity change from 0 to 256 [ 132.228953][ T8801] loop5: detected capacity change from 0 to 1024 [ 132.239652][ T29] kauditd_printk_skb: 696 callbacks suppressed [ 132.239830][ T29] audit: type=1326 audit(1750240073.568:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8800 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 132.275987][ T8801] EXT4-fs: Ignoring removed nobh option [ 132.281793][ T8801] EXT4-fs: Ignoring removed nobh option [ 132.287416][ T8802] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 132.299397][ T29] audit: type=1326 audit(1750240073.588:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31f5cd58e7 code=0x7ffc0000 [ 132.322916][ T29] audit: type=1326 audit(1750240073.588:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f5c7ab19 code=0x7ffc0000 [ 132.346481][ T29] audit: type=1326 audit(1750240073.588:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 132.370040][ T29] audit: type=1326 audit(1750240073.598:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8800 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 132.393149][ T29] audit: type=1326 audit(1750240073.598:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8800 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 132.416076][ T29] audit: type=1326 audit(1750240073.598:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8800 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 132.439142][ T29] audit: type=1326 audit(1750240073.598:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31f5cd58e7 code=0x7ffc0000 [ 132.462876][ T29] audit: type=1326 audit(1750240073.598:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31f5c7ab19 code=0x7ffc0000 [ 132.486286][ T29] audit: type=1326 audit(1750240073.598:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f31f5cde929 code=0x7ffc0000 [ 132.521612][ T8801] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 132.548956][ T8801] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: comm syz.5.1937: inode #4294967295: comm syz.5.1937: iget: illegal inode # [ 132.579801][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 132.587277][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.594781][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.602467][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.607331][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.610039][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.625983][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.627020][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.633412][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 132.648724][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.656256][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.663752][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.671375][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 132.678819][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.683202][ T8801] EXT4-fs (loop5): no journal found [ 132.686351][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.691814][ T8801] EXT4-fs (loop5): can't get journal size [ 132.699148][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 132.719734][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.727311][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.734813][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 132.742314][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.749777][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.757214][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.764770][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.772431][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.780142][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.787577][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.795032][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.802504][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.809974][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.817578][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.825025][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.832572][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.840118][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.847607][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.855168][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.862672][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.870188][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.877657][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.885247][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.892726][ T3432] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.902591][ T3432] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 132.995935][ T8801] EXT4-fs (loop5): failed to initialize system zone (-22) [ 133.030901][ T8801] EXT4-fs (loop5): mount failed [ 133.160489][ T8832] netlink: 'syz.0.1960': attribute type 39 has an invalid length. [ 133.235040][ T8830] wireguard0: entered promiscuous mode [ 133.241854][ T8830] wireguard0: entered allmulticast mode [ 133.673557][ T8864] loop1: detected capacity change from 0 to 512 [ 133.694709][ T8864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.707395][ T8864] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.718278][ T8868] loop0: detected capacity change from 0 to 128 [ 133.734093][ T8868] bio_check_eod: 178 callbacks suppressed [ 133.734160][ T8868] syz.0.1974: attempt to access beyond end of device [ 133.734160][ T8868] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 133.747385][ T8864] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1973: corrupted inode contents [ 133.754406][ T8868] syz.0.1974: attempt to access beyond end of device [ 133.754406][ T8868] loop0: rw=34817, sector=145, nr_sectors = 16 limit=128 [ 133.782204][ T8864] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.1973: mark_inode_dirty error [ 133.794258][ T8864] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.1973: corrupted inode contents [ 133.807829][ T8864] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1973: mark_inode_dirty error [ 133.882346][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.892639][ T8873] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1976' sets config #0 [ 133.917947][ T8877] loop1: detected capacity change from 0 to 1024 [ 133.931146][ T8877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.035029][ T8877] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1978: Allocating blocks 497-513 which overlap fs metadata [ 134.081605][ T8882] wireguard0: entered promiscuous mode [ 134.087923][ T8882] wireguard0: entered allmulticast mode [ 134.110609][ T8886] loop5: detected capacity change from 0 to 2048 [ 134.121875][ T8876] EXT4-fs (loop1): pa ffff888106a30850: logic 128, phys. 273, len 15 [ 134.130106][ T8876] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 134.140606][ T8886] EXT4-fs error (device loop5): __ext4_iget:5379: inode #2: block 127754: comm syz.5.1980: invalid block [ 134.140883][ T8886] EXT4-fs (loop5): get root inode failed [ 134.157738][ T8886] EXT4-fs (loop5): mount failed [ 134.184473][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.269168][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 134.276697][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.284245][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.291893][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.299545][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.307213][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.314765][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4 [ 134.322200][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.329686][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.337223][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.344678][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 134.352199][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.359648][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.367226][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4 [ 134.374708][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.382292][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.389741][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 134.397154][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.404615][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.412099][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.419601][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.427026][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.434552][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.442019][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.449492][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.456960][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.464481][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.472002][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.479442][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.486861][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.494383][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.502146][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.509616][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.517187][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.524646][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.532158][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.539617][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.547053][ T7650] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.556094][ T7650] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 134.592538][ T8912] loop1: detected capacity change from 0 to 1024 [ 134.622736][ T8912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.649088][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.694808][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'. [ 134.710201][ T8924] team0 (unregistering): Port device team_slave_0 removed [ 134.718438][ T8924] team0 (unregistering): Port device team_slave_1 removed [ 135.220674][ T8936] loop9: detected capacity change from 0 to 7 [ 135.227345][ T8936] buffer_io_error: 118 callbacks suppressed [ 135.227361][ T8936] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.243567][ T8936] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.251705][ T8936] loop9: unable to read partition table [ 135.258848][ T8936] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 135.258848][ T8936] ) failed (rc=-5) [ 135.395127][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 135.403189][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.410741][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.418153][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.425676][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.433214][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.440793][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 135.448288][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.455764][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.463305][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.470791][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 135.478250][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.485690][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.493246][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 135.500688][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.508088][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.515599][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 135.523087][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.530594][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.538147][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.545655][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.553228][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.560669][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.568146][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.575708][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.583175][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.590677][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.598103][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.605622][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.613078][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.620614][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.628193][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.635696][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.643173][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.650647][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.658542][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.666196][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.673980][ T7650] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.721739][ T7650] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 135.783373][ T8953] bond0: (slave bond_slave_0): Releasing backup interface [ 135.792070][ T8953] bond0: (slave bond_slave_1): Releasing backup interface [ 135.817776][ T8953] team_slave_0: left promiscuous mode [ 135.824087][ T8953] team0: Port device team_slave_0 removed [ 135.832154][ T8953] team_slave_1: left promiscuous mode [ 135.838447][ T8953] team0: Port device team_slave_1 removed [ 135.845862][ T8953] bond1: (slave gretap1): Releasing active interface [ 135.853791][ T8953] gretap1: left allmulticast mode [ 135.861013][ T8953] bond2: (slave bridge0): Removing an active aggregator [ 135.868910][ T8953] bond2: (slave bridge0): Releasing backup interface [ 135.878968][ T8953] bridge0: left promiscuous mode [ 135.884198][ T8953] bridge0: left allmulticast mode [ 136.018129][ T8962] SET target dimension over the limit! [ 136.041196][ T8967] netlink: 'syz.1.2011': attribute type 10 has an invalid length. [ 136.050572][ T8967] dummy0: entered promiscuous mode [ 136.056189][ T8967] team0: Port device dummy0 added [ 136.066063][ T8967] netlink: 'syz.1.2011': attribute type 10 has an invalid length. [ 136.074771][ T8967] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 136.084574][ T8967] dummy0: left promiscuous mode [ 136.090150][ T8967] team0: Failed to send options change via netlink (err -105) [ 136.097793][ T8967] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 136.106750][ T8967] team0: Port device dummy0 removed [ 136.113802][ T8967] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.695883][ T8978] netlink: 'syz.3.2016': attribute type 3 has an invalid length. [ 136.807244][ T8982] lo speed is unknown, defaulting to 1000 [ 136.822082][ T8982] lo speed is unknown, defaulting to 1000 [ 136.965907][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 137.118775][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'. [ 137.346142][ T9002] loop1: detected capacity change from 0 to 512 [ 137.363932][ T9002] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 137.383079][ T9002] EXT4-fs (loop1): failed to open journal device unknown-block(8,3) -6 [ 137.483239][ T9010] lo speed is unknown, defaulting to 1000 [ 137.491083][ T9010] lo speed is unknown, defaulting to 1000 [ 137.590822][ T9016] vcan0: entered allmulticast mode [ 137.596609][ T9016] vcan0: left allmulticast mode [ 137.626806][ T9018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9018 comm=syz.2.2033 [ 137.640798][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 137.653781][ T9018] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.662110][ T9018] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.670395][ T9018] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.678633][ T9018] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.923759][ T9028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2037'. [ 138.194696][ T9043] netlink: 'syz.3.2045': attribute type 27 has an invalid length. [ 138.258880][ T9043] ip6gre2: left allmulticast mode [ 138.302858][ T9043] bond2: left promiscuous mode [ 138.307739][ T9043] bridge3: left promiscuous mode [ 138.312906][ T9043] bond2: left allmulticast mode [ 138.317869][ T9043] bridge3: left allmulticast mode [ 138.405921][ T9048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.417363][ T9048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.436642][ T6582] lo speed is unknown, defaulting to 1000 [ 138.442513][ T6582] syz0: Port: 1 Link ACTIVE [ 138.444152][ T29] kauditd_printk_skb: 963 callbacks suppressed [ 138.444169][ T29] audit: type=1326 audit(1750240079.758:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.5.2048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9efe7ee929 code=0x0 [ 138.549926][ T29] audit: type=1400 audit(1750240079.828:5013): avc: denied { bind } for pid=9055 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 138.592588][ T9061] $H: renamed from bond0 (while UP) [ 138.606406][ T9061] $H: entered promiscuous mode [ 138.612302][ T9061] bond_slave_0: entered promiscuous mode [ 138.618318][ T9061] bond_slave_1: entered promiscuous mode [ 138.722827][ T9069] loop2: detected capacity change from 0 to 512 [ 138.730513][ T9073] netlink: '+}[@': attribute type 4 has an invalid length. [ 138.747426][ T3408] lo speed is unknown, defaulting to 1000 [ 138.754030][ T3408] syz0: Port: 1 Link DOWN [ 138.758907][ T9069] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 138.770001][ T9069] EXT4-fs (loop2): failed to open journal device unknown-block(8,3) -6 [ 138.851696][ T9082] loop2: detected capacity change from 0 to 512 [ 138.872336][ T9082] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 138.881696][ T9082] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 138.916659][ T29] audit: type=1326 audit(1750240080.228:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 138.940674][ T29] audit: type=1326 audit(1750240080.228:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 138.964215][ T29] audit: type=1326 audit(1750240080.228:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 138.988004][ T29] audit: type=1326 audit(1750240080.228:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 139.011483][ T29] audit: type=1326 audit(1750240080.228:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 139.035258][ T29] audit: type=1326 audit(1750240080.228:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.1.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x7ffc0000 [ 139.060546][ T9082] EXT4-fs (loop2): mount failed [ 139.067221][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2064'. [ 139.156348][ T9099] wireguard0: entered promiscuous mode [ 139.168905][ T9099] wireguard0: entered allmulticast mode [ 139.219588][ T9107] loop2: detected capacity change from 0 to 1024 [ 139.226369][ T9107] EXT4-fs: Ignoring removed orlov option [ 139.235294][ T9107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.300640][ T9114] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2073'. [ 139.389820][ T9124] netlink: 'syz.5.2078': attribute type 4 has an invalid length. [ 139.411359][ T9124] netlink: 'syz.5.2078': attribute type 4 has an invalid length. [ 139.448630][ T9128] GPL: port 1(erspan0) entered blocking state [ 139.455114][ T9128] GPL: port 1(erspan0) entered disabled state [ 139.468070][ T9128] erspan0: entered allmulticast mode [ 139.475514][ T9128] erspan0: entered promiscuous mode [ 139.531293][ T29] audit: type=1326 audit(1750240080.858:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.2082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc197ace929 code=0x0 [ 139.594021][ T9107] ================================================================== [ 139.602174][ T9107] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 139.609358][ T9107] [ 139.611713][ T9107] write to 0xffff888106b3edfc of 4 bytes by task 9116 on cpu 1: [ 139.619383][ T9107] xas_set_mark+0x12b/0x140 [ 139.623954][ T9107] __folio_start_writeback+0x1dd/0x440 [ 139.629458][ T9107] ext4_bio_write_folio+0x5ad/0x9f0 [ 139.634695][ T9107] mpage_submit_folio+0xe4/0x170 [ 139.639676][ T9107] mpage_process_page_bufs+0x39b/0x4a0 [ 139.645183][ T9107] mpage_prepare_extent_to_map+0x741/0xaa0 [ 139.651301][ T9107] ext4_do_writepages+0xa1a/0x21c0 [ 139.656469][ T9107] ext4_writepages+0x176/0x300 [ 139.661304][ T9107] do_writepages+0x1c6/0x310 [ 139.665945][ T9107] file_write_and_wait_range+0x156/0x2c0 [ 139.671639][ T9107] generic_buffers_fsync_noflush+0x45/0x120 [ 139.677605][ T9107] ext4_sync_file+0x1ab/0x690 [ 139.682341][ T9107] vfs_fsync_range+0x10d/0x130 [ 139.687141][ T9107] ext4_buffered_write_iter+0x34f/0x3c0 [ 139.692824][ T9107] ext4_file_write_iter+0x383/0xf00 [ 139.698060][ T9107] iter_file_splice_write+0x5f2/0x970 [ 139.703502][ T9107] direct_splice_actor+0x156/0x2a0 [ 139.708672][ T9107] splice_direct_to_actor+0x312/0x680 [ 139.714094][ T9107] do_splice_direct+0xda/0x150 [ 139.718911][ T9107] do_sendfile+0x380/0x650 [ 139.723380][ T9107] __x64_sys_sendfile64+0x105/0x150 [ 139.728634][ T9107] x64_sys_call+0xb39/0x2fb0 [ 139.733377][ T9107] do_syscall_64+0xd2/0x200 [ 139.737923][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.743869][ T9107] [ 139.746230][ T9107] read to 0xffff888106b3edfc of 4 bytes by task 9107 on cpu 0: [ 139.753815][ T9107] xas_find_marked+0x5dc/0x620 [ 139.758787][ T9107] find_get_entry+0x5d/0x380 [ 139.763867][ T9107] filemap_get_folios_tag+0x92/0x210 [ 139.769213][ T9107] mpage_prepare_extent_to_map+0x320/0xaa0 [ 139.775145][ T9107] ext4_do_writepages+0x6ea/0x21c0 [ 139.780305][ T9107] ext4_writepages+0x176/0x300 [ 139.785122][ T9107] do_writepages+0x1c6/0x310 [ 139.789761][ T9107] file_write_and_wait_range+0x156/0x2c0 [ 139.795445][ T9107] generic_buffers_fsync_noflush+0x45/0x120 [ 139.801393][ T9107] ext4_sync_file+0x1ab/0x690 [ 139.806119][ T9107] vfs_fsync_range+0x10d/0x130 [ 139.810918][ T9107] ext4_buffered_write_iter+0x34f/0x3c0 [ 139.816521][ T9107] ext4_file_write_iter+0x383/0xf00 [ 139.821756][ T9107] iter_file_splice_write+0x5f2/0x970 [ 139.827180][ T9107] direct_splice_actor+0x156/0x2a0 [ 139.832392][ T9107] splice_direct_to_actor+0x312/0x680 [ 139.837826][ T9107] do_splice_direct+0xda/0x150 [ 139.842740][ T9107] do_sendfile+0x380/0x650 [ 139.847209][ T9107] __x64_sys_sendfile64+0x105/0x150 [ 139.852449][ T9107] x64_sys_call+0xb39/0x2fb0 [ 139.857082][ T9107] do_syscall_64+0xd2/0x200 [ 139.861621][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.867557][ T9107] [ 139.869910][ T9107] value changed: 0x0a000021 -> 0x04000021 [ 139.875653][ T9107] [ 139.878081][ T9107] Reported by Kernel Concurrency Sanitizer on: [ 139.884263][ T9107] CPU: 0 UID: 0 PID: 9107 Comm: syz.2.2071 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 139.896750][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.906936][ T9107] ================================================================== [ 139.928184][ T4045] ================================================================== [ 139.936326][ T4045] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 139.945815][ T4045] [ 139.948333][ T4045] write to 0xffff888155d28b31 of 2 bytes by task 9116 on cpu 0: [ 139.955969][ T4045] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 139.961892][ T4045] generic_perform_write+0x2c2/0x490 [ 139.967208][ T4045] ext4_buffered_write_iter+0x1ee/0x3c0 [ 139.972769][ T4045] ext4_file_write_iter+0x383/0xf00 [ 139.977984][ T4045] iter_file_splice_write+0x5f2/0x970 [ 139.983381][ T4045] direct_splice_actor+0x156/0x2a0 [ 139.988525][ T4045] splice_direct_to_actor+0x312/0x680 [ 139.993927][ T4045] do_splice_direct+0xda/0x150 [ 139.998719][ T4045] do_sendfile+0x380/0x650 [ 140.003162][ T4045] __x64_sys_sendfile64+0x105/0x150 [ 140.008388][ T4045] x64_sys_call+0xb39/0x2fb0 [ 140.012995][ T4045] do_syscall_64+0xd2/0x200 [ 140.017512][ T4045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.023423][ T4045] [ 140.025758][ T4045] read to 0xffff888155d28800 of 1024 bytes by task 4045 on cpu 1: [ 140.033586][ T4045] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 140.039503][ T4045] generic_perform_write+0x2c2/0x490 [ 140.044814][ T4045] shmem_file_write_iter+0xc5/0xf0 [ 140.049946][ T4045] lo_rw_aio+0x6ed/0x7a0 [ 140.054211][ T4045] loop_process_work+0x52d/0xa60 [ 140.059178][ T4045] loop_workfn+0x31/0x40 [ 140.063537][ T4045] process_scheduled_works+0x4ce/0x9d0 [ 140.069282][ T4045] worker_thread+0x582/0x770 [ 140.073902][ T4045] kthread+0x486/0x510 [ 140.077986][ T4045] ret_from_fork+0xdd/0x150 [ 140.082509][ T4045] ret_from_fork_asm+0x1a/0x30 [ 140.087297][ T4045] [ 140.089666][ T4045] Reported by Kernel Concurrency Sanitizer on: [ 140.095825][ T4045] CPU: 1 UID: 0 PID: 4045 Comm: kworker/u8:31 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 140.108527][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.118688][ T4045] Workqueue: loop2 loop_workfn [ 140.123497][ T4045] ================================================================== [ 140.223438][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.