last executing test programs: 1m31.017182493s ago: executing program 3 (id=525): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 1m30.956987697s ago: executing program 3 (id=527): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r0, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f0000001040), 0x282d) 1m30.881365352s ago: executing program 3 (id=530): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socketpair(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1m30.698938106s ago: executing program 3 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1127057, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) 1m30.668259518s ago: executing program 3 (id=535): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0xfffffeed) 1m30.396958797s ago: executing program 3 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473fec988cafbe863ca", 0x12}, {&(0x7f0000000100)="99483dab3fedfb175648b51f", 0xc}], 0x2) 1m30.387831968s ago: executing program 32 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473fec988cafbe863ca", 0x12}, {&(0x7f0000000100)="99483dab3fedfb175648b51f", 0xc}], 0x2) 1m10.577365543s ago: executing program 2 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1m10.434146563s ago: executing program 2 (id=991): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket(0x2, 0x80805, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 1m10.074369159s ago: executing program 2 (id=998): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m9.678169658s ago: executing program 2 (id=1006): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@dax_inode}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@lazytime}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000000)='./file0\x00') sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m9.518384409s ago: executing program 2 (id=1007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) mknod(0x0, 0x8001420, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x2) 1m9.185254573s ago: executing program 2 (id=1010): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 1m9.142297286s ago: executing program 33 (id=1010): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 1.745409014s ago: executing program 5 (id=2233): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x102}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.564281598s ago: executing program 6 (id=2239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES64], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x7b}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.547385399s ago: executing program 1 (id=2240): gettid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0]}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27) timer_create(0x0, 0x0, 0x0) syz_emit_ethernet(0x2d3, 0x0, 0x0) 1.53514114s ago: executing program 5 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 1.485027823s ago: executing program 1 (id=2242): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1.484713773s ago: executing program 6 (id=2243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1, 0x5, 0x3, 0xfffffffffffffffc, 0x2, 0x3e, 0x5, 0x4fd, 0x40, 0x144, 0x8, 0x3e, 0x38, 0x1, 0x7, 0x25, 0x1}, [{0x3, 0x7, 0x100000000, 0x5, 0x1, 0x45e1, 0x9, 0x549d}]}, 0x78) close(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) execveat$binfmt(r4, r2, 0x0, 0x0, 0x1000) 1.460941475s ago: executing program 6 (id=2244): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000, &(0x7f0000006680)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0xfdcd, 0x0, @wg=@data={0x4, 0x40000000}}}}}}, 0x0) ptrace(0x10, r0) syz_open_dev$sg(0x0, 0x0, 0x8002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendto(r1, &(0x7f00000001c0)="12afb6b37c58f1dcce4fb7e639b4f074e5dd429d2f5f56052c33ec1dd8d185f3cc230ea384461c2f908cdc8f44bbbef41bddd3831b364c02f2a7093c0f6ce9a0915d69e84687190a33ea43c32baa01e0fc976568b8afbcecb0aa78821e1eabae3f09b47d587ca0c9542325938956e09000311630e50df29f5a3f5e6753b323e440ac90ad72b7a46b350ce7247dbf625047cbd08ddb0466e15b0cb4d56735ea85f40209fd336dad5a0f909bf39498ec799b32335a5275723067cbe3722a7c4dfa6162e382e9b0504b8dc0d8bf6fba022c27c66e", 0xd3, 0x0, &(0x7f00000000c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x80) 1.459344365s ago: executing program 1 (id=2246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000400001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009ea10000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000200)=@generic={0x2, 0x10000000000002, 0x1}) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.429545017s ago: executing program 5 (id=2247): openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 986.704119ms ago: executing program 5 (id=2249): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 916.785444ms ago: executing program 6 (id=2252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 820.424421ms ago: executing program 0 (id=2253): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) 761.263155ms ago: executing program 0 (id=2254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 760.993775ms ago: executing program 6 (id=2255): mmap$IORING_OFF_CQ_RING(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1, 0x100010, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) 760.800356ms ago: executing program 0 (id=2256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000600)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4014) 737.186147ms ago: executing program 4 (id=2257): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000001c0)=@generic={0x0, 0x610, 0x200}) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030903"], 0x0, 0x0, 0x0}, 0x0) 694.7624ms ago: executing program 0 (id=2258): openat$autofs(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 676.877441ms ago: executing program 0 (id=2259): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000011000100000000000000000019dab36e0000000000000000000000000000000000003300"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x9c, 0x1, 0x1, 0xfe, 0x0, 0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0xe14}, 0x300, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000faafaeac2f4d396f2c11d90bc60ceac545b3077c305c634475e0eac1786ba7809091cd007c1430c7c48a6761622bf1b9eb8b43981786a8aa5953bcf8af4be94dfb55b9abad1d659cfb8166b470e45227aacc3696a7995a522003d06e271368200ebdc0147f1cc1b14c57c3d7fcc810cbbf28f4260c15a5cb00f031d04d901254190a77066d52c7"], 0x50) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000200)=0x10001) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) 545.223721ms ago: executing program 1 (id=2260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r2) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 529.124622ms ago: executing program 1 (id=2261): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2, 0x0, 0x1}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001140)={r4, r2}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r5}) 488.197355ms ago: executing program 1 (id=2262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 482.588215ms ago: executing program 0 (id=2263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) 172.914648ms ago: executing program 4 (id=2264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0x48, 0x0, 0x0) dup3(r4, r2, 0x80000) 147.306649ms ago: executing program 4 (id=2265): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x880) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)="6ed4", 0x2) close(r0) 105.810133ms ago: executing program 5 (id=2266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 105.556393ms ago: executing program 4 (id=2267): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x2, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x80000000}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 100.435383ms ago: executing program 6 (id=2268): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}]}, 0x1, 0x21b, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write(r3, &(0x7f00000001c0)="f14a", 0x2) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 33.174078ms ago: executing program 4 (id=2269): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) dup3(r4, r0, 0x80000) 32.831028ms ago: executing program 5 (id=2270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0x0, 0x1001f0) 0s ago: executing program 4 (id=2271): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_clone(0x61801680, 0x0, 0x1f, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x3e, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): d4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 84.339793][ T6585] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 84.355209][ T6585] bond4: (slave wireguard0): making interface the new active one [ 84.363064][ T6585] wireguard0: entered promiscuous mode [ 84.378982][ T6572] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #3: comm syz.0.1161: corrupted inode contents [ 84.419374][ T6585] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 84.450133][ T6572] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1161: mark_inode_dirty error [ 84.462382][ T6583] bridge0: port 1(dummy0) entered disabled state [ 84.471321][ T6583] batadv1: left allmulticast mode [ 84.476541][ T6583] batadv1: left promiscuous mode [ 84.481939][ T6583] bridge0: port 2(batadv1) entered disabled state [ 84.488995][ T6572] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1161: Failed to acquire dquot type 0 [ 84.502715][ T6583] bond1: (slave batadv2): Releasing active interface [ 84.509607][ T6583] bond1: (slave batadv2): the permanent HWaddr of slave - 96:0a:42:64:95:36 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 84.521385][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1171'. [ 84.558098][ T6572] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1161: corrupted inode contents [ 84.603012][ T6603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6603 comm=syz.6.1170 [ 84.626145][ T6572] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #16: comm syz.0.1161: mark_inode_dirty error [ 84.655130][ T6583] bond1: (slave batadv3): making interface the new active one [ 84.668701][ T6572] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1161: corrupted inode contents [ 84.682872][ T6572] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1161: mark_inode_dirty error [ 84.694653][ T6583] bond1: (slave batadv3): Releasing active interface [ 84.694980][ T6572] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1161: corrupted inode contents [ 84.701704][ T6583] bond1: (slave batadv4): making interface the new active one [ 84.717118][ T6572] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 84.730977][ T6572] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #16: comm syz.0.1161: corrupted inode contents [ 84.744677][ T6583] bond1: (slave batadv4): Releasing active interface [ 84.751920][ T6572] EXT4-fs error (device loop0): ext4_truncate:4592: inode #16: comm syz.0.1161: mark_inode_dirty error [ 84.774399][ T6583] bond2: (slave bridge5): Releasing backup interface [ 84.789763][ T6583] bond4: (slave wireguard0): Releasing backup interface [ 84.797572][ T6583] wireguard0: left promiscuous mode [ 84.830889][ T6572] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 84.845798][ T6572] EXT4-fs (loop0): 1 truncate cleaned up [ 84.854219][ T6572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.867535][ T6572] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.205107][ T6607] netlink: 'syz.4.1174': attribute type 10 has an invalid length. [ 85.242333][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.246198][ T6610] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1173'. [ 85.264524][ T6610] vxlan1: entered promiscuous mode [ 85.272187][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 85.446776][ T6631] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.458410][ T6631] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.537976][ T6631] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.548483][ T6631] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.613059][ T6631] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.623487][ T6631] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.674839][ T6631] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.685298][ T6631] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.713606][ T6640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6640 comm=syz.1.1195 [ 85.744544][ T6631] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.752988][ T6631] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.768795][ T6631] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.777101][ T6631] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.792009][ T6631] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.800306][ T6631] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.818684][ T6631] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.827024][ T6631] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.941601][ T6657] loop6: detected capacity change from 0 to 512 [ 85.949295][ T6657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.960350][ T6657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.043519][ T6666] loop5: detected capacity change from 0 to 512 [ 86.050064][ T6666] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.057224][ T6666] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 86.068658][ T6666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 86.076918][ T6666] System zones: 1-12 [ 86.081572][ T6666] EXT4-fs (loop5): 1 truncate cleaned up [ 86.087744][ T6666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.159296][ T6670] tipc: Enabling of bearer rejected, already enabled [ 86.212927][ T6675] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 86.224758][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.240047][ T6675] bond3: entered promiscuous mode [ 86.247576][ T6675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.262653][ T6675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.270195][ T6675] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 86.280980][ T6675] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 86.292484][ T6675] bond3: (slave wireguard0): making interface the new active one [ 86.300473][ T6675] wireguard0: entered promiscuous mode [ 86.307747][ T6675] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 86.326705][ T6675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.334068][ T6675] IPv6: NLM_F_CREATE should be set when creating new route [ 86.341572][ T6675] IPv6: NLM_F_CREATE should be set when creating new route [ 86.349077][ T6675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.359527][ T6675] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 86.376466][ T6675] bond3: (slave wireguard1): Enslaving as a backup interface with an up link [ 86.849054][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.955009][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 86.955025][ T29] audit: type=1400 audit(1753822241.795:3045): avc: denied { read } for pid=6709 comm="syz.6.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.674489][ T6719] loop6: detected capacity change from 0 to 164 [ 88.697947][ T6747] wireguard2: entered promiscuous mode [ 88.704494][ T6747] wireguard2: entered allmulticast mode [ 88.743635][ T6731] net_ratelimit: 39 callbacks suppressed [ 88.743653][ T6731] Set syz1 is full, maxelem 65536 reached [ 88.814688][ T6755] bridge: RTM_NEWNEIGH with invalid ether address [ 88.902847][ T6767] loop0: detected capacity change from 0 to 512 [ 88.926963][ T6767] EXT4-fs: Ignoring removed nobh option [ 88.942313][ T6767] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1235: iget: bad i_size value: 38620345925642 [ 88.957801][ T6767] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1235: couldn't read orphan inode 15 (err -117) [ 88.973819][ T6767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.075463][ T6782] geneve2: entered promiscuous mode [ 89.080809][ T6782] geneve2: entered allmulticast mode [ 89.091317][ T29] audit: type=1326 audit(1753822243.935:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.5.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 89.135320][ T29] audit: type=1326 audit(1753822243.955:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.5.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 89.159708][ T29] audit: type=1326 audit(1753822243.955:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.5.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 89.183668][ T29] audit: type=1326 audit(1753822243.955:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.5.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 89.207731][ T29] audit: type=1326 audit(1753822243.955:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.5.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 89.231587][ T29] audit: type=1326 audit(1753822243.955:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.5.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 89.255374][ T29] audit: type=1326 audit(1753822243.955:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.5.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 89.278883][ T29] audit: type=1326 audit(1753822243.955:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.5.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 89.302271][ T29] audit: type=1326 audit(1753822243.955:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.5.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 89.337095][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.448448][ T6804] loop0: detected capacity change from 0 to 512 [ 89.455433][ T6804] EXT4-fs: Ignoring removed bh option [ 89.467712][ T6805] cgroup: Invalid name [ 89.475651][ T6804] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.484867][ T6804] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 89.510006][ T6804] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 89.519803][ T6804] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 89.530769][ T6804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.558649][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.695742][ T6787] Set syz1 is full, maxelem 65536 reached [ 89.711311][ T6818] loop5: detected capacity change from 0 to 512 [ 89.718527][ T6818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.738723][ T6818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.894945][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1260'. [ 89.910893][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.928663][ T6831] vlan2: entered allmulticast mode [ 89.934257][ T6831] bond1: entered allmulticast mode [ 90.059885][ T6843] loop6: detected capacity change from 0 to 512 [ 90.068814][ T6843] EXT4-fs: Ignoring removed bh option [ 90.075189][ T6843] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.084427][ T6843] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 90.093567][ T6843] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 90.103116][ T6843] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 90.112040][ T6843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.141194][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.261726][ T6857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.270483][ T6857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.279344][ T6857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.288248][ T6857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.298801][ T6857] geneve1: entered promiscuous mode [ 90.304085][ T6857] geneve1: entered allmulticast mode [ 90.344003][ T6857] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.353095][ T6857] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.362417][ T6857] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.371450][ T6857] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.539238][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.768626][ T6878] lo speed is unknown, defaulting to 1000 [ 91.660445][ T6912] SELinux: Context :syz0:E:18446744073709551614:':max_batch_time:./file0: is not valid (left unmapped). [ 91.748111][ T6922] veth1_macvtap: left promiscuous mode [ 91.763624][ T6923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6923 comm=syz.0.1293 [ 91.764192][ T6922] macsec0: entered promiscuous mode [ 91.874544][ T6931] loop6: detected capacity change from 0 to 512 [ 91.881567][ T6931] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.888644][ T6931] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.900149][ T6931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 91.908866][ T6931] System zones: 1-12 [ 91.914021][ T6931] EXT4-fs (loop6): 1 truncate cleaned up [ 91.950250][ T6931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.135284][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.274641][ T6941] tipc: Failed to remove unknown binding: 66,3,3/0:3912438715/3912438716 [ 92.418735][ T6952] loop6: detected capacity change from 0 to 8192 [ 92.462077][ T6952] loop6: p1 p2[DM] p4 [ 92.466269][ T6952] loop6: p1 size 196608 extends beyond EOD, truncated [ 92.473542][ T6952] loop6: p2 start 4292936063 is beyond EOD, truncated [ 92.480328][ T6952] loop6: p4 size 50331648 extends beyond EOD, truncated [ 92.633842][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 92.633857][ T29] audit: type=1400 audit(1753822247.475:3126): avc: denied { shutdown } for pid=6962 comm="syz.4.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.665970][ T29] audit: type=1326 audit(1753822247.505:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 92.689722][ T29] audit: type=1326 audit(1753822247.505:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 92.713183][ T29] audit: type=1326 audit(1753822247.505:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 92.736821][ T29] audit: type=1326 audit(1753822247.505:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 92.760416][ T29] audit: type=1326 audit(1753822247.505:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 92.827743][ T29] audit: type=1326 audit(1753822247.505:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 92.851478][ T29] audit: type=1326 audit(1753822247.605:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 92.875227][ T29] audit: type=1326 audit(1753822247.605:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 92.898998][ T29] audit: type=1326 audit(1753822247.665:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 92.926315][ T6968] loop5: detected capacity change from 0 to 512 [ 92.961726][ T6968] EXT4-fs: Ignoring removed nobh option [ 93.107295][ T6968] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #3: comm syz.5.1309: corrupted inode contents [ 93.131008][ T6968] EXT4-fs error (device loop5): ext4_dirty_inode:6454: inode #3: comm syz.5.1309: mark_inode_dirty error [ 93.145975][ T6968] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #3: comm syz.5.1309: corrupted inode contents [ 93.168053][ T6968] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1309: mark_inode_dirty error [ 93.179598][ T6968] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1309: Failed to acquire dquot type 0 [ 93.199180][ T6968] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.1309: corrupted inode contents [ 93.214006][ T6968] EXT4-fs error (device loop5): ext4_dirty_inode:6454: inode #16: comm syz.5.1309: mark_inode_dirty error [ 93.258045][ T6968] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.1309: corrupted inode contents [ 93.270571][ T6968] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1309: mark_inode_dirty error [ 93.285023][ T6968] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.1309: corrupted inode contents [ 93.297391][ T6968] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 93.319968][ T6968] EXT4-fs error (device loop5): ext4_do_update_inode:5563: inode #16: comm syz.5.1309: corrupted inode contents [ 93.356906][ T6968] EXT4-fs error (device loop5): ext4_truncate:4592: inode #16: comm syz.5.1309: mark_inode_dirty error [ 93.377190][ T6968] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 93.686943][ T6968] EXT4-fs (loop5): 1 truncate cleaned up [ 93.693169][ T6968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.775600][ T6968] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.801435][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1319'. [ 93.958868][ T7013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1328'. [ 94.032361][ T7006] lo speed is unknown, defaulting to 1000 [ 94.520226][ T7043] xt_CT: No such helper "pptp" [ 94.669347][ T7050] tipc: Started in network mode [ 94.674491][ T7050] tipc: Node identity ac14140f, cluster identity 4711 [ 94.691294][ T7050] tipc: New replicast peer: 255.255.255.255 [ 94.697490][ T7050] tipc: Enabled bearer , priority 10 [ 95.638152][ T7082] loop6: detected capacity change from 0 to 512 [ 95.671575][ T7082] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 95.849079][ T7082] EXT4-fs (loop6): 1 truncate cleaned up [ 95.849097][ T5626] tipc: Node number set to 2886997007 [ 95.862399][ T7082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.877506][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.282143][ T7098] xt_CT: No such helper "pptp" [ 96.902854][ T7113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=7113 comm=syz.1.1362 [ 97.162103][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.238626][ T7122] lo speed is unknown, defaulting to 1000 [ 97.655245][ T7153] loop6: detected capacity change from 0 to 512 [ 97.660895][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 97.660982][ T29] audit: type=1400 audit(1753822252.485:3238): avc: denied { read } for pid=7152 comm="syz.6.1374" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 97.690864][ T29] audit: type=1400 audit(1753822252.485:3239): avc: denied { open } for pid=7152 comm="syz.6.1374" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 97.714705][ T29] audit: type=1326 audit(1753822252.485:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 97.738329][ T29] audit: type=1326 audit(1753822252.485:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 97.762080][ T29] audit: type=1326 audit(1753822252.485:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 97.785666][ T29] audit: type=1326 audit(1753822252.485:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 97.809109][ T29] audit: type=1326 audit(1753822252.485:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 97.812228][ T7153] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 97.832672][ T29] audit: type=1326 audit(1753822252.485:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 97.832704][ T29] audit: type=1326 audit(1753822252.485:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7152 comm="syz.6.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 97.890085][ T7153] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.911040][ T7153] EXT4-fs (loop6): mount failed [ 97.964836][ T7159] loop6: detected capacity change from 0 to 1024 [ 98.018130][ T7159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.057528][ T7159] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1376: Allocating blocks 497-513 which overlap fs metadata [ 98.095787][ T7158] EXT4-fs (loop6): pa ffff8881069f3540: logic 304, phys. 449, len 4 [ 98.103884][ T7158] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 98.177268][ T7172] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 98.177268][ T7172] The task syz.5.1378 (7172) triggered the difference, watch for misbehavior. [ 98.200269][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.255370][ T7175] netlink: 'syz.6.1379': attribute type 32 has an invalid length. [ 98.263424][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1379'. [ 98.287720][ T7175] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 98.808269][ T7211] veth0_vlan: entered allmulticast mode [ 98.818388][ T7211] veth0_vlan: left promiscuous mode [ 98.827430][ T7211] veth0_vlan: entered promiscuous mode [ 99.328259][ T7293] loop6: detected capacity change from 0 to 1024 [ 99.329665][ T7294] netlink: 'syz.4.1405': attribute type 10 has an invalid length. [ 99.344580][ T7294] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 99.358245][ T7293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.370857][ T7293] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.466955][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.489935][ T7321] veth0_vlan: entered allmulticast mode [ 99.516838][ T7321] veth0_vlan: left promiscuous mode [ 99.530166][ T7321] veth0_vlan: entered promiscuous mode [ 99.605160][ T7331] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.615215][ T7331] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.653223][ T7331] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.663116][ T7331] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.723596][ T7331] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.733487][ T7331] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.770296][ T7348] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 99.784968][ T7331] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.794900][ T7331] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.820398][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.835884][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.859452][ T7331] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.867820][ T7331] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.879892][ T7331] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.888312][ T7331] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.900212][ T7331] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.908515][ T7331] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.920084][ T7331] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.928359][ T7331] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.063644][ T7375] Set syz1 is full, maxelem 65536 reached [ 101.265933][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.274871][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.292231][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 101.304507][ T7403] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1430'. [ 101.316878][ T7392] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1430'. [ 101.438097][ T7417] bridge: RTM_NEWNEIGH with invalid ether address [ 101.453187][ T7420] lo: entered allmulticast mode [ 101.458154][ T7420] tunl0: entered allmulticast mode [ 101.463379][ T7420] gre0: entered allmulticast mode [ 101.468535][ T7420] gretap0: entered allmulticast mode [ 101.474146][ T7420] erspan0: entered allmulticast mode [ 101.479490][ T7420] ip_vti0: entered allmulticast mode [ 101.485135][ T7420] ip6_vti0: entered allmulticast mode [ 101.490894][ T7420] sit0: entered allmulticast mode [ 101.496056][ T7420] ip6tnl0: entered allmulticast mode [ 101.501604][ T7420] ip6gre0: entered allmulticast mode [ 101.507006][ T7420] syz_tun: entered allmulticast mode [ 101.512487][ T7420] ip6gretap0: entered allmulticast mode [ 101.518240][ T7420] vcan0: entered allmulticast mode [ 101.523561][ T7420] bond0: entered allmulticast mode [ 101.530874][ T7420] dummy0: entered allmulticast mode [ 101.536257][ T7420] nlmon0: entered allmulticast mode [ 101.541604][ T7420] caif0: entered allmulticast mode [ 101.546842][ T7420] batadv0: entered allmulticast mode [ 101.552534][ T7420] vxcan0: entered allmulticast mode [ 101.557836][ T7420] vxcan1: entered allmulticast mode [ 101.563262][ T7420] veth0: entered allmulticast mode [ 101.568451][ T7420] veth1: entered allmulticast mode [ 101.573729][ T7420] wg0: entered allmulticast mode [ 101.578788][ T7420] wg1: entered allmulticast mode [ 101.583817][ T7420] veth0_to_bridge: entered allmulticast mode [ 101.589941][ T7420] bridge_slave_0: entered allmulticast mode [ 101.595970][ T7420] veth1_to_bridge: entered allmulticast mode [ 101.602036][ T7420] bridge_slave_1: entered allmulticast mode [ 101.608066][ T7420] veth0_to_bond: entered allmulticast mode [ 101.614083][ T7420] @: entered allmulticast mode [ 101.619159][ T7420] veth1_to_bond: entered allmulticast mode [ 101.625058][ T7420] bond_slave_1: entered allmulticast mode [ 101.630962][ T7420] veth0_to_team: entered allmulticast mode [ 101.637009][ T7420] team_slave_0: entered allmulticast mode [ 101.643324][ T7420] veth1_to_team: entered allmulticast mode [ 101.649331][ T7420] team_slave_1: entered allmulticast mode [ 101.655136][ T7420] veth1_to_batadv: entered allmulticast mode [ 101.661251][ T7420] batadv_slave_1: entered allmulticast mode [ 101.667196][ T7420] xfrm0: entered allmulticast mode [ 101.672507][ T7420] veth0_to_hsr: entered allmulticast mode [ 101.678278][ T7420] hsr_slave_0: entered allmulticast mode [ 101.684083][ T7420] veth1_to_hsr: entered allmulticast mode [ 101.689924][ T7420] hsr_slave_1: entered allmulticast mode [ 101.695698][ T7420] hsr0: entered allmulticast mode [ 101.700876][ T7420] veth1_virt_wifi: entered allmulticast mode [ 101.706957][ T7420] veth0_virt_wifi: entered allmulticast mode [ 101.713182][ T7420] veth1_vlan: entered allmulticast mode [ 101.718880][ T7420] veth0_vlan: entered allmulticast mode [ 101.724586][ T7420] : entered allmulticast mode [ 101.729870][ T7420] vlan1: entered allmulticast mode [ 101.735155][ T7420] macvlan0: entered allmulticast mode [ 101.740577][ T7420] macvlan1: entered allmulticast mode [ 101.746144][ T7420] ipvlan0: entered allmulticast mode [ 101.751569][ T7420] ipvlan1: entered allmulticast mode [ 101.756917][ T7420] veth1_macvtap: entered allmulticast mode [ 101.762824][ T7420] veth0_macvtap: entered allmulticast mode [ 101.768745][ T7420] macvtap0: entered allmulticast mode [ 101.774274][ T7420] macsec0: entered allmulticast mode [ 101.779637][ T7420] geneve0: entered allmulticast mode [ 101.785151][ T7420] geneve1: entered allmulticast mode [ 101.790508][ T7420] batadv1: entered allmulticast mode [ 101.804415][ T7420] netdevsim netdevsim5 eth0: entered allmulticast mode [ 101.811791][ T7420] netdevsim netdevsim5 eth1: entered allmulticast mode [ 101.819107][ T7420] netdevsim netdevsim5 eth2: entered allmulticast mode [ 101.828890][ T7420] netdevsim netdevsim5 eth3: entered allmulticast mode [ 101.837446][ T7420] bond1: entered allmulticast mode [ 101.850780][ T7420] bridge0: entered allmulticast mode [ 101.856686][ T7420] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.865099][ T7420] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.873645][ T7420] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.882013][ T7420] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.899005][ T7420] vxlan0: entered allmulticast mode [ 101.913740][ T7420] gre1: entered allmulticast mode [ 101.920024][ T7420] bond2: left promiscuous mode [ 101.924869][ T7420] bond2: entered allmulticast mode [ 101.930501][ T7420] wireguard0: entered allmulticast mode [ 101.936745][ T7420] team0: left promiscuous mode [ 101.941802][ T7420] ip6tnl1: entered allmulticast mode [ 101.947285][ T7420] bridge1: entered allmulticast mode [ 101.955621][ T7420] team1: left promiscuous mode [ 101.960673][ T7420] veth2: entered allmulticast mode [ 101.965907][ T7420] veth3: entered allmulticast mode [ 101.971195][ T7420] ip6tnl2: entered allmulticast mode [ 102.142423][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1452'. [ 102.281682][ T7455] veth0_vlan: left promiscuous mode [ 102.295390][ T7455] veth0_vlan: entered promiscuous mode [ 102.351135][ T7465] xt_hashlimit: size too large, truncated to 1048576 [ 102.455813][ T7475] loop0: detected capacity change from 0 to 512 [ 102.506582][ T7475] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1462: Failed to acquire dquot type 1 [ 102.538547][ T7475] EXT4-fs (loop0): 1 truncate cleaned up [ 102.544842][ T7475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.557762][ T7475] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.572325][ T7475] pimreg: entered allmulticast mode [ 102.578076][ T7475] pimreg: left allmulticast mode [ 102.644883][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.715101][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 102.846272][ T7493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1468'. [ 102.855713][ T7493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1468'. [ 102.865432][ T7493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1468'. [ 103.269693][ T7502] veth0_vlan: entered allmulticast mode [ 103.284566][ T7502] veth0_vlan: left promiscuous mode [ 103.302289][ T7502] veth0_vlan: entered promiscuous mode [ 103.442582][ T7500] lo speed is unknown, defaulting to 1000 [ 103.570788][ T7514] netlink: 'syz.1.1475': attribute type 10 has an invalid length. [ 103.587360][ T7514] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 103.636041][ T7519] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 104.152124][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 104.416477][ T7548] loop5: detected capacity change from 0 to 1024 [ 104.434326][ T7548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.447012][ T7548] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.515012][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1492'. [ 104.574319][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.625717][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 104.625731][ T29] audit: type=1400 audit(1753822259.465:3328): avc: denied { listen } for pid=7565 comm="syz.4.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.676282][ T7566] bond5: entered promiscuous mode [ 104.681448][ T7566] bond5: entered allmulticast mode [ 104.706995][ T7566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 104.759859][ T7566] bond5 (unregistering): Released all slaves [ 104.946115][ T7571] openvswitch: netlink: Message has 6 unknown bytes. [ 104.981229][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1506'. [ 105.046678][ T7594] loop0: detected capacity change from 0 to 1024 [ 105.064476][ T7594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.076743][ T7594] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.182701][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.264716][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 105.359981][ T29] audit: type=1326 audit(1753822260.195:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 105.390793][ T7608] bond4: entered promiscuous mode [ 105.395979][ T7608] bond4: entered allmulticast mode [ 105.403607][ T29] audit: type=1326 audit(1753822260.225:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 105.420947][ T7608] 8021q: adding VLAN 0 to HW filter on device bond4 [ 105.427235][ T29] audit: type=1326 audit(1753822260.225:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 105.457487][ T29] audit: type=1326 audit(1753822260.225:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 105.481105][ T29] audit: type=1326 audit(1753822260.225:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 105.504640][ T29] audit: type=1326 audit(1753822260.225:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 105.528107][ T29] audit: type=1326 audit(1753822260.225:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 105.551555][ T29] audit: type=1326 audit(1753822260.225:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 105.574954][ T29] audit: type=1326 audit(1753822260.225:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7609 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 105.604636][ T7608] bond4 (unregistering): Released all slaves [ 105.944194][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'. [ 105.953682][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'. [ 105.980331][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'. [ 106.073840][ T7641] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1534'. [ 106.084213][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1525'. [ 106.271019][ T7656] lo: entered allmulticast mode [ 106.279853][ T7656] tunl0: entered allmulticast mode [ 106.293003][ T7656] gre0: entered allmulticast mode [ 106.321909][ T7656] gretap0: entered allmulticast mode [ 106.344209][ T7656] erspan0: entered allmulticast mode [ 106.369990][ T7656] ip_vti0: entered allmulticast mode [ 106.398196][ T7656] ip6_vti0: entered allmulticast mode [ 106.429884][ T7656] sit0: entered allmulticast mode [ 106.470166][ T7656] ip6tnl0: entered allmulticast mode [ 106.497472][ T7656] ip6gre0: entered allmulticast mode [ 106.525356][ T7656] syz_tun: entered allmulticast mode [ 106.545839][ T7656] ip6gretap0: entered allmulticast mode [ 106.576068][ T7656] bridge0: entered allmulticast mode [ 106.598392][ T7656] vcan0: entered allmulticast mode [ 106.619375][ T7656] bond0: entered allmulticast mode [ 106.644666][ T7656] team0: entered allmulticast mode [ 106.663155][ T7656] dummy0: entered allmulticast mode [ 106.674034][ T7656] nlmon0: entered allmulticast mode [ 106.689270][ T7656] caif0: entered allmulticast mode [ 106.704745][ T7656] batadv0: entered allmulticast mode [ 106.718041][ T7656] vxcan0: entered allmulticast mode [ 106.733737][ T7656] vxcan1: entered allmulticast mode [ 106.749136][ T7656] veth0: entered allmulticast mode [ 106.773325][ T7656] veth1: entered allmulticast mode [ 106.789903][ T7656] wg0: entered allmulticast mode [ 106.798660][ T7656] wg1: entered allmulticast mode [ 106.807018][ T7656] veth0_to_bridge: entered allmulticast mode [ 106.825366][ T7656] bridge_slave_0: entered allmulticast mode [ 106.848340][ T7656] veth1_to_bridge: entered allmulticast mode [ 106.862347][ T7656] bridge_slave_1: entered allmulticast mode [ 106.894273][ T7656] veth0_to_bond: entered allmulticast mode [ 106.917139][ T7656] bond_slave_0: entered allmulticast mode [ 106.940415][ T7656] veth1_to_bond: entered allmulticast mode [ 106.966082][ T7656] bond_slave_1: entered allmulticast mode [ 106.977398][ T7662] netlink: 'syz.5.1535': attribute type 10 has an invalid length. [ 106.995158][ T7656] veth0_to_team: entered allmulticast mode [ 107.014028][ T7656] team_slave_0: entered allmulticast mode [ 107.030450][ T7656] veth1_to_team: entered allmulticast mode [ 107.068149][ T7656] team_slave_1: entered allmulticast mode [ 107.097197][ T7656] veth0_to_batadv: entered allmulticast mode [ 107.131912][ T7656] batadv_slave_0: entered allmulticast mode [ 107.156229][ T7656] veth1_to_batadv: entered allmulticast mode [ 107.163935][ T7656] batadv_slave_1: entered allmulticast mode [ 107.173230][ T7656] xfrm0: entered allmulticast mode [ 107.179353][ T7656] veth0_to_hsr: entered allmulticast mode [ 107.186330][ T7656] hsr_slave_0: entered allmulticast mode [ 107.195198][ T7656] veth1_to_hsr: entered allmulticast mode [ 107.202188][ T7656] hsr_slave_1: entered allmulticast mode [ 107.208712][ T7656] hsr0: entered allmulticast mode [ 107.217159][ T7656] veth1_virt_wifi: entered allmulticast mode [ 107.224316][ T7656] veth0_virt_wifi: entered allmulticast mode [ 107.231639][ T7656] veth1_macvtap: entered allmulticast mode [ 107.238463][ T7656] veth0_macvtap: entered allmulticast mode [ 107.245328][ T7656] macvtap0: entered allmulticast mode [ 107.251598][ T7656] macsec0: left promiscuous mode [ 107.256602][ T7656] macsec0: entered allmulticast mode [ 107.271229][ T7656] geneve0: entered allmulticast mode [ 107.277487][ T7656] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.285947][ T7656] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.294354][ T7656] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.302795][ T7656] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.324706][ T7656] geneve1: entered allmulticast mode [ 107.337665][ T7656] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.346079][ T7656] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.354508][ T7656] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.362864][ T7656] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.381614][ T7656] vxlan0: entered allmulticast mode [ 107.387590][ T7656] ip6tnl1: entered allmulticast mode [ 107.393730][ T7656] syztnl1: entered allmulticast mode [ 107.399133][ T7656] bond2: entered allmulticast mode [ 107.406851][ T7656] netdevsim netdevsim6 eth0: entered allmulticast mode [ 107.414318][ T7656] netdevsim netdevsim6 eth1: entered allmulticast mode [ 107.424035][ T7656] netdevsim netdevsim6 eth2: entered allmulticast mode [ 107.431303][ T7656] netdevsim netdevsim6 eth3: entered allmulticast mode [ 107.438543][ T7662] bridge_slave_1: left allmulticast mode [ 107.445255][ T7662] bridge_slave_1: entered allmulticast mode [ 107.451466][ T7662] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 107.485642][ T7670] loop6: detected capacity change from 0 to 1024 [ 107.494926][ T7670] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 107.509125][ T7670] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 108.059323][ T7684] bridge0: port 1(macsec1) entered blocking state [ 108.065894][ T7684] bridge0: port 1(macsec1) entered disabled state [ 108.085873][ T7684] macsec1: entered allmulticast mode [ 108.102139][ T7684] macsec1: left allmulticast mode [ 108.550379][ T7678] loop6: detected capacity change from 0 to 512 [ 108.571276][ T7678] EXT4-fs: Ignoring removed nobh option [ 108.608185][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 108.617343][ T7678] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #3: comm syz.6.1540: corrupted inode contents [ 108.643127][ T7678] EXT4-fs error (device loop6): ext4_dirty_inode:6454: inode #3: comm syz.6.1540: mark_inode_dirty error [ 108.672251][ T7678] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #3: comm syz.6.1540: corrupted inode contents [ 108.684136][ T7702] loop0: detected capacity change from 0 to 512 [ 108.690568][ T7678] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.1540: mark_inode_dirty error [ 108.720699][ T7702] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 108.721093][ T7678] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1540: Failed to acquire dquot type 0 [ 108.947687][ T7678] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #16: comm syz.6.1540: corrupted inode contents [ 108.969766][ T7678] EXT4-fs error (device loop6): ext4_dirty_inode:6454: inode #16: comm syz.6.1540: mark_inode_dirty error [ 109.091522][ T7736] netlink: 'syz.4.1564': attribute type 7 has an invalid length. [ 109.142328][ T7740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7740 comm=syz.1.1566 [ 109.154834][ T7740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7740 comm=syz.1.1566 [ 109.393943][ T7751] loop0: detected capacity change from 0 to 512 [ 109.475135][ T7751] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1571: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 109.518305][ T7747] lo speed is unknown, defaulting to 1000 [ 109.550885][ T7751] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1571: Bad quota inode: 3, type: 0 [ 109.564671][ T7751] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 109.570936][ T7678] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #16: comm syz.6.1540: corrupted inode contents [ 109.611215][ T7751] EXT4-fs (loop0): mount failed [ 109.623667][ T7758] __nla_validate_parse: 2 callbacks suppressed [ 109.623681][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1573'. [ 109.669800][ T29] kauditd_printk_skb: 14260 callbacks suppressed [ 109.669814][ T29] audit: type=1326 audit(1753822264.505:17596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 109.699767][ T29] audit: type=1326 audit(1753822264.505:17597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 109.723238][ T29] audit: type=1326 audit(1753822264.505:17598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 109.778889][ T29] audit: type=1326 audit(1753822264.505:17599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 109.802464][ T29] audit: type=1326 audit(1753822264.505:17600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 109.826222][ T29] audit: type=1326 audit(1753822264.505:17601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899689e9a9 code=0x7ffc0000 [ 109.893531][ T7764] vlan2: entered allmulticast mode [ 110.050860][ T29] audit: type=1326 audit(1753822264.875:17602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 110.074595][ T29] audit: type=1326 audit(1753822264.875:17603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 110.098284][ T29] audit: type=1326 audit(1753822264.875:17604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 110.122297][ T29] audit: type=1326 audit(1753822264.875:17605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.4.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 110.180166][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 110.382996][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 110.600053][ T7786] lo speed is unknown, defaulting to 1000 [ 110.852427][ T4541] kworker/u8:66 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 110.866246][ T4541] CPU: 1 UID: 0 PID: 4541 Comm: kworker/u8:66 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 110.866272][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.866283][ T4541] Workqueue: loop6 loop_workfn [ 110.866303][ T4541] Call Trace: [ 110.866308][ T4541] [ 110.866316][ T4541] __dump_stack+0x1d/0x30 [ 110.866374][ T4541] dump_stack_lvl+0xe8/0x140 [ 110.866390][ T4541] dump_stack+0x15/0x1b [ 110.866409][ T4541] dump_header+0x81/0x220 [ 110.866501][ T4541] oom_kill_process+0x334/0x3f0 [ 110.866525][ T4541] out_of_memory+0x979/0xb80 [ 110.866578][ T4541] try_charge_memcg+0x5e6/0x9e0 [ 110.866805][ T4541] charge_memcg+0x51/0xc0 [ 110.866834][ T4541] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 110.866872][ T4541] __read_swap_cache_async+0x1df/0x350 [ 110.866898][ T4541] swap_cluster_readahead+0x277/0x3e0 [ 110.866980][ T4541] shmem_swapin_folio+0x821/0xf50 [ 110.867010][ T4541] ? filemap_get_entry+0x34b/0x390 [ 110.867060][ T4541] shmem_get_folio_gfp+0x26c/0xd60 [ 110.867146][ T4541] shmem_write_begin+0xa8/0x190 [ 110.867174][ T4541] generic_perform_write+0x181/0x490 [ 110.867276][ T4541] shmem_file_write_iter+0xc5/0xf0 [ 110.867298][ T4541] lo_rw_aio+0x69d/0x760 [ 110.867323][ T4541] loop_process_work+0x52d/0xa60 [ 110.867390][ T4541] ? queue_delayed_work_on+0x106/0x170 [ 110.867406][ T4541] ? __rcu_read_unlock+0x4f/0x70 [ 110.867424][ T4541] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 110.867453][ T4541] ? sched_clock+0x3f/0x60 [ 110.867552][ T4541] ? xfd_validate_state+0x45/0xf0 [ 110.867585][ T4541] loop_workfn+0x31/0x40 [ 110.867604][ T4541] process_scheduled_works+0x4cb/0x9d0 [ 110.867632][ T4541] worker_thread+0x582/0x770 [ 110.867669][ T4541] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 110.867771][ T4541] ? schedule+0x5f/0xd0 [ 110.867802][ T4541] kthread+0x489/0x510 [ 110.867820][ T4541] ? finish_task_switch+0xad/0x2b0 [ 110.867837][ T4541] ? __pfx_worker_thread+0x10/0x10 [ 110.867881][ T4541] ? __pfx_kthread+0x10/0x10 [ 110.867897][ T4541] ret_from_fork+0xdd/0x150 [ 110.867915][ T4541] ? __pfx_kthread+0x10/0x10 [ 110.867980][ T4541] ret_from_fork_asm+0x1a/0x30 [ 110.868005][ T4541] [ 110.868013][ T4541] memory: usage 307200kB, limit 307200kB, failcnt 288 [ 111.087317][ T4541] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 111.095284][ T4541] kmem: usage 304048kB, limit 9007199254740988kB, failcnt 0 [ 111.102661][ T4541] Memory cgroup stats for /syz6: [ 111.104842][ T4541] cache 20480 [ 111.113102][ T4541] rss 3207168 [ 111.116517][ T4541] shmem 0 [ 111.119518][ T4541] mapped_file 0 [ 111.123049][ T4541] dirty 4096 [ 111.126244][ T4541] writeback 0 [ 111.129536][ T4541] workingset_refault_anon 212 [ 111.134275][ T4541] workingset_refault_file 8 [ 111.138771][ T4541] swap 454656 [ 111.142083][ T4541] swapcached 0 [ 111.145460][ T4541] pgpgin 33504 [ 111.148907][ T4541] pgpgout 32716 [ 111.152401][ T4541] pgfault 47880 [ 111.155933][ T4541] pgmajfault 133 [ 111.159553][ T4541] inactive_anon 0 [ 111.163209][ T4541] active_anon 0 [ 111.166791][ T4541] inactive_file 3227648 [ 111.170967][ T4541] active_file 0 [ 111.174449][ T4541] unevictable 0 [ 111.177904][ T4541] hierarchical_memory_limit 314572800 [ 111.183321][ T4541] hierarchical_memsw_limit 9223372036854771712 [ 111.189615][ T4541] total_cache 20480 [ 111.193454][ T4541] total_rss 3207168 [ 111.197314][ T4541] total_shmem 0 [ 111.200780][ T4541] total_mapped_file 0 [ 111.204799][ T4541] total_dirty 4096 [ 111.208565][ T4541] total_writeback 0 [ 111.212428][ T4541] total_workingset_refault_anon 212 [ 111.217635][ T4541] total_workingset_refault_file 8 [ 111.222700][ T4541] total_swap 454656 [ 111.226509][ T4541] total_swapcached 0 [ 111.230449][ T4541] total_pgpgin 33504 [ 111.234387][ T4541] total_pgpgout 32716 [ 111.238418][ T4541] total_pgfault 47880 [ 111.242414][ T4541] total_pgmajfault 133 [ 111.246475][ T4541] total_inactive_anon 0 [ 111.250639][ T4541] total_active_anon 0 [ 111.254685][ T4541] total_inactive_file 3227648 [ 111.259367][ T4541] total_active_file 0 [ 111.263361][ T4541] total_unevictable 0 [ 111.267377][ T4541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1540,pid=7676,uid=0 [ 111.282116][ T4541] Memory cgroup out of memory: Killed process 7676 (syz.6.1540) total-vm:95940kB, anon-rss:4272kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 111.369461][ T7796] loop5: detected capacity change from 0 to 512 [ 111.398695][ T7796] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1586: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 111.444901][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 111.464501][ T7796] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1586: Bad quota inode: 3, type: 0 [ 111.485974][ T7801] vlan0: entered allmulticast mode [ 111.491303][ T7801] bridge_slave_0: entered allmulticast mode [ 111.508065][ T7796] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 111.528999][ T7801] bridge0: port 1(vlan0) entered blocking state [ 111.535409][ T7801] bridge0: port 1(vlan0) entered disabled state [ 111.551198][ T7796] EXT4-fs (loop5): mount failed [ 111.569832][ T7801] vlan0: entered promiscuous mode [ 111.574982][ T7801] bridge_slave_0: entered promiscuous mode [ 111.735572][ T7816] loop5: detected capacity change from 0 to 512 [ 111.768302][ T7816] EXT4-fs: Ignoring removed oldalloc option [ 111.809235][ T7816] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1590: Parent and EA inode have the same ino 15 [ 111.845398][ T7816] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1590: Parent and EA inode have the same ino 15 [ 111.860425][ T7816] EXT4-fs (loop5): 1 orphan inode deleted [ 111.868737][ T7816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.970451][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.972934][ T7821] loop0: detected capacity change from 0 to 128 [ 111.998480][ T7821] bio_check_eod: 16066 callbacks suppressed [ 111.998497][ T7821] syz.0.1596: attempt to access beyond end of device [ 111.998497][ T7821] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 112.033238][ T386] kworker/u8:6: attempt to access beyond end of device [ 112.033238][ T386] loop0: rw=1, sector=177, nr_sectors = 24 limit=128 [ 112.047189][ T386] kworker/u8:6: attempt to access beyond end of device [ 112.047189][ T386] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 112.097646][ T386] kworker/u8:6: attempt to access beyond end of device [ 112.097646][ T386] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 112.113290][ T7828] netlink: '+}[@': attribute type 1 has an invalid length. [ 112.120514][ T7828] netlink: '+}[@': attribute type 4 has an invalid length. [ 112.127824][ T7828] netlink: 9462 bytes leftover after parsing attributes in process `+}[@'. [ 112.137795][ T7830] syz.0.1596: attempt to access beyond end of device [ 112.137795][ T7830] loop0: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 112.164777][ T386] kworker/u8:6: attempt to access beyond end of device [ 112.164777][ T386] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 112.200979][ T7828] netlink: '+}[@': attribute type 1 has an invalid length. [ 112.208341][ T7828] netlink: '+}[@': attribute type 4 has an invalid length. [ 112.215656][ T7828] netlink: 9462 bytes leftover after parsing attributes in process `+}[@'. [ 112.237339][ T386] kworker/u8:6: attempt to access beyond end of device [ 112.237339][ T386] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 112.249768][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 112.259538][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'. [ 112.268548][ T7837] netlink: 'syz.1.1604': attribute type 5 has an invalid length. [ 112.274140][ T7830] syz.0.1596: attempt to access beyond end of device [ 112.274140][ T7830] loop0: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 112.304018][ T7837] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.312330][ T7837] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.320491][ T7837] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.328714][ T7837] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.339115][ T386] kworker/u8:6: attempt to access beyond end of device [ 112.339115][ T386] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 112.382871][ T7830] syz.0.1596: attempt to access beyond end of device [ 112.382871][ T7830] loop0: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 112.422849][ T7840] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1606'. [ 112.534301][ T7850] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1607'. [ 112.543745][ T7849] loop5: detected capacity change from 0 to 1764 [ 112.691156][ T7855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7855 comm=syz.4.1611 [ 112.993877][ T7878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.110986][ T7878] vlan0: entered allmulticast mode [ 113.116204][ T7878] bond3: entered allmulticast mode [ 113.307659][ T30] oom_reaper: reaped process 7676 (syz.6.1540), now anon-rss:92kB, file-rss:21132kB, shmem-rss:0kB [ 113.320944][ T7678] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1540: mark_inode_dirty error [ 113.344766][ T7890] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.353543][ T7890] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.362278][ T7890] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.370991][ T7890] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.382349][ T7678] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #16: comm syz.6.1540: corrupted inode contents [ 113.481007][ T7890] vxlan0: entered promiscuous mode [ 113.501289][ T7678] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 113.510026][ T7678] EXT4-fs error (device loop6): ext4_do_update_inode:5563: inode #16: comm syz.6.1540: corrupted inode contents [ 113.524185][ T7678] EXT4-fs error (device loop6): ext4_truncate:4592: inode #16: comm syz.6.1540: mark_inode_dirty error [ 113.535620][ T7678] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 113.545584][ T7678] EXT4-fs (loop6): 1 truncate cleaned up [ 113.551678][ T7678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.564187][ T7678] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.600480][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.961906][ T7914] netlink: 'syz.0.1633': attribute type 10 has an invalid length. [ 113.969794][ T7914] dummy0: left promiscuous mode [ 113.977265][ T7914] netlink: 'syz.0.1633': attribute type 10 has an invalid length. [ 113.986171][ T7914] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.011471][ T7918] loop6: detected capacity change from 0 to 512 [ 114.043192][ T7918] EXT4-fs (loop6): 1 orphan inode deleted [ 114.049760][ T7918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.063030][ T4541] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:66: Failed to release dquot type 1 [ 114.088080][ T7918] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.130451][ T7931] team0: Mode changed to "broadcast" [ 114.270064][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.299233][ T7939] loop0: detected capacity change from 0 to 2048 [ 114.327702][ T7939] EXT4-fs: Ignoring removed bh option [ 114.356905][ T7939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.384398][ T7926] lo speed is unknown, defaulting to 1000 [ 114.406647][ T7939] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.495168][ T7959] 0XD: renamed from gretap0 [ 114.505719][ T7959] 0XD: entered allmulticast mode [ 114.511576][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.521443][ T7959] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 114.553417][ T7963] tipc: Started in network mode [ 114.558393][ T7963] tipc: Node identity 4, cluster identity 4711 [ 114.564608][ T7963] tipc: Node number set to 4 [ 114.658660][ T7977] bond0: (slave dummy0): Releasing backup interface [ 114.670745][ T7979] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 114.685880][ T7981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7981 comm=syz.5.1663 [ 114.690280][ T7967] loop6: detected capacity change from 0 to 8192 [ 114.705854][ T7977] bridge_slave_0: left allmulticast mode [ 114.711003][ T7981] __nla_validate_parse: 5 callbacks suppressed [ 114.711017][ T7981] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1663'. [ 114.711598][ T7977] bridge_slave_0: left promiscuous mode [ 114.732584][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.754591][ T7967] buffer_io_error: 22574 callbacks suppressed [ 114.754641][ T7967] Buffer I/O error on dev loop6, logical block 57847, async page read [ 114.769785][ T7977] bridge_slave_1: left allmulticast mode [ 114.775483][ T7977] bridge_slave_1: left promiscuous mode [ 114.781178][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.790045][ T7977] bond0: (slave bond_slave_0): Releasing backup interface [ 114.799254][ T7977] bond0: (slave bond_slave_1): Releasing backup interface [ 114.809232][ T7977] batadv1: left allmulticast mode [ 114.814360][ T7977] batadv1: left promiscuous mode [ 114.819453][ T7977] bridge0: port 3(batadv1) entered disabled state [ 114.829381][ T7977] bond1: (slave batadv0): Releasing active interface [ 114.836192][ T7977] bond1: (slave batadv0): the permanent HWaddr of slave - ae:14:9b:72:c7:12 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 114.853537][ T7977] bond1: (slave batadv2): making interface the new active one [ 114.862618][ T7977] bond1: (slave batadv2): Releasing active interface [ 114.869714][ T7977] bond1: (slave batadv3): making interface the new active one [ 114.878624][ T7977] bond1: (slave batadv3): Releasing active interface [ 114.887069][ T7977] bond2: (slave bridge3): Releasing backup interface [ 114.897875][ T7977] bond3: (slave wireguard0): Releasing backup interface [ 114.905184][ T7977] wireguard0: left promiscuous mode [ 114.910503][ T7977] bond3: (slave wireguard1): making interface the new active one [ 114.918348][ T7977] wireguard1: entered promiscuous mode [ 114.928439][ T7977] bond3: (slave wireguard1): Releasing backup interface [ 114.935610][ T7977] wireguard1: left promiscuous mode [ 114.948367][ T7979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 114.963755][ T7981] hsr_slave_0: left promiscuous mode [ 114.969479][ T7981] hsr_slave_1: left promiscuous mode [ 114.990108][ T7984] bond5 (unregistering): Released all slaves [ 115.145292][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 115.145306][ T29] audit: type=1400 audit(1753822269.985:17780): avc: denied { watch watch_reads } for pid=8010 comm="syz.6.1673" path="/117/file0" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 115.240097][ T8013] syzkaller0: entered promiscuous mode [ 115.245704][ T8013] syzkaller0: entered allmulticast mode [ 115.265106][ T8007] lo speed is unknown, defaulting to 1000 [ 115.273663][ T8016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.323059][ T8016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.382088][ T8016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.462723][ T8016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.476159][ T29] audit: type=1326 audit(1753822270.315:17781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 115.513021][ T29] audit: type=1326 audit(1753822270.315:17782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 115.532186][ T8024] lo speed is unknown, defaulting to 1000 [ 115.536579][ T29] audit: type=1326 audit(1753822270.315:17783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 115.565778][ T29] audit: type=1326 audit(1753822270.315:17784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 115.589453][ T29] audit: type=1326 audit(1753822270.315:17785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 115.612951][ T29] audit: type=1326 audit(1753822270.315:17786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 115.636767][ T29] audit: type=1326 audit(1753822270.315:17787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 115.660277][ T29] audit: type=1326 audit(1753822270.315:17788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 115.683988][ T29] audit: type=1326 audit(1753822270.345:17789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 115.712115][ T8032] loop5: detected capacity change from 0 to 512 [ 115.718734][ T8032] EXT4-fs: Ignoring removed nobh option [ 115.731302][ T8032] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1681: bg 0: block 393: padding at end of block bitmap is not set [ 115.753869][ T8016] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.767115][ T8016] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.775622][ T8032] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 115.786944][ T8032] EXT4-fs (loop5): 2 truncates cleaned up [ 115.793452][ T8032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.811244][ T8016] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.835002][ T8016] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.845690][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.903681][ T8040] can0: slcan on ttyS3. [ 115.922978][ T8043] netlink: 'syz.5.1686': attribute type 1 has an invalid length. [ 115.939075][ T8043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.946916][ T8044] macsec0: entered allmulticast mode [ 115.953659][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1686'. [ 115.954983][ T8040] can0 (unregistered): slcan off ttyS3. [ 115.972081][ T8043] bond4 (unregistering): Released all slaves [ 115.997194][ T8044] macsec0: entered promiscuous mode [ 116.002556][ T8044] macsec0: left allmulticast mode [ 116.052580][ T8056] loop0: detected capacity change from 0 to 512 [ 116.059604][ T8056] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.067302][ T8056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.094488][ T8056] EXT4-fs (loop0): 1 truncate cleaned up [ 116.102769][ T8056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.120278][ T8062] loop6: detected capacity change from 0 to 512 [ 116.128702][ T8062] ext4: Unknown parameter '"' [ 116.138723][ T8064] netlink: 'syz.1.1694': attribute type 4 has an invalid length. [ 116.164660][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.787958][ T8088] netlink: zone id is out of range [ 116.793162][ T8088] netlink: zone id is out of range [ 116.798286][ T8088] netlink: zone id is out of range [ 116.803565][ T8088] netlink: zone id is out of range [ 116.808684][ T8088] netlink: zone id is out of range [ 116.813814][ T8088] netlink: zone id is out of range [ 116.818930][ T8088] netlink: zone id is out of range [ 116.824058][ T8088] netlink: zone id is out of range [ 116.829168][ T8088] netlink: zone id is out of range [ 117.123794][ T8092] bond3: entered promiscuous mode [ 117.128900][ T8092] bond3: entered allmulticast mode [ 117.160184][ T8092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.234077][ T8092] bond3 (unregistering): Released all slaves [ 117.435057][ T8114] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1710'. [ 117.762510][ T8145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8145 comm=syz.6.1730 [ 117.939100][ T8166] loop0: detected capacity change from 0 to 512 [ 117.953708][ T8166] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1737: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 117.972930][ T8166] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1737: Bad quota inode: 3, type: 0 [ 117.984403][ T8166] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 118.000455][ T8166] EXT4-fs (loop0): mount failed [ 118.033254][ T8172] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1739'. [ 118.126897][ T8178] loop6: detected capacity change from 0 to 512 [ 118.142599][ T8178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.155491][ T8178] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.180902][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.204867][ T8182] loop6: detected capacity change from 0 to 128 [ 118.213219][ T8182] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.222709][ T8184] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 118.227883][ T8182] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.275677][ T6144] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.298303][ T8187] loop6: detected capacity change from 0 to 512 [ 118.305065][ T8187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.305862][ T8189] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1745'. [ 118.312151][ T8187] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.323860][ T8189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1745'. [ 118.331578][ T8187] EXT4-fs (loop6): 1 truncate cleaned up [ 118.345659][ T8187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.428178][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.679965][ T8212] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1754'. [ 118.831848][ T8224] netlink: 'syz.4.1756': attribute type 1 has an invalid length. [ 118.845826][ T8224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 118.857997][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 118.872283][ T8224] vlan1: entered promiscuous mode [ 118.877475][ T8224] bond5: entered promiscuous mode [ 118.897967][ T8224] bond5: (slave dummy0): making interface the new active one [ 118.914756][ T8224] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 118.941888][ T8229] loop5: detected capacity change from 0 to 8192 [ 118.954682][ T8229] bio_check_eod: 36 callbacks suppressed [ 118.954697][ T8229] syz.5.1758: attempt to access beyond end of device [ 118.954697][ T8229] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 118.974051][ T8229] Buffer I/O error on dev loop5, logical block 57847, async page read [ 119.000673][ T8237] SELinux: security_context_str_to_sid (s\^(m`dR%]v;hfePiz׺+8x։?=MSg%אVDXڶ}Y_gWT~Lf00000000000000000000000Bx3!/ھ5;Y$]V1{ȉj+4bR}$PZh [ 119.000673][ T8237] ~~= Tݦ҃IUJ3bfAc@ u+INTT[M|zk@IQ1>dS IN'=Y^_G^1M@`aȥqxY_u\ [ 119.000673][ T8237]  [ 119.000673][ T8237] yҟvyhB/ P^i/ފ [ 119.000673][ T8237] Dlڰ{8AOIA:?v0'!ӜB8kp٫] ^6H76$+NJU#/Jm]UGꦴwM`Z^J*PqUdP}K5\a44 f9ݳ ~-V) failed with errno=-22 [ 119.140238][ T8245] lo speed is unknown, defaulting to 1000 [ 119.153142][ T8248] loop5: detected capacity change from 0 to 512 [ 119.163741][ T8248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.183610][ T8248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.198568][ T8248] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.227902][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.275877][ T8261] loop5: detected capacity change from 0 to 128 [ 119.286411][ T8261] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.299058][ T8261] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.342036][ T8266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8266 comm=syz.0.1770 [ 119.365706][ T4910] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.408029][ T8264] lo speed is unknown, defaulting to 1000 [ 119.471563][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1776'. [ 119.522322][ T8280] bridge: RTM_NEWNEIGH with invalid ether address [ 119.600584][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1782'. [ 119.726521][ T8300] loop6: detected capacity change from 0 to 1024 [ 119.790165][ T8300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.835459][ T8300] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.6.1794: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 119.864172][ T8300] EXT4-fs error (device loop6) in ext4_delete_entry:2739: Corrupt filesystem [ 119.883177][ T8300] EXT4-fs warning (device loop6): ext4_rename_delete:3726: inode #2: comm syz.6.1794: Deleting old file: nlink 4, error=-117 [ 119.933567][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.084282][ T8321] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 120.213180][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 120.213195][ T29] audit: type=1326 audit(1753822275.055:18287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8314 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 120.242980][ T29] audit: type=1326 audit(1753822275.055:18288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8314 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 120.445354][ T8334] netlink: 328 bytes leftover after parsing attributes in process `syz.5.1799'. [ 120.462865][ T8338] netlink: 'syz.4.1800': attribute type 10 has an invalid length. [ 120.470744][ T8338] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1800'. [ 120.487631][ T8338] bond5: (slave dummy0): Releasing active interface [ 120.544463][ T29] audit: type=1326 audit(1753822275.385:18289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 120.588165][ T29] audit: type=1326 audit(1753822275.415:18290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 120.611827][ T29] audit: type=1326 audit(1753822275.415:18291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 120.635395][ T29] audit: type=1326 audit(1753822275.415:18292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 120.638090][ T8354] xt_hashlimit: size too large, truncated to 1048576 [ 120.658914][ T29] audit: type=1326 audit(1753822275.415:18293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 120.658939][ T29] audit: type=1326 audit(1753822275.415:18294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 120.690799][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 120.712596][ T29] audit: type=1326 audit(1753822275.415:18295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 120.712646][ T29] audit: type=1326 audit(1753822275.415:18296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 120.790184][ T8357] netlink: 'syz.1.1808': attribute type 10 has an invalid length. [ 120.823847][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 120.839183][ T8357] dummy0: left promiscuous mode [ 120.844794][ T8363] netlink: 'syz.1.1808': attribute type 10 has an invalid length. [ 120.854425][ T8363] : (slave dummy0): Enslaving as an active interface with an up link [ 120.893236][ T8366] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.009679][ T8378] netlink: 'syz.6.1817': attribute type 4 has an invalid length. [ 121.019348][ T8378] netlink: 'syz.6.1817': attribute type 4 has an invalid length. [ 121.149212][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1820'. [ 121.469621][ T8408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1828'. [ 121.489717][ T8408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8408 comm=syz.4.1828 [ 121.682591][ T8423] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 121.691034][ T8423] ref_ctr decrement failed for inode: 0x4f5 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888109226e00 [ 121.707306][ T8423] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 121.715790][ T8423] ref_ctr decrement failed for inode: 0x4f5 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888109226e00 [ 121.729601][ T8423] uprobe: syz.5.1835:8423 failed to unregister, leaking uprobe [ 121.781497][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1839'. [ 121.868121][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1841'. [ 121.915277][ T8436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8436 comm=syz.5.1841 [ 122.074958][ T8443] lo speed is unknown, defaulting to 1000 [ 122.363550][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 122.372691][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1848'. [ 122.450661][ T8461] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 122.538651][ T8461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 122.803655][ T8483] loop0: detected capacity change from 0 to 512 [ 122.820376][ T8483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.839503][ T8485] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.853464][ T8483] EXT4-fs (loop0): 1 truncate cleaned up [ 122.860526][ T8483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.904181][ T8485] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.953157][ T8485] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.977762][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.032831][ T8485] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.104186][ T8485] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.116351][ T8485] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.130490][ T8485] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.142647][ T8485] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.452800][ T8522] net_ratelimit: 20 callbacks suppressed [ 123.452816][ T8522] netlink: zone id is out of range [ 123.464019][ T8522] netlink: zone id is out of range [ 123.469183][ T8522] netlink: zone id is out of range [ 123.474411][ T8522] netlink: zone id is out of range [ 123.490873][ T8522] netlink: zone id is out of range [ 123.496032][ T8522] netlink: zone id is out of range [ 123.511357][ T8522] netlink: zone id is out of range [ 123.516619][ T8522] netlink: zone id is out of range [ 123.523759][ T8522] netlink: zone id is out of range [ 123.529029][ T8522] netlink: zone id is out of range [ 124.098172][ T8544] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.106437][ T8544] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.114901][ T8544] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.117265][ T8546] loop6: detected capacity change from 0 to 128 [ 124.123192][ T8544] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.151051][ T8544] vxlan1: entered promiscuous mode [ 124.212761][ T8547] syz.6.1883: attempt to access beyond end of device [ 124.212761][ T8547] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 124.265790][ T8547] syz.6.1883: attempt to access beyond end of device [ 124.265790][ T8547] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 124.304058][ T8547] syz.6.1883: attempt to access beyond end of device [ 124.304058][ T8547] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 124.341215][ T8547] syz.6.1883: attempt to access beyond end of device [ 124.341215][ T8547] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 124.466872][ T8511] syz.1.1867 (8511) used greatest stack depth: 5904 bytes left [ 124.526961][ T8552] lo speed is unknown, defaulting to 1000 [ 124.745040][ T8558] loop0: detected capacity change from 0 to 512 [ 124.776023][ T8558] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.791516][ T8558] EXT4-fs (loop0): mount failed [ 125.270303][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 125.270315][ T29] audit: type=1326 audit(1753822280.105:18484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 125.300958][ T29] audit: type=1326 audit(1753822280.145:18485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 125.352599][ T29] audit: type=1326 audit(1753822280.145:18486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 125.376232][ T29] audit: type=1326 audit(1753822280.145:18487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 125.399988][ T29] audit: type=1326 audit(1753822280.145:18488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 125.423536][ T29] audit: type=1326 audit(1753822280.145:18489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 125.447039][ T29] audit: type=1326 audit(1753822280.145:18490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 125.470599][ T29] audit: type=1326 audit(1753822280.145:18491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 125.494089][ T29] audit: type=1326 audit(1753822280.145:18492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8590 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 125.546784][ T8598] bond6: entered promiscuous mode [ 125.551893][ T8598] bond6: entered allmulticast mode [ 125.561199][ T8598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 125.582452][ T8598] bond6 (unregistering): Released all slaves [ 125.598598][ T29] audit: type=1400 audit(1753822280.425:18493): avc: denied { map } for pid=8602 comm="syz.0.1901" path="socket:[22936]" dev="sockfs" ino=22936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.668444][ T8603] loop0: detected capacity change from 0 to 2048 [ 125.732665][ T8603] loop0: p1 < > p4 [ 125.739807][ T8603] loop0: p4 size 8388608 extends beyond EOD, truncated [ 125.772293][ T8611] __nla_validate_parse: 5 callbacks suppressed [ 125.772308][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'. [ 125.818403][ T8618] loop0: detected capacity change from 0 to 512 [ 125.839884][ T8618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.871921][ T8618] EXT4-fs (loop0): 1 truncate cleaned up [ 125.878407][ T8618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.958787][ T8620] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1910'. [ 125.993106][ T8626] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.053446][ T8632] netlink: 'syz.4.1915': attribute type 10 has an invalid length. [ 126.073125][ T8632] dummy0: left promiscuous mode [ 126.079373][ T8632] team0: Port device dummy0 added [ 126.087984][ T8632] netlink: 'syz.4.1915': attribute type 10 has an invalid length. [ 126.097311][ T8632] team0: Port device dummy0 removed [ 126.104063][ T8632] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.117958][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.127628][ T8626] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.172134][ T8626] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.233812][ T8626] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.292537][ T8626] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.312814][ T8626] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.325873][ T8626] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.345415][ T8626] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.601287][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 126.623080][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'. [ 126.998940][ T8655] loop5: detected capacity change from 0 to 512 [ 127.011528][ T8655] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.030678][ T8655] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.067554][ T8655] EXT4-fs (loop5): 1 truncate cleaned up [ 127.113910][ T8655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.219024][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.463277][ T8670] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 127.485813][ T8672] loop0: detected capacity change from 0 to 1024 [ 127.502053][ T8670] 8021q: adding VLAN 0 to HW filter on device bond6 [ 127.509568][ T8672] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.523006][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 127.567859][ T8670] bond6 (unregistering): Released all slaves [ 127.634398][ T8672] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.1932: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.707977][ T8672] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1932: Failed to acquire dquot type 0 [ 127.741839][ T8672] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.1932: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.772218][ T8672] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1932: Invalid inode bitmap blk 0 in block_group 0 [ 127.793091][ T4525] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.819849][ T8672] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 127.830947][ T4525] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:53: Failed to release dquot type 0 [ 127.847176][ T8672] EXT4-fs (loop0): 1 orphan inode deleted [ 127.856324][ T8672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.910616][ T8672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.186838][ T8694] loop0: detected capacity change from 0 to 8192 [ 128.399399][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1946'. [ 128.517314][ T8720] netlink: 'syz.0.1950': attribute type 4 has an invalid length. [ 128.568786][ T8722] vlan2: entered allmulticast mode [ 128.574035][ T8722] bridge_slave_0: entered allmulticast mode [ 128.875052][ T8740] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 128.894433][ T8742] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 128.901034][ T8742] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 128.906818][ T8740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.908877][ T8742] vhci_hcd vhci_hcd.0: Device attached [ 128.933122][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 128.944350][ T8744] vhci_hcd: connection closed [ 128.944480][ T4494] vhci_hcd: stop threads [ 128.953605][ T4494] vhci_hcd: release socket [ 128.958067][ T4494] vhci_hcd: disconnect device [ 128.996814][ T8746] bond4 (unregistering): Released all slaves [ 129.026005][ T8750] netlink: 'syz.5.1961': attribute type 13 has an invalid length. [ 129.077571][ T8750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.098242][ T8750] net_ratelimit: 2 callbacks suppressed [ 129.098255][ T8750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.153823][ T8759] netlink: zone id is out of range [ 129.159071][ T8759] netlink: zone id is out of range [ 129.164984][ T8759] netlink: zone id is out of range [ 129.170161][ T8759] netlink: zone id is out of range [ 129.177887][ T8759] netlink: zone id is out of range [ 129.183631][ T8759] netlink: zone id is out of range [ 129.189102][ T8759] netlink: zone id is out of range [ 129.195980][ T8759] netlink: zone id is out of range [ 129.201794][ T8759] netlink: zone id is out of range [ 129.250727][ T8766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8766 comm=syz.5.1967 [ 129.380120][ T8778] netlink: 'syz.5.1973': attribute type 1 has an invalid length. [ 129.395811][ T8778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.410759][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1973'. [ 129.423522][ T8778] bond4 (unregistering): Released all slaves [ 129.538499][ T8783] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 129.687907][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1980'. [ 129.703947][ T8797] 8021q: adding VLAN 0 to HW filter on device bond6 [ 129.725203][ T8797] bond6 (unregistering): Released all slaves [ 129.844820][ T8808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8808 comm=syz.4.1984 [ 129.884772][ T8808] netlink: 'syz.4.1984': attribute type 1 has an invalid length. [ 130.416633][ T8857] netlink: 'syz.0.2007': attribute type 4 has an invalid length. [ 130.439904][ T8857] netlink: 'syz.0.2007': attribute type 4 has an invalid length. [ 130.472108][ T23] lo speed is unknown, defaulting to 1000 [ 130.477849][ T23] syz2: Port: 1 Link ACTIVE [ 131.095961][ T29] kauditd_printk_skb: 22256 callbacks suppressed [ 131.095976][ T29] audit: type=1326 audit(1753822285.935:40747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 131.146295][ T29] audit: type=1326 audit(1753822285.965:40748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 131.158132][ T8878] __nla_validate_parse: 2 callbacks suppressed [ 131.158148][ T8878] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2015'. [ 131.170096][ T29] audit: type=1326 audit(1753822285.965:40749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 131.196780][ T8878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2015'. [ 131.208607][ T29] audit: type=1326 audit(1753822285.965:40750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.4.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296ba2e9a9 code=0x7ffc0000 [ 131.633077][ T8884] tipc: Cannot configure node identity twice [ 131.639709][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2018'. [ 131.670681][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 131.756003][ T8775] syz.1.1972 (8775) used greatest stack depth: 5832 bytes left [ 131.783242][ T8893] loop6: detected capacity change from 0 to 2048 [ 131.808086][ T8893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.860316][ T8904] lo speed is unknown, defaulting to 1000 [ 131.960808][ T8913] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 132.015664][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.033273][ T29] audit: type=1326 audit(1753822286.875:40751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.5.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 132.057037][ T29] audit: type=1326 audit(1753822286.875:40752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.5.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 132.057287][ T8922] validate_nla: 1 callbacks suppressed [ 132.057299][ T8922] netlink: 'syz.1.2030': attribute type 13 has an invalid length. [ 132.097676][ T29] audit: type=1326 audit(1753822286.925:40753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.5.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 132.121347][ T29] audit: type=1326 audit(1753822286.925:40754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.5.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 132.145102][ T29] audit: type=1326 audit(1753822286.925:40755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.5.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 132.168602][ T29] audit: type=1326 audit(1753822286.925:40756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.5.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 132.207097][ T8922] 8021q: adding VLAN 0 to HW filter on device  [ 132.469746][ T8953] xt_hashlimit: size too large, truncated to 1048576 [ 132.511824][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'. [ 132.542086][ T8957] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.566574][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2045'. [ 132.572609][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2046'. [ 132.594472][ T8957] bond4 (unregistering): Released all slaves [ 132.772584][ T8974] netlink: 'syz.6.2051': attribute type 4 has an invalid length. [ 133.021198][ T8981] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2055'. [ 133.052436][ T8985] netlink: 'wޣ': attribute type 10 has an invalid length. [ 133.060138][ T8985] dummy0: left allmulticast mode [ 133.109937][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2067'. [ 133.132764][ T8993] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2058'. [ 133.298193][ T9001] loop5: detected capacity change from 0 to 8192 [ 133.364483][ T9011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9011 comm=syz.1.2065 [ 134.692352][ T9061] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 134.741445][ T9061] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 134.873945][ T9070] lo speed is unknown, defaulting to 1000 [ 135.173644][ T9071] net_ratelimit: 3 callbacks suppressed [ 135.173658][ T9071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.628299][ T9087] rdma_rxe: rxe_newlink: failed to add bridge0 [ 135.738268][ T9093] netlink: 'syz.6.2100': attribute type 4 has an invalid length. [ 135.789390][ T9093] netlink: 'syz.6.2100': attribute type 4 has an invalid length. [ 136.334436][ T9117] __nla_validate_parse: 6 callbacks suppressed [ 136.334451][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2109'. [ 136.419154][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 136.419168][ T29] audit: type=1326 audit(1753822291.255:40966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb43ec5967 code=0x7ffc0000 [ 136.462643][ T29] audit: type=1326 audit(1753822291.295:40967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb43e6ab89 code=0x7ffc0000 [ 136.486121][ T29] audit: type=1326 audit(1753822291.295:40968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb43ec5967 code=0x7ffc0000 [ 136.509667][ T29] audit: type=1326 audit(1753822291.295:40969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb43e6ab89 code=0x7ffc0000 [ 136.533082][ T29] audit: type=1326 audit(1753822291.295:40970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 136.556615][ T29] audit: type=1326 audit(1753822291.295:40971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 136.580205][ T29] audit: type=1326 audit(1753822291.295:40972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 136.603865][ T29] audit: type=1326 audit(1753822291.295:40973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 136.627375][ T29] audit: type=1326 audit(1753822291.295:40974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 136.650931][ T29] audit: type=1326 audit(1753822291.295:40975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43ece9a9 code=0x7ffc0000 [ 136.828221][ T9122] loop5: detected capacity change from 0 to 8192 [ 136.838364][ T9122] syz.5.2112: attempt to access beyond end of device [ 136.838364][ T9122] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 136.851850][ T9122] Buffer I/O error on dev loop5, logical block 57847, async page read [ 136.961427][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 136.975813][ T9138] IPVS: Error joining to the multicast group [ 137.013399][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 137.075266][ T9155] tipc: New replicast peer: 255.255.255.255 [ 137.081482][ T9155] tipc: Enabled bearer , priority 10 [ 137.237993][ T9162] lo speed is unknown, defaulting to 1000 [ 137.387605][ T9172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2132'. [ 137.429254][ T9176] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2134'. [ 137.656780][ T9184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9184 comm=syz.6.2138 [ 137.904869][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2141'. [ 137.915644][ T9196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.924391][ T9196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.952129][ T9198] netlink: zone id is out of range [ 137.965029][ T9198] netlink: zone id is out of range [ 137.979337][ T9198] netlink: zone id is out of range [ 138.053441][ T9201] x_tables: duplicate underflow at hook 4 [ 138.267893][ T9187] Set syz1 is full, maxelem 65536 reached [ 138.358776][ T9207] lo speed is unknown, defaulting to 1000 [ 138.390886][ T9216] netlink: 'syz.0.2150': attribute type 12 has an invalid length. [ 138.798790][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2158'. [ 138.951627][ T9252] loop5: detected capacity change from 0 to 512 [ 139.028063][ T9256] netlink: 'syz.6.2165': attribute type 1 has an invalid length. [ 139.028247][ T9252] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.035862][ T9256] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2165'. [ 139.075778][ T9252] EXT4-fs (loop5): 1 truncate cleaned up [ 139.087654][ T9252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.251010][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.306337][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.314855][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.383303][ T9278] netlink: 'syz.5.2170': attribute type 1 has an invalid length. [ 139.391192][ T9278] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2170'. [ 140.113634][ T9306] tipc: New replicast peer: 255.255.255.255 [ 140.119983][ T9306] tipc: Enabled bearer , priority 10 [ 140.418735][ T9323] tipc: New replicast peer: 255.255.255.83 [ 140.424967][ T9323] tipc: Enabled bearer , priority 10 [ 140.466749][ T9324] loop5: detected capacity change from 0 to 8192 [ 140.476910][ T9324] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.489886][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'. [ 140.547693][ T9316] xt_CT: No such helper "pptp" [ 141.361945][ T9361] 9pnet_fd: Insufficient options for proto=fd [ 141.378128][ T9363] loop6: detected capacity change from 0 to 512 [ 141.385263][ T9363] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 141.503483][ T9363] EXT4-fs (loop6): 1 truncate cleaned up [ 141.509592][ T9363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.524460][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 141.524561][ T29] audit: type=1326 audit(1753822296.365:41220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d7767d310 code=0x7ffc0000 [ 141.555382][ T29] audit: type=1326 audit(1753822296.365:41221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2d7767d6f7 code=0x7ffc0000 [ 141.560983][ T36] tipc: Node number set to 1328396980 [ 141.578844][ T29] audit: type=1326 audit(1753822296.365:41222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d7767d310 code=0x7ffc0000 [ 141.607704][ T29] audit: type=1326 audit(1753822296.365:41223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 141.631238][ T29] audit: type=1326 audit(1753822296.375:41224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 141.654749][ T29] audit: type=1326 audit(1753822296.375:41225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 141.678449][ T29] audit: type=1326 audit(1753822296.375:41226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 141.702099][ T29] audit: type=1326 audit(1753822296.375:41227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 141.725644][ T29] audit: type=1326 audit(1753822296.375:41228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 141.778931][ T29] audit: type=1326 audit(1753822296.535:41229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7767e9a9 code=0x7ffc0000 [ 141.858738][ T6144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.886313][ T9373] loop5: detected capacity change from 0 to 4096 [ 141.894849][ T9373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.915312][ T9373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.110522][ T9388] unsupported nla_type 52263 [ 142.138846][ T9388] lo: left allmulticast mode [ 142.156188][ T9388] tunl0: left allmulticast mode [ 142.161259][ T9388] gre0: left allmulticast mode [ 142.166105][ T9388] gretap0: left allmulticast mode [ 142.171241][ T9388] erspan0: left allmulticast mode [ 142.176388][ T9388] ip_vti0: left allmulticast mode [ 142.182024][ T9388] ip6_vti0: left allmulticast mode [ 142.187256][ T9388] sit0: left allmulticast mode [ 142.192145][ T9388] ip6tnl0: left allmulticast mode [ 142.197313][ T9388] ip6gre0: left allmulticast mode [ 142.202533][ T9388] syz_tun: left allmulticast mode [ 142.207676][ T9388] ip6gretap0: left allmulticast mode [ 142.213098][ T9388] bridge0: left allmulticast mode [ 142.218181][ T9388] vcan0: left allmulticast mode [ 142.223228][ T9388] bond0: left allmulticast mode [ 142.228244][ T9388] team0: left allmulticast mode [ 142.250245][ T9388] dummy0: left allmulticast mode [ 142.255512][ T9388] nlmon0: left allmulticast mode [ 142.260528][ T9388] caif0: left allmulticast mode [ 142.265655][ T9388] batadv0: left allmulticast mode [ 142.270767][ T9388] vxcan0: left allmulticast mode [ 142.275892][ T9388] vxcan1: left allmulticast mode [ 142.280947][ T9388] veth0: left allmulticast mode [ 142.285959][ T9388] veth1: left allmulticast mode [ 142.291030][ T9388] wg0: left allmulticast mode [ 142.295809][ T9388] wg1: left allmulticast mode [ 142.300534][ T9388] veth0_to_bridge: left allmulticast mode [ 142.306478][ T9388] bridge_slave_0: left allmulticast mode [ 142.312184][ T9388] veth1_to_bridge: left allmulticast mode [ 142.318035][ T9388] bridge_slave_1: left allmulticast mode [ 142.323799][ T9388] veth0_to_bond: left allmulticast mode [ 142.329457][ T9388] bond_slave_0: left allmulticast mode [ 142.335015][ T9388] veth0_to_team: left allmulticast mode [ 142.340732][ T9388] team_slave_0: left allmulticast mode [ 142.346436][ T9388] veth1_to_team: left allmulticast mode [ 142.352117][ T9388] team_slave_1: left allmulticast mode [ 142.357657][ T9388] veth0_to_batadv: left allmulticast mode [ 142.363493][ T9388] batadv_slave_0: left allmulticast mode [ 142.369289][ T9388] veth1_to_batadv: left allmulticast mode [ 142.375115][ T9388] batadv_slave_1: left allmulticast mode [ 142.380866][ T9388] xfrm0: left allmulticast mode [ 142.385780][ T9388] veth0_to_hsr: left allmulticast mode [ 142.391425][ T9388] veth1_to_hsr: left allmulticast mode [ 142.396981][ T9388] hsr0: left allmulticast mode [ 142.401820][ T9388] hsr_slave_0: left allmulticast mode [ 142.407234][ T9388] hsr_slave_1: left allmulticast mode [ 142.412690][ T9388] veth1_virt_wifi: left allmulticast mode [ 142.418466][ T9388] veth0_virt_wifi: left allmulticast mode [ 142.424305][ T9388] veth1_macvtap: left allmulticast mode [ 142.430070][ T9388] veth0_macvtap: left allmulticast mode [ 142.435808][ T9388] macvtap0: left allmulticast mode [ 142.441007][ T9388] macsec0: left allmulticast mode [ 142.446140][ T9388] geneve0: left allmulticast mode [ 142.451285][ T9388] geneve1: left allmulticast mode [ 142.456426][ T9388] vxlan0: left allmulticast mode [ 142.461506][ T9388] ip6tnl1: left allmulticast mode [ 142.466660][ T9388] syztnl1: left allmulticast mode [ 142.471759][ T9388] bond2: left allmulticast mode [ 142.513497][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.541934][ T9398] __nla_validate_parse: 4 callbacks suppressed [ 142.541947][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2221'. [ 142.577039][ T9400] loop0: detected capacity change from 0 to 256 [ 142.593302][ T9400] FAT-fs (loop0): Directory bread(block 64) failed [ 142.599940][ T9400] FAT-fs (loop0): Directory bread(block 65) failed [ 142.608457][ T9400] FAT-fs (loop0): Directory bread(block 66) failed [ 142.616664][ T9400] FAT-fs (loop0): Directory bread(block 67) failed [ 142.626531][ T9400] FAT-fs (loop0): Directory bread(block 68) failed [ 142.633270][ T9400] FAT-fs (loop0): Directory bread(block 69) failed [ 142.640234][ T9400] FAT-fs (loop0): Directory bread(block 70) failed [ 142.647040][ T9400] FAT-fs (loop0): Directory bread(block 71) failed [ 142.653677][ T9400] FAT-fs (loop0): Directory bread(block 72) failed [ 142.660227][ T9400] FAT-fs (loop0): Directory bread(block 73) failed [ 142.696131][ T9400] syz.0.2222: attempt to access beyond end of device [ 142.696131][ T9400] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 142.769388][ T9423] loop5: detected capacity change from 0 to 128 [ 142.777315][ T9417] wg2: left promiscuous mode [ 142.782335][ T9417] wg2: left allmulticast mode [ 142.792464][ T9423] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.793437][ T9417] bond0: left promiscuous mode [ 142.809676][ T9417] batadv1: left promiscuous mode [ 142.814729][ T9417] batadv1: left allmulticast mode [ 142.815619][ T9423] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.833757][ T9417] team1: left promiscuous mode [ 142.838632][ T9417] team1: left allmulticast mode [ 142.844185][ T9417] bond3: left promiscuous mode [ 142.879421][ T9417] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.887876][ T9417] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.896284][ T9417] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.897675][ T4910] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.904749][ T9417] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.971244][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2233'. [ 142.994546][ T9427] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.013677][ T9427] vlan0: entered allmulticast mode [ 143.019125][ T9427] bond4: entered allmulticast mode [ 143.103600][ T9447] netlink: 'syz.1.2242': attribute type 7 has an invalid length. [ 143.111610][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 143.155581][ T9452] ip6tnl0: entered promiscuous mode [ 143.173619][ T9452] veth1_to_bond: entered allmulticast mode [ 143.180924][ T9452] veth1_to_bond: left allmulticast mode [ 143.186507][ T9452] ip6tnl0: left promiscuous mode [ 143.203168][ T9458] lo: left allmulticast mode [ 143.208930][ T9458] tunl0: left allmulticast mode [ 143.219181][ T9458] gre0: left allmulticast mode [ 143.225646][ T9458] gretap0: left allmulticast mode [ 143.231990][ T9458] erspan0: left allmulticast mode [ 143.237762][ T9458] ip_vti0: left allmulticast mode [ 143.243598][ T9458] ip6_vti0: left allmulticast mode [ 143.249581][ T9458] sit0: left allmulticast mode [ 143.256207][ T9458] ip6tnl0: left allmulticast mode [ 143.262285][ T9458] ip6gre0: left allmulticast mode [ 143.267879][ T9458] ip6gretap0: left allmulticast mode [ 143.274618][ T9458] vcan0: left allmulticast mode [ 143.279821][ T9458] bond0: left allmulticast mode [ 143.284715][ T9458] bridge_slave_1: left allmulticast mode [ 143.291389][ T9458] nlmon0: left allmulticast mode [ 143.296645][ T9458] caif0: left allmulticast mode [ 143.301595][ T9458] vxcan0: left allmulticast mode [ 143.306619][ T9458] vxcan1: left allmulticast mode [ 143.311657][ T9458] veth0: left allmulticast mode [ 143.316600][ T9458] veth1: left allmulticast mode [ 143.321523][ T9458] wg0: left allmulticast mode [ 143.326260][ T9458] wg1: left allmulticast mode [ 143.331001][ T9458] veth0_to_bridge: left allmulticast mode [ 143.336789][ T9458] bridge_slave_0: left allmulticast mode [ 143.342645][ T9458] veth1_to_bridge: left allmulticast mode [ 143.348730][ T9458] veth0_to_bond: left allmulticast mode [ 143.354450][ T9458] @: left allmulticast mode [ 143.359412][ T9458] veth0_to_team: left allmulticast mode [ 143.365142][ T9458] team_slave_0: left allmulticast mode [ 143.370751][ T9458] veth1_to_team: left allmulticast mode [ 143.376357][ T9458] team_slave_1: left allmulticast mode [ 143.381946][ T9458] veth1_to_batadv: left allmulticast mode [ 143.387690][ T9458] batadv_slave_1: left allmulticast mode [ 143.393388][ T9458] xfrm0: left allmulticast mode [ 143.398385][ T9458] veth0_to_hsr: left allmulticast mode [ 143.403952][ T9458] veth1_to_hsr: left allmulticast mode [ 143.409673][ T9458] veth1_virt_wifi: left allmulticast mode [ 143.415418][ T9458] veth0_virt_wifi: left allmulticast mode [ 143.421222][ T9458] veth1_vlan: left allmulticast mode [ 143.428106][ T9458] : left allmulticast mode [ 143.433154][ T9458] vlan1: left allmulticast mode [ 143.438107][ T9458] macvlan0: left allmulticast mode [ 143.443300][ T9458] macvlan1: left allmulticast mode [ 143.448571][ T9458] ipvlan0: left allmulticast mode [ 143.453660][ T9458] ipvlan1: left allmulticast mode [ 143.458707][ T9458] veth0_vlan: left allmulticast mode [ 143.464165][ T9458] veth1_macvtap: left allmulticast mode [ 143.469786][ T9458] veth0_macvtap: left allmulticast mode [ 143.475362][ T9458] macvtap0: left allmulticast mode [ 143.480561][ T9458] macsec0: left allmulticast mode [ 143.485753][ T9458] geneve0: left allmulticast mode [ 143.490907][ T9458] geneve1: left allmulticast mode [ 143.496043][ T9458] batadv1: left allmulticast mode [ 143.501138][ T9458] bond1: left allmulticast mode [ 143.506062][ T9458] bridge0: left allmulticast mode [ 143.511261][ T9458] vxlan0: left allmulticast mode [ 143.516213][ T9458] gre1: left allmulticast mode [ 143.521241][ T9458] bond2: left allmulticast mode [ 143.526270][ T9458] wireguard0: left allmulticast mode [ 143.531589][ T9458] team0: left allmulticast mode [ 143.536659][ T9458] ip6tnl1: left allmulticast mode [ 143.541891][ T9458] bridge1: left allmulticast mode [ 143.546968][ T9458] team1: left allmulticast mode [ 143.553602][ T9458] veth2: left allmulticast mode [ 143.558605][ T9458] veth3: left allmulticast mode [ 143.563515][ T9458] ip6tnl2: left allmulticast mode [ 143.569358][ T9458] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.577862][ T9458] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.586205][ T9458] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.594565][ T9458] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.603087][ T9458] vxlan1: left promiscuous mode [ 143.714131][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2252'. [ 143.729098][ T9476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.743045][ T9476] vlan0: entered allmulticast mode [ 143.748267][ T9476] bond3: entered allmulticast mode [ 143.989975][ T9495] lo speed is unknown, defaulting to 1000 [ 144.513619][ T9514] netlink: 'syz.4.2267': attribute type 3 has an invalid length. [ 144.521954][ T9514] netlink: 'syz.4.2267': attribute type 3 has an invalid length. [ 144.525229][ T9516] loop6: detected capacity change from 0 to 128 [ 144.537687][ T9516] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.623530][ T386] ================================================================== [ 144.631645][ T386] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 144.641107][ T386] [ 144.643419][ T386] write to 0xffff88811b666156 of 4 bytes by task 9521 on cpu 1: [ 144.651034][ T386] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 144.656923][ T386] generic_perform_write+0x2c2/0x490 [ 144.662198][ T386] __generic_file_write_iter+0x9e/0x120 [ 144.667730][ T386] generic_file_write_iter+0x8d/0x2f0 [ 144.673110][ T386] iter_file_splice_write+0x5ef/0x970 [ 144.678475][ T386] direct_splice_actor+0x153/0x2a0 [ 144.683579][ T386] splice_direct_to_actor+0x30f/0x680 [ 144.688942][ T386] do_splice_direct+0xda/0x150 [ 144.693706][ T386] do_sendfile+0x380/0x650 [ 144.698110][ T386] __x64_sys_sendfile64+0x105/0x150 [ 144.703296][ T386] x64_sys_call+0x2bb0/0x2ff0 [ 144.707962][ T386] do_syscall_64+0xd2/0x200 [ 144.712461][ T386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.718342][ T386] [ 144.720649][ T386] read to 0xffff88811b666000 of 512 bytes by task 386 on cpu 0: [ 144.728261][ T386] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 144.734152][ T386] generic_perform_write+0x2c2/0x490 [ 144.739424][ T386] shmem_file_write_iter+0xc5/0xf0 [ 144.744524][ T386] lo_rw_aio+0x69d/0x760 [ 144.748752][ T386] loop_process_work+0x52d/0xa60 [ 144.753676][ T386] loop_workfn+0x31/0x40 [ 144.757907][ T386] process_scheduled_works+0x4cb/0x9d0 [ 144.763389][ T386] worker_thread+0x582/0x770 [ 144.767975][ T386] kthread+0x489/0x510 [ 144.772036][ T386] ret_from_fork+0xdd/0x150 [ 144.776524][ T386] ret_from_fork_asm+0x1a/0x30 [ 144.781275][ T386] [ 144.783585][ T386] Reported by Kernel Concurrency Sanitizer on: [ 144.789724][ T386] CPU: 0 UID: 0 PID: 386 Comm: kworker/u8:6 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 144.801863][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.811910][ T386] Workqueue: loop6 loop_workfn [ 144.816671][ T386] ================================================================== [ 144.830895][ T9520] loop5: detected capacity change from 0 to 2048 [ 144.844512][ T9520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.886494][ T9523] lo speed is unknown, defaulting to 1000 [ 144.905183][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'. [ 145.035193][ T4910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.