last executing test programs: 2.971940035s ago: executing program 4 (id=3706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.970136195s ago: executing program 0 (id=3718): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000280)='P', 0x1}], 0x1) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000080)={0x0, 0x8, 0xf7f3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x2508, &(0x7f0000000640)={0x0, 0x10645c, 0x80, 0x400042, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x48080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x1000000000000000, 0x0, 0x0) 2.383762224s ago: executing program 3 (id=3711): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x4000, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) 2.360839165s ago: executing program 0 (id=3712): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000200), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bind$packet(0xffffffffffffffff, 0x0, 0x0) 2.274644766s ago: executing program 3 (id=3714): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.111423999s ago: executing program 2 (id=3715): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3, &(0x7f0000000540), 0x1, 0x4a1, &(0x7f0000000000)="$eJzs3c1rXOUaAPBnZpq0SXNvP+7l0vaCLVSoHzSTD6SJunGlLgpiwY1Cjck01kwyITOpTegi1V0XLkRREBfu/Qvc2JVFENe6FxdS0RpBBWHknJmJ+Zo4aJqBnN8PTuc9H53nfTM8L++855w5AWTWmeSfXMRARHwZEUcaqxsPONN4Wb13YzJZclGvX/ohlx6XrLcObf2/wxGxkhSORjz/dMQrua1xq0vLMxPlcmmhuV6szc4Xq0vL56/OTkyXpktzw2MXxsfHhkZHxnetrbfeeu3WxU+e7f34lzfv3nn7s0+Tag00961vx25qNL0njm3a/uT9CNYFhYg4EBF93a4If0vy+f0nIs6m+X8kCumnCWRBvV6v/14/2G73Sh3Yt/LpGDiXH4yIRjmfHxxsjOH/G/35cqVae/RKZXFuqjFWPho9+StXy6Wh5neFo9GTS9aHG8P9tfWRTeujEekY+J1CX7o+OFkpT+1tVwdscnhT/v9caOQ/kBG+8kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q+Z9NzFi8lSb93/PnVtaXGmcu38VKk6Mzi7ODk4WVmYH5yuVKbTe3Zm/+r9ypXK/PBjsXi9WCtVa8Xq0vLl2criXO1yel//5VLPnrQK6MSx07e/zkXEyuN96ZLobe6Tq7C/1eu56PY9yEB3FLrdAQFdY+oPsst3fGCbn+jd4FC7HfO7Xxdgb+S7XQGga86ddP4Pssr8P2SX+X/ILmN8wPw/ZI/5f8iugTbP//rXumd3DUXEvyPiq0LPwdazvoD9IP9drjn+P3fkwYHNe3tzv6anCHoj4vUPLr13faJWWxhOtv+4tr32fnP7SDfqD3SqlaetPAYAsmv13o3J1rKXcb9/qnERwtb4B5pzk4fSc5T9q7kN1yrkdunahZWbEXFiu/i55vPOG2c++lcLW+Ifb77mGm+R1vdA+tz0vYl/cl38B9bFP/WP/yqQDbeT/mdou/zLpzkda/m3sf8Z2KVrJ9r3f/m1/q/Qpv873WGMVz9849u28W9GnNo2fiveoTTW5vhJ3c51GP/uSy/8r92++keN99kufktSKtZm54vVpeXz6e/ITZfmhscujI+PDY2OjBfTOepia6Z6qydOfHFnp/b3t4m/U/uTbQ932P7f/v/5i2d2iP/Q2e0//+M7xO+LiEc6jP/TyDcvt9uXxJ9q0/78DvGTbaMdxq+++8zBDg8FAPZAdWl5ZqJcLi0oKCgorBW63TMB99ufSd/tmgAAAAAAAAAAAACd2ovLibvdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/eCPAAAA//9M99Zf") ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000001640)={{}, "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"}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) 2.095551459s ago: executing program 0 (id=3716): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x91511, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6dd0, 0x2}, 0x5c70, 0x7, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.01960119s ago: executing program 2 (id=3719): socket(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0xc56, 0x0) msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0xfd1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") 1.301414721s ago: executing program 3 (id=3720): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x9) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 1.300157051s ago: executing program 1 (id=3721): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead858478", 0x14, 0xfffffffffffffffd) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 1.294465541s ago: executing program 2 (id=3722): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1.280391481s ago: executing program 0 (id=3723): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a00002"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c48, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf8d, 0xdc}}, './bus\x00'}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000200)={0x88, @multicast1, 0x4e20, 0x0, 'nq\x00', 0x2a, 0x2}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) creat(&(0x7f0000000040)='./bus\x00', 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.223724792s ago: executing program 0 (id=3724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) write$binfmt_aout(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r2, r1, 0x0, 0x7ffff000) 1.212461482s ago: executing program 1 (id=3725): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000280)='P', 0x1}], 0x1) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000080)={0x0, 0x8, 0xf7f3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x2508, &(0x7f0000000640)={0x0, 0x10645c, 0x80, 0x400042, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x48080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x1000000000000000, 0x0, 0x0) 1.039938555s ago: executing program 4 (id=3726): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40080) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8=r0], 0x48) creat(&(0x7f0000000980)='./bus\x00', 0x19) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x4, &(0x7f0000000000), 0x1, 0x4e4, &(0x7f0000000a40)="$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") 1.039095575s ago: executing program 3 (id=3727): llistxattr(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) 980.821916ms ago: executing program 3 (id=3728): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 979.981576ms ago: executing program 2 (id=3738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 926.758487ms ago: executing program 4 (id=3729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x8c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 825.002068ms ago: executing program 2 (id=3730): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x14, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="d8000000140081044e81f782db44b904021f080219000000040060a118000200e800000a09000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c046100a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed04ffece0b42a9ecbee5de6ccd40dd68adbeffa447ef4a6fbd3824305240c000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 824.167848ms ago: executing program 1 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mq_unlink(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) syslog(0x2, 0xffffffffffffffff, 0x4b) 612.811031ms ago: executing program 4 (id=3731): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 514.336023ms ago: executing program 2 (id=3732): timerfd_create(0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 513.802263ms ago: executing program 1 (id=3744): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x74a1, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 387.880655ms ago: executing program 1 (id=3733): bpf$PROG_LOAD(0x5, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x7}, 0x18) openat$bsg(0xffffffffffffff9c, 0x0, 0x60000, 0x0) syz_io_uring_setup(0x3dd8, 0x0, 0x0, &(0x7f0000001800)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 250.438147ms ago: executing program 4 (id=3734): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x91511, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6dd0, 0x2}, 0x5c70, 0x7, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 249.827637ms ago: executing program 0 (id=3747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) write$binfmt_aout(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r2, r1, 0x0, 0x7ffff000) 1.580191ms ago: executing program 4 (id=3735): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead858478", 0x14, 0xfffffffffffffffd) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 613.791µs ago: executing program 1 (id=3749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "cb"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$KDSKBLED(r1, 0x4b65, 0x5) rseq(&(0x7f0000002d80), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0xffffffffdff13fff, 0x17) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x401, 0x0) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 0s ago: executing program 3 (id=3750): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)='g', 0xffffffffffffffdf, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) writev(r1, 0x0, 0x0) close_range(r0, r1, 0x0) kernel console output (not intermixed with test programs): 294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 165.930619][ T29] audit: type=1326 audit(1750251024.838:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 165.954801][ T29] audit: type=1326 audit(1750251024.838:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 165.978275][ T29] audit: type=1326 audit(1750251024.838:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 166.002436][ T29] audit: type=1326 audit(1750251024.888:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f818dbdd290 code=0x7ffc0000 [ 166.025991][ T29] audit: type=1326 audit(1750251024.888:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 166.052551][ T29] audit: type=1326 audit(1750251024.888:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10814 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 166.302777][T10826] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 166.316157][T10826] bond_slave_0: left promiscuous mode [ 166.335477][T10828] loop0: detected capacity change from 0 to 512 [ 166.344013][T10826] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 166.361532][T10828] EXT4-fs: Ignoring removed oldalloc option [ 166.384955][T10828] EXT4-fs: inline encryption not supported [ 166.395311][T10826] bond_slave_1: left promiscuous mode [ 166.402457][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'. [ 166.409690][T10826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.421282][T10828] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 166.430228][T10828] EXT4-fs (loop0): 1 truncate cleaned up [ 166.436344][T10828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.461132][T10826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.481292][T10826] bond4: (slave bond5): Releasing backup interface [ 166.509356][T10826] bond0: (slave bond6): Releasing backup interface [ 166.515942][T10826] bond0: (slave bond6): the permanent HWaddr of slave - e2:99:91:2f:77:e3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 166.538539][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.563082][T10826] bond0: (slave gretap1): making interface the new active one [ 166.598490][T10826] bond0: (slave gretap1): Releasing backup interface [ 166.717673][T10805] syz.3.2538 (10805) used greatest stack depth: 4832 bytes left [ 166.736203][T10848] tls_set_device_offload_rx: netdev not found [ 166.772703][T10850] xt_policy: too many policy elements [ 166.801822][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'. [ 166.822617][T10854] hsr_slave_0 (unregistering): left promiscuous mode [ 166.991763][T10876] xt_TPROXY: Can be used only with -p tcp or -p udp [ 167.017821][T10879] loop0: detected capacity change from 0 to 128 [ 167.126442][T10879] syz.0.2565: attempt to access beyond end of device [ 167.126442][T10879] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 167.149517][T10879] syz.0.2565: attempt to access beyond end of device [ 167.149517][T10879] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 167.174906][T10879] syz.0.2565: attempt to access beyond end of device [ 167.174906][T10879] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 167.190228][T10879] syz.0.2565: attempt to access beyond end of device [ 167.190228][T10879] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 167.222504][T10879] syz.0.2565: attempt to access beyond end of device [ 167.222504][T10879] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 167.253775][T10879] syz.0.2565: attempt to access beyond end of device [ 167.253775][T10879] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 167.269000][T10879] syz.0.2565: attempt to access beyond end of device [ 167.269000][T10879] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 167.307023][T10879] syz.0.2565: attempt to access beyond end of device [ 167.307023][T10879] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 167.338929][T10879] syz.0.2565: attempt to access beyond end of device [ 167.338929][T10879] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 167.371235][T10879] syz.0.2565: attempt to access beyond end of device [ 167.371235][T10879] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 168.141307][T10964] 9pnet_fd: Insufficient options for proto=fd [ 168.887817][T10990] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 168.951267][T10993] bridge0: left allmulticast mode [ 168.972828][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2609'. [ 169.035194][T10990] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.057660][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2611'. [ 169.075932][T10990] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 169.119325][T10996] bond0: entered promiscuous mode [ 169.124523][T10996] bond0: entered allmulticast mode [ 169.131903][T10996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.152710][T10994] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 169.167467][T10994] bond3 (unregistering): Released all slaves [ 169.524994][T11017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2620'. [ 169.586676][T11023] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067968) [ 169.597518][T11023] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 170.400692][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 170.400707][ T29] audit: type=1326 audit(1750251029.438:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84e83e58e7 code=0x7ffc0000 [ 170.461490][ T29] audit: type=1326 audit(1750251029.438:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84e838ab19 code=0x7ffc0000 [ 170.484910][ T29] audit: type=1326 audit(1750251029.438:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 170.508434][ T29] audit: type=1326 audit(1750251029.438:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84e83e58e7 code=0x7ffc0000 [ 170.531841][ T29] audit: type=1326 audit(1750251029.438:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84e838ab19 code=0x7ffc0000 [ 170.555255][ T29] audit: type=1326 audit(1750251029.438:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 170.578948][ T29] audit: type=1326 audit(1750251029.438:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84e83e58e7 code=0x7ffc0000 [ 170.602371][ T29] audit: type=1326 audit(1750251029.438:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84e838ab19 code=0x7ffc0000 [ 170.625838][ T29] audit: type=1326 audit(1750251029.438:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 170.649497][ T29] audit: type=1326 audit(1750251029.478:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11052 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84e83e58e7 code=0x7ffc0000 [ 170.676945][T11070] netlink: 'syz.2.2625': attribute type 1 has an invalid length. [ 170.698662][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 170.713121][T11070] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 170.723419][T11070] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 170.738019][T11070] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 170.754311][T11070] bond3 (unregistering): Released all slaves [ 170.827164][T11077] netlink: 'syz.2.2639': attribute type 4 has an invalid length. [ 170.847290][T11077] netlink: 'syz.2.2639': attribute type 4 has an invalid length. [ 170.896104][T11081] xt_policy: too many policy elements [ 171.004635][T11083] loop0: detected capacity change from 0 to 1024 [ 171.021022][T11083] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 171.273150][T11093] loop0: detected capacity change from 0 to 164 [ 171.283619][T11093] isofs_fill_super: root inode is not a directory. Corrupted media? [ 171.302583][T11094] Set syz1 is full, maxelem 65536 reached [ 171.973651][T11103] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.801224][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2663'. [ 172.827400][T11145] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 173.071035][T11152] loop0: detected capacity change from 0 to 8192 [ 173.238698][T11129] delete_channel: no stack [ 173.670661][T11157] 9pnet_fd: Insufficient options for proto=fd [ 174.005362][T11181] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 174.170479][T11185] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2680'. [ 174.179499][T11185] 0ªî{X¹¦: renamed from gretap0 [ 174.190620][T11185] 0ªî{X¹¦: entered allmulticast mode [ 174.196885][T11185] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 174.452095][T11198] lo speed is unknown, defaulting to 1000 [ 174.687681][T11200] 9pnet_fd: Insufficient options for proto=fd [ 174.868121][T11203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 175.719241][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 175.719256][ T29] audit: type=1326 audit(1750251034.748:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 175.771083][ T29] audit: type=1326 audit(1750251034.748:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 175.794686][ T29] audit: type=1326 audit(1750251034.788:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 175.818265][ T29] audit: type=1326 audit(1750251034.788:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 175.841895][ T29] audit: type=1326 audit(1750251034.788:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 175.865386][ T29] audit: type=1326 audit(1750251034.788:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 175.888898][ T29] audit: type=1326 audit(1750251034.788:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 175.912577][ T29] audit: type=1326 audit(1750251034.788:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 175.936084][ T29] audit: type=1326 audit(1750251034.788:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 175.959568][ T29] audit: type=1326 audit(1750251034.788:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 176.932567][T11244] 9pnet_fd: Insufficient options for proto=fd [ 177.262405][T11260] loop0: detected capacity change from 0 to 1024 [ 177.301529][T11260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.374711][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.516853][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'. [ 178.260790][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 178.290805][T11301] bond0: entered promiscuous mode [ 178.295855][T11301] bond0: entered allmulticast mode [ 178.302611][T11301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.450001][T11311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.573180][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2728'. [ 178.740965][T11320] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 178.762573][T11320] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 178.800603][T11320] veth3: entered promiscuous mode [ 178.806755][T11320] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 178.857509][T11329] netlink: 'syz.4.2734': attribute type 1 has an invalid length. [ 178.870331][T11329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.912237][T11329] veth5: entered promiscuous mode [ 178.919277][T11329] bond4: (slave veth5): Enslaving as an active interface with a down link [ 178.960550][T11329] vlan0: entered allmulticast mode [ 178.965724][T11329] bond4: entered allmulticast mode [ 178.980631][T11329] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 179.458094][T11347] loop0: detected capacity change from 0 to 2048 [ 179.489915][T11347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.527639][ T3314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 179.551271][ T3314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 179.579352][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.599085][T11357] loop0: detected capacity change from 0 to 256 [ 179.692194][T11364] netlink: zone id is out of range [ 179.697368][T11364] netlink: zone id is out of range [ 179.702509][T11364] netlink: zone id is out of range [ 179.707756][T11364] netlink: zone id is out of range [ 179.712937][T11364] netlink: zone id is out of range [ 179.781825][T11369] loop0: detected capacity change from 0 to 512 [ 179.784005][T11355] ref_ctr_offset mismatch. inode: 0xb91 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 179.788370][T11369] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.823941][T11369] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 179.836768][T11369] EXT4-fs (loop0): orphan cleanup on readonly fs [ 179.847299][T11369] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 179.864574][T11369] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 179.871621][T11369] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2748: bg 0: block 40: padding at end of block bitmap is not set [ 179.888050][T11369] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 179.901739][T11369] EXT4-fs (loop0): 1 truncate cleaned up [ 179.907726][T11369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.004119][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'. [ 180.134274][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2756'. [ 180.181322][T11390] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.594665][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.718286][T11396] netlink: 'syz.0.2760': attribute type 4 has an invalid length. [ 180.740925][ T5281] lo speed is unknown, defaulting to 1000 [ 180.746685][ T5281] syz0: Port: 1 Link DOWN [ 180.755021][T11396] netlink: 'syz.0.2760': attribute type 4 has an invalid length. [ 180.764871][ T5281] lo speed is unknown, defaulting to 1000 [ 180.771322][ T5281] syz0: Port: 1 Link ACTIVE [ 180.993064][T11409] lo speed is unknown, defaulting to 1000 [ 181.325186][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 181.325199][ T29] audit: type=1326 audit(1750251040.358:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.355445][ T29] audit: type=1326 audit(1750251040.358:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.380229][ T29] audit: type=1326 audit(1750251040.408:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.403779][ T29] audit: type=1326 audit(1750251040.408:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.427902][ T29] audit: type=1326 audit(1750251040.408:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.452125][ T29] audit: type=1326 audit(1750251040.408:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.455237][T11436] syzkaller0: entered promiscuous mode [ 181.475663][ T29] audit: type=1326 audit(1750251040.408:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.475720][ T29] audit: type=1326 audit(1750251040.408:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.481197][T11436] syzkaller0: entered allmulticast mode [ 181.534941][ T29] audit: type=1326 audit(1750251040.408:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.559034][ T29] audit: type=1326 audit(1750251040.418:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11427 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 181.716939][T11441] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 182.020163][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 182.904499][T11464] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 182.913336][T11464] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2786'. [ 182.970708][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2790'. [ 183.117281][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2805'. [ 183.245776][T11496] netlink: 'syz.2.2799': attribute type 1 has an invalid length. [ 183.301298][T11501] netlink: 'syz.1.2803': attribute type 10 has an invalid length. [ 183.320865][T11499] syzkaller0: entered promiscuous mode [ 183.326364][T11499] syzkaller0: entered allmulticast mode [ 183.359455][T11501] netlink: 'syz.1.2803': attribute type 10 has an invalid length. [ 183.575085][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 183.584605][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 183.594725][T11522] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 183.617115][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 183.633624][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 183.672378][T11522] veth7: entered promiscuous mode [ 183.678782][T11522] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 184.148248][T11532] tipc: Enabling of bearer rejected, failed to enable media [ 184.285695][T11528] vlan0: entered allmulticast mode [ 184.290878][T11528] bond3: entered allmulticast mode [ 184.596320][T11553] loop0: detected capacity change from 0 to 1024 [ 184.604708][T11553] EXT4-fs: Ignoring removed nobh option [ 184.610413][T11553] EXT4-fs: Ignoring removed bh option [ 184.628209][T11553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.647647][T11564] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 184.686283][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.716410][T11569] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 185.192022][T11584] pim6reg: entered allmulticast mode [ 185.210791][T11584] pim6reg: left allmulticast mode [ 185.302173][T11596] netlink: 'syz.3.2835': attribute type 1 has an invalid length. [ 185.338179][T11596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.398458][T11596] veth11: entered promiscuous mode [ 185.407566][T11596] bond3: (slave veth11): Enslaving as an active interface with a down link [ 185.462749][T11596] vlan0: entered allmulticast mode [ 185.467913][T11596] bond3: entered allmulticast mode [ 185.476323][T11596] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 185.821212][T11614] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 185.861326][T11619] netlink: 'syz.3.2845': attribute type 4 has an invalid length. [ 185.875794][T11619] netlink: 'syz.3.2845': attribute type 4 has an invalid length. [ 185.903584][T11624] __nla_validate_parse: 4 callbacks suppressed [ 185.903667][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2846'. [ 186.552506][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 186.552521][ T29] audit: type=1400 audit(1750251045.588:6283): avc: denied { read } for pid=11643 comm="syz.1.2853" path="socket:[33564]" dev="sockfs" ino=33564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.798748][ T3417] IPVS: starting estimator thread 0... [ 186.890396][T11672] IPVS: using max 2544 ests per chain, 127200 per kthread [ 186.923477][ T29] audit: type=1400 audit(1750251045.958:6284): avc: denied { setattr } for pid=11687 comm="syz.0.2870" name="ns" dev="proc" ino=33629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 186.945509][T11688] loop0: detected capacity change from 0 to 2048 [ 186.971062][T11688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.981735][T11694] bridge0: port 1(gretap0) entered blocking state [ 186.989539][T11694] bridge0: port 1(gretap0) entered disabled state [ 186.996624][T11694] gretap0: entered allmulticast mode [ 187.002628][T11694] gretap0: entered promiscuous mode [ 187.013927][T11694] gretap0: left allmulticast mode [ 187.019005][T11694] gretap0: left promiscuous mode [ 187.024066][T11694] bridge0: port 1(gretap0) entered disabled state [ 187.037876][T11696] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 187.054797][T11696] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 187.067078][T11696] EXT4-fs (loop0): This should not happen!! Data will be lost [ 187.067078][T11696] [ 187.070498][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'. [ 187.076749][T11696] EXT4-fs (loop0): Total free blocks count 0 [ 187.092224][T11696] EXT4-fs (loop0): Free/Dirty block details [ 187.098115][T11696] EXT4-fs (loop0): free_blocks=2415919504 [ 187.103989][T11696] EXT4-fs (loop0): dirty_blocks=2048 [ 187.109278][T11696] EXT4-fs (loop0): Block reservation details [ 187.115847][T11696] EXT4-fs (loop0): i_reserved_data_blocks=128 [ 187.123439][T11696] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 187.434622][T11702] lo speed is unknown, defaulting to 1000 [ 187.933283][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 188.024745][T11712] netlink: 'syz.0.2888': attribute type 10 has an invalid length. [ 188.033997][T11712] dummy0: entered promiscuous mode [ 188.039532][T11712] team0: Port device dummy0 added [ 188.051314][T11712] netlink: 'syz.0.2888': attribute type 10 has an invalid length. [ 188.063816][T11712] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 188.089918][T11712] dummy0: left promiscuous mode [ 188.099127][T11712] team0: Failed to send options change via netlink (err -105) [ 188.108310][T11712] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 188.117862][T11712] team0: Port device dummy0 removed [ 188.126189][T11712] dummy0: entered promiscuous mode [ 188.131705][T11712] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 188.176651][ T29] audit: type=1400 audit(1750251047.208:6285): avc: denied { accept } for pid=11723 comm="syz.0.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 188.214747][T11727] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 188.243121][T11729] netlink: 'syz.0.2883': attribute type 1 has an invalid length. [ 188.257001][T11729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.276293][T11729] veth9: entered promiscuous mode [ 188.284065][T11729] bond4: (slave veth9): Enslaving as an active interface with a down link [ 188.303875][T11729] vlan0: entered allmulticast mode [ 188.309005][T11729] bond4: entered allmulticast mode [ 188.332823][T11729] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 188.538903][T11736] vlan0: entered allmulticast mode [ 188.559009][T11736] dummy0: entered allmulticast mode [ 189.284251][T11755] lo speed is unknown, defaulting to 1000 [ 189.645058][T11757] netlink: 'syz.2.2894': attribute type 10 has an invalid length. [ 189.654654][T11757] netlink: 'syz.2.2894': attribute type 10 has an invalid length. [ 189.680647][T11757] dummy0: entered promiscuous mode [ 189.686711][T11757] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 189.752547][T11767] netlink: 'syz.0.2898': attribute type 4 has an invalid length. [ 189.772776][ T3369] lo speed is unknown, defaulting to 1000 [ 189.778582][ T3369] syz0: Port: 1 Link DOWN [ 189.801129][ T3369] lo speed is unknown, defaulting to 1000 [ 189.806944][ T3369] syz0: Port: 1 Link ACTIVE [ 189.821290][ T29] audit: type=1400 audit(1750251048.858:6286): avc: denied { create } for pid=11768 comm="syz.2.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.833413][T11771] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2900'. [ 189.841229][ T29] audit: type=1400 audit(1750251048.858:6287): avc: denied { bind } for pid=11768 comm="syz.2.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.912866][ T29] audit: type=1400 audit(1750251048.947:6288): avc: denied { append } for pid=11776 comm="syz.4.2904" name="file0" dev="tmpfs" ino=3127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.940887][ T3369] lo speed is unknown, defaulting to 1000 [ 189.946625][ T3369] syz0: Port: 1 Link DOWN [ 189.953083][ T3369] lo speed is unknown, defaulting to 1000 [ 189.958810][ T3369] syz0: Port: 1 Link ACTIVE [ 189.963311][ C0] Adjusting tsc more than 11% (8578478 vs 8464098) [ 189.980345][ T29] audit: type=1400 audit(1750251049.018:6289): avc: denied { read } for pid=11776 comm="syz.4.2904" name="file0" dev="tmpfs" ino=3127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.025336][ T4916] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 190.087417][ T3379] IPVS: starting estimator thread 0... [ 190.089750][T11793] loop0: detected capacity change from 0 to 1024 [ 190.116743][T11793] EXT4-fs: Ignoring removed nobh option [ 190.122425][T11793] EXT4-fs: Ignoring removed bh option [ 190.148967][T11793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.167462][T11795] IPVS: using max 2304 ests per chain, 115200 per kthread [ 190.209132][T11793] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2919: Allocating blocks 481-513 which overlap fs metadata [ 190.235707][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.608472][ T29] audit: type=1326 audit(1750251049.727:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.2.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 190.612340][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2923'. [ 190.632624][ T29] audit: type=1326 audit(1750251049.727:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.2.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 190.666606][ T29] audit: type=1326 audit(1750251049.794:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11804 comm="syz.2.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 190.699557][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'. [ 190.787248][T11819] validate_nla: 5 callbacks suppressed [ 190.787263][T11819] netlink: 'syz.2.2916': attribute type 1 has an invalid length. [ 190.804475][T11820] netlink: 'syz.0.2928': attribute type 4 has an invalid length. [ 190.869406][T11819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.923416][T11819] veth9: entered promiscuous mode [ 190.950559][T11819] bond3: (slave veth9): Enslaving as an active interface with a down link [ 190.961526][T11826] vlan0: entered allmulticast mode [ 190.966712][T11826] bond3: entered allmulticast mode [ 190.986455][T11826] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 191.494247][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 191.494300][ T29] audit: type=1326 audit(1750251050.697:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.2.2927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff664ae929 code=0x0 [ 191.754827][ T29] audit: type=1326 audit(1750251050.993:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 191.801917][ T29] audit: type=1326 audit(1750251050.993:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 191.826198][ T29] audit: type=1326 audit(1750251050.993:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 191.850391][ T29] audit: type=1326 audit(1750251050.993:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 191.873931][ T29] audit: type=1326 audit(1750251050.993:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 191.898240][ T29] audit: type=1326 audit(1750251050.993:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 191.921748][ T29] audit: type=1326 audit(1750251051.014:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 191.945999][ T29] audit: type=1326 audit(1750251051.036:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 191.970097][ T29] audit: type=1326 audit(1750251051.036:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11862 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd69ece58e7 code=0x7ffc0000 [ 192.067675][T11870] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 192.114182][T11876] 9pnet_fd: Insufficient options for proto=fd [ 192.147843][T11878] bridge3: entered allmulticast mode [ 192.201818][T11888] tmpfs: Bad value for 'mpol' [ 192.856927][T11917] netlink: 'syz.4.2955': attribute type 4 has an invalid length. [ 192.866294][T11917] netlink: 'syz.4.2955': attribute type 4 has an invalid length. [ 192.891565][T11919] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 193.532726][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2963'. [ 193.608895][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 193.797103][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2966'. [ 193.806117][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2966'. [ 193.870091][T11945] lo speed is unknown, defaulting to 1000 [ 193.960196][T11944] loop0: detected capacity change from 0 to 1024 [ 194.047771][T11944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.102229][T11944] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.172559][T11944] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 194.233830][T11944] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.2966: lblock 2 mapped to illegal pblock 2 (length 1) [ 194.277824][T11944] EXT4-fs (loop0): Remounting filesystem read-only [ 194.358866][T11944] EXT4-fs (loop0): 1 orphan inode deleted [ 194.364974][T11944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.565657][T11960] netlink: 'syz.4.2970': attribute type 2 has an invalid length. [ 194.573544][T11960] netlink: 'syz.4.2970': attribute type 8 has an invalid length. [ 194.581302][T11960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2970'. [ 194.767584][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.881761][T11970] lo speed is unknown, defaulting to 1000 [ 195.094359][T11972] loop0: detected capacity change from 0 to 512 [ 195.210077][T11972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.231864][T11972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.264192][T11972] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.293132][T11972] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 195.344679][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.381993][T11981] loop0: detected capacity change from 0 to 128 [ 195.391663][T11981] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.404196][T11981] ext4 filesystem being mounted at /541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.578155][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.748479][T12004] loop0: detected capacity change from 0 to 128 [ 196.034120][T12012] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 196.276798][T12024] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2993'. [ 196.294049][T12024] hsr_slave_1: left promiscuous mode [ 196.427975][T12017] sch_fq: defrate 0 ignored. [ 196.466782][T12033] netlink: 'syz.1.2997': attribute type 13 has an invalid length. [ 196.466902][T12031] bridge: RTM_NEWNEIGH with invalid ether address [ 196.606935][T12035] lo speed is unknown, defaulting to 1000 [ 196.613967][T12039] loop0: detected capacity change from 0 to 8192 [ 196.682378][T12043] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 196.731132][T12043] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.760791][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3001'. [ 196.803179][T12043] ipvlan0: entered promiscuous mode [ 196.816642][T12043] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 196.841894][T12043] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 197.041474][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 197.041488][ T29] audit: type=1326 audit(1750251056.497:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.100172][ T29] audit: type=1326 audit(1750251056.527:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.123797][ T29] audit: type=1326 audit(1750251056.527:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.147888][ T29] audit: type=1326 audit(1750251056.527:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.172004][ T29] audit: type=1326 audit(1750251056.527:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.195635][ T29] audit: type=1326 audit(1750251056.527:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.219814][ T29] audit: type=1326 audit(1750251056.527:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.243291][ T29] audit: type=1326 audit(1750251056.527:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.267670][ T29] audit: type=1326 audit(1750251056.527:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.291277][ T29] audit: type=1326 audit(1750251056.527:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12053 comm="syz.1.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 197.660021][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 197.671952][T12074] tipc: Bearer : already 2 bearers with priority 10 [ 197.679275][T12074] tipc: Bearer : trying with adjusted priority [ 197.686121][T12074] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 197.936983][T12094] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3018'. [ 197.947343][T12096] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3019'. [ 198.146919][T12108] vhci_hcd: invalid port number 96 [ 198.152080][T12108] vhci_hcd: default hub control req: 0400 v1b14 i0060 l0 [ 198.384359][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3037'. [ 198.506103][T12150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.603115][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'. [ 198.617556][T12157] ipvlan0: entered promiscuous mode [ 198.830062][T12170] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 198.877666][ T3417] lo speed is unknown, defaulting to 1000 [ 198.883441][ T3417] syz0: Port: 1 Link DOWN [ 198.923096][T12179] lo speed is unknown, defaulting to 1000 [ 199.406479][T12218] veth0: entered promiscuous mode [ 199.412170][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 199.422488][T12218] veth0 (unregistering): left promiscuous mode [ 199.833488][T12235] veth0: entered promiscuous mode [ 199.839523][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'. [ 199.851336][T12235] veth0 (unregistering): left promiscuous mode [ 200.029088][T12245] netlink: 'syz.3.3078': attribute type 4 has an invalid length. [ 200.039838][T12245] netlink: 'syz.3.3078': attribute type 4 has an invalid length. [ 200.083835][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3080'. [ 200.101405][T12249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12249 comm=syz.3.3080 [ 200.139730][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 200.156253][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 200.276547][T12258] batman_adv: batadv0: Removing interface: dummy0 [ 200.284266][T12258] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 200.291839][T12258] bond_slave_0: left promiscuous mode [ 200.298027][T12258] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 200.305847][T12258] bond_slave_1: left promiscuous mode [ 200.311688][T12258] team_slave_0: left promiscuous mode [ 200.317689][T12258] team0: Port device team_slave_0 removed [ 200.323902][T12258] team_slave_1: left promiscuous mode [ 200.335080][T12258] team0: Port device team_slave_1 removed [ 200.341591][T12258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.355014][T12258] bond3: (slave veth11): Releasing active interface [ 200.379096][T12263] loop0: detected capacity change from 0 to 1024 [ 200.386008][T12263] EXT4-fs: inline encryption not supported [ 200.392020][T12263] EXT4-fs: Ignoring removed bh option [ 200.406570][T12263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.425448][T12263] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 497-513 which overlap fs metadata [ 200.440902][T12263] EXT4-fs (loop0): Remounting filesystem read-only [ 200.491553][T12279] wireguard0: entered promiscuous mode [ 200.497281][T12279] wireguard0: entered allmulticast mode [ 200.531615][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.250006][T12321] loop0: detected capacity change from 0 to 1024 [ 201.256873][T12321] EXT4-fs: Ignoring removed nobh option [ 201.262500][T12321] EXT4-fs: Ignoring removed bh option [ 201.311161][T12321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.380915][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3109'. [ 201.390798][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3109'. [ 201.477723][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 201.628023][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.695976][T12329] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 201.816054][T12341] loop0: detected capacity change from 0 to 512 [ 201.823055][T12341] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 201.849210][T12341] EXT4-fs (loop0): 1 truncate cleaned up [ 201.855503][T12341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.863116][T12345] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3117'. [ 201.878929][T12352] Cannot find del_set index 3 as target [ 201.915119][T12345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=12345 comm=syz.2.3117 [ 202.023743][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 202.023757][ T29] audit: type=1400 audit(1750251061.511:7199): avc: denied { quotaon } for pid=12339 comm="syz.0.3116" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.131437][T12363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.625538][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.636328][ T29] audit: type=1400 audit(1750251062.133:7200): avc: denied { ioctl } for pid=12372 comm="syz.2.3126" path="socket:[36882]" dev="sockfs" ino=36882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.723251][T12384] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 202.785633][T12388] syzkaller0: entered promiscuous mode [ 202.791191][T12388] syzkaller0: entered allmulticast mode [ 202.956061][T12401] netlink: 'syz.3.3136': attribute type 4 has an invalid length. [ 202.972908][T12401] netlink: 'syz.3.3136': attribute type 4 has an invalid length. [ 203.112746][T12402] xt_hashlimit: size too large, truncated to 1048576 [ 203.390332][ T29] audit: type=1400 audit(1750251062.886:7201): avc: denied { watch watch_reads } for pid=12407 comm="syz.3.3139" path="/623/file0" dev="tmpfs" ino=3323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 203.478383][ T29] audit: type=1326 audit(1750251062.976:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12415 comm="syz.0.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 203.529326][ T29] audit: type=1326 audit(1750251063.006:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12415 comm="syz.0.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 203.553695][ T29] audit: type=1326 audit(1750251063.006:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12415 comm="syz.0.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 203.577264][ T29] audit: type=1326 audit(1750251063.006:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12415 comm="syz.0.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 203.601623][ T29] audit: type=1326 audit(1750251063.006:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12415 comm="syz.0.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 203.625175][ T29] audit: type=1326 audit(1750251063.006:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12415 comm="syz.0.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 203.649247][ T29] audit: type=1326 audit(1750251063.006:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12415 comm="syz.0.3142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 203.759621][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3148'. [ 203.797852][T12433] netlink: 'syz.1.3149': attribute type 13 has an invalid length. [ 203.824380][T12437] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3151'. [ 203.849289][T12440] netlink: 'syz.0.3150': attribute type 10 has an invalid length. [ 203.857217][T12440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3150'. [ 203.886371][T12440] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 203.912711][T12445] veth1_to_bond: entered allmulticast mode [ 203.919156][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3154'. [ 203.939921][T12445] veth1_to_bond (unregistering): left allmulticast mode [ 203.975952][T12451] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 204.083053][T12467] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3165'. [ 204.095609][T12467] bridge0: port 1($Hÿ) entered blocking state [ 204.102159][T12467] bridge0: port 1($Hÿ) entered disabled state [ 204.109794][T12467] $Hÿ: entered allmulticast mode [ 204.117010][T12467] $Hÿ: left allmulticast mode [ 204.122204][T12467] bridge0: port 1($Hÿ) entered disabled state [ 204.262417][T12473] lo speed is unknown, defaulting to 1000 [ 204.369657][T12485] bridge4: entered allmulticast mode [ 205.369566][T12512] netlink: 'syz.0.3183': attribute type 16 has an invalid length. [ 205.378146][T12512] netlink: 'syz.0.3183': attribute type 17 has an invalid length. [ 205.417093][ T5281] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 205.459277][T12522] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.819281][T12541] lo speed is unknown, defaulting to 1000 [ 206.176565][ T5281] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.195195][T12548] loop0: detected capacity change from 0 to 128 [ 206.399829][T12556] netlink: 'syz.3.3200': attribute type 4 has an invalid length. [ 206.504748][T12556] netlink: 'syz.3.3200': attribute type 4 has an invalid length. [ 206.540803][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 206.872603][T12584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12584 comm=syz.2.3210 [ 206.885834][T12584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12584 comm=syz.2.3210 [ 208.164799][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 208.164813][ T29] audit: type=1326 audit(1750251067.673:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.196738][ T29] audit: type=1326 audit(1750251067.703:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.220327][ T29] audit: type=1326 audit(1750251067.703:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.244287][ T29] audit: type=1326 audit(1750251067.703:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.267961][ T29] audit: type=1326 audit(1750251067.703:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.291507][ T29] audit: type=1326 audit(1750251067.703:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.315680][ T29] audit: type=1326 audit(1750251067.703:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.339232][ T29] audit: type=1326 audit(1750251067.703:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.363384][ T29] audit: type=1326 audit(1750251067.703:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.387540][ T29] audit: type=1326 audit(1750251067.703:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12620 comm="syz.2.3224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7eff664ae929 code=0x7ffc0000 [ 208.415921][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 208.542137][T12636] ref_ctr_offset mismatch. inode: 0xc67 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 208.775798][T12658] bridge: RTM_NEWNEIGH with invalid ether address [ 208.832381][T12662] loop0: detected capacity change from 0 to 164 [ 208.847396][T12662] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 208.913451][T12668] loop0: detected capacity change from 0 to 2048 [ 208.956667][T12668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.978133][T12668] ext4 filesystem being mounted at /602/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.106690][T12680] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3241: bg 0: block 345: padding at end of block bitmap is not set [ 209.144143][ T4922] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 464 with error 117 [ 209.156729][ T4922] EXT4-fs (loop0): This should not happen!! Data will be lost [ 209.156729][ T4922] [ 209.316677][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 209.418250][T12697] tipc: Enabling of bearer rejected, failed to enable media [ 210.375944][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 210.407416][ T4922] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 480 with max blocks 2 with error 117 [ 210.419920][ T4922] EXT4-fs (loop0): This should not happen!! Data will be lost [ 210.419920][ T4922] [ 210.434827][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.758816][T12769] netlink: 'syz.1.3273': attribute type 4 has an invalid length. [ 210.766683][T12769] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3273'. [ 210.860939][T12790] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3275'. [ 211.003781][T12813] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 211.923230][T12873] loop0: detected capacity change from 0 to 512 [ 211.929936][T12873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.939581][T12873] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3290: invalid block [ 211.951718][T12873] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3290: invalid indirect mapped block 4294967295 (level 1) [ 211.966707][T12873] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3290: invalid indirect mapped block 4294967295 (level 1) [ 211.980888][T12873] EXT4-fs (loop0): 2 truncates cleaned up [ 211.987028][T12873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.009185][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.055978][T12883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.064572][T12883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.079021][T12883] loop0: detected capacity change from 0 to 1024 [ 212.093939][T12883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.107769][T12883] ext4 filesystem being mounted at /608/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.144316][T12883] kernel read not supported for file /policy (pid: 12883 comm: syz.0.3293) [ 212.661281][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.707968][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3300'. [ 212.717915][T12900] syz_tun (unregistering): left promiscuous mode [ 213.307794][T12922] bridge0: entered allmulticast mode [ 213.520433][T12926] siw: device registration error -23 [ 213.742087][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 213.742102][ T29] audit: type=1400 audit(1750251073.245:7461): avc: denied { accept } for pid=12941 comm="syz.2.3317" path="socket:[38741]" dev="sockfs" ino=38741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.776071][ T29] audit: type=1400 audit(1750251073.285:7462): avc: denied { nlmsg_read } for pid=12939 comm="syz.4.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 213.816989][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 214.175669][T12969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.222027][T12974] netlink: 'syz.1.3330': attribute type 4 has an invalid length. [ 214.231825][T12974] netlink: 'syz.1.3330': attribute type 4 has an invalid length. [ 214.277203][T12982] netlink: 'syz.2.3334': attribute type 4 has an invalid length. [ 214.295998][T12982] netlink: 'syz.2.3334': attribute type 4 has an invalid length. [ 214.311678][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3331'. [ 214.320807][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3331'. [ 214.329907][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3331'. [ 214.342978][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3331'. [ 214.346736][T12984] lo speed is unknown, defaulting to 1000 [ 214.766237][ T29] audit: type=1400 audit(1750251074.275:7463): avc: denied { create } for pid=13004 comm="syz.4.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 215.056942][T13023] lo speed is unknown, defaulting to 1000 [ 215.137934][ T29] audit: type=1326 audit(1750251074.595:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.1.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 215.145289][T13028] netlink: 'syz.1.3353': attribute type 2 has an invalid length. [ 215.162011][ T29] audit: type=1326 audit(1750251074.595:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.1.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 215.169179][T13028] netlink: 'syz.1.3353': attribute type 8 has an invalid length. [ 215.193190][ T29] audit: type=1326 audit(1750251074.595:7466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.1.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 215.200289][T13028] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3353'. [ 215.224325][ T29] audit: type=1326 audit(1750251074.595:7467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.1.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 215.256818][ T29] audit: type=1326 audit(1750251074.595:7468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.1.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f818dbdd3df code=0x7ffc0000 [ 215.280171][ T29] audit: type=1326 audit(1750251074.595:7469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.1.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 215.304219][ T29] audit: type=1326 audit(1750251074.605:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13025 comm="syz.1.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f818dbde929 code=0x7ffc0000 [ 215.644797][T13042] lo speed is unknown, defaulting to 1000 [ 215.741513][T13047] netlink: 'syz.1.3360': attribute type 4 has an invalid length. [ 215.782817][T13047] netlink: 'syz.1.3360': attribute type 4 has an invalid length. [ 216.263312][T13066] loop0: detected capacity change from 0 to 256 [ 216.310113][T13068] netlink: 'syz.0.3369': attribute type 4 has an invalid length. [ 216.319661][T13068] netlink: 'syz.0.3369': attribute type 4 has an invalid length. [ 216.328892][ T3417] lo speed is unknown, defaulting to 1000 [ 216.334651][ T3417] syz0: Port: 1 Link ACTIVE [ 216.719722][T13088] loop0: detected capacity change from 0 to 512 [ 216.734542][T13088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.747941][T13088] ext4 filesystem being mounted at /623/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.782947][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.811941][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 216.853028][T13099] loop0: detected capacity change from 0 to 512 [ 216.899094][T13099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.916674][T13099] ext4 filesystem being mounted at /625/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.035466][T13123] netlink: 'syz.2.3390': attribute type 7 has an invalid length. [ 217.043937][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 217.062579][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.450172][T13177] pim6reg: entered allmulticast mode [ 218.468074][T13177] pim6reg: left allmulticast mode [ 218.788378][T13208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3422'. [ 218.802035][T13208] netem: change failed [ 218.842718][T13210] loop0: detected capacity change from 0 to 2048 [ 218.861273][T13199] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3417'. [ 218.873922][T13210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.894213][T13210] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.3423: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 218.928585][T13210] EXT4-fs (loop0): Remounting filesystem read-only [ 218.946679][T13218] netlink: 'syz.1.3426': attribute type 2 has an invalid length. [ 218.954503][T13218] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3426'. [ 218.976756][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.990870][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 218.990883][ T29] audit: type=1400 audit(1750251078.495:7642): avc: denied { name_bind } for pid=13219 comm="syz.4.3424" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 219.038582][ T29] audit: type=1326 audit(1750251078.535:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 219.062997][ T29] audit: type=1326 audit(1750251078.535:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 219.086484][ T29] audit: type=1326 audit(1750251078.535:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 219.110539][ T29] audit: type=1326 audit(1750251078.535:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 219.134576][ T29] audit: type=1326 audit(1750251078.535:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 219.158165][ T29] audit: type=1326 audit(1750251078.535:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 219.182156][ T29] audit: type=1326 audit(1750251078.545:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 219.205696][ T29] audit: type=1326 audit(1750251078.545:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x7ffc0000 [ 219.229747][ T29] audit: type=1326 audit(1750251078.545:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13225 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f110f11e5 code=0x7ffc0000 [ 219.271052][T13231] lo speed is unknown, defaulting to 1000 [ 219.459771][T13238] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.468088][T13238] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.476409][T13238] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.484756][T13238] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.494691][T13238] geneve2: entered promiscuous mode [ 219.513217][T13238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.655949][T13257] bridge: RTM_NEWNEIGH with invalid ether address [ 219.725942][T13258] lo speed is unknown, defaulting to 1000 [ 219.945541][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3440'. [ 219.954581][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3440'. [ 220.418737][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3449'. [ 221.067679][T13299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3453'. [ 221.076857][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3453'. [ 221.085828][T13299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3453'. [ 221.111498][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 221.138833][T13299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3453'. [ 221.311191][T13311] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.320098][T13311] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.328396][T13311] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.336606][T13311] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.349200][T13311] geneve2: entered promiscuous mode [ 221.354580][T13311] geneve2: entered allmulticast mode [ 221.375422][T13311] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.384436][T13311] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.392975][T13311] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.401319][T13311] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.432032][T13313] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3460'. [ 221.515355][T13319] sch_fq: defrate 4294967295 ignored. [ 221.764086][T13323] hub 6-0:1.0: USB hub found [ 221.768820][T13323] hub 6-0:1.0: 8 ports detected [ 222.044048][T13359] lo speed is unknown, defaulting to 1000 [ 222.257779][T13378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3484'. [ 222.908455][T13422] wireguard0: entered promiscuous mode [ 222.914091][T13422] wireguard0: entered allmulticast mode [ 223.808822][T13461] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.891344][T13465] hsr_slave_0: left promiscuous mode [ 223.912676][T13465] hsr_slave_1: left promiscuous mode [ 223.994331][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 223.994345][ T29] audit: type=1400 audit(1750251083.505:7830): avc: denied { ioctl } for pid=13476 comm="syz.4.3522" path="socket:[40801]" dev="sockfs" ino=40801 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.256273][ T29] audit: type=1326 audit(1750251083.765:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 224.280014][ T29] audit: type=1326 audit(1750251083.765:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 224.303710][ T29] audit: type=1326 audit(1750251083.765:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 224.327382][ T29] audit: type=1326 audit(1750251083.765:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 224.351155][ T29] audit: type=1326 audit(1750251083.765:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 224.374751][ T29] audit: type=1326 audit(1750251083.765:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 224.386755][T13487] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 224.398292][ T29] audit: type=1326 audit(1750251083.765:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 224.398322][ T29] audit: type=1326 audit(1750251083.765:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 224.406390][ T29] audit: type=1326 audit(1750251083.785:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 224.581619][T13517] netlink: 'syz.2.3533': attribute type 4 has an invalid length. [ 224.749401][T13544] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.773995][T13544] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.179372][T13577] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 225.447573][T13607] tipc: Enabling of bearer rejected, failed to enable media [ 225.460463][T13604] netlink: 'syz.4.3545': attribute type 39 has an invalid length. [ 226.733670][T13650] __nla_validate_parse: 12 callbacks suppressed [ 226.733686][T13650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3556'. [ 227.123824][T13657] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 227.624222][T13675] bond3: (slave ip6gretap1): Releasing backup interface [ 227.631335][T13675] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 96:06:e7:ff:3d:6e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 227.654133][T13675] bond3: (slave veth3): Releasing backup interface [ 227.683664][T13675] bond4: (slave veth5): Releasing active interface [ 228.113520][T13696] netlink: 'syz.0.3574': attribute type 4 has an invalid length. [ 228.157563][ T3417] lo speed is unknown, defaulting to 1000 [ 228.163345][ T3417] syz0: Port: 1 Link DOWN [ 228.164102][T13699] netlink: 'syz.0.3574': attribute type 4 has an invalid length. [ 228.213690][ T3369] lo speed is unknown, defaulting to 1000 [ 228.219456][ T3369] syz0: Port: 1 Link ACTIVE [ 228.746989][T13711] veth1_to_bond: entered allmulticast mode [ 228.753661][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3579'. [ 228.784006][T13711] veth1_to_bond (unregistering): left allmulticast mode [ 228.863510][T13713] $Hÿ: (slave dummy0): Releasing backup interface [ 228.870565][T13713] dummy0: left promiscuous mode [ 228.886374][T13713] bond3: (slave veth9): Releasing active interface [ 228.929042][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'. [ 229.419798][T13742] loop0: detected capacity change from 0 to 128 [ 229.433522][T13742] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.455967][T13742] ext4 filesystem being mounted at /667/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.472392][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 229.472406][ T29] audit: type=1400 audit(1750251088.985:7939): avc: denied { setattr } for pid=13739 comm="syz.0.3591" path="/667/file1/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 229.702286][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.786042][T13752] loop0: detected capacity change from 0 to 512 [ 229.803511][T13752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 229.814673][T13752] EXT4-fs (loop0): 1 truncate cleaned up [ 229.820637][T13752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.083860][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'. [ 230.215444][T13766] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.319788][T13773] netlink: 'syz.2.3601': attribute type 10 has an invalid length. [ 230.327744][T13773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3601'. [ 230.373418][T13776] tipc: Enabling of bearer rejected, failed to enable media [ 230.391237][T13773] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 230.474592][T13777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.773534][T13766] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.834928][T13766] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.893343][T13766] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.909415][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.939692][ T29] audit: type=1326 audit(1750251090.445:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13780 comm="syz.0.3604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f110be929 code=0x0 [ 230.979212][T13766] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.990739][ T29] audit: type=1326 audit(1750251090.495:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 230.991174][T13766] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.014450][ T29] audit: type=1326 audit(1750251090.495:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 231.014537][ T29] audit: type=1326 audit(1750251090.495:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 231.014566][ T29] audit: type=1326 audit(1750251090.495:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 231.020477][ T29] audit: type=1326 audit(1750251090.525:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 231.026700][T13766] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.079875][ T29] audit: type=1326 audit(1750251090.585:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 231.098486][T13766] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.117761][ T29] audit: type=1326 audit(1750251090.585:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13782 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 231.247684][T13791] netlink: 'syz.2.3606': attribute type 4 has an invalid length. [ 231.273355][T13791] netlink: 'syz.2.3606': attribute type 4 has an invalid length. [ 231.316418][T13803] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3612'. [ 231.331600][T13803] bridge0: port 1($Hÿ) entered blocking state [ 231.338172][T13803] bridge0: port 1($Hÿ) entered disabled state [ 231.344896][T13803] $Hÿ: entered allmulticast mode [ 231.356922][T13803] $Hÿ: left allmulticast mode [ 231.362013][T13803] bridge0: port 1($Hÿ) entered disabled state [ 231.599633][T13824] netlink: 'syz.3.3621': attribute type 10 has an invalid length. [ 231.608129][T13824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3621'. [ 231.632057][T13824] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.640275][T13824] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.660072][T13824] geneve1: entered promiscuous mode [ 231.675340][T13824] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 231.691975][T13824] team0: Failed to send options change via netlink (err -105) [ 231.699508][T13824] team0: Port device geneve1 added [ 231.728209][T13821] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.783217][T13821] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.871021][T13821] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.900820][T13821] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.916109][T13821] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.944826][T13821] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.955228][T13827] lo speed is unknown, defaulting to 1000 [ 232.231657][T13832] netlink: 'syz.2.3627': attribute type 4 has an invalid length. [ 232.269092][T13832] netlink: 'syz.2.3627': attribute type 4 has an invalid length. [ 232.739380][T13845] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3629'. [ 232.777114][ T29] audit: type=1326 audit(1750251092.275:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13848 comm="syz.3.3632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 232.812609][T13845] bridge0: port 1($Hÿ) entered blocking state [ 232.818880][T13845] bridge0: port 1($Hÿ) entered disabled state [ 232.831893][T13845] $Hÿ: entered allmulticast mode [ 232.923285][T13852] $Hÿ: left allmulticast mode [ 232.928281][T13852] bridge0: port 1($Hÿ) entered disabled state [ 233.102306][T13869] loop0: detected capacity change from 0 to 512 [ 233.116603][T13869] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.135873][T13869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.156927][T13869] netlink: 'syz.0.3639': attribute type 13 has an invalid length. [ 233.206258][ T3369] lo speed is unknown, defaulting to 1000 [ 233.212094][ T3369] syz0: Port: 1 Link DOWN [ 233.273437][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.345546][T13881] loop0: detected capacity change from 0 to 1024 [ 233.383654][T13881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.881085][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3659'. [ 233.915285][T13861] syz.1.3646 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 233.929306][T13861] CPU: 0 UID: 0 PID: 13861 Comm: syz.1.3646 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 233.929384][T13861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.929401][T13861] Call Trace: [ 233.929407][T13861] [ 233.929415][T13861] __dump_stack+0x1d/0x30 [ 233.929438][T13861] dump_stack_lvl+0xe8/0x140 [ 233.929458][T13861] dump_stack+0x15/0x1b [ 233.929480][T13861] dump_header+0x81/0x220 [ 233.929587][T13861] oom_kill_process+0x334/0x3f0 [ 233.929621][T13861] out_of_memory+0x979/0xb80 [ 233.929662][T13861] try_charge_memcg+0x5e6/0x9e0 [ 233.929689][T13861] obj_cgroup_charge_pages+0xa6/0x150 [ 233.929753][T13861] __memcg_kmem_charge_page+0x9f/0x170 [ 233.929784][T13861] __alloc_frozen_pages_noprof+0x188/0x360 [ 233.929822][T13861] alloc_pages_mpol+0xb3/0x250 [ 233.929923][T13861] alloc_pages_noprof+0x90/0x130 [ 233.929956][T13861] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 233.930012][T13861] __kvmalloc_node_noprof+0x30f/0x4e0 [ 233.930044][T13861] ? ip_set_alloc+0x1f/0x30 [ 233.930076][T13861] ? ip_set_alloc+0x1f/0x30 [ 233.930161][T13861] ? __kmalloc_cache_noprof+0x189/0x320 [ 233.930193][T13861] ip_set_alloc+0x1f/0x30 [ 233.930224][T13861] hash_netiface_create+0x282/0x740 [ 233.930305][T13861] ? __pfx_hash_netiface_create+0x10/0x10 [ 233.930339][T13861] ip_set_create+0x3cc/0x960 [ 233.930380][T13861] ? __nla_parse+0x40/0x60 [ 233.930399][T13861] nfnetlink_rcv_msg+0x4c3/0x590 [ 233.930491][T13861] ? selinux_capable+0x1f9/0x270 [ 233.930525][T13861] netlink_rcv_skb+0x123/0x220 [ 233.930559][T13861] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 233.930680][T13861] nfnetlink_rcv+0x16b/0x1690 [ 233.930707][T13861] ? __dquot_free_space+0x52d/0x800 [ 233.930729][T13861] ? xas_find+0x15e/0x3e0 [ 233.930769][T13861] ? xas_load+0x405/0x430 [ 233.930802][T13861] ? find_get_entry+0x374/0x380 [ 233.930907][T13861] ? __rcu_read_unlock+0x4f/0x70 [ 233.930929][T13861] ? find_get_entries+0x1ea/0x220 [ 233.930954][T13861] ? percpu_counter_add_batch+0xb6/0x130 [ 233.930982][T13861] ? shmem_recalc_inode+0x19f/0x1c0 [ 233.931015][T13861] ? shmem_undo_range+0xa4b/0xa80 [ 233.931044][T13861] ? should_fail_ex+0x30/0x280 [ 233.931125][T13861] ? selinux_nlmsg_lookup+0x99/0x890 [ 233.931161][T13861] ? selinux_netlink_send+0x59f/0x5f0 [ 233.931193][T13861] ? __rcu_read_unlock+0x34/0x70 [ 233.931256][T13861] ? __netlink_lookup+0x266/0x2a0 [ 233.931280][T13861] netlink_unicast+0x59e/0x670 [ 233.931360][T13861] netlink_sendmsg+0x58b/0x6b0 [ 233.931378][T13861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.931399][T13861] __sock_sendmsg+0x142/0x180 [ 233.931467][T13861] ____sys_sendmsg+0x31e/0x4e0 [ 233.931563][T13861] ___sys_sendmsg+0x17b/0x1d0 [ 233.931665][T13861] __x64_sys_sendmsg+0xd4/0x160 [ 233.931702][T13861] x64_sys_call+0x2999/0x2fb0 [ 233.931726][T13861] do_syscall_64+0xd2/0x200 [ 233.931820][T13861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.931848][T13861] ? clear_bhb_loop+0x40/0x90 [ 233.931871][T13861] ? clear_bhb_loop+0x40/0x90 [ 233.931892][T13861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.931980][T13861] RIP: 0033:0x7f818dbde929 [ 233.931996][T13861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.932013][T13861] RSP: 002b:00007f818c247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.932032][T13861] RAX: ffffffffffffffda RBX: 00007f818de05fa0 RCX: 00007f818dbde929 [ 233.932046][T13861] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 233.932060][T13861] RBP: 00007f818dc60b39 R08: 0000000000000000 R09: 0000000000000000 [ 233.932143][T13861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.932154][T13861] R13: 0000000000000000 R14: 00007f818de05fa0 R15: 00007ffd3cdfe0a8 [ 233.932173][T13861] [ 234.302349][T13861] memory: usage 307200kB, limit 307200kB, failcnt 3016 [ 234.309265][T13861] memory+swap: usage 335160kB, limit 9007199254740988kB, failcnt 0 [ 234.317439][T13861] kmem: usage 252868kB, limit 9007199254740988kB, failcnt 0 [ 234.324753][T13861] Memory cgroup stats for /syz1: [ 234.422038][T13861] cache 55328768 [ 234.430627][T13861] rss 299008 [ 234.433861][T13861] shmem 55328768 [ 234.437452][T13861] mapped_file 0 [ 234.440913][T13861] dirty 0 [ 234.444477][T13861] writeback 0 [ 234.447754][T13861] workingset_refault_anon 2868 [ 234.452540][T13861] workingset_refault_file 2191 [ 234.457360][T13861] swap 28631040 [ 234.460877][T13861] swapcached 8192 [ 234.464591][T13861] pgpgin 433985 [ 234.468047][T13861] pgpgout 420402 [ 234.471588][T13861] pgfault 309244 [ 234.475701][T13861] pgmajfault 380 [ 234.479241][T13861] inactive_anon 16838656 [ 234.483544][T13861] active_anon 38797312 [ 234.487619][T13861] inactive_file 0 [ 234.491294][T13861] active_file 0 [ 234.494785][T13861] unevictable 0 [ 234.498263][T13861] hierarchical_memory_limit 314572800 [ 234.504262][T13861] hierarchical_memsw_limit 9223372036854771712 [ 234.510411][T13861] total_cache 55328768 [ 234.514505][T13861] total_rss 299008 [ 234.518274][T13861] total_shmem 55328768 [ 234.522364][T13861] total_mapped_file 0 [ 234.526342][T13861] total_dirty 0 [ 234.529792][T13861] total_writeback 0 [ 234.534195][T13861] total_workingset_refault_anon 2868 [ 234.539547][T13861] total_workingset_refault_file 2191 [ 234.544853][T13861] total_swap 28631040 [ 234.548856][T13861] total_swapcached 8192 [ 234.553021][T13861] total_pgpgin 433985 [ 234.557030][T13861] total_pgpgout 420402 [ 234.561090][T13861] total_pgfault 309244 [ 234.565869][T13861] total_pgmajfault 380 [ 234.569967][T13861] total_inactive_anon 16838656 [ 234.574841][T13861] total_active_anon 38797312 [ 234.579467][T13861] total_inactive_file 0 [ 234.583680][T13861] total_active_file 0 [ 234.587670][T13861] total_unevictable 0 [ 234.591638][T13861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.820,pid=6032,uid=0 [ 234.606931][T13861] Memory cgroup out of memory: Killed process 6032 (syz.1.820) total-vm:95668kB, anon-rss:960kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 234.636524][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.687327][T13861] syz.1.3646 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 234.701196][T13861] CPU: 1 UID: 0 PID: 13861 Comm: syz.1.3646 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 234.701237][T13861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.701250][T13861] Call Trace: [ 234.701256][T13861] [ 234.701264][T13861] __dump_stack+0x1d/0x30 [ 234.701293][T13861] dump_stack_lvl+0xe8/0x140 [ 234.701373][T13861] dump_stack+0x15/0x1b [ 234.701391][T13861] dump_header+0x81/0x220 [ 234.701422][T13861] oom_kill_process+0x334/0x3f0 [ 234.701469][T13861] out_of_memory+0x979/0xb80 [ 234.701506][T13861] try_charge_memcg+0x5e6/0x9e0 [ 234.701531][T13861] obj_cgroup_charge_pages+0xa6/0x150 [ 234.701612][T13861] __memcg_kmem_charge_page+0x9f/0x170 [ 234.701644][T13861] __alloc_frozen_pages_noprof+0x188/0x360 [ 234.701683][T13861] alloc_pages_mpol+0xb3/0x250 [ 234.701711][T13861] alloc_pages_noprof+0x90/0x130 [ 234.701848][T13861] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 234.701898][T13861] __kvmalloc_node_noprof+0x30f/0x4e0 [ 234.701989][T13861] ? ip_set_alloc+0x1f/0x30 [ 234.702019][T13861] ? ip_set_alloc+0x1f/0x30 [ 234.702050][T13861] ? __kmalloc_cache_noprof+0x189/0x320 [ 234.702110][T13861] ip_set_alloc+0x1f/0x30 [ 234.702135][T13861] hash_netiface_create+0x282/0x740 [ 234.702269][T13861] ? __pfx_hash_netiface_create+0x10/0x10 [ 234.702295][T13861] ip_set_create+0x3cc/0x960 [ 234.702357][T13861] ? __nla_parse+0x40/0x60 [ 234.702378][T13861] nfnetlink_rcv_msg+0x4c3/0x590 [ 234.702464][T13861] ? selinux_capable+0x1f9/0x270 [ 234.702497][T13861] netlink_rcv_skb+0x123/0x220 [ 234.702524][T13861] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 234.702636][T13861] nfnetlink_rcv+0x16b/0x1690 [ 234.702669][T13861] ? __dquot_free_space+0x52d/0x800 [ 234.702692][T13861] ? xas_find+0x15e/0x3e0 [ 234.702711][T13861] ? xas_load+0x405/0x430 [ 234.702771][T13861] ? find_get_entry+0x374/0x380 [ 234.702870][T13861] ? __rcu_read_unlock+0x4f/0x70 [ 234.702894][T13861] ? find_get_entries+0x1ea/0x220 [ 234.702927][T13861] ? percpu_counter_add_batch+0xb6/0x130 [ 234.702984][T13861] ? shmem_recalc_inode+0x19f/0x1c0 [ 234.703016][T13861] ? shmem_undo_range+0xa4b/0xa80 [ 234.703050][T13861] ? should_fail_ex+0x30/0x280 [ 234.703148][T13861] ? selinux_nlmsg_lookup+0x99/0x890 [ 234.703184][T13861] ? selinux_netlink_send+0x59f/0x5f0 [ 234.703276][T13861] ? __rcu_read_unlock+0x34/0x70 [ 234.703300][T13861] ? __netlink_lookup+0x266/0x2a0 [ 234.703408][T13861] netlink_unicast+0x59e/0x670 [ 234.703452][T13861] netlink_sendmsg+0x58b/0x6b0 [ 234.703492][T13861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.703514][T13861] __sock_sendmsg+0x142/0x180 [ 234.703541][T13861] ____sys_sendmsg+0x31e/0x4e0 [ 234.703579][T13861] ___sys_sendmsg+0x17b/0x1d0 [ 234.703658][T13861] __x64_sys_sendmsg+0xd4/0x160 [ 234.703697][T13861] x64_sys_call+0x2999/0x2fb0 [ 234.703720][T13861] do_syscall_64+0xd2/0x200 [ 234.703801][T13861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.703830][T13861] ? clear_bhb_loop+0x40/0x90 [ 234.703858][T13861] ? clear_bhb_loop+0x40/0x90 [ 234.703881][T13861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.703908][T13861] RIP: 0033:0x7f818dbde929 [ 234.703924][T13861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.703943][T13861] RSP: 002b:00007f818c247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.703963][T13861] RAX: ffffffffffffffda RBX: 00007f818de05fa0 RCX: 00007f818dbde929 [ 234.704051][T13861] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 234.704064][T13861] RBP: 00007f818dc60b39 R08: 0000000000000000 R09: 0000000000000000 [ 234.704074][T13861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.704087][T13861] R13: 0000000000000000 R14: 00007f818de05fa0 R15: 00007ffd3cdfe0a8 [ 234.704107][T13861] [ 235.074743][T13861] memory: usage 307200kB, limit 307200kB, failcnt 3083 [ 235.081646][T13861] memory+swap: usage 335012kB, limit 9007199254740988kB, failcnt 0 [ 235.089717][T13861] kmem: usage 252840kB, limit 9007199254740988kB, failcnt 0 [ 235.097076][T13861] Memory cgroup stats for /syz1: [ 235.097427][T13861] cache 55357440 [ 235.106510][T13861] rss 299008 [ 235.109697][T13861] shmem 55328768 [ 235.113254][T13861] mapped_file 4096 [ 235.117060][T13861] dirty 4096 [ 235.120377][T13861] writeback 0 [ 235.123732][T13861] workingset_refault_anon 2868 [ 235.128505][T13861] workingset_refault_file 2198 [ 235.134061][T13861] swap 28479488 [ 235.137557][T13861] swapcached 8192 [ 235.141708][T13861] pgpgin 433992 [ 235.145195][T13861] pgpgout 420402 [ 235.148745][T13861] pgfault 309245 [ 235.152334][T13861] pgmajfault 381 [ 235.155927][T13861] inactive_anon 16838656 [ 235.160230][T13861] active_anon 38797312 [ 235.165036][T13861] inactive_file 28672 [ 235.169081][T13861] active_file 0 [ 235.172598][T13861] unevictable 0 [ 235.176060][T13861] hierarchical_memory_limit 314572800 [ 235.181430][T13861] hierarchical_memsw_limit 9223372036854771712 [ 235.187620][T13861] total_cache 55357440 [ 235.192291][T13861] total_rss 299008 [ 235.196087][T13861] total_shmem 55328768 [ 235.200151][T13861] total_mapped_file 4096 [ 235.204429][T13861] total_dirty 4096 [ 235.208145][T13861] total_writeback 0 [ 235.212170][T13861] total_workingset_refault_anon 2868 [ 235.217525][T13861] total_workingset_refault_file 2198 [ 235.223386][T13861] total_swap 28479488 [ 235.227419][T13861] total_swapcached 8192 [ 235.231655][T13861] total_pgpgin 433992 [ 235.235658][T13861] total_pgpgout 420402 [ 235.239768][T13861] total_pgfault 309245 [ 235.243918][T13861] total_pgmajfault 381 [ 235.248026][T13861] total_inactive_anon 16838656 [ 235.253457][T13861] total_active_anon 38797312 [ 235.258160][T13861] total_inactive_file 28672 [ 235.262825][T13861] total_active_file 0 [ 235.266809][T13861] total_unevictable 0 [ 235.270788][T13861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9,pid=3495,uid=0 [ 235.285808][T13861] Memory cgroup out of memory: Killed process 3495 (syz.1.9) total-vm:95596kB, anon-rss:940kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 235.367079][T13908] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3651'. [ 235.418937][T13912] loop0: detected capacity change from 0 to 1024 [ 235.471594][T13912] EXT4-fs: Ignoring removed bh option [ 235.487467][T13912] EXT4-fs: inline encryption not supported [ 235.502292][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 235.502305][ T29] audit: type=1326 audit(1750251095.015:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.512244][T13912] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 235.546080][ T29] audit: type=1326 audit(1750251095.045:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.570171][ T29] audit: type=1326 audit(1750251095.045:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.594365][ T29] audit: type=1326 audit(1750251095.045:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.617981][ T29] audit: type=1326 audit(1750251095.045:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.642050][ T29] audit: type=1326 audit(1750251095.045:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.665481][ T29] audit: type=1326 audit(1750251095.045:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.689606][ T29] audit: type=1326 audit(1750251095.045:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.713971][ T29] audit: type=1326 audit(1750251095.045:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.737405][ T29] audit: type=1326 audit(1750251095.045:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13915 comm="syz.4.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e83ee929 code=0x7ffc0000 [ 235.762364][T13912] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 235.776588][T13912] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.3654: lblock 2 mapped to illegal pblock 2 (length 1) [ 235.808418][T13912] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.3654: lblock 0 mapped to illegal pblock 48 (length 1) [ 235.823332][T13924] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.831824][T13912] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3654: Failed to acquire dquot type 0 [ 235.845725][T13912] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 235.863033][T13912] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3654: mark_inode_dirty error [ 235.875688][T13912] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 235.886112][T13912] EXT4-fs (loop0): 1 orphan inode deleted [ 235.886644][T13924] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.892139][T13912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.914162][ T4887] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 235.947637][ T4887] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 0 [ 235.947978][T13921] bridge: RTM_NEWNEIGH with invalid ether address [ 235.966232][T13924] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.983412][T13912] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 236.005405][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.023377][T13924] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.095089][T13935] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3676'. [ 236.119157][T13924] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.130649][T13924] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.142152][T13924] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.154074][T13924] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.167788][T13939] random: crng reseeded on system resumption [ 236.696253][T13957] syz.2.3672 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 236.705944][T13957] CPU: 0 UID: 0 PID: 13957 Comm: syz.2.3672 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 236.705976][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.705987][T13957] Call Trace: [ 236.705993][T13957] [ 236.705999][T13957] __dump_stack+0x1d/0x30 [ 236.706022][T13957] dump_stack_lvl+0xe8/0x140 [ 236.706106][T13957] dump_stack+0x15/0x1b [ 236.706121][T13957] dump_header+0x81/0x220 [ 236.706152][T13957] oom_kill_process+0x334/0x3f0 [ 236.706247][T13957] out_of_memory+0x979/0xb80 [ 236.706282][T13957] try_charge_memcg+0x5e6/0x9e0 [ 236.706395][T13957] charge_memcg+0x51/0xc0 [ 236.706431][T13957] __mem_cgroup_charge+0x28/0xb0 [ 236.706465][T13957] do_wp_page+0x692/0x2400 [ 236.706546][T13957] ? __rcu_read_lock+0x37/0x50 [ 236.706573][T13957] handle_mm_fault+0x77d/0x2be0 [ 236.706595][T13957] ? __rcu_read_unlock+0x4f/0x70 [ 236.706620][T13957] do_user_addr_fault+0x3fe/0x1090 [ 236.706660][T13957] ? lru_gen_rotate_memcg+0x429/0x440 [ 236.706679][T13957] exc_page_fault+0x62/0xa0 [ 236.706706][T13957] asm_exc_page_fault+0x26/0x30 [ 236.706798][T13957] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 236.706823][T13957] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 236.706844][T13957] RSP: 0018:ffffc90000ef3898 EFLAGS: 00050206 [ 236.706859][T13957] RAX: ffff8881031c4b98 RBX: ffff88815bbfc000 RCX: 0000000000003880 [ 236.706872][T13957] RDX: 0000000000000000 RSI: ffff88815bbfc780 RDI: 0000200000a9b000 [ 236.706884][T13957] RBP: 0000200000a9a880 R08: 00000000000001ad R09: 0000000000000000 [ 236.706895][T13957] R10: 000188815bbfc000 R11: 000188815bbfffff R12: 0000200000a9e880 [ 236.706905][T13957] R13: ffffc90000ef3e80 R14: 0000000000004000 R15: 00007ffffffff000 [ 236.706922][T13957] _copy_to_iter+0x13e/0xe30 [ 236.706960][T13957] ? refill_obj_stock+0x254/0x2e0 [ 236.707025][T13957] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 236.707106][T13957] __skb_datagram_iter+0x2f4/0x690 [ 236.707124][T13957] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 236.707148][T13957] skb_copy_datagram_iter+0x3d/0x110 [ 236.707170][T13957] unix_stream_read_actor+0x43/0x70 [ 236.707222][T13957] unix_stream_read_generic+0x65b/0x13a0 [ 236.707253][T13957] ? __pfx_autoremove_wake_function+0x10/0x10 [ 236.707343][T13957] unix_stream_recvmsg+0xc3/0xf0 [ 236.707363][T13957] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 236.707456][T13957] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 236.707477][T13957] sock_recvmsg+0x139/0x170 [ 236.707499][T13957] ____sys_recvmsg+0xf5/0x280 [ 236.707543][T13957] ___sys_recvmsg+0x11f/0x370 [ 236.707568][T13957] __x64_sys_recvmsg+0xd1/0x160 [ 236.707591][T13957] x64_sys_call+0xf19/0x2fb0 [ 236.707609][T13957] do_syscall_64+0xd2/0x200 [ 236.707623][T13957] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 236.707713][T13957] ? clear_bhb_loop+0x40/0x90 [ 236.707799][T13957] ? clear_bhb_loop+0x40/0x90 [ 236.707822][T13957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.707843][T13957] RIP: 0033:0x7eff664ae929 [ 236.707858][T13957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.707923][T13957] RSP: 002b:00007eff64ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 236.707938][T13957] RAX: ffffffffffffffda RBX: 00007eff666d6160 RCX: 00007eff664ae929 [ 236.707947][T13957] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000008 [ 236.707957][T13957] RBP: 00007eff66530b39 R08: 0000000000000000 R09: 0000000000000000 [ 236.708029][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.708050][T13957] R13: 0000000000000001 R14: 00007eff666d6160 R15: 00007fff60e955d8 [ 236.708064][T13957] [ 236.708070][T13957] memory: usage 307200kB, limit 307200kB, failcnt 252 [ 237.085634][T13957] memory+swap: usage 174308kB, limit 9007199254740988kB, failcnt 0 [ 237.093532][T13957] kmem: usage 82624kB, limit 9007199254740988kB, failcnt 0 [ 237.100774][T13957] Memory cgroup stats for /syz2: [ 237.102793][T13957] cache 69120000 [ 237.111286][T13957] rss 11628544 [ 237.114692][T13957] shmem 69115904 [ 237.118309][T13957] mapped_file 4096 [ 237.122126][T13957] dirty 0 [ 237.125070][T13957] writeback 0 [ 237.128345][T13957] workingset_refault_anon 4982 [ 237.133127][T13957] workingset_refault_file 33 [ 237.137727][T13957] swap 0 [ 237.140566][T13957] swapcached 0 [ 237.144032][T13957] pgpgin 298595 [ 237.147485][T13957] pgpgout 278879 [ 237.151033][T13957] pgfault 293550 [ 237.154601][T13957] pgmajfault 491 [ 237.158150][T13957] inactive_anon 9891840 [ 237.162392][T13957] active_anon 70852608 [ 237.166480][T13957] inactive_file 12288 [ 237.170450][T13957] active_file 0 [ 237.173920][T13957] unevictable 0 [ 237.177471][T13957] hierarchical_memory_limit 314572800 [ 237.182906][T13957] hierarchical_memsw_limit 9223372036854771712 [ 237.189055][T13957] total_cache 69120000 [ 237.193135][T13957] total_rss 11628544 [ 237.197076][T13957] total_shmem 69115904 [ 237.201138][T13957] total_mapped_file 4096 [ 237.205404][T13957] total_dirty 0 [ 237.208873][T13957] total_writeback 0 [ 237.212697][T13957] total_workingset_refault_anon 4982 [ 237.217977][T13957] total_workingset_refault_file 33 [ 237.223157][T13957] total_swap 0 [ 237.226525][T13957] total_swapcached 0 [ 237.230412][T13957] total_pgpgin 298595 [ 237.234410][T13957] total_pgpgout 278879 [ 237.238535][T13957] total_pgfault 293550 [ 237.242657][T13957] total_pgmajfault 491 [ 237.246718][T13957] total_inactive_anon 9891840 [ 237.251406][T13957] total_active_anon 70852608 [ 237.256004][T13957] total_inactive_file 12288 [ 237.260572][T13957] total_active_file 0 [ 237.264615][T13957] total_unevictable 0 [ 237.268604][T13957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1259,pid=7308,uid=0 [ 237.283288][T13957] Memory cgroup out of memory: Killed process 7308 (syz.2.1259) total-vm:95668kB, anon-rss:944kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 237.642233][T13969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.227017][T13977] lo speed is unknown, defaulting to 1000 [ 239.005607][T14000] syz.2.3699 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 239.015712][T14000] CPU: 1 UID: 0 PID: 14000 Comm: syz.2.3699 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 239.015738][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.015752][T14000] Call Trace: [ 239.015758][T14000] [ 239.015766][T14000] __dump_stack+0x1d/0x30 [ 239.015787][T14000] dump_stack_lvl+0xe8/0x140 [ 239.015812][T14000] dump_stack+0x15/0x1b [ 239.015828][T14000] dump_header+0x81/0x220 [ 239.015859][T14000] oom_kill_process+0x334/0x3f0 [ 239.015892][T14000] out_of_memory+0x979/0xb80 [ 239.015983][T14000] try_charge_memcg+0x5e6/0x9e0 [ 239.016008][T14000] charge_memcg+0x51/0xc0 [ 239.016042][T14000] __mem_cgroup_charge+0x28/0xb0 [ 239.016107][T14000] shmem_get_folio_gfp+0x470/0xd60 [ 239.016139][T14000] shmem_write_begin+0xa8/0x190 [ 239.016170][T14000] generic_perform_write+0x184/0x490 [ 239.016207][T14000] shmem_file_write_iter+0xc5/0xf0 [ 239.016227][T14000] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 239.016247][T14000] vfs_write+0x4a0/0x8e0 [ 239.016282][T14000] __x64_sys_pwrite64+0xfd/0x150 [ 239.016364][T14000] x64_sys_call+0xe45/0x2fb0 [ 239.016385][T14000] do_syscall_64+0xd2/0x200 [ 239.016403][T14000] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.016432][T14000] ? clear_bhb_loop+0x40/0x90 [ 239.016495][T14000] ? clear_bhb_loop+0x40/0x90 [ 239.016515][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.016534][T14000] RIP: 0033:0x7eff664ae929 [ 239.016614][T14000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.016654][T14000] RSP: 002b:00007eff64af6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 239.016687][T14000] RAX: ffffffffffffffda RBX: 00007eff666d6080 RCX: 00007eff664ae929 [ 239.016699][T14000] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000005 [ 239.016712][T14000] RBP: 00007eff66530b39 R08: 0000000000000000 R09: 0000000000000000 [ 239.016722][T14000] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000 [ 239.016733][T14000] R13: 0000000000000000 R14: 00007eff666d6080 R15: 00007fff60e955d8 [ 239.016749][T14000] [ 239.016755][T14000] memory: usage 307200kB, limit 307200kB, failcnt 340 [ 239.239199][T14000] memory+swap: usage 216200kB, limit 9007199254740988kB, failcnt 0 [ 239.247196][T14000] kmem: usage 140408kB, limit 9007199254740988kB, failcnt 0 [ 239.254506][T14000] Memory cgroup stats for /syz2: [ 239.283654][T14000] cache 72318976 [ 239.292877][T14000] rss 413696 [ 239.296105][T14000] shmem 72314880 [ 239.299639][T14000] mapped_file 4096 [ 239.303472][T14000] dirty 0 [ 239.306405][T14000] writeback 0 [ 239.309678][T14000] workingset_refault_anon 4982 [ 239.314458][T14000] workingset_refault_file 83 [ 239.319037][T14000] swap 0 [ 239.322450][T14000] swapcached 0 [ 239.325828][T14000] pgpgin 300544 [ 239.329349][T14000] pgpgout 282785 [ 239.332904][T14000] pgfault 296228 [ 239.336442][T14000] pgmajfault 494 [ 239.339983][T14000] inactive_anon 466944 [ 239.344083][T14000] active_anon 72261632 [ 239.348155][T14000] inactive_file 8192 [ 239.352604][T14000] active_file 4096 [ 239.356338][T14000] unevictable 0 [ 239.359805][T14000] hierarchical_memory_limit 314572800 [ 239.365206][T14000] hierarchical_memsw_limit 9223372036854771712 [ 239.371363][T14000] total_cache 72318976 [ 239.375559][T14000] total_rss 413696 [ 239.379372][T14000] total_shmem 72314880 [ 239.384076][T14000] total_mapped_file 4096 [ 239.388322][T14000] total_dirty 0 [ 239.391841][T14000] total_writeback 0 [ 239.395633][T14000] total_workingset_refault_anon 4982 [ 239.400903][T14000] total_workingset_refault_file 83 [ 239.406018][T14000] total_swap 0 [ 239.409422][T14000] total_swapcached 0 [ 239.413995][T14000] total_pgpgin 300544 [ 239.417984][T14000] total_pgpgout 282785 [ 239.422082][T14000] total_pgfault 296228 [ 239.426152][T14000] total_pgmajfault 494 [ 239.430272][T14000] total_inactive_anon 466944 [ 239.434907][T14000] total_active_anon 72261632 [ 239.439489][T14000] total_inactive_file 8192 [ 239.444494][T14000] total_active_file 4096 [ 239.448731][T14000] total_unevictable 0 [ 239.452876][T14000] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3699,pid=13994,uid=0 [ 239.467559][T14000] Memory cgroup out of memory: Killed process 13994 (syz.2.3699) total-vm:95932kB, anon-rss:1068kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 239.546075][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 239.697222][T14016] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3695'. [ 240.969500][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3707'. [ 241.097393][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 241.097405][ T29] audit: type=1326 audit(1750251100.605:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 241.172294][ T29] audit: type=1326 audit(1750251100.635:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 241.196526][ T29] audit: type=1326 audit(1750251100.635:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 241.220258][ T29] audit: type=1326 audit(1750251100.635:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 241.245833][ T29] audit: type=1326 audit(1750251100.735:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 241.269402][ T29] audit: type=1326 audit(1750251100.735:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 241.293537][ T29] audit: type=1326 audit(1750251100.735:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 241.317396][ T29] audit: type=1326 audit(1750251100.735:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd69eced290 code=0x7ffc0000 [ 241.341513][ T29] audit: type=1326 audit(1750251100.735:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 241.365677][ T29] audit: type=1326 audit(1750251100.735:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14059 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69ecee929 code=0x7ffc0000 [ 241.447070][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 241.456035][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 241.501765][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 241.514323][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 241.523221][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 241.929670][T14054] syz.4.3706 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 241.944554][T14054] CPU: 1 UID: 0 PID: 14054 Comm: syz.4.3706 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 241.944585][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.944599][T14054] Call Trace: [ 241.944604][T14054] [ 241.944610][T14054] __dump_stack+0x1d/0x30 [ 241.944629][T14054] dump_stack_lvl+0xe8/0x140 [ 241.944647][T14054] dump_stack+0x15/0x1b [ 241.944666][T14054] dump_header+0x81/0x220 [ 241.944762][T14054] oom_kill_process+0x334/0x3f0 [ 241.944833][T14054] out_of_memory+0x979/0xb80 [ 241.944863][T14054] try_charge_memcg+0x5e6/0x9e0 [ 241.944886][T14054] obj_cgroup_charge_pages+0xa6/0x150 [ 241.944919][T14054] __memcg_kmem_charge_page+0x9f/0x170 [ 241.944992][T14054] __alloc_frozen_pages_noprof+0x188/0x360 [ 241.945026][T14054] alloc_pages_mpol+0xb3/0x250 [ 241.945053][T14054] alloc_pages_noprof+0x90/0x130 [ 241.945142][T14054] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 241.945185][T14054] __kvmalloc_node_noprof+0x30f/0x4e0 [ 241.945253][T14054] ? ip_set_alloc+0x1f/0x30 [ 241.945282][T14054] ? ip_set_alloc+0x1f/0x30 [ 241.945305][T14054] ? __kmalloc_cache_noprof+0x189/0x320 [ 241.945375][T14054] ip_set_alloc+0x1f/0x30 [ 241.945402][T14054] hash_netiface_create+0x282/0x740 [ 241.945437][T14054] ? __pfx_hash_netiface_create+0x10/0x10 [ 241.945516][T14054] ip_set_create+0x3cc/0x960 [ 241.945559][T14054] ? __nla_parse+0x40/0x60 [ 241.945675][T14054] nfnetlink_rcv_msg+0x4c3/0x590 [ 241.945718][T14054] ? selinux_capable+0x1f9/0x270 [ 241.945806][T14054] netlink_rcv_skb+0x123/0x220 [ 241.945838][T14054] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 241.945867][T14054] nfnetlink_rcv+0x16b/0x1690 [ 241.945894][T14054] ? __dquot_free_space+0x52d/0x800 [ 241.945917][T14054] ? xas_find+0x15e/0x3e0 [ 241.945938][T14054] ? xas_load+0x405/0x430 [ 241.945971][T14054] ? find_get_entry+0x374/0x380 [ 241.946079][T14054] ? __rcu_read_unlock+0x4f/0x70 [ 241.946100][T14054] ? find_get_entries+0x1ea/0x220 [ 241.946125][T14054] ? percpu_counter_add_batch+0xb6/0x130 [ 241.946199][T14054] ? shmem_recalc_inode+0x19f/0x1c0 [ 241.946228][T14054] ? shmem_undo_range+0xa4b/0xa80 [ 241.946373][T14054] ? should_fail_ex+0x30/0x280 [ 241.946459][T14054] ? selinux_nlmsg_lookup+0x99/0x890 [ 241.946520][T14054] ? selinux_netlink_send+0x59f/0x5f0 [ 241.946549][T14054] ? __rcu_read_unlock+0x34/0x70 [ 241.946578][T14054] ? __netlink_lookup+0x266/0x2a0 [ 241.946677][T14054] netlink_unicast+0x59e/0x670 [ 241.946707][T14054] netlink_sendmsg+0x58b/0x6b0 [ 241.946769][T14054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.946786][T14054] __sock_sendmsg+0x142/0x180 [ 241.946820][T14054] ____sys_sendmsg+0x31e/0x4e0 [ 241.946935][T14054] ___sys_sendmsg+0x17b/0x1d0 [ 241.946967][T14054] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 241.947002][T14054] __x64_sys_sendmsg+0xd4/0x160 [ 241.947072][T14054] x64_sys_call+0x2999/0x2fb0 [ 241.947092][T14054] do_syscall_64+0xd2/0x200 [ 241.947111][T14054] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.947139][T14054] ? clear_bhb_loop+0x40/0x90 [ 241.947238][T14054] ? clear_bhb_loop+0x40/0x90 [ 241.947263][T14054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.947282][T14054] RIP: 0033:0x7f84e83ee929 [ 241.947303][T14054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.947320][T14054] RSP: 002b:00007f84e6a57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.947341][T14054] RAX: ffffffffffffffda RBX: 00007f84e8615fa0 RCX: 00007f84e83ee929 [ 241.947355][T14054] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000006 [ 241.947369][T14054] RBP: 00007f84e8470b39 R08: 0000000000000000 R09: 0000000000000000 [ 241.947380][T14054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.947391][T14054] R13: 0000000000000000 R14: 00007f84e8615fa0 R15: 00007fff656d3518 [ 241.947418][T14054] [ 241.947424][T14054] memory: usage 307200kB, limit 307200kB, failcnt 1429 [ 242.339755][T14054] memory+swap: usage 336160kB, limit 9007199254740988kB, failcnt 0 [ 242.347689][T14054] kmem: usage 252100kB, limit 9007199254740988kB, failcnt 0 [ 242.354996][T14054] Memory cgroup stats for /syz4: [ 242.355431][T14054] cache 56164352 [ 242.364556][T14054] rss 237568 [ 242.367760][T14054] shmem 56164352 [ 242.371377][T14054] mapped_file 0 [ 242.374902][T14054] dirty 0 [ 242.377837][T14054] writeback 0 [ 242.381129][T14054] workingset_refault_anon 1014 [ 242.385940][T14054] workingset_refault_file 32 [ 242.390555][T14054] swap 29655040 [ 242.394631][T14054] swapcached 8192 [ 242.398334][T14054] pgpgin 299738 [ 242.401816][T14054] pgpgout 285963 [ 242.405415][T14054] pgfault 261610 [ 242.408959][T14054] pgmajfault 141 [ 242.412537][T14054] inactive_anon 16650240 [ 242.416839][T14054] active_anon 39759872 [ 242.420945][T14054] inactive_file 12288 [ 242.425570][T14054] active_file 0 [ 242.429032][T14054] unevictable 0 [ 242.432613][T14054] hierarchical_memory_limit 314572800 [ 242.437984][T14054] hierarchical_memsw_limit 9223372036854771712 [ 242.444212][T14054] total_cache 56164352 [ 242.448402][T14054] total_rss 237568 [ 242.452783][T14054] total_shmem 56164352 [ 242.456848][T14054] total_mapped_file 0 [ 242.460894][T14054] total_dirty 0 [ 242.464374][T14054] total_writeback 0 [ 242.468174][T14054] total_workingset_refault_anon 1014 [ 242.473471][T14054] total_workingset_refault_file 32 [ 242.478579][T14054] total_swap 29655040 [ 242.483297][T14054] total_swapcached 8192 [ 242.487447][T14054] total_pgpgin 299738 [ 242.491472][T14054] total_pgpgout 285963 [ 242.495677][T14054] total_pgfault 261610 [ 242.499740][T14054] total_pgmajfault 141 [ 242.503839][T14054] total_inactive_anon 16650240 [ 242.508677][T14054] total_active_anon 39759872 [ 242.513859][T14054] total_inactive_file 12288 [ 242.518357][T14054] total_active_file 0 [ 242.522357][T14054] total_unevictable 0 [ 242.526334][T14054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3706,pid=14051,uid=0 [ 242.541053][T14054] Memory cgroup out of memory: Killed process 14051 (syz.4.3706) total-vm:95932kB, anon-rss:1072kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 242.631335][T14167] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3723'. [ 242.704668][T14173] loop0: detected capacity change from 0 to 1024 [ 242.743251][T14173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.242007][T14191] netlink: 'syz.2.3730': attribute type 2 has an invalid length. [ 243.249862][T14191] netlink: 'syz.2.3730': attribute type 8 has an invalid length. [ 243.257603][T14191] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3730'. [ 243.634808][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.658885][T14205] loop0: detected capacity change from 0 to 1024 [ 243.668012][T14205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.925127][T14208] ================================================================== [ 243.933261][T14208] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 243.941528][T14208] [ 243.943841][T14208] write to 0xffff8881004a3254 of 4 bytes by task 14205 on cpu 0: [ 243.951547][T14208] xas_set_mark+0x12b/0x140 [ 243.956051][T14208] __folio_start_writeback+0x1dd/0x440 [ 243.961500][T14208] ext4_bio_write_folio+0x5ad/0x9f0 [ 243.966684][T14208] mpage_submit_folio+0xe4/0x170 [ 243.971613][T14208] mpage_process_page_bufs+0x39b/0x4a0 [ 243.977066][T14208] mpage_prepare_extent_to_map+0x741/0xaa0 [ 243.982863][T14208] ext4_do_writepages+0xa1a/0x21c0 [ 243.987963][T14208] ext4_writepages+0x176/0x300 [ 243.992717][T14208] do_writepages+0x1c6/0x310 [ 243.997297][T14208] file_write_and_wait_range+0x156/0x2c0 [ 244.002923][T14208] generic_buffers_fsync_noflush+0x45/0x120 [ 244.008820][T14208] ext4_sync_file+0x1ab/0x690 [ 244.013494][T14208] vfs_fsync_range+0x10d/0x130 [ 244.018244][T14208] ext4_buffered_write_iter+0x34f/0x3c0 [ 244.023783][T14208] ext4_file_write_iter+0xdbf/0xf00 [ 244.028970][T14208] iter_file_splice_write+0x5f2/0x970 [ 244.034342][T14208] direct_splice_actor+0x156/0x2a0 [ 244.039448][T14208] splice_direct_to_actor+0x312/0x680 [ 244.044816][T14208] do_splice_direct+0xda/0x150 [ 244.049574][T14208] do_sendfile+0x380/0x650 [ 244.053980][T14208] __x64_sys_sendfile64+0x105/0x150 [ 244.059181][T14208] x64_sys_call+0xb39/0x2fb0 [ 244.063760][T14208] do_syscall_64+0xd2/0x200 [ 244.068276][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.074163][T14208] [ 244.076471][T14208] read to 0xffff8881004a3254 of 4 bytes by task 14208 on cpu 1: [ 244.084086][T14208] filemap_write_and_wait_range+0xfc/0x340 [ 244.089887][T14208] filemap_invalidate_pages+0xa4/0x1a0 [ 244.095341][T14208] kiocb_invalidate_pages+0x6e/0x80 [ 244.100537][T14208] __iomap_dio_rw+0x5d4/0x1250 [ 244.105297][T14208] iomap_dio_rw+0x40/0x90 [ 244.109618][T14208] ext4_file_write_iter+0xad9/0xf00 [ 244.114810][T14208] iter_file_splice_write+0x5f2/0x970 [ 244.120186][T14208] direct_splice_actor+0x156/0x2a0 [ 244.125300][T14208] splice_direct_to_actor+0x312/0x680 [ 244.130668][T14208] do_splice_direct+0xda/0x150 [ 244.135429][T14208] do_sendfile+0x380/0x650 [ 244.139839][T14208] __x64_sys_sendfile64+0x105/0x150 [ 244.145029][T14208] x64_sys_call+0xb39/0x2fb0 [ 244.149611][T14208] do_syscall_64+0xd2/0x200 [ 244.154102][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.159985][T14208] [ 244.162292][T14208] value changed: 0x0a000021 -> 0x04000021 [ 244.167992][T14208] [ 244.170298][T14208] Reported by Kernel Concurrency Sanitizer on: [ 244.176433][T14208] CPU: 1 UID: 0 PID: 14208 Comm: syz.0.3747 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 244.188926][T14208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.198985][T14208] ================================================================== [ 244.563828][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.891764][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!