last executing test programs: 4.67584414s ago: executing program 4 (id=1543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 4.423788274s ago: executing program 4 (id=1548): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 4.381918975s ago: executing program 1 (id=1551): timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0xffb8) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 4.378751215s ago: executing program 3 (id=1552): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 4.361068905s ago: executing program 1 (id=1553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x200, 0xd}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}, @sack={0x5, 0x1a, [0x140000, 0x9, 0x7f, 0x7723, 0x5, 0x1]}]}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xf, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) 4.302774776s ago: executing program 3 (id=1554): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcf", 0x27) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 4.275369006s ago: executing program 2 (id=1555): ptrace(0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f0000000240)={0x29, 0x7, 0xffffffd2}) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x1}, 0x0) 3.424608061s ago: executing program 2 (id=1556): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) timer_settime(0x0, 0x1, &(0x7f0000000600)={{}, {0x77359400}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffe7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) 3.424245821s ago: executing program 3 (id=1557): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 3.423293501s ago: executing program 0 (id=1567): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 3.422628301s ago: executing program 4 (id=1568): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x100000) 1.14859148s ago: executing program 1 (id=1558): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.14806137s ago: executing program 2 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 1.14658883s ago: executing program 0 (id=1571): socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x42ad, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) 1.14556581s ago: executing program 3 (id=1572): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x4}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10001, @private0, 0x3}, {0xa, 0x4e24, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, r2, 0xffffffff}}, 0x48) syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0], 0x1}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0xfffffffffffffe72}}, 0x8c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 1.14488191s ago: executing program 4 (id=1574): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x1, 0x4, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004801}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) getrlimit(0x5, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) ustat(0x6, &(0x7f0000000340)) 936.634014ms ago: executing program 0 (id=1560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000d80)='qdisc_dequeue\x00', r0}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380050003"], 0x38}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 936.315954ms ago: executing program 4 (id=1561): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 815.181446ms ago: executing program 2 (id=1562): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000000), &(0x7f0000000280)='%pB \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x300c010, &(0x7f0000000000), 0x3, 0x525, &(0x7f0000000a00)="$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") 812.676666ms ago: executing program 0 (id=1563): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800400, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x3, 0x5000000, 0x8000c62) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x2, 0x2, 0x2, 0x53}) 801.970296ms ago: executing program 3 (id=1564): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2010, 0xc8, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 773.468797ms ago: executing program 1 (id=1566): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_create(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 618.24501ms ago: executing program 4 (id=1569): ptrace(0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f0000000240)={0x29, 0x7, 0xffffffd2}) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x1}, 0x0) 203.156377ms ago: executing program 0 (id=1570): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000040)='./file0\x00', 0xc0002, 0x16b) 202.716977ms ago: executing program 2 (id=1573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x200, 0xd}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}, @sack={0x5, 0x1a, [0x140000, 0x9, 0x7f, 0x7723, 0x5, 0x1]}]}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xf, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) 202.362617ms ago: executing program 3 (id=1575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) 201.969087ms ago: executing program 1 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a00a421"], 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) 110.833978ms ago: executing program 0 (id=1576): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 110.494769ms ago: executing program 1 (id=1577): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x29) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000280)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x7}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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") 0s ago: executing program 2 (id=1578): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r0) kernel console output (not intermixed with test programs): rocess `syz.4.313'. [ 48.543301][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.601106][ T4260] SELinux: ebitmap: truncated map [ 48.607186][ T4260] SELinux: failed to load policy [ 48.632550][ T4266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.642527][ T4266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.757205][ T4279] lo speed is unknown, defaulting to 1000 [ 49.160646][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 49.461154][ T4389] lo speed is unknown, defaulting to 1000 [ 49.474375][ T4389] lo speed is unknown, defaulting to 1000 [ 49.484602][ T4389] lo speed is unknown, defaulting to 1000 [ 49.501302][ T4389] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 49.526816][ T4389] lo speed is unknown, defaulting to 1000 [ 49.537317][ T4389] lo speed is unknown, defaulting to 1000 [ 49.550178][ T4389] lo speed is unknown, defaulting to 1000 [ 49.563487][ T4389] lo speed is unknown, defaulting to 1000 [ 49.579942][ T4389] lo speed is unknown, defaulting to 1000 [ 49.594696][ T4389] lo speed is unknown, defaulting to 1000 [ 49.703565][ T4425] loop0: detected capacity change from 0 to 128 [ 49.742243][ T4425] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.805898][ T4425] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.977642][ T4445] loop2: detected capacity change from 0 to 512 [ 50.015462][ T4445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.028896][ T4445] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.177706][ T4457] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 50.195105][ T4457] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 50.210113][ T4457] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 50.231592][ T4457] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 50.264313][ T4457] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 50.282675][ T4457] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 50.334785][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.405832][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 50.405846][ T29] audit: type=1400 audit(1749360604.363:627): avc: denied { write } for pid=4473 comm="syz.2.349" path="socket:[6917]" dev="sockfs" ino=6917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.605469][ T4482] loop1: detected capacity change from 0 to 512 [ 50.637624][ T4482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.675098][ T4482] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.709642][ T29] audit: type=1400 audit(1749360604.663:628): avc: denied { rename } for pid=4481 comm="syz.1.352" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.732034][ T29] audit: type=1400 audit(1749360604.663:629): avc: denied { reparent } for pid=4481 comm="syz.1.352" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.754347][ T29] audit: type=1400 audit(1749360604.663:630): avc: denied { add_name } for pid=4481 comm="syz.1.352" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.774777][ T29] audit: type=1400 audit(1749360604.663:631): avc: denied { remount } for pid=4481 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.795002][ T4482] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.876712][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.151437][ T4502] loop4: detected capacity change from 0 to 512 [ 51.169753][ T4502] EXT4-fs: Ignoring removed orlov option [ 51.215948][ T4502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.278152][ T4502] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.369720][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.553535][ T4511] net_ratelimit: 1 callbacks suppressed [ 51.553544][ T4511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.576018][ T4515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'. [ 51.593803][ T4515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4515 comm=syz.2.364 [ 51.673061][ T4520] loop1: detected capacity change from 0 to 2048 [ 51.715190][ T4520] loop1: p1 < > p4 [ 51.720394][ T4520] loop1: p4 size 8388608 extends beyond EOD, truncated [ 51.762746][ T29] audit: type=1400 audit(1749360605.713:632): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 51.811652][ T4525] lo speed is unknown, defaulting to 1000 [ 51.844609][ T4525] lo speed is unknown, defaulting to 1000 [ 51.857129][ T4518] serio: Serial port ptm0 [ 52.006105][ T4532] loop1: detected capacity change from 0 to 2048 [ 52.056670][ T4532] Alternate GPT is invalid, using primary GPT. [ 52.063078][ T4532] loop1: p2 p3 p7 [ 52.158571][ T4542] netlink: 64 bytes leftover after parsing attributes in process `syz.2.373'. [ 52.174646][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.195747][ T4544] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 52.225215][ T4549] xt_hashlimit: max too large, truncated to 1048576 [ 52.490105][ T4566] SELinux: ebitmap: map size 98 does not match my size 64 (high bit was 4278589440) [ 52.499900][ T4567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4567 comm=syz.0.381 [ 52.513200][ T4566] SELinux: failed to load policy [ 52.523414][ T4561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4561 comm=syz.0.381 [ 52.562663][ T4569] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.384' sets config #0 [ 52.618987][ T4575] loop2: detected capacity change from 0 to 1024 [ 52.625728][ T4575] EXT4-fs: Ignoring removed bh option [ 52.631176][ T4575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.642835][ T4575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.693394][ T4583] loop4: detected capacity change from 0 to 2048 [ 52.726076][ T29] audit: type=1400 audit(1749360606.673:633): avc: denied { bind } for pid=4586 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.755854][ T29] audit: type=1400 audit(1749360606.713:634): avc: denied { write } for pid=4586 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.756393][ T4583] loop4: p1 < > p4 [ 52.775308][ T4587] rdma_op ffff888119bce180 conn xmit_rdma 0000000000000000 [ 52.797036][ T4583] loop4: p4 size 8388608 extends beyond EOD, truncated [ 52.809945][ T29] audit: type=1400 audit(1749360606.763:635): avc: denied { execute } for pid=4589 comm="syz.0.392" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 52.853570][ T29] audit: type=1326 audit(1749360606.803:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 53.084207][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 53.100507][ T4602] team0 (unregistering): Port device team_slave_0 removed [ 53.109601][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.123415][ T4602] team0 (unregistering): Port device team_slave_1 removed [ 53.725798][ T4632] loop3: detected capacity change from 0 to 128 [ 53.732681][ T4632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.740468][ T4632] EXT4-fs error (device loop3): __ext4_fill_super:5500: inode #2: comm syz.3.409: iget: checksum invalid [ 53.753610][ T4632] EXT4-fs (loop3): get root inode failed [ 53.759345][ T4632] EXT4-fs (loop3): mount failed [ 53.836690][ T4636] SELinux: ebitmap: truncated map [ 53.841997][ T4636] SELinux: failed to load policy [ 53.934334][ T4648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 53.947686][ T4648] vlan2: entered allmulticast mode [ 53.953094][ T4648] dummy0: entered allmulticast mode [ 54.113818][ T4675] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 54.131497][ T4675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.141741][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 54.143022][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 54.173993][ T4675] bond1 (unregistering): Released all slaves [ 54.213145][ T4680] netlink: 43 bytes leftover after parsing attributes in process `syz.4.427'. [ 54.222327][ T4680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 54.256817][ T4684] SELinux: Context system_u:object_r:fixed_disk_device_t:s0 is not valid (left unmapped). [ 54.363396][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 54.623077][ T4705] loop1: detected capacity change from 0 to 128 [ 54.631124][ T4705] EXT4-fs: Ignoring removed nobh option [ 54.656559][ T4705] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.682361][ T4709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.705659][ T4705] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.778012][ T4709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.868740][ T4709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.946759][ T4709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.021037][ T4718] process 'syz.3.437' launched '/dev/fd/4' with NULL argv: empty string added [ 55.052432][ T4709] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.085131][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.098678][ T4709] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.167876][ T4709] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.181456][ T4709] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.254619][ T4730] loop4: detected capacity change from 0 to 1024 [ 55.267567][ T4730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.292731][ T4729] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 55.350379][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.483464][ T4749] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 55.537455][ T4749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.544315][ T4753] loop1: detected capacity change from 0 to 512 [ 55.558280][ T4753] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.450: corrupted in-inode xattr: invalid ea_ino [ 55.583519][ T4753] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.450: couldn't read orphan inode 15 (err -117) [ 55.597364][ T4749] ip6erspan0: entered promiscuous mode [ 55.611539][ T4753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.613003][ T4749] bond1: (slave ip6erspan0): making interface the new active one [ 55.648292][ T4749] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 55.720178][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.722451][ T4756] loop2: detected capacity change from 0 to 512 [ 55.763190][ T4756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.805197][ T4756] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.926706][ T4768] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 55.936689][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 55.936705][ T29] audit: type=1400 audit(1749360609.893:688): avc: denied { relabelto } for pid=4755 comm="syz.2.451" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 55.991264][ T29] audit: type=1400 audit(1749360609.943:689): avc: denied { create } for pid=4769 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.089449][ T29] audit: type=1400 audit(1749360610.043:690): avc: denied { write } for pid=4779 comm="syz.0.461" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.110113][ T29] audit: type=1400 audit(1749360610.043:691): avc: denied { open } for pid=4779 comm="syz.0.461" path="/84/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.206019][ T4784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 56.342071][ T4790] netlink: 'syz.1.464': attribute type 1 has an invalid length. [ 56.389096][ T4790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.415186][ T4792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.422384][ T4792] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 56.450189][ T4792] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 56.472544][ T4790] ip6erspan0: entered promiscuous mode [ 56.480610][ T4790] bond1: (slave ip6erspan0): making interface the new active one [ 56.488773][ T4790] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 56.565703][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.616895][ T4798] netlink: 68 bytes leftover after parsing attributes in process `syz.1.468'. [ 56.622293][ T29] audit: type=1400 audit(1749360610.573:692): avc: denied { nlmsg_write } for pid=4797 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.711722][ T29] audit: type=1400 audit(1749360610.663:693): avc: denied { mount } for pid=4807 comm="syz.0.472" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.752422][ T29] audit: type=1400 audit(1749360610.703:694): avc: denied { ioctl } for pid=4803 comm="syz.4.471" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.008917][ T4826] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 57.026204][ T4826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.187676][ T4828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.271842][ T4803] syz.4.471 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 57.282973][ T4803] CPU: 0 UID: 0 PID: 4803 Comm: syz.4.471 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 57.283009][ T4803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.283037][ T4803] Call Trace: [ 57.283045][ T4803] [ 57.283054][ T4803] __dump_stack+0x1d/0x30 [ 57.283126][ T4803] dump_stack_lvl+0xe8/0x140 [ 57.283150][ T4803] dump_stack+0x15/0x1b [ 57.283171][ T4803] dump_header+0x81/0x220 [ 57.283212][ T4803] oom_kill_process+0x334/0x3f0 [ 57.283288][ T4803] out_of_memory+0x979/0xb80 [ 57.283330][ T4803] try_charge_memcg+0x5e6/0x9e0 [ 57.283365][ T4803] charge_memcg+0x51/0xc0 [ 57.283444][ T4803] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 57.283467][ T4803] __read_swap_cache_async+0x1df/0x350 [ 57.283506][ T4803] swap_cluster_readahead+0x376/0x3e0 [ 57.283601][ T4803] swapin_readahead+0xde/0x6f0 [ 57.283634][ T4803] ? __filemap_get_folio+0x49f/0x650 [ 57.283675][ T4803] ? swap_cache_get_folio+0x77/0x200 [ 57.283710][ T4803] do_swap_page+0x301/0x2430 [ 57.283789][ T4803] ? finish_task_switch+0xad/0x2b0 [ 57.283820][ T4803] ? __pfx_default_wake_function+0x10/0x10 [ 57.283866][ T4803] handle_mm_fault+0x9a5/0x2be0 [ 57.283899][ T4803] ? mas_walk+0xf2/0x120 [ 57.283931][ T4803] do_user_addr_fault+0x636/0x1090 [ 57.284000][ T4803] ? fpregs_restore_userregs+0xad/0x1d0 [ 57.284031][ T4803] ? switch_fpu_return+0xe/0x20 [ 57.284111][ T4803] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.284145][ T4803] exc_page_fault+0x62/0xa0 [ 57.284186][ T4803] asm_exc_page_fault+0x26/0x30 [ 57.284207][ T4803] RIP: 0033:0x7ff81d43538c [ 57.284233][ T4803] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 57.284323][ T4803] RSP: 002b:00007fff9d1c6be0 EFLAGS: 00010206 [ 57.284342][ T4803] RAX: 0000000000000000 RBX: 00007ff81d785fa0 RCX: 0000000000000000 [ 57.284358][ T4803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555583222808 [ 57.284373][ T4803] RBP: 00007ff81d787ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 57.284387][ T4803] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000e08e [ 57.284444][ T4803] R13: 00007ff81d786080 R14: ffffffffffffffff R15: 00007fff9d1c6cf0 [ 57.284463][ T4803] [ 57.287259][ T4828] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 57.296486][ T4803] memory: usage 307200kB, limit 307200kB, failcnt 131 [ 57.296501][ T4803] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 57.296518][ T4803] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 57.326924][ T4828] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 57.330524][ T4803] Memory cgroup stats for /syz4: [ 57.339272][ T4803] cache 0 [ 57.559085][ T4803] rss 0 [ 57.561845][ T4803] shmem 0 [ 57.564980][ T4803] mapped_file 0 [ 57.568493][ T4803] dirty 0 [ 57.571492][ T4803] writeback 0 [ 57.574811][ T4803] workingset_refault_anon 49 [ 57.579442][ T4803] workingset_refault_file 0 [ 57.583986][ T4803] swap 200704 [ 57.587315][ T4803] swapcached 0 [ 57.590717][ T4803] pgpgin 15197 [ 57.594172][ T4803] pgpgout 15197 [ 57.597656][ T4803] pgfault 13840 [ 57.601185][ T4803] pgmajfault 35 [ 57.604744][ T4803] inactive_anon 0 [ 57.608394][ T4803] active_anon 0 [ 57.611968][ T4803] inactive_file 0 [ 57.615652][ T4803] active_file 0 [ 57.619379][ T4803] unevictable 0 [ 57.622877][ T4803] hierarchical_memory_limit 314572800 [ 57.628345][ T4803] hierarchical_memsw_limit 9223372036854771712 [ 57.634610][ T4803] total_cache 0 [ 57.638135][ T4803] total_rss 0 [ 57.641437][ T4803] total_shmem 0 [ 57.644966][ T4803] total_mapped_file 0 [ 57.648961][ T4803] total_dirty 0 [ 57.652476][ T4803] total_writeback 0 [ 57.656392][ T4803] total_workingset_refault_anon 49 [ 57.661570][ T4803] total_workingset_refault_file 0 [ 57.666625][ T4803] total_swap 200704 [ 57.670582][ T4803] total_swapcached 0 [ 57.674530][ T4803] total_pgpgin 15197 [ 57.678436][ T4803] total_pgpgout 15197 [ 57.682423][ T4803] total_pgfault 13840 [ 57.686438][ T4803] total_pgmajfault 35 [ 57.690637][ T4803] total_inactive_anon 0 [ 57.694845][ T4803] total_active_anon 0 [ 57.698888][ T4803] total_inactive_file 0 [ 57.703064][ T4803] total_active_file 0 [ 57.707113][ T4803] total_unevictable 0 [ 57.711109][ T4803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.471,pid=4803,uid=0 [ 57.725663][ T4803] Memory cgroup out of memory: Killed process 4803 (syz.4.471) total-vm:93752kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 57.764318][ T4826] ip6erspan0: entered promiscuous mode [ 57.776480][ T4826] bond1: (slave ip6erspan0): making interface the new active one [ 57.791774][ T4826] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 57.895457][ T4840] bridge0: entered promiscuous mode [ 57.912615][ T29] audit: type=1400 audit(1749360611.863:695): avc: denied { create } for pid=4841 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 57.933419][ T4804] syz.4.471 (4804) used greatest stack depth: 6952 bytes left [ 57.948483][ T4847] netlink: 'syz.2.486': attribute type 13 has an invalid length. [ 57.957343][ T4840] bridge0: port 3(macvlan2) entered blocking state [ 57.968224][ T4840] bridge0: port 3(macvlan2) entered disabled state [ 57.977467][ T29] audit: type=1400 audit(1749360611.913:696): avc: denied { execute } for pid=4841 comm="syz.1.484" path="/99/cpu.stat" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.000411][ T29] audit: type=1400 audit(1749360611.913:697): avc: denied { bind } for pid=4841 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 58.021338][ T4840] macvlan2: entered allmulticast mode [ 58.030096][ T4840] bridge0: entered allmulticast mode [ 58.062586][ T4840] macvlan2: left allmulticast mode [ 58.068234][ T4840] bridge0: left allmulticast mode [ 58.081427][ T4840] bridge0: left promiscuous mode [ 58.087657][ T4853] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 58.208652][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.215948][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.273879][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.285789][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.326445][ T4847] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.335631][ T4847] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.344819][ T4847] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.353702][ T4847] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.378648][ T4850] lo speed is unknown, defaulting to 1000 [ 58.384881][ T4850] lo speed is unknown, defaulting to 1000 [ 59.493027][ T4880] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 59.516696][ T4880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.534043][ T4880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.541417][ T4880] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 59.553161][ T4880] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 59.601145][ T4888] ip6erspan0: entered promiscuous mode [ 59.620764][ T4888] bond1: (slave ip6erspan0): making interface the new active one [ 59.629093][ T4888] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 59.692625][ T4901] loop1: detected capacity change from 0 to 128 [ 59.729076][ T4901] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.832106][ T4917] loop0: detected capacity change from 0 to 2048 [ 59.844487][ T4917] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.869694][ T4917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.893104][ T4926] netlink: 196 bytes leftover after parsing attributes in process `syz.3.519'. [ 59.942633][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.963873][ T4930] netlink: 'syz.4.522': attribute type 1 has an invalid length. [ 59.986203][ T4930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.005520][ T4930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.012864][ T4930] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 60.026100][ T4930] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 60.063406][ T4941] loop3: detected capacity change from 0 to 512 [ 60.077361][ T4941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.092002][ T4941] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.248691][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.354913][ T4971] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 60.362727][ T4971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.537'. [ 60.373764][ T4971] batadv0: entered promiscuous mode [ 60.379089][ T4971] batadv0: entered allmulticast mode [ 60.386918][ T4971] bridge0: port 3(batadv0) entered blocking state [ 60.393582][ T4971] bridge0: port 3(batadv0) entered disabled state [ 60.401077][ T4973] netlink: 'syz.3.538': attribute type 1 has an invalid length. [ 60.401648][ T4971] bridge0: port 3(batadv0) entered blocking state [ 60.415252][ T4971] bridge0: port 3(batadv0) entered forwarding state [ 60.433590][ T4973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.452115][ T4973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.459529][ T4973] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 60.471788][ T4973] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 60.539119][ T4963] lo speed is unknown, defaulting to 1000 [ 60.549310][ T4963] lo speed is unknown, defaulting to 1000 [ 60.799759][ T4988] syz_tun: entered allmulticast mode [ 60.905846][ T4986] syz_tun: left allmulticast mode [ 60.911202][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 60.920631][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 60.953776][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 60.953791][ T29] audit: type=1326 audit(1749360614.903:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 60.993284][ T29] audit: type=1326 audit(1749360614.943:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 61.016930][ T29] audit: type=1326 audit(1749360614.973:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 61.040982][ T29] audit: type=1326 audit(1749360614.973:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 61.080155][ T29] audit: type=1326 audit(1749360614.973:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 61.104047][ T29] audit: type=1326 audit(1749360614.973:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 61.127552][ T29] audit: type=1326 audit(1749360614.973:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 61.151074][ T29] audit: type=1326 audit(1749360614.973:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 61.174275][ T29] audit: type=1326 audit(1749360614.973:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 61.197665][ T29] audit: type=1326 audit(1749360614.973:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 61.451633][ T4999] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 61.546559][ T5023] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 61.554469][ T5022] loop1: detected capacity change from 0 to 128 [ 61.561928][ T5023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.574495][ T5022] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 61.588040][ T5022] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 61.605423][ T5023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.612495][ T5023] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 61.637209][ T5023] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 61.780271][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.565'. [ 61.816821][ T5046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.565'. [ 61.863327][ T5029] lo speed is unknown, defaulting to 1000 [ 61.869579][ T5029] lo speed is unknown, defaulting to 1000 [ 61.937033][ T5060] netlink: 52 bytes leftover after parsing attributes in process `syz.0.570'. [ 62.031296][ T5069] loop3: detected capacity change from 0 to 736 [ 62.046052][ T5069] rock: directory entry would overflow storage [ 62.052234][ T5069] rock: sig=0x3b10, size=4, remaining=3 [ 62.081763][ T5073] geneve2: entered promiscuous mode [ 62.087101][ T5073] geneve2: entered allmulticast mode [ 62.210559][ T5077] netlink: 'syz.4.577': attribute type 1 has an invalid length. [ 62.223706][ T5077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 62.239606][ T5077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 62.247192][ T5077] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 62.259350][ T5077] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 62.367064][ T5083] lo speed is unknown, defaulting to 1000 [ 62.373431][ T5083] lo speed is unknown, defaulting to 1000 [ 62.892256][ T5115] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 62.935386][ T5115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.980520][ T5117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.998634][ T5117] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 63.026496][ T5117] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 63.066001][ T5115] ip6erspan0: entered promiscuous mode [ 63.081718][ T5115] bond1: (slave ip6erspan0): making interface the new active one [ 63.103117][ T5115] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 63.245116][ T5119] usb usb8: usbfs: process 5119 (syz.0.591) did not claim interface 0 before use [ 63.417430][ T3394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.427636][ T3394] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.631846][ T5142] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 63.646352][ T5142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 63.665998][ T5142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 63.673299][ T5142] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 63.694727][ T5142] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 63.830067][ T5157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 63.839191][ T5157] netlink: 196 bytes leftover after parsing attributes in process `syz.4.606'. [ 63.850076][ T5157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 63.860318][ T5157] netlink: 196 bytes leftover after parsing attributes in process `syz.4.606'. [ 63.860551][ T5159] capability: warning: `syz.1.608' uses deprecated v2 capabilities in a way that may be insecure [ 63.889506][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 63.932497][ T5167] loop4: detected capacity change from 0 to 128 [ 64.032413][ T5180] netlink: 'syz.1.617': attribute type 1 has an invalid length. [ 64.043972][ T5175] loop0: detected capacity change from 0 to 8192 [ 64.058602][ T5180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.086796][ T5180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.108803][ T5180] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 64.123105][ T5180] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 64.166948][ T5187] syzkaller0: entered promiscuous mode [ 64.172478][ T5187] syzkaller0: entered allmulticast mode [ 64.189872][ T5194] syzkaller1: entered promiscuous mode [ 64.195432][ T5194] syzkaller1: entered allmulticast mode [ 64.203354][ T5194] netlink: 'syz.2.623': attribute type 13 has an invalid length. [ 64.301167][ T5198] loop0: detected capacity change from 0 to 512 [ 64.323365][ T5198] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.347614][ T5198] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm +}[@: iget: bad extended attribute block 1 [ 64.362422][ T5198] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 64.367821][ T5208] lo speed is unknown, defaulting to 1000 [ 64.402889][ T5208] lo speed is unknown, defaulting to 1000 [ 64.408562][ T5198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.463263][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.530733][ T5222] loop4: detected capacity change from 0 to 512 [ 64.554825][ T5221] lo speed is unknown, defaulting to 1000 [ 64.561124][ T5221] lo speed is unknown, defaulting to 1000 [ 64.640711][ T5231] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 64.682944][ T5231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.743632][ T5231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.760776][ T5239] loop0: detected capacity change from 0 to 512 [ 64.771222][ T5231] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 64.781739][ T5241] loop1: detected capacity change from 0 to 128 [ 64.789701][ T5231] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 64.798361][ T5239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.816536][ T5239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.829489][ T5239] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.856366][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.958063][ T5252] lo speed is unknown, defaulting to 1000 [ 64.964883][ T5252] lo speed is unknown, defaulting to 1000 [ 64.983588][ T5256] __nla_validate_parse: 3 callbacks suppressed [ 64.983607][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 65.230901][ T5270] netlink: 'syz.4.651': attribute type 4 has an invalid length. [ 65.281404][ T5277] netlink: 'syz.4.651': attribute type 4 has an invalid length. [ 65.300406][ T5279] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 65.326318][ T5279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.343990][ T5279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.351618][ T5279] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 65.366666][ T5279] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 65.447476][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 65.469401][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.476934][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.486334][ T5290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.493888][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.505204][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 65.596651][ T5300] loop2: detected capacity change from 0 to 512 [ 65.603724][ T5300] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.627672][ T5300] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.663: corrupted xattr entries [ 65.642990][ T5300] EXT4-fs (loop2): Remounting filesystem read-only [ 65.652910][ T5300] EXT4-fs (loop2): 1 truncate cleaned up [ 65.663550][ T5300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.690566][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.709550][ T5304] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 65.834381][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 65.856758][ T5304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 65.872409][ T5307] vlan2: entered promiscuous mode [ 65.877575][ T5307] bond3: entered promiscuous mode [ 65.888883][ T5304] dummy0: entered promiscuous mode [ 65.914603][ T5304] bond3: (slave dummy0): making interface the new active one [ 65.923583][ T5304] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 65.954724][ T5322] netlink: 'syz.2.670': attribute type 1 has an invalid length. [ 65.968099][ T5322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 65.983097][ T5322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 65.994511][ T5322] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 66.045842][ T5322] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 66.175509][ T5334] syz_tun: entered allmulticast mode [ 66.181776][ T5333] syz_tun: left allmulticast mode [ 66.196682][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 66.201904][ T5336] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 66.238389][ T5336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.252404][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 66.261459][ T5348] netlink: 196 bytes leftover after parsing attributes in process `syz.3.677'. [ 66.270560][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 66.279548][ T5348] netlink: 196 bytes leftover after parsing attributes in process `syz.3.677'. [ 66.303993][ T5336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.311642][ T5336] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 66.323720][ T5336] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 66.405914][ T5356] syzkaller0: entered promiscuous mode [ 66.411453][ T5356] syzkaller0: entered allmulticast mode [ 66.432307][ T5360] netlink: 'syz.0.683': attribute type 1 has an invalid length. [ 66.453276][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 66.453294][ T29] audit: type=1326 audit(1749360620.403:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.483811][ T29] audit: type=1326 audit(1749360620.403:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.507139][ T29] audit: type=1326 audit(1749360620.413:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.530452][ T29] audit: type=1326 audit(1749360620.413:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.553857][ T29] audit: type=1326 audit(1749360620.413:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.577168][ T29] audit: type=1326 audit(1749360620.413:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.600421][ T29] audit: type=1326 audit(1749360620.423:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.623941][ T29] audit: type=1326 audit(1749360620.423:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.647230][ T29] audit: type=1326 audit(1749360620.423:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.670530][ T29] audit: type=1326 audit(1749360620.423:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 66.733993][ T5360] 8021q: adding VLAN 0 to HW filter on device bond3 [ 66.773882][ T5367] vlan1: entered allmulticast mode [ 66.779127][ T5367] bond3: entered allmulticast mode [ 66.882254][ T5377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 66.937483][ T5388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.006068][ T5399] loop1: detected capacity change from 0 to 512 [ 67.016500][ T5399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.029956][ T5399] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.054934][ T5399] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.700: corrupted inode contents [ 67.067667][ T5399] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.700: mark_inode_dirty error [ 67.079242][ T5399] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.700: corrupted inode contents [ 67.091440][ T5399] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.700: mark_inode_dirty error [ 67.105136][ T5399] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.700: mark inode dirty (error -117) [ 67.117938][ T5399] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 67.140848][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.193730][ T5412] netlink: 'syz.1.704': attribute type 1 has an invalid length. [ 67.209052][ T5412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 67.227846][ T5412] vlan3: entered allmulticast mode [ 67.233080][ T5412] bond3: entered allmulticast mode [ 67.359254][ T5430] loop1: detected capacity change from 0 to 512 [ 67.366286][ T5430] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 67.376149][ T5430] EXT4-fs (loop1): invalid journal inode [ 67.381837][ T5430] EXT4-fs (loop1): can't get journal size [ 67.388624][ T5430] EXT4-fs (loop1): 1 truncate cleaned up [ 67.395155][ T5430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.554541][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.747341][ T5454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.775092][ T5454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.313437][ T5480] netlink: zone id is out of range [ 68.330268][ T5480] netlink: zone id is out of range [ 68.335544][ T5480] netlink: zone id is out of range [ 68.340869][ T5480] netlink: zone id is out of range [ 68.346065][ T5480] netlink: zone id is out of range [ 68.351217][ T5480] netlink: zone id is out of range [ 68.384385][ T5480] netlink: zone id is out of range [ 68.410695][ T5480] netlink: del zone limit has 8 unknown bytes [ 68.558588][ T5494] syz_tun: entered promiscuous mode [ 68.563871][ T5494] vlan3: entered promiscuous mode [ 68.863601][ T5505] ref_ctr increment failed for inode: 0x2e4 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103c3b3c0 [ 68.876328][ T5504] uprobe: syz.2.742:5504 failed to unregister, leaking uprobe [ 68.892886][ T5500] program syz.3.741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.063961][ T5521] loop3: detected capacity change from 0 to 2048 [ 69.086863][ T5521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.280310][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.354909][ T5562] openvswitch: netlink: Message has 6 unknown bytes. [ 69.409309][ T5566] 8021q: adding VLAN 0 to HW filter on device team1 [ 69.480139][ T5583] loop2: detected capacity change from 0 to 512 [ 69.486902][ T5583] EXT4-fs: Ignoring removed orlov option [ 69.496878][ T5583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.510663][ T5583] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.542292][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.598611][ T5613] loop0: detected capacity change from 0 to 8192 [ 70.644823][ T5617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.672842][ T5619] loop2: detected capacity change from 0 to 1024 [ 70.686037][ T5619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.710094][ T5619] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 70.741457][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.023775][ T5642] wireguard0: entered promiscuous mode [ 71.029352][ T5642] wireguard0: entered allmulticast mode [ 71.172729][ T5652] pim6reg1: entered promiscuous mode [ 71.178315][ T5652] pim6reg1: entered allmulticast mode [ 71.242412][ T5660] netlink: 'syz.0.807': attribute type 12 has an invalid length. [ 71.700639][ T5687] loop0: detected capacity change from 0 to 1024 [ 71.707874][ T5687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.727633][ T5687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.747869][ T5690] wg2: entered promiscuous mode [ 71.752795][ T5690] wg2: entered allmulticast mode [ 71.797140][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.825203][ T5693] lo speed is unknown, defaulting to 1000 [ 71.831321][ T5693] lo speed is unknown, defaulting to 1000 [ 72.372543][ T5728] netlink: 'syz.1.832': attribute type 2 has an invalid length. [ 72.383803][ T5728] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 72.392200][ T5728] __nla_validate_parse: 5 callbacks suppressed [ 72.392229][ T5728] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.832'. [ 72.462226][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 72.462244][ T29] audit: type=1326 audit(1749360626.413:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.497244][ T29] audit: type=1326 audit(1749360626.443:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.520699][ T29] audit: type=1326 audit(1749360626.443:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.544211][ T29] audit: type=1326 audit(1749360626.443:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.567682][ T29] audit: type=1326 audit(1749360626.453:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.591311][ T29] audit: type=1326 audit(1749360626.453:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.614889][ T29] audit: type=1326 audit(1749360626.453:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.638552][ T29] audit: type=1326 audit(1749360626.453:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.661959][ T29] audit: type=1326 audit(1749360626.453:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.685313][ T29] audit: type=1326 audit(1749360626.453:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5731 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 72.756467][ T5746] siw: device registration error -23 [ 72.802512][ T5752] IPv4: Oversized IP packet from 127.202.26.0 [ 72.897770][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 73.045448][ T5777] loop2: detected capacity change from 0 to 2048 [ 73.093090][ T5784] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 73.103555][ T5777] Alternate GPT is invalid, using primary GPT. [ 73.110325][ T5777] loop2: p2 p3 p7 [ 73.121746][ T5784] 8021q: adding VLAN 0 to HW filter on device bond6 [ 73.154366][ T5784] vlan2: entered allmulticast mode [ 73.159719][ T5784] bond6: entered allmulticast mode [ 73.167263][ T5791] loop0: detected capacity change from 0 to 512 [ 73.175857][ T5791] EXT4-fs: Ignoring removed orlov option [ 73.191679][ T5791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.204845][ T5791] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.245694][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.559894][ T5809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.861'. [ 73.580336][ T5809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5809 comm=syz.0.861 [ 73.629893][ T5815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.865'. [ 73.763082][ T5827] SELinux: ebitmap: map size 98 does not match my size 64 (high bit was 4278589440) [ 73.773133][ T5827] SELinux: failed to load policy [ 73.854709][ T5838] loop1: detected capacity change from 0 to 1024 [ 73.861512][ T5838] EXT4-fs: Ignoring removed bh option [ 73.866990][ T5838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.876177][ T5838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.966920][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.992219][ T5843] rdma_op ffff88813a69ad80 conn xmit_rdma 0000000000000000 [ 74.488143][ T5868] netlink: 43 bytes leftover after parsing attributes in process `syz.3.897'. [ 74.497278][ T5868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.897'. [ 74.791900][ T5883] bridge_slave_0: left allmulticast mode [ 74.797662][ T5883] bridge_slave_0: left promiscuous mode [ 74.803507][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.813062][ T5883] bridge_slave_1: left allmulticast mode [ 74.819053][ T5883] bridge_slave_1: left promiscuous mode [ 74.824902][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.835298][ T5883] bond0: (slave bond_slave_0): Releasing backup interface [ 74.845440][ T5883] bond0: (slave bond_slave_1): Releasing backup interface [ 74.858003][ T5883] team0: Port device team_slave_0 removed [ 74.867560][ T5883] team0: Port device team_slave_1 removed [ 74.874573][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.882761][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.890395][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.911504][ T5883] bond1: (slave ip6erspan0): Releasing active interface [ 74.950207][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 74.961717][ T5886] vlan2: entered allmulticast mode [ 74.966966][ T5886] dummy0: entered allmulticast mode [ 75.087813][ T5901] 0ªî{X¹¦: left allmulticast mode [ 75.110370][ T5901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.126423][ T3387] lo speed is unknown, defaulting to 1000 [ 75.150331][ T5906] loop1: detected capacity change from 0 to 512 [ 75.159362][ T5906] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.902: casefold flag without casefold feature [ 75.172542][ T5906] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.902: couldn't read orphan inode 15 (err -117) [ 75.185186][ T5906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.326571][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.433759][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 75.638557][ T5943] ip6gre1: entered allmulticast mode [ 75.802102][ T5964] tipc: Enabling of bearer rejected, failed to enable media [ 75.880390][ T5972] loop0: detected capacity change from 0 to 2048 [ 75.907982][ T5979] netlink: 14 bytes leftover after parsing attributes in process `syz.4.933'. [ 75.919481][ T5972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.935850][ T5979] bond0 (unregistering): Released all slaves [ 76.046386][ T5988] lo speed is unknown, defaulting to 1000 [ 76.053176][ T5988] lo speed is unknown, defaulting to 1000 [ 76.071917][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.200451][ T6002] loop0: detected capacity change from 0 to 164 [ 76.226404][ T6002] lo speed is unknown, defaulting to 1000 [ 76.232612][ T6002] lo speed is unknown, defaulting to 1000 [ 76.256700][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.954'. [ 76.620753][ T6033] pim6reg1: entered promiscuous mode [ 76.626222][ T6033] pim6reg1: entered allmulticast mode [ 76.752300][ T6044] loop3: detected capacity change from 0 to 1024 [ 76.760511][ T6044] ext4: Unknown parameter 'uid<00000000000000000000' [ 76.824783][ T6050] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 76.849130][ T6050] 8021q: adding VLAN 0 to HW filter on device bond5 [ 76.857578][ T6050] bond4: (slave bond5): making interface the new active one [ 76.868278][ T6050] bond4: (slave bond5): Enslaving as an active interface with an up link [ 76.880536][ T6050] 8021q: adding VLAN 0 to HW filter on device bond4 [ 76.913368][ T6057] loop1: detected capacity change from 0 to 512 [ 76.926341][ T6057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.939011][ T6057] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.317782][ T6090] netlink: 'syz.4.974': attribute type 10 has an invalid length. [ 77.336378][ T6090] dummy0: entered promiscuous mode [ 77.342669][ T6090] bridge0: port 1(dummy0) entered blocking state [ 77.349243][ T6090] bridge0: port 1(dummy0) entered disabled state [ 77.367234][ T6090] bridge0: port 1(dummy0) entered blocking state [ 77.373742][ T6090] bridge0: port 1(dummy0) entered forwarding state [ 77.565732][ T6127] __nla_validate_parse: 2 callbacks suppressed [ 77.565748][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 77.626812][ T6132] loop3: detected capacity change from 0 to 2048 [ 77.656646][ T6132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.672745][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 77.672759][ T29] audit: type=1400 audit(1749360631.623:1302): avc: denied { module_load } for pid=6131 comm="syz.3.982" path="/177/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 77.702850][ T6132] Invalid ELF header magic: != ELF [ 77.736461][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.778332][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.805749][ T6146] loop2: detected capacity change from 0 to 512 [ 77.826727][ T6146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.853502][ T29] audit: type=1326 audit(1749360631.803:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 77.877500][ T29] audit: type=1326 audit(1749360631.833:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 77.901085][ T29] audit: type=1326 audit(1749360631.833:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 77.924448][ T29] audit: type=1326 audit(1749360631.833:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 77.926300][ T6146] EXT4-fs (loop2): 1 truncate cleaned up [ 77.948789][ T29] audit: type=1326 audit(1749360631.833:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 77.977143][ T29] audit: type=1326 audit(1749360631.833:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 78.000607][ T29] audit: type=1326 audit(1749360631.833:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 78.023986][ T29] audit: type=1326 audit(1749360631.833:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 78.024597][ T6146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.050874][ T29] audit: type=1326 audit(1749360631.973:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.4.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 78.341894][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.378797][ T6199] loop2: detected capacity change from 0 to 1024 [ 78.397863][ T6199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.414468][ T6197] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 78.448550][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.793770][ T6269] loop3: detected capacity change from 0 to 128 [ 78.801291][ T6269] EXT4-fs: Ignoring removed nobh option [ 78.808690][ T6269] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.821122][ T6269] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.835286][ T6272] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1004'. [ 79.001421][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.112737][ T6293] batadv_slave_0: entered promiscuous mode [ 79.234755][ T6301] ref_ctr increment failed for inode: 0x3ef offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810403ed40 [ 79.246962][ T6300] uprobe: syz.3.1018:6300 failed to unregister, leaking uprobe [ 79.630229][ T6309] bridge0: port 3(macvlan2) entered blocking state [ 79.637257][ T6309] bridge0: port 3(macvlan2) entered disabled state [ 79.644817][ T6309] macvlan2: entered allmulticast mode [ 79.651122][ T6309] bridge0: entered allmulticast mode [ 79.673037][ T6309] macvlan2: left allmulticast mode [ 79.679358][ T6309] bridge0: left allmulticast mode [ 79.694342][ T6315] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 79.716048][ T6315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 79.725751][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 79.759808][ T6315] bond4 (unregistering): Released all slaves [ 79.852340][ T6328] siw: device registration error -23 [ 79.945169][ T6341] loop2: detected capacity change from 0 to 128 [ 79.953500][ T6341] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.015870][ T6353] IPVS: Error connecting to the multicast addr [ 80.042511][ T6350] netlink: 'syz.4.1038': attribute type 13 has an invalid length. [ 80.114558][ T6350] bridge0: port 1(dummy0) entered disabled state [ 80.179870][ T6350] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.188423][ T6350] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.196870][ T6350] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.205469][ T6350] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.966836][ T6392] syz_tun: entered allmulticast mode [ 80.973360][ T6391] syz_tun: left allmulticast mode [ 81.109971][ T6404] netlink: 'syz.4.1061': attribute type 10 has an invalid length. [ 81.117948][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1061'. [ 81.127245][ T6404] batadv0: entered promiscuous mode [ 81.132631][ T6404] batadv0: entered allmulticast mode [ 81.139987][ T6404] bridge0: port 2(batadv0) entered blocking state [ 81.146564][ T6404] bridge0: port 2(batadv0) entered disabled state [ 81.177060][ T6408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6408 comm=syz.1.1063 [ 81.224145][ T6413] No such timeout policy "syz0" [ 81.260197][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1066'. [ 81.269272][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1066'. [ 81.281977][ T6415] ip6gretap0: entered promiscuous mode [ 81.290822][ T6415] syz_tun: entered promiscuous mode [ 81.326348][ T6417] bridge: RTM_NEWNEIGH with invalid ether address [ 81.526053][ T3428] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 81.535375][ T3428] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 82.655167][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.663651][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.772378][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 82.772395][ T29] audit: type=1400 audit(1749360636.723:1457): avc: denied { read } for pid=6486 comm="syz.3.1104" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.990546][ T6488] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 83.384764][ T6514] usb usb8: usbfs: process 6514 (syz.1.1102) did not claim interface 0 before use [ 83.583493][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 83.600026][ T6529] 8021q: adding VLAN 0 to HW filter on device team2 [ 83.650434][ T29] audit: type=1326 audit(1749360637.603:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6535 comm="syz.1.1115" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f811a02e929 code=0x0 [ 83.725577][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1117'. [ 83.790603][ T29] audit: type=1400 audit(1749360637.743:1459): avc: denied { ioctl } for pid=6548 comm="syz.0.1116" path="socket:[13515]" dev="sockfs" ino=13515 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.816456][ T29] audit: type=1326 audit(1749360637.743:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 83.839934][ T29] audit: type=1326 audit(1749360637.743:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 83.863902][ T29] audit: type=1326 audit(1749360637.743:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 83.887419][ T29] audit: type=1326 audit(1749360637.743:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 83.910980][ T29] audit: type=1326 audit(1749360637.743:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 83.934633][ T29] audit: type=1326 audit(1749360637.743:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 83.958140][ T29] audit: type=1400 audit(1749360637.743:1466): avc: denied { bind } for pid=6548 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.968826][ T6553] loop0: detected capacity change from 0 to 256 [ 83.986429][ T6553] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.998244][ T6552] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 84.006998][ T6552] FAT-fs (loop0): Filesystem has been set read-only [ 84.172535][ T6558] loop0: detected capacity change from 0 to 512 [ 84.185766][ T6558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.198528][ T6558] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.318239][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.346941][ T6567] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.385653][ T6567] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.436715][ T6567] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.473047][ T6572] loop3: detected capacity change from 0 to 512 [ 84.479941][ T6572] EXT4-fs: Ignoring removed orlov option [ 84.487002][ T6567] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.497065][ T6572] ext4: Unknown parameter 'uid>00000000000000000000' [ 84.561334][ T6567] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.573120][ T6567] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.585916][ T6567] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.597962][ T6567] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.754270][ T6580] tipc: Started in network mode [ 84.759211][ T6580] tipc: Node identity ac14140f, cluster identity 4711 [ 84.770060][ T6580] tipc: New replicast peer: 0.0.255.255 [ 84.775742][ T6580] tipc: Enabled bearer , priority 10 [ 84.817182][ T6585] geneve2: entered promiscuous mode [ 84.820474][ T6587] 9pnet_fd: Insufficient options for proto=fd [ 84.822439][ T6585] geneve2: entered allmulticast mode [ 84.899153][ T6597] loop2: detected capacity change from 0 to 512 [ 84.916005][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.928595][ T6597] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.929203][ T6595] usb usb8: usbfs: process 6595 (syz.3.1134) did not claim interface 0 before use [ 84.982402][ T6606] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.005891][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 85.015787][ T6605] loop3: detected capacity change from 0 to 2048 [ 85.025836][ T6605] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.036026][ T6606] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.056073][ T6605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.097093][ T6615] loop1: detected capacity change from 0 to 512 [ 85.104389][ T6615] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.105750][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.116207][ T6615] EXT4-fs (loop1): 1 truncate cleaned up [ 85.129873][ T6615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.144234][ T6606] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.197201][ T6606] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.338655][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.352298][ T6627] loop2: detected capacity change from 0 to 512 [ 85.360846][ T6627] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.1147: corrupted in-inode xattr: invalid ea_ino [ 85.374902][ T6627] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1147: couldn't read orphan inode 15 (err -117) [ 85.388877][ T6627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.423268][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.449686][ T6633] netlink: 'syz.2.1148': attribute type 10 has an invalid length. [ 85.458884][ T6633] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.469135][ T6633] bond0: (slave team0): Enslaving as an active interface with an up link [ 85.572928][ T6640] netlink: 'syz.1.1153': attribute type 4 has an invalid length. [ 85.583945][ T36] lo speed is unknown, defaulting to 1000 [ 85.587277][ T6640] netlink: 'syz.1.1153': attribute type 4 has an invalid length. [ 85.589772][ T36] syz0: Port: 1 Link DOWN [ 85.603236][ T2961] lo speed is unknown, defaulting to 1000 [ 85.609106][ T2961] syz0: Port: 1 Link ACTIVE [ 85.627183][ T6642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.631513][ T6644] loop1: detected capacity change from 0 to 512 [ 85.636066][ T6642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.651090][ T6642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.659842][ T6642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.666508][ T6644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.668616][ T6642] geneve2: entered promiscuous mode [ 85.682306][ T6644] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.686412][ T6642] geneve2: entered allmulticast mode [ 85.704280][ T6642] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.713252][ T6642] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.722334][ T6642] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.731285][ T6642] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.774217][ T10] tipc: Node number set to 2886997007 [ 85.830625][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.847370][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.223284][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1165'. [ 86.264855][ T6685] netlink: 'syz.2.1169': attribute type 4 has an invalid length. [ 86.292552][ T6685] netlink: 'syz.2.1169': attribute type 4 has an invalid length. [ 86.359934][ T6693] pim6reg1: entered promiscuous mode [ 86.365378][ T6693] pim6reg1: entered allmulticast mode [ 88.320708][ T6606] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.331671][ T6606] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.342809][ T6606] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353960][ T6606] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.437281][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 88.437298][ T29] audit: type=1400 audit(1749360642.393:1494): avc: denied { read } for pid=6703 comm="syz.4.1182" name="file0" dev="tmpfs" ino=1435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 88.588365][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1181'. [ 88.771207][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 88.795286][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1196'. [ 88.838864][ T29] audit: type=1326 audit(1749360642.793:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 88.869579][ T29] audit: type=1326 audit(1749360642.793:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 88.893174][ T29] audit: type=1326 audit(1749360642.793:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 88.916663][ T29] audit: type=1326 audit(1749360642.793:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 88.940853][ T29] audit: type=1326 audit(1749360642.793:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 88.964517][ T29] audit: type=1326 audit(1749360642.793:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 88.988051][ T29] audit: type=1326 audit(1749360642.793:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 89.011516][ T29] audit: type=1326 audit(1749360642.793:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 89.035023][ T29] audit: type=1326 audit(1749360642.793:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.0.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6fd92e929 code=0x7ffc0000 [ 89.063720][ T6758] loop3: detected capacity change from 0 to 1024 [ 89.070631][ T6758] EXT4-fs: Ignoring removed nobh option [ 89.076325][ T6758] EXT4-fs: Ignoring removed bh option [ 89.096988][ T6758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.209810][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.222079][ T6774] wireguard0: entered promiscuous mode [ 89.227666][ T6774] wireguard0: entered allmulticast mode [ 89.251292][ T6778] netlink: 'syz.3.1208': attribute type 2 has an invalid length. [ 89.260221][ T6778] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 89.268700][ T6778] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1208'. [ 89.406453][ T6786] lo speed is unknown, defaulting to 1000 [ 89.412532][ T6786] lo speed is unknown, defaulting to 1000 [ 89.489285][ T6792] wg2: entered promiscuous mode [ 89.494273][ T6792] wg2: entered allmulticast mode [ 89.845894][ T6807] lo speed is unknown, defaulting to 1000 [ 89.853845][ T6807] lo speed is unknown, defaulting to 1000 [ 90.590554][ T6855] loop2: detected capacity change from 0 to 2048 [ 90.704831][ T6862] netlink: 'syz.0.1252': attribute type 1 has an invalid length. [ 90.724284][ T6865] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 90.747554][ T6865] SELinux: failed to load policy [ 90.770647][ T6862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.805052][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 90.838781][ T6862] vlan1: entered promiscuous mode [ 90.843963][ T6862] bond4: entered promiscuous mode [ 90.890033][ T6862] dummy0: entered promiscuous mode [ 90.950145][ T6862] bond4: (slave dummy0): making interface the new active one [ 90.977996][ T6862] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 91.090801][ T6877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1248'. [ 91.108554][ T6878] lo speed is unknown, defaulting to 1000 [ 91.114825][ T6878] lo speed is unknown, defaulting to 1000 [ 91.257333][ T6888] loop0: detected capacity change from 0 to 128 [ 91.277066][ T6888] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.387600][ T6899] loop3: detected capacity change from 0 to 128 [ 91.406996][ T6896] loop0: detected capacity change from 0 to 512 [ 91.575849][ T6918] ÿÿÿÿÿÿ: renamed from vlan1 [ 91.621321][ T6923] xt_hashlimit: max too large, truncated to 1048576 [ 91.685150][ T6931] loop2: detected capacity change from 0 to 128 [ 91.698095][ T6931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.709231][ T6931] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.1271: iget: checksum invalid [ 91.754222][ T6931] EXT4-fs (loop2): get root inode failed [ 91.759938][ T6931] EXT4-fs (loop2): mount failed [ 91.781332][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.802355][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.102643][ T6951] loop2: detected capacity change from 0 to 128 [ 92.111727][ T6951] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.124428][ T6951] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.610106][ T6965] xt_connbytes: Forcing CT accounting to be enabled [ 92.624010][ T6965] set match dimension is over the limit! [ 92.650691][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.664288][ T6969] batadv_slave_0: entered promiscuous mode [ 92.741315][ T6975] IPVS: Error connecting to the multicast addr [ 92.823725][ T6984] ip6gre2: entered allmulticast mode [ 92.839435][ T6986] loop3: detected capacity change from 0 to 1024 [ 92.855929][ T6982] lo speed is unknown, defaulting to 1000 [ 92.861975][ T6982] lo speed is unknown, defaulting to 1000 [ 92.883719][ T6986] EXT4-fs: Ignoring removed bh option [ 92.889245][ T6986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.900685][ T6986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.026348][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1293'. [ 93.242815][ T7003] lo speed is unknown, defaulting to 1000 [ 93.249652][ T7003] lo speed is unknown, defaulting to 1000 [ 93.735516][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.819780][ T7013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.888624][ T7013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.906542][ T7024] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 93.907267][ T7022] batadv_slave_0: entered promiscuous mode [ 93.924351][ T7021] IPVS: stopping master sync thread 7024 ... [ 93.947270][ T7013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.001324][ T7030] netlink: 'syz.1.1306': attribute type 10 has an invalid length. [ 94.009256][ T7030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1306'. [ 94.023592][ T7030] dummy0: entered promiscuous mode [ 94.030694][ T7030] bridge0: port 3(dummy0) entered blocking state [ 94.037298][ T7030] bridge0: port 3(dummy0) entered disabled state [ 94.045089][ T7030] bridge0: port 3(dummy0) entered blocking state [ 94.051494][ T7030] bridge0: port 3(dummy0) entered forwarding state [ 94.067338][ T7013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.103802][ T7034] loop1: detected capacity change from 0 to 512 [ 94.116457][ T7034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.129052][ T7034] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.147861][ T7013] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.159909][ T7013] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.171929][ T7013] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.183644][ T7013] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.212082][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.265992][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 94.266010][ T29] audit: type=1326 audit(1749360648.223:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.312010][ T29] audit: type=1326 audit(1749360648.253:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.335463][ T29] audit: type=1326 audit(1749360648.253:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.358935][ T29] audit: type=1326 audit(1749360648.253:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.382370][ T29] audit: type=1326 audit(1749360648.253:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.405884][ T29] audit: type=1326 audit(1749360648.253:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.429382][ T29] audit: type=1326 audit(1749360648.253:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.452905][ T29] audit: type=1326 audit(1749360648.253:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.476626][ T29] audit: type=1326 audit(1749360648.253:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.500128][ T29] audit: type=1326 audit(1749360648.253:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b19e929 code=0x7ffc0000 [ 94.524653][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.585156][ T7051] lo speed is unknown, defaulting to 1000 [ 94.591515][ T7051] lo speed is unknown, defaulting to 1000 [ 94.924055][ T7111] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 94.956951][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.970089][ T7117] ref_ctr increment failed for inode: 0x59d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103c3a840 [ 94.971205][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 95.002490][ T7116] uprobe: syz.0.1327:7116 failed to unregister, leaking uprobe [ 95.011868][ T7111] bond0 (unregistering): Released all slaves [ 95.211321][ T7156] netlink: 'syz.3.1336': attribute type 10 has an invalid length. [ 95.219321][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1336'. [ 95.403315][ T7177] loop0: detected capacity change from 0 to 1024 [ 95.415682][ T7177] EXT4-fs: Ignoring removed bh option [ 95.421131][ T7177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.430866][ T7179] IPVS: stopping master sync thread 7181 ... [ 95.432903][ T7181] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 95.456456][ T7177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.561092][ T7196] ip6gre1: entered allmulticast mode [ 95.574705][ T7202] IPVS: Error connecting to the multicast addr [ 95.758608][ T7216] lo speed is unknown, defaulting to 1000 [ 95.766219][ T7216] lo speed is unknown, defaulting to 1000 [ 96.272324][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.587759][ T7258] loop0: detected capacity change from 0 to 512 [ 96.616185][ T7258] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.636101][ T7258] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 96.659885][ T7258] EXT4-fs (loop0): orphan cleanup on readonly fs [ 96.683067][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1347'. [ 96.744790][ T7258] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.791177][ T7258] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 96.799480][ T7258] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1360: bg 0: block 40: padding at end of block bitmap is not set [ 96.815342][ T7258] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 96.824837][ T7258] EXT4-fs (loop0): 1 truncate cleaned up [ 96.831243][ T7258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.921173][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.951166][ T7275] IPVS: stopping master sync thread 7276 ... [ 96.960515][ T7276] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 97.012894][ T7280] loop2: detected capacity change from 0 to 512 [ 97.020420][ T7280] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.034798][ T7280] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.043484][ T7280] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.051407][ T7280] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.067971][ T7280] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 97.076505][ T7280] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1372: bg 0: block 40: padding at end of block bitmap is not set [ 97.098246][ T7280] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 97.107192][ T7286] loop0: detected capacity change from 0 to 2048 [ 97.114341][ T7280] EXT4-fs (loop2): 1 truncate cleaned up [ 97.116992][ T7288] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1365'. [ 97.120883][ T7280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.130177][ T7288] netlink: zone id is out of range [ 97.147487][ T7288] netlink: zone id is out of range [ 97.152647][ T7288] netlink: zone id is out of range [ 97.157829][ T7288] netlink: zone id is out of range [ 97.162957][ T7288] netlink: zone id is out of range [ 97.168128][ T7288] netlink: zone id is out of range [ 97.174024][ T7288] netlink: zone id is out of range [ 97.180075][ T7288] netlink: del zone limit has 8 unknown bytes [ 97.198066][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.257826][ T7291] loop3: detected capacity change from 0 to 8192 [ 97.293307][ T7293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.300596][ T7293] IPv6: NLM_F_CREATE should be set when creating new route [ 97.345775][ T7299] loop0: detected capacity change from 0 to 1024 [ 97.368106][ T7299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.401078][ T7299] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.482202][ T7299] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 97.503609][ T7299] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 97.519078][ T7299] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.519078][ T7299] [ 97.544485][ T7299] EXT4-fs (loop0): Total free blocks count 0 [ 97.550799][ T7299] EXT4-fs (loop0): Free/Dirty block details [ 97.557679][ T7299] EXT4-fs (loop0): free_blocks=4293918720 [ 97.563969][ T7299] EXT4-fs (loop0): dirty_blocks=64 [ 97.569762][ T7299] EXT4-fs (loop0): Block reservation details [ 97.578692][ T7299] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 97.658879][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.756993][ T7320] loop0: detected capacity change from 0 to 512 [ 97.776165][ T7320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.795678][ T7323] lo speed is unknown, defaulting to 1000 [ 97.802038][ T7323] lo speed is unknown, defaulting to 1000 [ 97.808029][ T7320] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.905501][ T7320] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.1387: corrupted inode contents [ 97.917714][ T7320] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.1387: mark_inode_dirty error [ 97.929581][ T7320] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.1387: corrupted inode contents [ 97.941891][ T7320] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.1387: mark_inode_dirty error [ 97.959884][ T7320] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.1387: mark inode dirty (error -117) [ 97.973845][ T7320] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 97.998440][ T7334] lo speed is unknown, defaulting to 1000 [ 98.014723][ T7334] lo speed is unknown, defaulting to 1000 [ 98.028063][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.063616][ T7337] loop1: detected capacity change from 0 to 2048 [ 98.132465][ T7343] ip6gre1: entered allmulticast mode [ 98.267984][ T7349] loop0: detected capacity change from 0 to 512 [ 98.286806][ T7349] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 98.299402][ T7349] EXT4-fs (loop0): invalid journal inode [ 98.305743][ T7349] EXT4-fs (loop0): can't get journal size [ 98.316103][ T7349] EXT4-fs (loop0): 1 truncate cleaned up [ 98.324550][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.578264][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.859922][ T7383] lo speed is unknown, defaulting to 1000 [ 98.873888][ T7383] lo speed is unknown, defaulting to 1000 [ 99.002873][ T7391] lo speed is unknown, defaulting to 1000 [ 99.009082][ T7391] lo speed is unknown, defaulting to 1000 [ 99.262122][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.279461][ T7411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.279644][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 99.279661][ T29] audit: type=1326 audit(1749360653.233:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.328874][ T29] audit: type=1326 audit(1749360653.283:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.352304][ T29] audit: type=1326 audit(1749360653.283:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.375918][ T29] audit: type=1326 audit(1749360653.283:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.399391][ T29] audit: type=1326 audit(1749360653.283:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.422885][ T29] audit: type=1326 audit(1749360653.283:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.446355][ T29] audit: type=1326 audit(1749360653.283:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.474990][ T7421] ref_ctr increment failed for inode: 0x67c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810403d640 [ 99.486627][ T7420] uprobe: syz.4.1415:7420 failed to unregister, leaking uprobe [ 99.494343][ T29] audit: type=1326 audit(1749360653.333:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.518242][ T29] audit: type=1326 audit(1749360653.333:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.541686][ T29] audit: type=1326 audit(1749360653.333:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 99.677098][ T7429] loop3: detected capacity change from 0 to 512 [ 99.695615][ T7427] loop1: detected capacity change from 0 to 8192 [ 99.744822][ T7429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.761302][ T7435] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 99.786081][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.801691][ T7439] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1421'. [ 99.802317][ T7429] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.811206][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1421'. [ 99.822279][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1422'. [ 99.849697][ T7435] bond0 (unregistering): Released all slaves [ 99.983183][ T7444] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 99.996220][ T7444] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 100.007579][ T7444] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 100.019888][ T7444] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 100.031865][ T7444] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 100.045437][ T7444] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 100.077573][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.149115][ T7451] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.218979][ T7451] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.257651][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1426'. [ 100.267740][ T7451] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.290694][ T7455] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7455 comm=syz.4.1426 [ 100.315996][ T7451] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.393714][ T7451] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.407198][ T7451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.419874][ T7451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.432340][ T7451] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.451087][ T7461] lo speed is unknown, defaulting to 1000 [ 100.457917][ T7461] lo speed is unknown, defaulting to 1000 [ 100.508880][ T7466] ref_ctr increment failed for inode: 0x579 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888103c3ae00 [ 100.522206][ T7465] uprobe: syz.3.1429:7465 failed to unregister, leaking uprobe [ 100.632090][ T7470] lo speed is unknown, defaulting to 1000 [ 100.638863][ T7470] lo speed is unknown, defaulting to 1000 [ 100.738296][ T7483] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 100.752498][ T7482] lo speed is unknown, defaulting to 1000 [ 100.769314][ T7483] 8021q: adding VLAN 0 to HW filter on device bond5 [ 100.782467][ T7482] lo speed is unknown, defaulting to 1000 [ 100.782962][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 100.802391][ T7483] bond5 (unregistering): Released all slaves [ 100.821398][ T7490] loop1: detected capacity change from 0 to 512 [ 100.838416][ T7490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.856192][ T7490] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.009505][ T7500] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 101.021562][ T7500] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm +}[@: mark_inode_dirty error [ 101.033796][ T7500] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm +}[@: corrupted inode contents [ 101.046509][ T7500] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm +}[@: mark_inode_dirty error [ 101.058360][ T7500] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm +}[@: mark inode dirty (error -117) [ 101.070917][ T7500] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 101.099309][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.179383][ T7506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.267221][ T7506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.317918][ T7506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.367547][ T7506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.421949][ T7506] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.433355][ T7506] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.444871][ T7506] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.457034][ T7506] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.475120][ T7509] ref_ctr increment failed for inode: 0x611 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810403b980 [ 101.486766][ T7508] uprobe: syz.0.1446:7508 failed to unregister, leaking uprobe [ 101.609974][ T7517] loop0: detected capacity change from 0 to 1024 [ 101.618235][ T7518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7518 comm=syz.2.1458 [ 101.636456][ T7517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.667060][ T7511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7511 comm=syz.2.1458 [ 101.682050][ T7516] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 101.715947][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.982749][ T7524] loop0: detected capacity change from 0 to 2048 [ 101.993218][ T7530] loop1: detected capacity change from 0 to 512 [ 102.000542][ T7530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.006666][ T7524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.026307][ T7530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.039524][ T7530] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.067241][ T7537] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 102.087132][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.087993][ T7537] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.114694][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 102.125986][ T7537] bond4 (unregistering): Released all slaves [ 102.158805][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.409066][ T7555] xt_hashlimit: max too large, truncated to 1048576 [ 102.476742][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 103.048553][ T7567] loop3: detected capacity change from 0 to 1024 [ 103.062183][ T7567] EXT4-fs: Ignoring removed bh option [ 103.067829][ T7567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.072389][ T7565] lo speed is unknown, defaulting to 1000 [ 103.081755][ T7565] lo speed is unknown, defaulting to 1000 [ 103.093353][ T7567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.172926][ T7574] netlink: 'syz.0.1468': attribute type 4 has an invalid length. [ 103.267798][ T7574] netlink: 'syz.0.1468': attribute type 4 has an invalid length. [ 103.297013][ T7578] loop2: detected capacity change from 0 to 2048 [ 103.309485][ T7566] serio: Serial port ptm0 [ 103.328499][ T7578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.502372][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.521095][ T7594] xt_hashlimit: max too large, truncated to 1048576 [ 103.599915][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.185701][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'. [ 104.281868][ T7609] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1479'. [ 104.317283][ T7613] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.365786][ T7613] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.450949][ T7613] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.495600][ T7619] lo speed is unknown, defaulting to 1000 [ 104.501784][ T7619] lo speed is unknown, defaulting to 1000 [ 104.513273][ T7613] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.555597][ T7624] lo speed is unknown, defaulting to 1000 [ 104.569942][ T7624] lo speed is unknown, defaulting to 1000 [ 104.923387][ T7613] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.937433][ T7613] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.949763][ T7613] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.962252][ T7613] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.659042][ T7749] loop3: detected capacity change from 0 to 128 [ 105.671531][ T7749] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 105.685202][ T7749] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 106.010101][ T7769] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.030622][ T7774] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1495'. [ 106.091388][ T7773] bridge0: port 3(macvlan2) entered blocking state [ 106.099761][ T7773] bridge0: port 3(macvlan2) entered disabled state [ 106.107713][ T7773] macvlan2: entered allmulticast mode [ 106.113301][ T7773] bridge0: entered allmulticast mode [ 106.121060][ T7773] macvlan2: left allmulticast mode [ 106.126770][ T7773] bridge0: left allmulticast mode [ 106.150322][ T7769] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.201516][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 106.201565][ T29] audit: type=1326 audit(1749360660.153:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.234993][ T29] audit: type=1326 audit(1749360660.183:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.235336][ T7769] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.258450][ T29] audit: type=1326 audit(1749360660.183:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.284854][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1511'. [ 106.291726][ T29] audit: type=1326 audit(1749360660.183:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.324228][ T29] audit: type=1326 audit(1749360660.183:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.348427][ T29] audit: type=1326 audit(1749360660.183:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.371791][ T29] audit: type=1326 audit(1749360660.183:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.395380][ T29] audit: type=1326 audit(1749360660.193:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.418970][ T29] audit: type=1326 audit(1749360660.193:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.442380][ T29] audit: type=1326 audit(1749360660.193:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d55e929 code=0x7ffc0000 [ 106.484489][ T7785] team0 (unregistering): Port device team_slave_0 removed [ 106.522653][ T7785] team0 (unregistering): Port device team_slave_1 removed [ 106.559964][ T7791] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.568305][ T7791] bridge0: port 1(dummy0) entered blocking state [ 106.574714][ T7791] bridge0: port 1(dummy0) entered forwarding state [ 106.585826][ T7791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.604667][ T7769] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.673695][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 106.712685][ T7800] loop0: detected capacity change from 0 to 128 [ 106.720679][ T7800] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 106.734246][ T7800] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 106.782078][ T7804] lo speed is unknown, defaulting to 1000 [ 106.789304][ T7804] lo speed is unknown, defaulting to 1000 [ 106.998665][ T7809] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.096517][ T7809] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.164344][ T7816] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7816 comm=syz.3.1509 [ 107.215173][ T7811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7811 comm=syz.3.1509 [ 107.216866][ T7809] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.305685][ T7809] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.363059][ T7809] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.369599][ T7821] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1510'. [ 107.375593][ T7809] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.392650][ T7809] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.406586][ T7809] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.588511][ T7827] loop3: detected capacity change from 0 to 512 [ 107.595842][ T7827] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 107.605510][ T7827] EXT4-fs (loop3): invalid journal inode [ 107.611281][ T7827] EXT4-fs (loop3): can't get journal size [ 107.618342][ T7827] EXT4-fs (loop3): 1 truncate cleaned up [ 107.625233][ T7827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.774662][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.316414][ T7845] bridge0: entered promiscuous mode [ 108.328569][ T7845] bridge0: port 4(macvlan2) entered blocking state [ 108.340406][ T7845] bridge0: port 4(macvlan2) entered disabled state [ 108.348274][ T7845] macvlan2: entered allmulticast mode [ 108.355006][ T7845] bridge0: entered allmulticast mode [ 108.369102][ T7845] macvlan2: left allmulticast mode [ 108.375844][ T7845] bridge0: left allmulticast mode [ 108.390012][ T7845] bridge0: left promiscuous mode [ 108.438645][ T7849] lo speed is unknown, defaulting to 1000 [ 108.445138][ T7849] lo speed is unknown, defaulting to 1000 [ 108.691066][ T7861] loop3: detected capacity change from 0 to 512 [ 108.698198][ T7861] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 108.707400][ T7861] EXT4-fs (loop3): invalid journal inode [ 108.713148][ T7861] EXT4-fs (loop3): can't get journal size [ 108.719669][ T7861] EXT4-fs (loop3): 1 truncate cleaned up [ 108.726028][ T7861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.847947][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.111782][ T7769] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.123393][ T7769] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.134761][ T7769] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.146222][ T7769] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186337][ T7879] lo speed is unknown, defaulting to 1000 [ 109.192407][ T7883] netlink: 'syz.1.1536': attribute type 10 has an invalid length. [ 109.192863][ T7879] lo speed is unknown, defaulting to 1000 [ 109.200331][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1536'. [ 109.302577][ T7889] tipc: Enabling of bearer rejected, failed to enable media [ 109.398007][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 109.443070][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'. [ 109.652546][ T7914] loop1: detected capacity change from 0 to 512 [ 109.702750][ T7921] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1553'. [ 109.717905][ T7921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.729964][ T7921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.753229][ T7921] bond0 (unregistering): Released all slaves [ 109.788610][ T7929] loop0: detected capacity change from 0 to 128 [ 109.795359][ T7929] EXT4-fs: Ignoring removed nobh option [ 109.802636][ T7929] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.815141][ T7929] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.005008][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.660606][ T7939] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 110.668524][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1556'. [ 110.678636][ T7939] batadv0: entered promiscuous mode [ 110.683886][ T7939] batadv0: entered allmulticast mode [ 110.705023][ T7939] bridge0: port 3(batadv0) entered blocking state [ 110.711590][ T7939] bridge0: port 3(batadv0) entered disabled state [ 111.004860][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 111.014219][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 112.929080][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 112.951373][ T7947] lo speed is unknown, defaulting to 1000 [ 112.984458][ T7948] bridge0: entered promiscuous mode [ 113.003728][ T7948] bridge0: port 4(macvlan2) entered blocking state [ 113.011792][ T7948] bridge0: port 4(macvlan2) entered disabled state [ 113.026191][ T7948] macvlan2: entered allmulticast mode [ 113.032191][ T7948] bridge0: entered allmulticast mode [ 113.057050][ T7948] macvlan2: left allmulticast mode [ 113.062873][ T7948] bridge0: left allmulticast mode [ 113.073779][ T7948] bridge0: left promiscuous mode [ 113.090741][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 113.139587][ T7947] lo speed is unknown, defaulting to 1000 [ 113.161244][ T7959] tipc: Enabling of bearer rejected, failed to enable media [ 113.266622][ T7962] loop2: detected capacity change from 0 to 512 [ 113.291150][ T7967] loop0: detected capacity change from 0 to 512 [ 113.295059][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 113.295078][ T29] audit: type=1326 audit(1749360667.253:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.334915][ T7967] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 113.354188][ T7965] lo speed is unknown, defaulting to 1000 [ 113.360353][ T7965] lo speed is unknown, defaulting to 1000 [ 113.360420][ T29] audit: type=1326 audit(1749360667.283:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.389946][ T29] audit: type=1326 audit(1749360667.283:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.413698][ T29] audit: type=1326 audit(1749360667.283:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.437465][ T29] audit: type=1326 audit(1749360667.283:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.438660][ T7967] EXT4-fs (loop0): invalid journal inode [ 113.460974][ T29] audit: type=1326 audit(1749360667.283:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.478157][ T7967] EXT4-fs (loop0): can't get journal size [ 113.490279][ T29] audit: type=1326 audit(1749360667.283:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.519697][ T29] audit: type=1326 audit(1749360667.283:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.543632][ T29] audit: type=1326 audit(1749360667.283:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.567253][ T29] audit: type=1326 audit(1749360667.283:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.1.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811a02e929 code=0x7ffc0000 [ 113.601736][ T7967] EXT4-fs (loop0): 1 truncate cleaned up [ 113.608077][ T7967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.866500][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.877279][ T7980] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1573'. [ 113.890210][ T7980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.906658][ T7980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.918698][ T7980] bond0 (unregistering): (slave team0): Releasing backup interface [ 113.937968][ T7980] bond0 (unregistering): Released all slaves [ 113.951599][ T7988] loop1: detected capacity change from 0 to 512 [ 113.965934][ T7988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.979657][ T7988] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.001486][ T7993] loop0: detected capacity change from 0 to 1024 [ 114.011969][ T7993] EXT4-fs: Ignoring removed bh option [ 114.017489][ T7993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.085376][ T7993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.139947][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.695857][ T7997] ================================================================== [ 114.704010][ T7997] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 114.712123][ T7997] [ 114.714484][ T7997] write to 0xffff888144c50828 of 8 bytes by task 7993 on cpu 0: [ 114.722417][ T7997] filemap_splice_read+0x47e/0x6b0 [ 114.727575][ T7997] ext4_file_splice_read+0x8f/0xb0 [ 114.732735][ T7997] splice_direct_to_actor+0x26f/0x680 [ 114.738162][ T7997] do_splice_direct+0xda/0x150 [ 114.742993][ T7997] do_sendfile+0x380/0x650 [ 114.747463][ T7997] __x64_sys_sendfile64+0x105/0x150 [ 114.752712][ T7997] x64_sys_call+0xb39/0x2fb0 [ 114.757339][ T7997] do_syscall_64+0xd2/0x200 [ 114.761887][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.767819][ T7997] [ 114.770260][ T7997] write to 0xffff888144c50828 of 8 bytes by task 7997 on cpu 1: [ 114.777912][ T7997] filemap_splice_read+0x47e/0x6b0 [ 114.783077][ T7997] ext4_file_splice_read+0x8f/0xb0 [ 114.788275][ T7997] splice_direct_to_actor+0x26f/0x680 [ 114.793707][ T7997] do_splice_direct+0xda/0x150 [ 114.798518][ T7997] do_sendfile+0x380/0x650 [ 114.803067][ T7997] __x64_sys_sendfile64+0x105/0x150 [ 114.808316][ T7997] x64_sys_call+0xb39/0x2fb0 [ 114.812952][ T7997] do_syscall_64+0xd2/0x200 [ 114.817488][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.823516][ T7997] [ 114.825874][ T7997] value changed: 0x0000000000000a33 -> 0x0000000000000a34 [ 114.833525][ T7997] [ 114.835877][ T7997] Reported by Kernel Concurrency Sanitizer on: [ 114.842054][ T7997] CPU: 1 UID: 0 PID: 7997 Comm: syz.0.1576 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(voluntary) [ 114.854184][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.864277][ T7997] ================================================================== [ 114.947455][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.