last executing test programs: 1.310052049s ago: executing program 3 (id=2572): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d"], 0x5c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000075000/0x3000)=nil) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x4040015) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0xe8, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x8c, 0x1, [@m_ctinfo={0x88, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.29159699s ago: executing program 2 (id=2574): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x700, 0x80, 0x8, 0x1, {{0x1f, 0x4, 0x0, 0x20, 0x7c, 0x68, 0x0, 0x6, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x4c, 0x3, [{0x1, 0x10, "4049c1b3cbfb46062681aa977035"}, {0x7, 0xf, "f1652dcda1015dc512a492c2de"}, {0x1, 0xc, "d54caacd4ba955956a9b"}, {0x0, 0xb, "8f6f60a3ef33fe923b"}, {0x1, 0x4, 'W\t'}, {0x7, 0x9, "a22390733fc9bf"}, {0x7, 0x3, "c9"}]}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x5, [{@loopback}, {@empty}, {@multicast1, 0x1}]}]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000180)=0xfffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r4}, 0x18) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.28559733s ago: executing program 3 (id=2575): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) r3 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 1.27109674s ago: executing program 2 (id=2576): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), 0x0, &(0x7f00000005c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x4, 0x20002, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="9404baddc6f77b6d52c4686a32568bdbea9015ff2dc96a7ea5c400201b783c14686bb2d67b7319613ab95e5ca880b2d02708607d4f237ae8534f9511d0aaa914d675cccd8bd531f78b26d0f64921401f56f19c8ea4247dcc4aa6b93a715f5b8d567ac67495b1bad09e"], 0x83) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.26423331s ago: executing program 3 (id=2577): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = memfd_create(0x0, 0x3) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) fsetxattr$security_selinux(r2, 0x0, 0x0, 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.207828281s ago: executing program 2 (id=2578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x42000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x2a) 1.207342661s ago: executing program 3 (id=2579): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x185800, 0xbe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) wait4(r3, 0x0, 0x80000000, 0x0) ptrace(0x10, r3) r4 = syz_pidfd_open(r3, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0xa000000c, 0x0) 1.194737091s ago: executing program 2 (id=2580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15}, {0x2d}, {0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r2, 0x5) 532.661621ms ago: executing program 1 (id=2611): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 526.348292ms ago: executing program 4 (id=2613): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 511.721321ms ago: executing program 1 (id=2614): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 489.109542ms ago: executing program 0 (id=2615): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 488.744712ms ago: executing program 4 (id=2616): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 487.920232ms ago: executing program 1 (id=2617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xffffbffffffffffd}, 0x18) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0xc00}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0x0, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x5, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0001, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x3a, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) 468.781322ms ago: executing program 4 (id=2618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 466.663062ms ago: executing program 0 (id=2619): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 466.261302ms ago: executing program 1 (id=2620): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r1], 0x38}}, 0x10) 395.957444ms ago: executing program 4 (id=2621): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c00024000000000000000101400"], 0x118}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 395.630064ms ago: executing program 1 (id=2622): syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 395.358794ms ago: executing program 4 (id=2623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xca6, &(0x7f0000000040)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) 387.504314ms ago: executing program 3 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 356.969804ms ago: executing program 4 (id=2625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 287.971455ms ago: executing program 3 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 287.590465ms ago: executing program 1 (id=2627): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}}, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendfile(r1, r0, 0x0, 0x7ffff000) 260.284066ms ago: executing program 0 (id=2628): r0 = socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r2 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@deltaction={0x14, 0x31, 0x4, 0x70bd28, 0x25dfdbfe}, 0xf}, 0x1, 0x0, 0x0, 0x4004885}, 0x4040084) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 224.164296ms ago: executing program 0 (id=2629): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sched_yield() sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 136.891048ms ago: executing program 0 (id=2630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000061) syz_open_procfs(0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 136.612957ms ago: executing program 0 (id=2631): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000006c0)={[{@grpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}]}, 0xfd, 0x50f, &(0x7f0000000140)="$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") quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 135.763057ms ago: executing program 2 (id=2632): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 0s ago: executing program 2 (id=2633): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) kernel console output (not intermixed with test programs): 867.481:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.655077][ T29] audit: type=1326 audit(1751248867.481:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.679220][ T29] audit: type=1326 audit(1751248867.511:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.702598][ T29] audit: type=1326 audit(1751248867.511:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.726600][ T29] audit: type=1326 audit(1751248867.511:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.749926][ T29] audit: type=1326 audit(1751248867.511:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.773790][ T29] audit: type=1326 audit(1751248867.511:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.797867][ T29] audit: type=1326 audit(1751248867.511:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.821061][ T29] audit: type=1326 audit(1751248867.511:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.845105][ T29] audit: type=1326 audit(1751248867.511:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 60.958269][ T5012] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 61.018714][ T5012] team0 (unregistering): Port device team_slave_0 removed [ 61.053566][ T5012] team0 (unregistering): Port device team_slave_1 removed [ 61.182122][ T5026] pim6reg1: entered promiscuous mode [ 61.187582][ T5026] pim6reg1: entered allmulticast mode [ 61.320109][ T5038] loop3: detected capacity change from 0 to 256 [ 61.358049][ T5038] FAT-fs (loop3): codepage cp932 not found [ 61.997494][ T5067] pim6reg1: entered promiscuous mode [ 62.002900][ T5067] pim6reg1: entered allmulticast mode [ 62.153371][ T5074] __nla_validate_parse: 10 callbacks suppressed [ 62.153415][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 62.366638][ T5086] netlink: 'syz.2.622': attribute type 4 has an invalid length. [ 62.446508][ T5097] loop2: detected capacity change from 0 to 512 [ 62.458150][ T5097] EXT4-fs (loop2): 1 orphan inode deleted [ 62.464387][ T5097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.477405][ T4099] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:59: Failed to release dquot type 1 [ 62.477563][ T5097] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.508723][ T5097] random: crng reseeded on system resumption [ 62.594230][ T5108] loop1: detected capacity change from 0 to 256 [ 62.601638][ T5108] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.744614][ T5111] loop1: detected capacity change from 0 to 1024 [ 62.751661][ T5111] EXT4-fs: Ignoring removed nobh option [ 62.758137][ T5111] EXT4-fs: inline encryption not supported [ 62.766554][ T5111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.784254][ T5111] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.630: Allocating blocks 385-513 which overlap fs metadata [ 62.800221][ T5111] EXT4-fs (loop1): pa ffff888106d965b0: logic 16, phys. 129, len 24 [ 62.808481][ T5111] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 62.818873][ T5111] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 62.831129][ T5111] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.831129][ T5111] [ 62.840913][ T5111] EXT4-fs (loop1): Total free blocks count 0 [ 62.846945][ T5111] EXT4-fs (loop1): Free/Dirty block details [ 62.852856][ T5111] EXT4-fs (loop1): free_blocks=128 [ 62.858068][ T5111] EXT4-fs (loop1): dirty_blocks=0 [ 62.863138][ T5111] EXT4-fs (loop1): Block reservation details [ 62.869239][ T5111] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 63.074022][ T5125] bridge0: port 4(dummy0) entered disabled state [ 63.080680][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.088004][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.134645][ T5125] wg2: left promiscuous mode [ 63.160685][ T5125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.162612][ T5139] loop3: detected capacity change from 0 to 2048 [ 63.171896][ T5125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.184315][ T5139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.205873][ T5139] EXT4-fs error (device loop3): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.3.641: path /134/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 63.226787][ T5139] EXT4-fs (loop3): Remounting filesystem read-only [ 63.234850][ T5125] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.243848][ T5125] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.252785][ T5125] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.261834][ T5125] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.300073][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.310848][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.440642][ T5157] bond_slave_1: mtu less than device minimum [ 64.458349][ T5185] Driver unsupported XDP return value 0 on prog (id 579) dev N/A, expect packet loss! [ 64.470186][ T5183] sch_fq: defrate 4294967295 ignored. [ 64.670275][ T5201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.677590][ T5201] IPv6: NLM_F_CREATE should be set when creating new route [ 64.991751][ T5212] veth0_vlan: entered allmulticast mode [ 65.018766][ T5212] veth0_vlan: left promiscuous mode [ 65.024057][ T5212] veth0_vlan: entered promiscuous mode [ 65.368254][ T5245] loop4: detected capacity change from 0 to 128 [ 65.439322][ T5251] loop0: detected capacity change from 0 to 128 [ 65.708737][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 65.708755][ T29] audit: type=1326 audit(1751248872.581:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 65.779317][ T5266] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 65.790548][ T29] audit: type=1326 audit(1751248872.611:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 65.814684][ T29] audit: type=1326 audit(1751248872.611:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 65.838194][ T29] audit: type=1326 audit(1751248872.611:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 65.862278][ T29] audit: type=1326 audit(1751248872.611:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 65.886605][ T29] audit: type=1326 audit(1751248872.611:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 65.910010][ T29] audit: type=1326 audit(1751248872.611:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 65.934020][ T29] audit: type=1326 audit(1751248872.611:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 65.945711][ T5266] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 65.957350][ T29] audit: type=1326 audit(1751248872.611:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 65.965146][ T5266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.696'. [ 65.998846][ T29] audit: type=1326 audit(1751248872.611:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 66.085522][ T5273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.698'. [ 66.094561][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 66.637144][ T5297] syz.3.710: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 66.652611][ T5297] CPU: 0 UID: 0 PID: 5297 Comm: syz.3.710 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 66.652644][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.652665][ T5297] Call Trace: [ 66.652673][ T5297] [ 66.652681][ T5297] __dump_stack+0x1d/0x30 [ 66.652735][ T5297] dump_stack_lvl+0xe8/0x140 [ 66.652757][ T5297] dump_stack+0x15/0x1b [ 66.652780][ T5297] warn_alloc+0x12b/0x1a0 [ 66.652819][ T5297] __vmalloc_node_range_noprof+0x9c/0xe00 [ 66.652960][ T5297] ? __futex_wait+0x1ff/0x260 [ 66.653018][ T5297] ? __pfx_futex_wake_mark+0x10/0x10 [ 66.653126][ T5297] ? __rcu_read_unlock+0x4f/0x70 [ 66.653151][ T5297] ? avc_has_perm_noaudit+0x1b1/0x200 [ 66.653223][ T5297] ? should_fail_ex+0x30/0x280 [ 66.653258][ T5297] ? xskq_create+0x36/0xe0 [ 66.653298][ T5297] vmalloc_user_noprof+0x7d/0xb0 [ 66.653335][ T5297] ? xskq_create+0x80/0xe0 [ 66.653360][ T5297] xskq_create+0x80/0xe0 [ 66.653387][ T5297] xsk_init_queue+0x95/0xf0 [ 66.653411][ T5297] xsk_setsockopt+0x35c/0x510 [ 66.653437][ T5297] ? __pfx_xsk_setsockopt+0x10/0x10 [ 66.653462][ T5297] __sys_setsockopt+0x181/0x200 [ 66.653533][ T5297] __x64_sys_setsockopt+0x64/0x80 [ 66.653602][ T5297] x64_sys_call+0x2bd5/0x2fb0 [ 66.653626][ T5297] do_syscall_64+0xd2/0x200 [ 66.653646][ T5297] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.653690][ T5297] ? clear_bhb_loop+0x40/0x90 [ 66.653757][ T5297] ? clear_bhb_loop+0x40/0x90 [ 66.653782][ T5297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.653807][ T5297] RIP: 0033:0x7f3c13dae929 [ 66.653834][ T5297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.653857][ T5297] RSP: 002b:00007f3c12417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.653954][ T5297] RAX: ffffffffffffffda RBX: 00007f3c13fd5fa0 RCX: 00007f3c13dae929 [ 66.653976][ T5297] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 66.653992][ T5297] RBP: 00007f3c13e30b39 R08: 0000000000000004 R09: 0000000000000000 [ 66.654008][ T5297] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.654022][ T5297] R13: 0000000000000000 R14: 00007f3c13fd5fa0 R15: 00007ffc0bab36b8 [ 66.654046][ T5297] [ 66.654060][ T5297] Mem-Info: [ 66.888957][ T5297] active_anon:3820 inactive_anon:1 isolated_anon:0 [ 66.888957][ T5297] active_file:15907 inactive_file:2201 isolated_file:0 [ 66.888957][ T5297] unevictable:0 dirty:327 writeback:0 [ 66.888957][ T5297] slab_reclaimable:3000 slab_unreclaimable:15932 [ 66.888957][ T5297] mapped:28846 shmem:219 pagetables:1105 [ 66.888957][ T5297] sec_pagetables:0 bounce:0 [ 66.888957][ T5297] kernel_misc_reclaimable:0 [ 66.888957][ T5297] free:1885955 free_pcp:16784 free_cma:0 [ 66.934944][ T5297] Node 0 active_anon:15280kB inactive_anon:4kB active_file:63628kB inactive_file:8804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115384kB dirty:1308kB writeback:0kB shmem:876kB writeback_tmp:0kB kernel_stack:4256kB pagetables:4536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 66.964533][ T5297] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 66.994876][ T5297] lowmem_reserve[]: 0 2882 7860 7860 [ 67.000813][ T5297] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 67.032367][ T5297] lowmem_reserve[]: 0 0 4978 4978 [ 67.037481][ T5297] Node 0 Normal free:4580732kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15280kB inactive_anon:4kB active_file:63628kB inactive_file:8804kB unevictable:0kB writepending:1308kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:63388kB local_pcp:62412kB free_cma:0kB [ 67.070198][ T5297] lowmem_reserve[]: 0 0 0 0 [ 67.074820][ T5297] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 67.087763][ T5297] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB [ 67.104780][ T5297] Node 0 Normal: 706*4kB (UME) 623*8kB (UME) 499*16kB (UME) 298*32kB (UME) 261*64kB (UME) 150*128kB (UM) 70*256kB (UME) 26*512kB (UM) 15*1024kB (UME) 17*2048kB (UME) 1083*4096kB (UM) = 4578608kB [ 67.124390][ T5297] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 67.134460][ T5297] 18640 total pagecache pages [ 67.139206][ T5297] 1 pages in swap cache [ 67.143451][ T5297] Free swap = 124992kB [ 67.147658][ T5297] Total swap = 124996kB [ 67.151837][ T5297] 2097051 pages RAM [ 67.156422][ T5297] 0 pages HighMem/MovableOnly [ 67.161218][ T5297] 80812 pages reserved [ 67.168310][ T5306] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.175559][ T5306] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.228352][ T5316] loop1: detected capacity change from 0 to 1024 [ 67.247219][ T5316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.260815][ T5316] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.276571][ T5316] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 4) [ 67.290715][ T5306] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.290985][ T5316] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117 [ 67.299733][ T5306] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.299776][ T5306] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.312203][ T5316] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.312203][ T5316] [ 67.341002][ T5306] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.457608][ T5328] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 68.113879][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.136652][ T5355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 68.145759][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.153676][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.162354][ T5355] batadv0 (unregistering): left promiscuous mode [ 68.169681][ T5355] bridge0: port 3(batadv0) entered disabled state [ 68.406015][ T5366] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.414436][ T5366] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.422852][ T5366] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.432071][ T5366] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.452238][ T5373] netlink: 'syz.2.738': attribute type 6 has an invalid length. [ 68.472389][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 68.481805][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 68.559632][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 68.568870][ T5379] loop2: detected capacity change from 0 to 1024 [ 68.604088][ T5379] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.606589][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.622092][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.631798][ T5379] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 4) [ 68.651436][ T5379] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117 [ 68.664014][ T5379] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.664014][ T5379] [ 68.777019][ T5384] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.785592][ T5384] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.794109][ T5384] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.802539][ T5384] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.198408][ T5421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5421 comm=syz.1.757 [ 69.490320][ T5435] loop2: detected capacity change from 0 to 1024 [ 69.497951][ T5435] EXT4-fs: Ignoring removed orlov option [ 69.503728][ T5435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.637231][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 69.647184][ T5449] bridge_slave_1: left allmulticast mode [ 69.652879][ T5449] bridge_slave_1: left promiscuous mode [ 69.658690][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.666926][ T5449] bridge_slave_0: left allmulticast mode [ 69.672702][ T5449] bridge_slave_0: left promiscuous mode [ 69.679258][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.909643][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 69.988835][ T5466] netlink: 'syz.1.776': attribute type 6 has an invalid length. [ 69.997134][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 70.007336][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 70.053068][ T5471] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 70.068952][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 70.081823][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 70.089959][ T5471] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 70.102582][ T5471] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 70.113855][ T5471] bond1 (unregistering): Released all slaves [ 70.240426][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 70.987108][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 70.987128][ T29] audit: type=1400 audit(1751248877.861:1174): avc: denied { write } for pid=5492 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.014249][ T29] audit: type=1400 audit(1751248877.861:1175): avc: denied { nlmsg_read } for pid=5492 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.129741][ T5503] loop1: detected capacity change from 0 to 512 [ 71.197065][ T5503] EXT4-fs mount: 4 callbacks suppressed [ 71.197162][ T5503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.230934][ T5503] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.306321][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.460551][ T5513] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 71.496560][ T5517] loop3: detected capacity change from 0 to 128 [ 71.508097][ T5517] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 71.516146][ T5517] FAT-fs (loop3): Filesystem has been set read-only [ 71.516658][ T5513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.531075][ T5513] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 71.532368][ T5517] syz.3.795: attempt to access beyond end of device [ 71.532368][ T5517] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 71.556646][ T5513] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 71.556820][ T5517] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 71.572709][ T5517] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 71.581631][ T5517] syz.3.795: attempt to access beyond end of device [ 71.581631][ T5517] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.582310][ T5513] bond1 (unregistering): Released all slaves [ 71.594941][ T5517] syz.3.795: attempt to access beyond end of device [ 71.594941][ T5517] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.615125][ T5517] syz.3.795: attempt to access beyond end of device [ 71.615125][ T5517] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.628404][ T5517] syz.3.795: attempt to access beyond end of device [ 71.628404][ T5517] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.642693][ T5517] syz.3.795: attempt to access beyond end of device [ 71.642693][ T5517] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.659225][ T5517] syz.3.795: attempt to access beyond end of device [ 71.659225][ T5517] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.673401][ T5517] syz.3.795: attempt to access beyond end of device [ 71.673401][ T5517] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.688354][ T5517] syz.3.795: attempt to access beyond end of device [ 71.688354][ T5517] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.703365][ T5517] syz.3.795: attempt to access beyond end of device [ 71.703365][ T5517] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.721778][ T5521] buffer_io_error: 8 callbacks suppressed [ 71.721804][ T5521] Buffer I/O error on dev loop3, logical block 2065, async page read [ 71.747830][ T5521] Buffer I/O error on dev loop3, logical block 2066, async page read [ 71.757477][ T5521] Buffer I/O error on dev loop3, logical block 2067, async page read [ 71.766143][ T5521] Buffer I/O error on dev loop3, logical block 2068, async page read [ 71.782976][ T5521] Buffer I/O error on dev loop3, logical block 2069, async page read [ 71.792199][ T5521] Buffer I/O error on dev loop3, logical block 2070, async page read [ 71.801938][ T5521] Buffer I/O error on dev loop3, logical block 2071, async page read [ 71.810571][ T5521] Buffer I/O error on dev loop3, logical block 2072, async page read [ 71.819452][ T5517] Buffer I/O error on dev loop3, logical block 2065, async page read [ 71.828417][ T5517] Buffer I/O error on dev loop3, logical block 2066, async page read [ 71.933107][ T5545] ip6gre1: entered allmulticast mode [ 72.384231][ T5567] bond2: entered promiscuous mode [ 72.390335][ T5567] bond2: entered allmulticast mode [ 72.395989][ T5567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.406689][ T5567] bond2 (unregistering): Released all slaves [ 72.450008][ T29] audit: type=1326 audit(1751248879.321:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 72.484538][ T29] audit: type=1326 audit(1751248879.321:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 72.508536][ T29] audit: type=1326 audit(1751248879.321:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 72.532108][ T29] audit: type=1326 audit(1751248879.321:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 72.555717][ T29] audit: type=1326 audit(1751248879.321:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 72.579135][ T29] audit: type=1326 audit(1751248879.321:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 72.602890][ T29] audit: type=1326 audit(1751248879.321:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 72.626313][ T29] audit: type=1326 audit(1751248879.321:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5574 comm="syz.3.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 72.706110][ T5586] vlan0: entered allmulticast mode [ 72.711304][ T5586] veth1: entered allmulticast mode [ 72.797873][ T5593] loop2: detected capacity change from 0 to 128 [ 72.942297][ T5604] loop0: detected capacity change from 0 to 128 [ 72.964140][ T5604] EXT4-fs: Ignoring removed nobh option [ 72.983127][ T5604] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.019959][ T5604] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.075750][ T5612] dummy0: left allmulticast mode [ 73.083662][ T5612] dummy0: left promiscuous mode [ 73.088902][ T5612] bridge0: port 4(dummy0) entered disabled state [ 73.096437][ T5614] loop2: detected capacity change from 0 to 1024 [ 73.103657][ T5612] bridge_slave_1: left allmulticast mode [ 73.109540][ T5612] bridge_slave_1: left promiscuous mode [ 73.115276][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.123443][ T5614] EXT4-fs: Ignoring removed orlov option [ 73.130791][ T5612] bridge_slave_0: left allmulticast mode [ 73.132717][ T5614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.136588][ T5612] bridge_slave_0: left promiscuous mode [ 73.155054][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.477913][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.683350][ T5631] __nla_validate_parse: 9 callbacks suppressed [ 73.683366][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.837'. [ 73.912391][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.088733][ T5649] loop0: detected capacity change from 0 to 1024 [ 74.113562][ T5649] EXT4-fs: Ignoring removed orlov option [ 74.146407][ T5649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.169647][ T5653] loop3: detected capacity change from 0 to 2048 [ 74.218862][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.235483][ T5653] loop3: p1 < > p4 [ 74.240429][ T5653] loop3: p4 size 8388608 extends beyond EOD, truncated [ 74.319981][ T5668] loop2: detected capacity change from 0 to 128 [ 74.348019][ T5668] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 74.356147][ T5668] FAT-fs (loop2): Filesystem has been set read-only [ 74.392723][ T5668] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 74.400685][ T5668] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 74.615634][ T5684] bridge: RTM_NEWNEIGH with invalid ether address [ 74.780728][ T5708] bridge0: entered promiscuous mode [ 74.800463][ T5708] macvlan0: entered promiscuous mode [ 74.828599][ T5708] bridge0: port 3(macvlan0) entered blocking state [ 74.836021][ T5708] bridge0: port 3(macvlan0) entered disabled state [ 74.865410][ T5708] macvlan0: entered allmulticast mode [ 74.870840][ T5708] bridge0: entered allmulticast mode [ 74.878174][ T5708] macvlan0: left allmulticast mode [ 74.883486][ T5708] bridge0: left allmulticast mode [ 74.890365][ T5708] bridge0: left promiscuous mode [ 75.017924][ T5738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 75.041265][ T5738] bridge_slave_1: left allmulticast mode [ 75.047726][ T5738] bridge_slave_1: left promiscuous mode [ 75.053541][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.064135][ T5738] bridge_slave_0: left allmulticast mode [ 75.070208][ T5738] bridge_slave_0: left promiscuous mode [ 75.076736][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.276067][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 75.562038][ T5805] loop0: detected capacity change from 0 to 128 [ 75.639098][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 75.665546][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 75.906704][ T5834] ip6gre1: entered allmulticast mode [ 76.108389][ T5848] pim6reg1: entered promiscuous mode [ 76.113760][ T5848] pim6reg1: entered allmulticast mode [ 76.250363][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 76.416685][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 76.416699][ T29] audit: type=1400 audit(1751248883.291:1223): avc: denied { create } for pid=5852 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.446759][ T29] audit: type=1400 audit(1751248883.321:1224): avc: denied { ioctl } for pid=5852 comm="syz.2.895" path="socket:[12374]" dev="sockfs" ino=12374 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.505573][ T29] audit: type=1400 audit(1751248883.361:1225): avc: denied { execute } for pid=5856 comm="syz.0.897" dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.527510][ T29] audit: type=1400 audit(1751248883.361:1226): avc: denied { execute_no_trans } for pid=5856 comm="syz.0.897" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.580399][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'. [ 76.612379][ T29] audit: type=1326 audit(1751248883.461:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5864 comm="syz.2.901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f728dc9e929 code=0x0 [ 76.680725][ T5872] loop0: detected capacity change from 0 to 1024 [ 76.709954][ T5872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.728314][ T5872] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.748591][ T5878] pim6reg1: entered promiscuous mode [ 76.753963][ T5878] pim6reg1: entered allmulticast mode [ 76.813190][ T5883] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 76.950586][ T5887] loop1: detected capacity change from 0 to 128 [ 76.975835][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 76.989427][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 76.994790][ T4053] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 393: padding at end of block bitmap is not set [ 77.013699][ T4053] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 77.023112][ T5887] bio_check_eod: 74819 callbacks suppressed [ 77.023218][ T5887] syz.1.909: attempt to access beyond end of device [ 77.023218][ T5887] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 77.026373][ T4053] EXT4-fs (loop0): This should not happen!! Data will be lost [ 77.026373][ T4053] [ 77.038957][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.063054][ T5887] syz.1.909: attempt to access beyond end of device [ 77.063054][ T5887] loop1: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 77.078857][ T5887] syz.1.909: attempt to access beyond end of device [ 77.078857][ T5887] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 77.095291][ T5887] syz.1.909: attempt to access beyond end of device [ 77.095291][ T5887] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 77.111580][ T5887] syz.1.909: attempt to access beyond end of device [ 77.111580][ T5887] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 77.132290][ T5887] syz.1.909: attempt to access beyond end of device [ 77.132290][ T5887] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 77.148187][ T5887] syz.1.909: attempt to access beyond end of device [ 77.148187][ T5887] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 77.162739][ T5887] syz.1.909: attempt to access beyond end of device [ 77.162739][ T5887] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 77.176284][ T5887] syz.1.909: attempt to access beyond end of device [ 77.176284][ T5887] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 77.207945][ T5892] netlink: 'syz.4.911': attribute type 12 has an invalid length. [ 77.263088][ T29] audit: type=1326 audit(1751248884.131:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 77.287523][ T29] audit: type=1326 audit(1751248884.131:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 77.311111][ T29] audit: type=1326 audit(1751248884.131:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 77.335241][ T29] audit: type=1326 audit(1751248884.131:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 77.358669][ T29] audit: type=1326 audit(1751248884.131:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 77.603281][ T5924] syzkaller0: entered promiscuous mode [ 77.608983][ T5924] syzkaller0: entered allmulticast mode [ 77.615209][ T5926] sch_fq: defrate 4294967295 ignored. [ 77.639466][ T5928] loop0: detected capacity change from 0 to 128 [ 77.678811][ T5930] loop0: detected capacity change from 0 to 128 [ 77.695560][ T5930] EXT4-fs: Ignoring removed oldalloc option [ 77.707217][ T5930] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.722585][ T5930] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.957319][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.089652][ T5962] Cannot find del_set index 0 as target [ 78.231258][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.943'. [ 78.306491][ T5977] netlink: 'syz.3.946': attribute type 10 has an invalid length. [ 78.340522][ T5981] loop3: detected capacity change from 0 to 512 [ 78.347851][ T5981] EXT4-fs: Ignoring removed nobh option [ 78.353516][ T5981] EXT4-fs: Ignoring removed nobh option [ 78.360265][ T5981] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 78.397527][ T5984] loop0: detected capacity change from 0 to 1024 [ 78.418347][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.624778][ T5984] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.950: Allocating blocks 497-513 which overlap fs metadata [ 78.640457][ T5997] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.950: Allocating blocks 497-513 which overlap fs metadata [ 78.799229][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.844006][ T6007] loop0: detected capacity change from 0 to 128 [ 78.933457][ T6010] syz.0.959: attempt to access beyond end of device [ 78.933457][ T6010] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 79.609941][ T6042] loop1: detected capacity change from 0 to 256 [ 79.660349][ T6042] FAT-fs (loop1): Directory bread(block 64) failed [ 79.675045][ T6042] FAT-fs (loop1): Directory bread(block 65) failed [ 79.681780][ T6042] FAT-fs (loop1): Directory bread(block 66) failed [ 79.695684][ T6042] FAT-fs (loop1): Directory bread(block 67) failed [ 79.702296][ T6042] FAT-fs (loop1): Directory bread(block 68) failed [ 79.715801][ T6042] FAT-fs (loop1): Directory bread(block 69) failed [ 79.725989][ T6042] FAT-fs (loop1): Directory bread(block 70) failed [ 79.732931][ T6042] FAT-fs (loop1): Directory bread(block 71) failed [ 79.752080][ T6042] FAT-fs (loop1): Directory bread(block 72) failed [ 79.769754][ T6042] FAT-fs (loop1): Directory bread(block 73) failed [ 79.782355][ T6047] loop2: detected capacity change from 0 to 256 [ 79.793311][ T6047] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000804) [ 79.801317][ T6047] FAT-fs (loop2): Filesystem has been set read-only [ 80.024828][ T6056] pim6reg1: entered promiscuous mode [ 80.030317][ T6056] pim6reg1: entered allmulticast mode [ 80.037676][ T6056] pim6reg1: left promiscuous mode [ 80.042808][ T6056] pim6reg1: left allmulticast mode [ 80.157093][ T6060] loop1: detected capacity change from 0 to 128 [ 80.534338][ T6071] loop1: detected capacity change from 0 to 512 [ 80.541317][ T6071] EXT4-fs: Ignoring removed nobh option [ 80.558181][ T6071] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.985: corrupted inode contents [ 80.570256][ T6071] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.985: mark_inode_dirty error [ 80.582163][ T6071] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.985: corrupted inode contents [ 80.594796][ T6071] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.985: mark_inode_dirty error [ 80.608426][ T6071] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.985: Failed to acquire dquot type 0 [ 80.671240][ T6071] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.985: corrupted inode contents [ 80.683427][ T6078] __nla_validate_parse: 2 callbacks suppressed [ 80.683444][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.987'. [ 80.698907][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.987'. [ 80.708699][ T6071] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.985: mark_inode_dirty error [ 80.720465][ T6071] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.985: corrupted inode contents [ 80.737938][ T6071] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.985: mark_inode_dirty error [ 80.750229][ T6071] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.985: corrupted inode contents [ 80.762542][ T6071] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 80.772508][ T6071] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.985: corrupted inode contents [ 80.792343][ T6071] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.985: mark_inode_dirty error [ 80.819627][ T6071] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 80.830831][ T6071] EXT4-fs (loop1): 1 truncate cleaned up [ 80.840415][ T6071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.853154][ T6071] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.896747][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.942210][ T6096] ip6gre1: entered allmulticast mode [ 81.197934][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 81.211592][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1002'. [ 81.471101][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 81.471158][ T29] audit: type=1400 audit(1751249144.342:1322): avc: denied { listen } for pid=6137 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.505805][ T29] audit: type=1400 audit(1751249144.372:1323): avc: denied { accept } for pid=6137 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.627443][ T6147] loop0: detected capacity change from 0 to 8192 [ 81.675328][ T6147] loop0: p1 p2 [ 81.679162][ T6147] loop0: p1 start 50331648 is beyond EOD, truncated [ 81.693262][ T6151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6151 comm=syz.1.1017 [ 81.706236][ T29] audit: type=1400 audit(1751249144.562:1324): avc: denied { append } for pid=6146 comm="syz.0.1015" name="loop0p2" dev="devtmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.729914][ T29] audit: type=1400 audit(1751249144.562:1325): avc: denied { open } for pid=6146 comm="syz.0.1015" path="/dev/loop0p2" dev="devtmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.775390][ T6157] loop1: detected capacity change from 0 to 128 [ 81.817273][ T6153] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1018'. [ 82.037485][ T6175] wg2: entered promiscuous mode [ 82.042465][ T6175] wg2: entered allmulticast mode [ 82.052113][ T6177] bond_slave_1: mtu less than device minimum [ 82.324300][ T29] audit: type=1326 audit(1751249145.192:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 82.348605][ T29] audit: type=1326 audit(1751249145.192:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 82.392287][ T29] audit: type=1326 audit(1751249145.242:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 82.416569][ T29] audit: type=1326 audit(1751249145.242:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 82.440069][ T29] audit: type=1326 audit(1751249145.242:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 82.464362][ T29] audit: type=1326 audit(1751249145.242:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6194 comm="syz.1.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ca050e929 code=0x7ffc0000 [ 82.496951][ T6200] loop1: detected capacity change from 0 to 1024 [ 82.518336][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.549716][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.612356][ T6215] IPv6: NLM_F_REPLACE set, but no existing node found! [ 82.676822][ T6219] loop1: detected capacity change from 0 to 1024 [ 82.683808][ T6219] EXT4-fs (loop1): bad geometry: block count 1310720 exceeds size of device (512 blocks) [ 82.700386][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 82.721781][ T6219] loop1: detected capacity change from 0 to 2048 [ 82.738899][ T6219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.765824][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.788000][ T6228] loop1: detected capacity change from 0 to 256 [ 82.798143][ T6228] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000804) [ 82.806646][ T6228] FAT-fs (loop1): Filesystem has been set read-only [ 83.179512][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1047'. [ 83.188745][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1047'. [ 83.197806][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1047'. [ 83.219403][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1047'. [ 83.318169][ T6243] loop0: detected capacity change from 0 to 8192 [ 83.338134][ T6243] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 83.347523][ T6243] FAT-fs (loop0): Filesystem has been set read-only [ 83.927235][ T6264] syzkaller0: entered allmulticast mode [ 84.051270][ T6267] syzkaller0 (unregistering): left allmulticast mode [ 84.116789][ T6272] sch_fq: defrate 0 ignored. [ 84.572820][ T6307] netlink: 'syz.3.1076': attribute type 1 has an invalid length. [ 84.703521][ T6310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.721247][ T6310] bond1: (slave bond2): making interface the new active one [ 84.739373][ T6310] bond1: (slave bond2): Enslaving as an active interface with an up link [ 84.767622][ T6314] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 84.781890][ T6317] veth1_to_bond: entered allmulticast mode [ 84.802811][ T6320] veth1_to_bond: entered promiscuous mode [ 84.811723][ T6317] veth1_to_bond: left promiscuous mode [ 84.817505][ T6317] veth1_to_bond: left allmulticast mode [ 84.939881][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.958452][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.260007][ T6322] Set syz1 is full, maxelem 65536 reached [ 85.556950][ T6356] netlink: 'syz.1.1093': attribute type 10 has an invalid length. [ 85.565840][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.573679][ T6356] bond0: (slave team0): Enslaving as an active interface with an up link [ 85.591965][ T6356] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.599667][ T6356] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.729114][ T6370] loop3: detected capacity change from 0 to 1024 [ 85.750044][ T6370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.788179][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.804185][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 85.816129][ T6379] macsec1: entered allmulticast mode [ 85.878238][ T6385] xt_bpf: check failed: parse error [ 86.011383][ T6401] cgroup: Invalid name [ 86.139911][ T6409] loop0: detected capacity change from 0 to 1024 [ 86.147050][ T6409] EXT4-fs: Ignoring removed oldalloc option [ 86.153152][ T6409] EXT4-fs: Ignoring removed orlov option [ 86.160002][ T6409] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 86.183626][ T6409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.307941][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.657047][ T6488] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1146'. [ 86.669737][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1146'. [ 86.690890][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 86.710710][ T6492] netlink: 'syz.4.1148': attribute type 4 has an invalid length. [ 86.882244][ T6490] team1: entered promiscuous mode [ 86.887494][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 86.887507][ T29] audit: type=1326 audit(1751249149.692:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 86.917299][ T29] audit: type=1326 audit(1751249149.692:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 86.940847][ T29] audit: type=1326 audit(1751249149.692:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 86.964256][ T29] audit: type=1326 audit(1751249149.692:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 86.987754][ T29] audit: type=1326 audit(1751249149.692:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 87.011317][ T29] audit: type=1326 audit(1751249149.692:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 87.034742][ T29] audit: type=1326 audit(1751249149.692:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 87.058299][ T29] audit: type=1326 audit(1751249149.692:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 87.074513][ T6504] netlink: 'syz.4.1155': attribute type 6 has an invalid length. [ 87.081848][ T29] audit: type=1326 audit(1751249149.692:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 87.105025][ T6490] team1: entered allmulticast mode [ 87.112998][ T29] audit: type=1326 audit(1751249149.692:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 87.228780][ T6511] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1158'. [ 87.248158][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 87.257166][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 87.288080][ T6511] netlink: zone id is out of range [ 87.320409][ T6511] netlink: zone id is out of range [ 87.337955][ T6511] netlink: zone id is out of range [ 87.343299][ T6511] netlink: zone id is out of range [ 87.349778][ T6511] netlink: del zone limit has 8 unknown bytes [ 87.426032][ T6523] wireguard0: entered promiscuous mode [ 87.431574][ T6523] wireguard0: entered allmulticast mode [ 87.452637][ T6526] tmpfs: Unsupported parameter 'huge' [ 87.678929][ T6543] netlink: 'syz.3.1172': attribute type 12 has an invalid length. [ 87.713714][ T6545] veth0_vlan: left allmulticast mode [ 87.720314][ T6545] ip6gre1: left allmulticast mode [ 87.730660][ T6545] team1: left promiscuous mode [ 87.741177][ T6545] team1: left allmulticast mode [ 87.934701][ T6549] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1175'. [ 88.159556][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 88.223731][ T6567] loop0: detected capacity change from 0 to 1024 [ 88.232106][ T6562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.234238][ T6567] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.240585][ T6562] bond2: (slave bond3): Enslaving as an active interface with an up link [ 88.249843][ T6567] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.270767][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 88.281929][ T6567] JBD2: no valid journal superblock found [ 88.282153][ T6562] bond2 (unregistering): (slave bond3): Releasing backup interface [ 88.287712][ T6567] EXT4-fs (loop0): Could not load journal inode [ 88.302995][ T6562] bond2 (unregistering): Released all slaves [ 88.523057][ T6582] netlink: 'syz.0.1188': attribute type 13 has an invalid length. [ 88.621495][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.630880][ T6582] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.642016][ T6582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.817543][ T6596] loop0: detected capacity change from 0 to 1024 [ 88.859943][ T6596] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.871037][ T6596] EXT4-fs (loop0): group descriptors corrupted! [ 88.917068][ T6596] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 88.929612][ T6607] bond0: (slave team0): Releasing backup interface [ 88.956767][ T6607] bond0: (slave bond_slave_0): Releasing backup interface [ 88.981379][ T6607] bond0: (slave bond_slave_1): Releasing backup interface [ 88.996754][ T6607] team0: Port device team_slave_0 removed [ 89.003458][ T6607] team0: Port device team_slave_1 removed [ 89.056351][ T6613] netlink: 'syz.0.1201': attribute type 21 has an invalid length. [ 89.086865][ T6618] netlink: 'syz.0.1203': attribute type 10 has an invalid length. [ 89.097077][ T6618] team0: Port device dummy0 added [ 89.107648][ T6618] netlink: 'syz.0.1203': attribute type 10 has an invalid length. [ 89.116194][ T6618] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 89.135142][ T6618] team0: Failed to send options change via netlink (err -105) [ 89.142810][ T6618] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 89.155247][ T6618] team0: Port device dummy0 removed [ 89.176364][ T6618] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.377987][ T5158] kernel write not supported for file bpf-prog (pid: 5158 comm: kworker/1:4) [ 90.503507][ T6676] netlink: 'syz.4.1227': attribute type 13 has an invalid length. [ 90.520051][ T6678] netlink: 'syz.1.1220': attribute type 1 has an invalid length. [ 90.548564][ T6676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.594506][ T6676] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.604558][ T6676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.969029][ T6704] loop0: detected capacity change from 0 to 512 [ 90.992543][ T6704] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.1237: bad orphan inode 13 [ 91.020389][ T6704] ext4_test_bit(bit=12, block=4) = 1 [ 91.025872][ T6704] is_bad_inode(inode)=0 [ 91.030056][ T6704] NEXT_ORPHAN(inode)=0 [ 91.034156][ T6704] max_ino=32 [ 91.037447][ T6704] i_nlink=1 [ 91.042062][ T6704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.057118][ T6704] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.1237: Unrecognised inode hash code 20 [ 91.068629][ T6704] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1237: Corrupt directory, running e2fsck is recommended [ 91.081974][ T6704] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.1237: Unrecognised inode hash code 20 [ 91.093466][ T6704] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1237: Corrupt directory, running e2fsck is recommended [ 91.146994][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.208124][ T6715] wireguard0: entered promiscuous mode [ 91.213685][ T6715] wireguard0: entered allmulticast mode [ 91.386696][ T6726] __nla_validate_parse: 3 callbacks suppressed [ 91.386714][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.401998][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.411123][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.452406][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.452394][ T6732] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.470683][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.479699][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.593760][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.603142][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.612204][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 91.970554][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 91.970573][ T29] audit: type=1400 audit(1751249154.842:1643): avc: denied { connect } for pid=6758 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.035875][ T29] audit: type=1400 audit(1751249154.842:1644): avc: denied { write } for pid=6758 comm="syz.2.1256" path="socket:[14799]" dev="sockfs" ino=14799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.126249][ T6764] netlink: 'syz.0.1259': attribute type 6 has an invalid length. [ 92.158528][ T29] audit: type=1400 audit(1751249155.032:1645): avc: denied { setopt } for pid=6763 comm="syz.2.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.316905][ T29] audit: type=1400 audit(1751249155.192:1646): avc: denied { create } for pid=6768 comm="syz.2.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.339932][ T29] audit: type=1400 audit(1751249155.212:1647): avc: denied { bind } for pid=6768 comm="syz.2.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.416172][ T29] audit: type=1326 audit(1751249155.232:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728dc9e929 code=0x7ffc0000 [ 92.439846][ T29] audit: type=1326 audit(1751249155.232:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728dc9e929 code=0x7ffc0000 [ 92.463471][ T29] audit: type=1326 audit(1751249155.232:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728dc9e929 code=0x7ffc0000 [ 92.487133][ T29] audit: type=1326 audit(1751249155.232:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728dc9e929 code=0x7ffc0000 [ 92.510724][ T29] audit: type=1326 audit(1751249155.232:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728dc9e929 code=0x7ffc0000 [ 92.598687][ T6782] loop3: detected capacity change from 0 to 512 [ 92.606123][ T6782] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.619951][ T6782] EXT4-fs (loop3): 1 truncate cleaned up [ 92.627043][ T6782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.674491][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.540066][ T6835] loop0: detected capacity change from 0 to 512 [ 93.558793][ T6835] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1288: bg 0: block 16: invalid block bitmap [ 93.635016][ T6835] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 93.655105][ T6835] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1288: attempt to clear invalid blocks 1669132790 len 1 [ 93.669377][ T6835] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1288: invalid indirect mapped block 4294967295 (level 1) [ 93.686238][ T6835] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1288: invalid indirect mapped block 4294967295 (level 2) [ 93.721194][ T6835] EXT4-fs (loop0): 1 truncate cleaned up [ 93.735890][ T6835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.818267][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.192659][ T10] IPVS: starting estimator thread 0... [ 94.295542][ T6886] IPVS: using max 2352 ests per chain, 117600 per kthread [ 95.303576][ T6918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.333656][ T6918] bond1: (slave bond2): Enslaving as an active interface with an up link [ 95.384643][ T6918] bond1 (unregistering): (slave bond2): Releasing backup interface [ 95.416616][ T6918] bond1 (unregistering): Released all slaves [ 95.462562][ T6933] netlink: 'syz.2.1322': attribute type 4 has an invalid length. [ 95.485047][ T6933] netlink: 'syz.2.1322': attribute type 4 has an invalid length. [ 96.186044][ T6950] netlink: 'syz.0.1337': attribute type 12 has an invalid length. [ 96.317139][ T6959] netlink: 'syz.2.1332': attribute type 12 has an invalid length. [ 96.857951][ T6971] __nla_validate_parse: 6 callbacks suppressed [ 96.857972][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 97.025666][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 97.091085][ T6972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.105937][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 97.105983][ T29] audit: type=1400 audit(1751249159.982:1915): avc: denied { read } for pid=6976 comm="syz.0.1338" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.133590][ T29] audit: type=1400 audit(1751249159.982:1916): avc: denied { open } for pid=6976 comm="syz.0.1338" path="net:[4026532627]" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.158684][ T6972] bond1: (slave bond2): Enslaving as an active interface with an up link [ 97.172734][ T6978] xt_hashlimit: max too large, truncated to 1048576 [ 97.190807][ T29] audit: type=1400 audit(1751249160.042:1917): avc: denied { ioctl } for pid=6976 comm="syz.0.1338" path="socket:[15201]" dev="sockfs" ino=15201 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.232106][ T6971] bond1 (unregistering): (slave bond2): Releasing backup interface [ 97.264922][ T6971] bond1 (unregistering): Released all slaves [ 97.395429][ T29] audit: type=1400 audit(1751249160.262:1918): avc: denied { module_load } for pid=6987 comm="syz.2.1343" path="/277/bus" dev="tmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 97.428868][ T6988] Invalid ELF header magic: != ELF [ 97.436650][ T29] audit: type=1400 audit(1751249160.272:1919): avc: denied { create } for pid=6989 comm="syz.4.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.456152][ T29] audit: type=1400 audit(1751249160.272:1920): avc: denied { setopt } for pid=6989 comm="syz.4.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.714163][ T29] audit: type=1400 audit(1751249160.582:1921): avc: denied { create } for pid=7005 comm="syz.2.1348" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.776392][ T29] audit: type=1400 audit(1751249160.612:1922): avc: denied { create } for pid=6981 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 97.795981][ T29] audit: type=1400 audit(1751249160.642:1923): avc: denied { mounton } for pid=7005 comm="syz.2.1348" path="/279/file0" dev="tmpfs" ino=1471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.819064][ T29] audit: type=1400 audit(1751249160.642:1924): avc: denied { mount } for pid=7005 comm="syz.2.1348" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.912276][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 97.921373][ T7013] netlink: 'syz.2.1351': attribute type 5 has an invalid length. [ 97.929260][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1351'. [ 97.950882][ T7013] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 97.959397][ T7013] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 97.967668][ T7013] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 97.975936][ T7013] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 97.987047][ T7013] geneve0: entered promiscuous mode [ 97.992413][ T7013] geneve0: entered allmulticast mode [ 98.228279][ T7030] loop3: detected capacity change from 0 to 512 [ 98.275314][ T7030] EXT4-fs error (device loop3): __ext4_iget:5379: inode #4: block 193290: comm syz.3.1358: invalid block [ 98.297480][ T7030] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1358: Bad quota inode: 4, type: 1 [ 98.334288][ T7030] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.359970][ T7042] wg2: entered promiscuous mode [ 98.366249][ T7042] wg2: entered allmulticast mode [ 98.388348][ T7030] EXT4-fs (loop3): mount failed [ 98.419476][ T7030] netlink: '+}[@': attribute type 13 has an invalid length. [ 98.550547][ T7030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.562295][ T7030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.588660][ T7030] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.597351][ T7030] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.605986][ T7030] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.614373][ T7030] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.858718][ T7058] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 98.867031][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 98.918322][ T7064] netlink: 'syz.0.1372': attribute type 4 has an invalid length. [ 98.928316][ T7064] netlink: 'syz.0.1372': attribute type 4 has an invalid length. [ 99.131021][ T7080] loop0: detected capacity change from 0 to 512 [ 99.146997][ T7080] EXT4-fs error (device loop0): __ext4_iget:5379: inode #4: block 193290: comm syz.0.1379: invalid block [ 99.158653][ T7080] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1379: Bad quota inode: 4, type: 1 [ 99.169876][ T7080] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.186846][ T7080] EXT4-fs (loop0): mount failed [ 99.217332][ T7080] netlink: '+}[@': attribute type 13 has an invalid length. [ 99.531904][ T7100] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 99.547164][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 99.589553][ T7103] sd 0:0:1:0: device reset [ 101.212396][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'. [ 101.227195][ T7170] veth0: entered promiscuous mode [ 101.234166][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 101.244024][ T7170] veth0 (unregistering): left promiscuous mode [ 101.448893][ T7176] vlan2: entered allmulticast mode [ 101.454108][ T7176] dummy0: entered allmulticast mode [ 101.627333][ T7182] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 101.676066][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 101.691151][ T7182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.724832][ T7192] vlan0: entered promiscuous mode [ 101.730040][ T7192] bond2: entered promiscuous mode [ 101.800238][ T7182] dummy0: entered promiscuous mode [ 101.830998][ T7182] bond2: (slave dummy0): making interface the new active one [ 101.895135][ T7182] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 102.180652][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 102.180723][ T29] audit: type=1326 audit(1751249165.052:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.3.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 102.260647][ T29] audit: type=1400 audit(1751249165.132:1991): avc: denied { setopt } for pid=7226 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.316222][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 102.401810][ T7235] vlan2: entered promiscuous mode [ 102.406948][ T7235] bridge0: entered promiscuous mode [ 102.481982][ T29] audit: type=1400 audit(1751249165.152:1992): avc: denied { bind } for pid=7228 comm="syz.4.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.502123][ T29] audit: type=1400 audit(1751249165.152:1993): avc: denied { ioctl } for pid=7226 comm="syz.1.1432" path="socket:[17499]" dev="sockfs" ino=17499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.526951][ T29] audit: type=1400 audit(1751249165.182:1994): avc: denied { bind } for pid=7226 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.825494][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 102.871059][ T7253] team1: entered promiscuous mode [ 102.882863][ T7253] team1: entered allmulticast mode [ 103.080701][ T29] audit: type=1400 audit(1751249165.952:1995): avc: denied { read } for pid=7262 comm="syz.3.1446" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.183872][ T29] audit: type=1326 audit(1751249166.052:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728dc9e929 code=0x7ffc0000 [ 103.207482][ T29] audit: type=1326 audit(1751249166.052:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728dc9e929 code=0x7ffc0000 [ 103.262594][ T29] audit: type=1326 audit(1751249166.102:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f728dc9e929 code=0x7ffc0000 [ 103.286067][ T29] audit: type=1326 audit(1751249166.102:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.2.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728dc9e929 code=0x7ffc0000 [ 103.610485][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1456'. [ 104.531546][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 104.540695][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 104.747882][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 105.129097][ T7344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1474'. [ 105.240663][ T7359] sctp: [Deprecated]: syz.0.1481 (pid 7359) Use of int in max_burst socket option. [ 105.240663][ T7359] Use struct sctp_assoc_value instead [ 105.548385][ T7380] bond_slave_1: mtu less than device minimum [ 105.675103][ T7385] vhci_hcd: invalid port number 96 [ 105.680443][ T7385] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 105.694490][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 105.828445][ T7399] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 105.828445][ T7399] The task syz.2.1495 (7399) triggered the difference, watch for misbehavior. [ 105.903830][ T7403] tipc: New replicast peer: 255.255.255.255 [ 105.909966][ T7403] tipc: Enabled bearer , priority 10 [ 105.955605][ T7407] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 105.964354][ T7407] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 106.006941][ T7407] loop0: detected capacity change from 0 to 1024 [ 106.013948][ T7407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.026629][ T7407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.052136][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.576355][ T7436] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 107.025441][ T23] tipc: Node number set to 4246612675 [ 107.187728][ T29] kauditd_printk_skb: 881 callbacks suppressed [ 107.187747][ T29] audit: type=1326 audit(1751249170.062:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07e94b58e7 code=0x7ffc0000 [ 107.239175][ T29] audit: type=1326 audit(1751249170.092:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07e945ab19 code=0x7ffc0000 [ 107.263113][ T29] audit: type=1326 audit(1751249170.092:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07e94b58e7 code=0x7ffc0000 [ 107.286549][ T29] audit: type=1326 audit(1751249170.092:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07e945ab19 code=0x7ffc0000 [ 107.309932][ T29] audit: type=1326 audit(1751249170.092:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 107.333392][ T29] audit: type=1326 audit(1751249170.102:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07e94b58e7 code=0x7ffc0000 [ 107.356874][ T29] audit: type=1326 audit(1751249170.102:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07e945ab19 code=0x7ffc0000 [ 107.380421][ T29] audit: type=1326 audit(1751249170.102:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 107.403887][ T29] audit: type=1326 audit(1751249170.112:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07e94b58e7 code=0x7ffc0000 [ 107.427279][ T29] audit: type=1326 audit(1751249170.112:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7447 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07e945ab19 code=0x7ffc0000 [ 107.523777][ T7477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7477 comm=syz.1.1528 [ 107.538944][ T7477] vlan2: entered allmulticast mode [ 107.544157][ T7477] dummy0: entered allmulticast mode [ 107.725974][ T7490] loop0: detected capacity change from 0 to 8192 [ 107.775548][ T7490] loop0: p1 p2[DM] p4 [ 107.780132][ T7490] loop0: p1 size 196608 extends beyond EOD, truncated [ 107.792912][ T7490] loop0: p2 start 4292936063 is beyond EOD, truncated [ 107.799826][ T7490] loop0: p4 size 50331648 extends beyond EOD, truncated [ 107.898260][ T7512] sch_fq: defrate 2048 ignored. [ 107.926562][ T7516] capability: warning: `syz.4.1542' uses 32-bit capabilities (legacy support in use) [ 108.001035][ T7521] loop3: detected capacity change from 0 to 512 [ 108.018166][ T7521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.050491][ T7521] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.092678][ T7521] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.142111][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.698347][ T7563] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 108.707163][ T7563] ref_ctr increment failed for inode: 0x665 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005e780 [ 108.721617][ T7565] __nla_validate_parse: 7 callbacks suppressed [ 108.721635][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'. [ 108.800462][ T7570] wg2: left allmulticast mode [ 108.819591][ T7570] ip6gre1: left allmulticast mode [ 108.836338][ T7570] vlan0: left promiscuous mode [ 108.841485][ T7570] bond2: left promiscuous mode [ 108.859513][ T7570] dummy0: left promiscuous mode [ 108.872000][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 108.874567][ T7570] team1: left promiscuous mode [ 108.880972][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 108.895121][ T7570] team1: left allmulticast mode [ 108.904976][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 108.957653][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 108.966641][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 109.557501][ T7599] wg2: entered promiscuous mode [ 109.562756][ T7599] wg2: entered allmulticast mode [ 110.162020][ T7638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1589'. [ 110.184516][ T7638] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7638 comm=syz.1.1589 [ 110.878770][ T7669] wg2: left promiscuous mode [ 110.883492][ T7669] wg2: left allmulticast mode [ 110.900491][ T7669] wg2: entered promiscuous mode [ 110.905459][ T7669] wg2: entered allmulticast mode [ 110.912801][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 110.921779][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 110.954553][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 111.160773][ T7695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7695 comm=syz.1.1613 [ 111.409756][ T7704] wg2: left promiscuous mode [ 111.414424][ T7704] wg2: left allmulticast mode [ 111.423760][ T7704] wg2: entered promiscuous mode [ 111.428954][ T7704] wg2: entered allmulticast mode [ 111.537619][ T7716] wg2: left promiscuous mode [ 111.542276][ T7716] wg2: left allmulticast mode [ 111.551667][ T7716] geneve2: left allmulticast mode [ 111.557403][ T7716] ip6gre1: left allmulticast mode [ 111.563474][ T7716] macsec1: left allmulticast mode [ 111.816954][ T7739] batadv_slave_1: entered promiscuous mode [ 111.994656][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.005902][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.397970][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 112.398017][ T29] audit: type=1326 audit(1751249175.272:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 112.427787][ T29] audit: type=1326 audit(1751249175.272:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 112.451252][ T29] audit: type=1326 audit(1751249175.272:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 112.474793][ T29] audit: type=1326 audit(1751249175.272:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 112.498245][ T29] audit: type=1326 audit(1751249175.272:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 112.527006][ T29] audit: type=1326 audit(1751249175.372:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d4d6de929 code=0x0 [ 112.549855][ T29] audit: type=1326 audit(1751249175.392:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 112.573321][ T29] audit: type=1326 audit(1751249175.392:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 112.596750][ T29] audit: type=1326 audit(1751249175.392:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 112.748017][ T29] audit: type=1326 audit(1751249175.492:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 113.137614][ T7806] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 113.690719][ T7836] @ÿ: renamed from bond_slave_0 [ 113.924442][ T7859] __nla_validate_parse: 21 callbacks suppressed [ 113.924461][ T7859] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 113.939679][ T7859] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 113.971246][ T7859] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 113.980012][ T7859] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 114.012677][ T7859] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 114.021467][ T7859] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 114.030848][ T7869] loop3: detected capacity change from 0 to 1024 [ 114.038275][ T7869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.076623][ T7869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.129247][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.335702][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 114.362129][ T7890] loop3: detected capacity change from 0 to 8192 [ 114.396920][ T7890] loop3: p1 p2[DM] p4 [ 114.401158][ T7890] loop3: p1 size 196608 extends beyond EOD, truncated [ 114.411925][ T7890] loop3: p2 start 4292936063 is beyond EOD, truncated [ 114.418839][ T7890] loop3: p4 size 50331648 extends beyond EOD, truncated [ 114.530477][ T7912] ip6gre2: entered allmulticast mode [ 114.758042][ T7916] Set syz1 is full, maxelem 65536 reached [ 114.865152][ T7931] tipc: Enabled bearer , priority 0 [ 114.880086][ T7933] netlink: 'syz.4.1703': attribute type 12 has an invalid length. [ 114.888019][ T7933] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1703'. [ 114.902663][ T7933] futex_wake_op: syz.4.1703 tries to shift op by -1; fix this program [ 114.911319][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 114.935762][ T7933] hsr_slave_1 (unregistering): left promiscuous mode [ 114.955938][ T7931] tipc: Disabling bearer [ 114.970325][ T7937] veth0: entered promiscuous mode [ 114.976112][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 114.986354][ T7937] veth0 (unregistering): left promiscuous mode [ 115.135422][ T7939] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 115.153640][ T7939] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 115.708877][ T7989] netlink: 'syz.4.1724': attribute type 6 has an invalid length. [ 115.824393][ T7995] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.870586][ T7999] netlink: 'syz.4.1729': attribute type 10 has an invalid length. [ 116.160202][ T8020] program syz.3.1735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.794843][ T8037] loop0: detected capacity change from 0 to 512 [ 116.804232][ T8037] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.827525][ T8037] EXT4-fs (loop0): 1 truncate cleaned up [ 116.833680][ T8037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.084106][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.145848][ T8054] loop0: detected capacity change from 0 to 8192 [ 118.060238][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 118.060257][ T29] audit: type=1400 audit(1751249180.932:3296): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 118.071311][ T8073] netlink: 'syz.3.1757': attribute type 1 has an invalid length. [ 118.299029][ T8082] syzkaller0: entered promiscuous mode [ 118.304567][ T8082] syzkaller0: entered allmulticast mode [ 118.448301][ T29] audit: type=1400 audit(1751249181.322:3297): avc: denied { listen } for pid=8097 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.496880][ T29] audit: type=1400 audit(1751249181.322:3298): avc: denied { accept } for pid=8097 comm="syz.4.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.516434][ T29] audit: type=1400 audit(1751249181.352:3299): avc: denied { listen } for pid=8095 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.536002][ T29] audit: type=1400 audit(1751249181.352:3300): avc: denied { accept } for pid=8095 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.576879][ T29] audit: type=1326 audit(1751249181.432:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.4.1766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x0 [ 118.599981][ T29] audit: type=1326 audit(1751249181.432:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 118.623762][ T29] audit: type=1326 audit(1751249181.432:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 118.647472][ T29] audit: type=1326 audit(1751249181.432:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 118.671049][ T29] audit: type=1326 audit(1751249181.432:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e94be929 code=0x7ffc0000 [ 119.644569][ T8150] netlink: 'syz.4.1785': attribute type 27 has an invalid length. [ 119.927438][ T8205] __nla_validate_parse: 1 callbacks suppressed [ 119.927490][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1805'. [ 119.973373][ T8205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8205 comm=syz.1.1805 [ 120.261065][ T8228] macsec0: entered promiscuous mode [ 120.319010][ T8237] bpf: Bad value for 'uid' [ 120.409751][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1822'. [ 120.555476][ T8263] syzkaller0: entered promiscuous mode [ 120.561012][ T8263] syzkaller0: entered allmulticast mode [ 120.575697][ T8263] tipc: Enabled bearer , priority 0 [ 120.588387][ T8261] tipc: Resetting bearer [ 120.603426][ T8261] tipc: Disabling bearer [ 120.820260][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 120.851103][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 120.898063][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 120.928784][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 120.945964][ T8287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1837'. [ 121.013695][ T8287] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8287 comm=syz.0.1837 [ 121.080758][ T8291] bond2: (slave dummy0): Releasing active interface [ 121.126215][ T8291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.166416][ T8296] random: crng reseeded on system resumption [ 121.181937][ T8299] loop3: detected capacity change from 0 to 1024 [ 121.202511][ T8299] EXT4-fs: Ignoring removed nobh option [ 121.208236][ T8299] EXT4-fs: Ignoring removed oldalloc option [ 121.239421][ T8299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.337289][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.111949][ T8345] loop0: detected capacity change from 0 to 164 [ 122.126384][ T8345] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.244647][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 122.389776][ T8367] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.510254][ T8377] bridge: RTM_NEWNEIGH with invalid ether address [ 122.985753][ T8398] sch_fq: defrate 0 ignored. [ 123.070551][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 123.070570][ T29] audit: type=1326 audit(1751249185.942:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c13da58e7 code=0x7ffc0000 [ 123.126349][ T29] audit: type=1326 audit(1751249185.972:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c13d4ab19 code=0x7ffc0000 [ 123.149759][ T29] audit: type=1326 audit(1751249185.972:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c13da58e7 code=0x7ffc0000 [ 123.173198][ T29] audit: type=1326 audit(1751249185.972:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c13d4ab19 code=0x7ffc0000 [ 123.196583][ T29] audit: type=1326 audit(1751249185.972:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 123.220019][ T29] audit: type=1326 audit(1751249185.982:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c13da58e7 code=0x7ffc0000 [ 123.243376][ T29] audit: type=1326 audit(1751249185.982:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c13d4ab19 code=0x7ffc0000 [ 123.266756][ T29] audit: type=1326 audit(1751249185.982:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f3c13dae929 code=0x7ffc0000 [ 123.290172][ T29] audit: type=1326 audit(1751249186.002:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c13da58e7 code=0x7ffc0000 [ 123.313565][ T29] audit: type=1326 audit(1751249186.002:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.3.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c13d4ab19 code=0x7ffc0000 [ 123.563499][ T8418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8418 comm=syz.0.1887 [ 123.601870][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 123.629666][ T8428] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1891'. [ 123.688071][ T8418] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.696474][ T8418] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.704737][ T8418] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.713087][ T8418] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.970045][ T8446] loop3: detected capacity change from 0 to 1024 [ 124.030406][ T8446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.068308][ T8446] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.079274][ T8446] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.106325][ T8446] JBD2: no valid journal superblock found [ 124.112090][ T8446] EXT4-fs (loop3): Could not load journal inode [ 124.468765][ T8480] loop3: detected capacity change from 0 to 1024 [ 124.475980][ T8480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.498350][ T8480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.572198][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.751232][ T8493] loop3: detected capacity change from 0 to 1024 [ 124.776276][ T8493] EXT4-fs: Ignoring removed oldalloc option [ 124.807681][ T8493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.876808][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.211033][ T8516] __nla_validate_parse: 5 callbacks suppressed [ 125.211054][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 125.308124][ T8516] bond0: (slave bond_slave_0): Releasing backup interface [ 125.673757][ T8541] bond1: (slave geneve2): Releasing active interface [ 125.760925][ T8541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.941650][ T8548] netlink: 'syz.4.1940': attribute type 4 has an invalid length. [ 126.305476][ T8558] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 126.325641][ T8554] loop3: detected capacity change from 0 to 1024 [ 126.352972][ T8554] ext4: Unknown parameter 'uid<00000000000000000000' [ 126.425851][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 126.473809][ T8565] bond3: entered promiscuous mode [ 126.478947][ T8565] bond3: entered allmulticast mode [ 126.515928][ T8565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.551533][ T8565] bond3 (unregistering): Released all slaves [ 126.560843][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 127.808307][ T8634] netlink: 'syz.4.1975': attribute type 10 has an invalid length. [ 127.822002][ T8634] netlink: 'syz.4.1975': attribute type 10 has an invalid length. [ 127.830003][ T8634] bond0: (slave dummy0): no link monitoring support [ 127.837670][ T8634] bond0: (slave dummy0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 127.859515][ T8634] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.078885][ T29] kauditd_printk_skb: 1080 callbacks suppressed [ 128.078905][ T29] audit: type=1400 audit(1751249190.952:4588): avc: denied { prog_load } for pid=8674 comm="syz.4.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.117616][ T29] audit: type=1400 audit(1751249190.982:4589): avc: denied { map_create } for pid=8677 comm="syz.1.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.136849][ T29] audit: type=1400 audit(1751249190.982:4590): avc: denied { map_create } for pid=8677 comm="syz.1.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.156445][ T29] audit: type=1400 audit(1751249190.982:4591): avc: denied { prog_load } for pid=8677 comm="syz.1.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.175687][ T29] audit: type=1400 audit(1751249190.982:4592): avc: denied { prog_load } for pid=8677 comm="syz.1.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.235050][ T29] audit: type=1400 audit(1751249190.992:4593): avc: denied { map_create } for pid=8679 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.254267][ T29] audit: type=1400 audit(1751249190.992:4594): avc: denied { prog_load } for pid=8679 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.256676][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 128.273606][ T29] audit: type=1400 audit(1751249190.992:4595): avc: denied { prog_load } for pid=8679 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.301825][ T29] audit: type=1400 audit(1751249191.012:4596): avc: denied { create } for pid=8679 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 128.321426][ T29] audit: type=1400 audit(1751249191.032:4597): avc: denied { prog_load } for pid=8681 comm="syz.1.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 128.392142][ T8700] netlink: 'syz.1.2006': attribute type 21 has an invalid length. [ 128.508297][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2017'. [ 128.767963][ T8757] netlink: 'syz.1.2033': attribute type 3 has an invalid length. [ 128.775974][ T8757] netlink: 'syz.1.2033': attribute type 3 has an invalid length. [ 128.823962][ T8765] netlink: 'syz.4.2037': attribute type 4 has an invalid length. [ 128.951927][ T8776] netlink: 'syz.1.2042': attribute type 10 has an invalid length. [ 128.960974][ T8776] team0: Port device dummy0 added [ 128.968045][ T8776] netlink: 'syz.1.2042': attribute type 10 has an invalid length. [ 128.977529][ T8776] team0: Port device dummy0 removed [ 128.984024][ T8776] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.903371][ T8814] netlink: 'syz.1.2058': attribute type 2 has an invalid length. [ 130.280218][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 130.304834][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 130.404271][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2077'. [ 130.542434][ T8867] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8867 comm=syz.3.2083 [ 130.709818][ T8881] macsec0: entered promiscuous mode [ 130.774796][ T8887] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 131.559087][ T8948] netlink: 'syz.2.2120': attribute type 3 has an invalid length. [ 131.597797][ T8948] netlink: 'syz.2.2120': attribute type 3 has an invalid length. [ 132.117694][ T8999] ªªªªªª: renamed from vlan0 [ 132.813719][ T9048] bridge: RTM_NEWNEIGH with invalid ether address [ 132.976301][ T9069] netlink: 'syz.3.2176': attribute type 3 has an invalid length. [ 132.984263][ T9069] netlink: 'syz.3.2176': attribute type 3 has an invalid length. [ 133.085337][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 133.085356][ T29] audit: type=1400 audit(1751249195.962:5456): avc: denied { block_suspend } for pid=9077 comm="syz.3.2180" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 133.113756][ T29] audit: type=1400 audit(1751249195.962:5457): avc: denied { prog_load } for pid=9087 comm="syz.0.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.133030][ T29] audit: type=1400 audit(1751249195.962:5458): avc: denied { open } for pid=9087 comm="syz.0.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 133.152464][ T29] audit: type=1400 audit(1751249195.962:5459): avc: denied { execmem } for pid=9087 comm="syz.0.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 133.173079][ T29] audit: type=1400 audit(1751249196.012:5460): avc: denied { prog_load } for pid=9090 comm="syz.0.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.192379][ T29] audit: type=1400 audit(1751249196.012:5461): avc: denied { map_create } for pid=9090 comm="syz.0.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.211715][ T29] audit: type=1400 audit(1751249196.012:5462): avc: denied { prog_load } for pid=9090 comm="syz.0.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.230909][ T29] audit: type=1400 audit(1751249196.012:5463): avc: denied { allowed } for pid=9090 comm="syz.0.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 133.250341][ T29] audit: type=1400 audit(1751249196.012:5464): avc: denied { create } for pid=9090 comm="syz.0.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 133.269961][ T29] audit: type=1400 audit(1751249196.012:5465): avc: denied { prog_load } for pid=9090 comm="syz.0.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 133.516440][ T9112] netlink: 'syz.1.2190': attribute type 4 has an invalid length. [ 133.556450][ T9112] netlink: 'syz.1.2190': attribute type 4 has an invalid length. [ 133.735912][ T9119] bridge: RTM_NEWNEIGH with invalid ether address [ 133.764606][ T9122] netlink: 'syz.1.2197': attribute type 4 has an invalid length. [ 133.871412][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2206'. [ 133.880471][ T9140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2206'. [ 133.991783][ T9161] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2216'. [ 134.131161][ T9187] netlink: 'syz.0.2229': attribute type 4 has an invalid length. [ 134.140789][ T9187] netlink: 'syz.0.2229': attribute type 4 has an invalid length. [ 134.322824][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2236'. [ 134.425207][ T9219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2241'. [ 134.434241][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 134.573902][ T9234] netlink: 'syz.3.2248': attribute type 27 has an invalid length. [ 134.583099][ T9234] wg2: left promiscuous mode [ 134.587786][ T9234] wg2: left allmulticast mode [ 134.594755][ T9234] macsec0: left promiscuous mode [ 134.600161][ T9234] ip6gre1: left allmulticast mode [ 134.651223][ T9240] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2251'. [ 134.747228][ T9245] syzkaller0: entered promiscuous mode [ 134.752824][ T9245] syzkaller0: entered allmulticast mode [ 135.355834][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'. [ 136.400248][ T9345] IPv6: sit1: Disabled Multicast RS [ 136.657261][ T9350] validate_nla: 3 callbacks suppressed [ 136.657279][ T9350] netlink: 'syz.0.2300': attribute type 4 has an invalid length. [ 136.760300][ T9350] netlink: 'syz.0.2300': attribute type 4 has an invalid length. [ 137.317240][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2307'. [ 137.588966][ T9412] bond_slave_1: mtu less than device minimum [ 138.226523][ T29] kauditd_printk_skb: 976 callbacks suppressed [ 138.226541][ T29] audit: type=1400 audit(1751249201.042:6442): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.257038][ T29] audit: type=1400 audit(1751249201.062:6443): avc: denied { prog_load } for pid=9421 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.276242][ T29] audit: type=1400 audit(1751249201.062:6444): avc: denied { prog_load } for pid=9421 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.295345][ T29] audit: type=1400 audit(1751249201.062:6445): avc: denied { map_create } for pid=9421 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.314654][ T29] audit: type=1400 audit(1751249201.062:6446): avc: denied { prog_load } for pid=9421 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.333917][ T29] audit: type=1400 audit(1751249201.062:6447): avc: denied { prog_load } for pid=9421 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.353212][ T29] audit: type=1400 audit(1751249201.062:6448): avc: denied { prog_load } for pid=9421 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.372311][ T29] audit: type=1400 audit(1751249201.062:6449): avc: denied { create } for pid=9421 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 138.392097][ T29] audit: type=1400 audit(1751249201.082:6450): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.397543][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2328'. [ 138.416599][ T29] audit: type=1400 audit(1751249201.092:6451): avc: denied { map_create } for pid=9423 comm="syz.3.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.574639][ T9440] : renamed from lo (while UP) [ 139.662347][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2353'. [ 139.938158][ T9497] netlink: 'syz.2.2357': attribute type 39 has an invalid length. [ 140.058007][ T9502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2360'. [ 140.325690][ T9504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2360'. [ 140.518394][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2362'. [ 141.084603][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2372'. [ 141.149267][ T9532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9532 comm=syz.2.2372 [ 141.734709][ T9561] netlink: 'syz.2.2386': attribute type 16 has an invalid length. [ 141.743369][ T9561] netlink: 'syz.2.2386': attribute type 17 has an invalid length. [ 141.924494][ T9573] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2391'. [ 142.185660][ T9592] netlink: 'syz.0.2398': attribute type 4 has an invalid length. [ 142.222758][ T9592] netlink: 'syz.0.2398': attribute type 4 has an invalid length. [ 142.382347][ T9602] bridge5: entered allmulticast mode [ 142.459553][ T9610] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 142.501370][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 142.561351][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 142.734854][ T9636] netlink: 'syz.0.2419': attribute type 4 has an invalid length. [ 142.759178][ T9636] netlink: 'syz.0.2419': attribute type 4 has an invalid length. [ 143.062461][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 143.075864][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2429'. [ 143.170207][ T9665] netlink: 'syz.4.2431': attribute type 4 has an invalid length. [ 143.178807][ T9665] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2431'. [ 143.222038][ T9669] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 143.242753][ T9669] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 143.258902][ T9669] veth5: entered promiscuous mode [ 143.266141][ T9669] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 143.292626][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 143.292645][ T29] audit: type=1400 audit(1751249206.162:7031): avc: denied { prog_load } for pid=9671 comm="syz.4.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.318902][ T29] audit: type=1400 audit(1751249206.162:7032): avc: denied { map_create } for pid=9671 comm="syz.4.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.338919][ T29] audit: type=1400 audit(1751249206.162:7033): avc: denied { prog_load } for pid=9671 comm="syz.4.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.358151][ T29] audit: type=1400 audit(1751249206.162:7034): avc: denied { prog_load } for pid=9671 comm="syz.4.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.378073][ T29] audit: type=1400 audit(1751249206.162:7035): avc: denied { prog_load } for pid=9671 comm="syz.4.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.397205][ T29] audit: type=1400 audit(1751249206.162:7036): avc: denied { open } for pid=9671 comm="syz.4.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 143.417178][ T29] audit: type=1400 audit(1751249206.232:7037): avc: denied { create } for pid=9675 comm="syz.2.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 143.437710][ T29] audit: type=1400 audit(1751249206.232:7038): avc: denied { create } for pid=9675 comm="syz.2.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 143.458842][ T29] audit: type=1400 audit(1751249206.232:7039): avc: denied { create } for pid=9675 comm="syz.2.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 143.478409][ T29] audit: type=1400 audit(1751249206.242:7040): avc: denied { prog_load } for pid=9675 comm="syz.2.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.594131][ T9692] netlink: 'syz.1.2443': attribute type 1 has an invalid length. [ 143.610916][ T9692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.625850][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 143.637874][ T9692] ipvlan2: entered promiscuous mode [ 143.643315][ T9692] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.651773][ T9692] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.731834][ T9701] netlink: 'syz.0.2447': attribute type 4 has an invalid length. [ 143.946700][ T9712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2451'. [ 145.378972][ T9784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.401217][ T9784] bond3: (slave bond4): making interface the new active one [ 145.416403][ T9784] bond3: (slave bond4): Enslaving as an active interface with an up link [ 145.456433][ T9787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.441239][ T9807] __nla_validate_parse: 5 callbacks suppressed [ 146.441257][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 146.651977][ T9815] syzkaller0: entered promiscuous mode [ 146.657662][ T9815] syzkaller0: entered allmulticast mode [ 146.758810][ T9823] wireguard0: entered promiscuous mode [ 146.764352][ T9823] wireguard0: entered allmulticast mode [ 146.930807][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 147.060601][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'. [ 147.079642][ T9861] validate_nla: 2 callbacks suppressed [ 147.079659][ T9861] netlink: 'syz.4.2517': attribute type 39 has an invalid length. [ 147.657571][ T9887] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 147.795133][ T9895] netlink: 'syz.3.2533': attribute type 10 has an invalid length. [ 147.807126][ T9895] netlink: 'syz.3.2533': attribute type 10 has an invalid length. [ 147.818372][ T9895] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.827707][ T9897] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2534'. [ 147.838119][ T9897] bridge0: port 1(bond0) entered blocking state [ 147.844567][ T9897] bridge0: port 1(bond0) entered disabled state [ 147.851096][ T9897] bond0: entered allmulticast mode [ 147.856421][ T9897] bond_slave_0: entered allmulticast mode [ 147.862231][ T9897] bond_slave_1: entered allmulticast mode [ 147.874712][ T9897] bond0: entered promiscuous mode [ 147.879856][ T9897] bond_slave_0: entered promiscuous mode [ 147.885700][ T9897] bond_slave_1: entered promiscuous mode [ 147.911039][ T9902] bond0: left allmulticast mode [ 147.916086][ T9902] bond_slave_0: left allmulticast mode [ 147.921651][ T9902] bond_slave_1: left allmulticast mode [ 147.927428][ T9902] bond0: left promiscuous mode [ 147.932231][ T9902] bond_slave_0: left promiscuous mode [ 147.937782][ T9902] bond_slave_1: left promiscuous mode [ 147.943470][ T9902] bridge0: port 1(bond0) entered disabled state [ 147.966191][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 147.997950][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 148.116116][ T9916] $Hÿ: renamed from bond0 [ 148.122590][ T9916] $Hÿ: entered promiscuous mode [ 148.127732][ T9916] bond_slave_0: entered promiscuous mode [ 148.133491][ T9916] bond_slave_1: entered promiscuous mode [ 148.146432][ T9916] dummy0: entered promiscuous mode [ 148.263905][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2550'. [ 148.295703][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 148.295721][ T29] audit: type=1326 audit(1751249724.174:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 148.343681][ T29] audit: type=1326 audit(1751249724.174:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 148.367853][ T29] audit: type=1326 audit(1751249724.174:7633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 148.388955][ T9941] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067968) [ 148.391304][ T29] audit: type=1326 audit(1751249724.174:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 148.401475][ T9941] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 148.435872][ T29] audit: type=1326 audit(1751249724.174:7635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 148.459319][ T29] audit: type=1326 audit(1751249724.174:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 148.478286][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2556'. [ 148.483583][ T29] audit: type=1400 audit(1751249724.204:7637): avc: denied { prog_load } for pid=9936 comm="syz.4.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 148.511573][ T29] audit: type=1400 audit(1751249724.204:7638): avc: denied { map_create } for pid=9936 comm="syz.4.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 148.530750][ T29] audit: type=1326 audit(1751249724.214:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 148.554849][ T29] audit: type=1326 audit(1751249724.214:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d4d6de929 code=0x7ffc0000 [ 149.029024][ T9963] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2563'. [ 149.104291][ T9971] netlink: 'syz.2.2567': attribute type 4 has an invalid length. [ 149.116370][ T9971] netlink: 'syz.2.2567': attribute type 4 has an invalid length. [ 149.497959][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'. [ 149.517330][T10014] netlink: 'syz.0.2587': attribute type 10 has an invalid length. [ 149.526779][T10014] bridge0: port 3(team0) entered blocking state [ 149.533177][T10014] bridge0: port 3(team0) entered disabled state [ 149.540388][T10014] team0: entered allmulticast mode [ 149.545742][T10014] team_slave_0: entered allmulticast mode [ 149.551556][T10014] team_slave_1: entered allmulticast mode [ 149.559777][T10014] team0: entered promiscuous mode [ 149.565186][T10014] team_slave_0: entered promiscuous mode [ 149.570969][T10014] team_slave_1: entered promiscuous mode [ 149.750624][T10040] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 149.769597][T10040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.805314][T10040] veth9: entered promiscuous mode [ 149.816497][T10040] bond1: (slave veth9): Enslaving as an active interface with a down link [ 149.855218][T10040] vlan0: entered allmulticast mode [ 149.860484][T10040] bond1: entered allmulticast mode [ 149.866546][T10040] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 150.030332][T10081] bridge0: entered allmulticast mode [ 150.050219][T10081] team0: left allmulticast mode [ 150.055275][T10081] team_slave_0: left allmulticast mode [ 150.060962][T10081] team_slave_1: left allmulticast mode [ 150.066491][T10081] team0: left promiscuous mode [ 150.071328][T10081] team_slave_0: left promiscuous mode [ 150.077748][T10081] team_slave_1: left promiscuous mode [ 150.083495][T10081] bridge0: port 3(team0) entered disabled state [ 150.099998][T10081] bridge_slave_1: left allmulticast mode [ 150.106607][T10081] bridge_slave_1: left promiscuous mode [ 150.112323][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.121134][T10081] bridge_slave_0: left allmulticast mode [ 150.126894][T10081] bridge_slave_0: left promiscuous mode [ 150.132691][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.605080][T10104] ================================================================== [ 150.613214][T10104] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 150.620549][T10104] [ 150.622889][T10104] write to 0xffff88811efcd548 of 4 bytes by task 10101 on cpu 1: [ 150.630635][T10104] touch_atime+0x1e8/0x340 [ 150.635097][T10104] shmem_file_read_iter+0x477/0x540 [ 150.640326][T10104] copy_splice_read+0x3c4/0x5f0 [ 150.645209][T10104] splice_direct_to_actor+0x290/0x680 [ 150.650652][T10104] do_splice_direct+0xda/0x150 [ 150.655465][T10104] do_sendfile+0x380/0x650 [ 150.659909][T10104] __x64_sys_sendfile64+0x105/0x150 [ 150.665160][T10104] x64_sys_call+0xb39/0x2fb0 [ 150.669780][T10104] do_syscall_64+0xd2/0x200 [ 150.674320][T10104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.680242][T10104] [ 150.682588][T10104] read to 0xffff88811efcd548 of 4 bytes by task 10104 on cpu 0: [ 150.690247][T10104] atime_needs_update+0x25f/0x3e0 [ 150.695317][T10104] touch_atime+0x4a/0x340 [ 150.699682][T10104] shmem_file_read_iter+0x477/0x540 [ 150.704906][T10104] copy_splice_read+0x3c4/0x5f0 [ 150.709797][T10104] splice_direct_to_actor+0x290/0x680 [ 150.715203][T10104] do_splice_direct+0xda/0x150 [ 150.720023][T10104] do_sendfile+0x380/0x650 [ 150.724474][T10104] __x64_sys_sendfile64+0x105/0x150 [ 150.729724][T10104] x64_sys_call+0xb39/0x2fb0 [ 150.734348][T10104] do_syscall_64+0xd2/0x200 [ 150.738879][T10104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.744798][T10104] [ 150.747142][T10104] value changed: 0x1c4c71d4 -> 0x1ce50855 [ 150.752873][T10104] [ 150.755221][T10104] Reported by Kernel Concurrency Sanitizer on: [ 150.761397][T10104] CPU: 0 UID: 0 PID: 10104 Comm: syz.1.2627 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 150.772192][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.782271][T10104] ==================================================================