last executing test programs: 3m2.907228309s ago: executing program 1 (id=1501): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x9}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3m2.847213237s ago: executing program 1 (id=1506): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000c50000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 3m2.787355984s ago: executing program 1 (id=1507): socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x44040001, 0x1}) 3m2.657433871s ago: executing program 1 (id=1512): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 3m2.571330553s ago: executing program 1 (id=1515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x80, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x4, 0x3}, @value=@ver_80211n={0x0, 0x7ffe}}, 0x1c000000000000, @default, 0x10a, @void, @val, @void, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x0, 0xbd}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x9, 0xff}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x8, 0x8}}, @val={0x76, 0x6, {0xd0, 0x3, 0x34, 0x2}}}}]]}, 0x80}}, 0x0) 3m1.243068314s ago: executing program 1 (id=1582): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x4) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d", 0xa1}, {0x0}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587c", 0x34}], 0x1}}], 0x3, 0x2090) 3m1.239104495s ago: executing program 32 (id=1582): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x4) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d", 0xa1}, {0x0}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587c", 0x34}], 0x1}}], 0x3, 0x2090) 2m5.46697906s ago: executing program 0 (id=3819): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2m5.39353188s ago: executing program 0 (id=3823): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x240080a4, &(0x7f0000000200)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @random}, 0x14) 2m5.354374755s ago: executing program 0 (id=3824): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000, 0x5, 0x3, 0x1, 0x9}, 0x9, 0x1, 0x1, 0x6, 0x41, 0x11, 0x12, 0x6, 0x4, 0xfffffff8, {0xe61a, 0x8000, 0x10006, 0x1, 0x6, 0xbf5}}}}]}, 0x78}}, 0x0) 2m5.326438468s ago: executing program 0 (id=3825): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f00000001c0)=0x0) dup3(r0, r1, 0x80000) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) fcntl$setstatus(r0, 0x4, 0x2400) write(r1, 0x0, 0x0) 2m5.228127981s ago: executing program 0 (id=3826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m5.151569341s ago: executing program 0 (id=3827): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x80) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 2m4.486855557s ago: executing program 4 (id=3840): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x3}, 0x4) 2m4.406283967s ago: executing program 4 (id=3842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m4.328513677s ago: executing program 4 (id=3843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x98, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x50, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x34fb}}, {0x8, 0x6, r2}}}, {0x0, 0x1, @lb_hash_stats={{{}, {}, {0x0, 0x4, 0x81}}}}, {0x0, 0x1, @lb_tx_hash_to_port_mapping={{{}, {}, {0x0, 0x4, r2}}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 2m4.1560195s ago: executing program 4 (id=3850): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24000, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x8000) 2m3.666014613s ago: executing program 4 (id=3853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m3.452437071s ago: executing program 4 (id=3855): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m49.552004366s ago: executing program 33 (id=3827): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x80) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 1m48.033927363s ago: executing program 34 (id=3855): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 50.403458899s ago: executing program 7 (id=6184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x355c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@init_itable}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x40006) 50.39419063s ago: executing program 7 (id=6185): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x80000}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0xcfea741486d23e01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 50.295490242s ago: executing program 7 (id=6187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) flistxattr(r2, &(0x7f0000000280)=""/183, 0xb7) 50.295171333s ago: executing program 7 (id=6188): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r0, &(0x7f000000bb80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='RI', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000700)="e5", 0x1}], 0x1, &(0x7f0000008f00)=ANY=[], 0x1140}}, {{0x0, 0x0, &(0x7f000000b140)=[{&(0x7f000000a040)="e5", 0x1}], 0x1}}], 0x3, 0x4000005) shutdown(r0, 0x1) 50.279881884s ago: executing program 7 (id=6190): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0xfffffffffffffeec) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 50.231345911s ago: executing program 7 (id=6192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xc}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 34.970613312s ago: executing program 35 (id=6192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xc}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 13.86027792s ago: executing program 5 (id=7142): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x4000423) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000002003e00ecffffff98030000000000004b000000000000005600000000000000000000000000380001"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 13.826735284s ago: executing program 5 (id=7144): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13.658449246s ago: executing program 5 (id=7150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x1000000) 13.638474228s ago: executing program 5 (id=7152): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f636f6d70726573732c6d61703d61636f726e2c00fdca1d4dd700cdcfba40b45917e455455f7d0c174ec1e2add115f002b56dc081"], 0x3, 0x54c, &(0x7f0000000540)="$eJzs3M9uG8cZAPBZmXJUFTUKBI0dxYeN04MLNApJ1zKEAAW2q6W0CckldleBfSqCWgqESmmRpEDjmy9uC7QPkWufoKe+UdBjjwmWSzqOLdL/ksiIfz9AmuHutzPfrIgZkOIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhSne63V4Uhvl4/2a8WLpTFqMl5+ft/edbxZJ+Q4ian7C2Fi61hy69+s3pXzS/roSL7aOLYa0p1sKdn77283df7azMr1+S0A9gdZbs8cEnywOj8FX0QyX1/dg7/VbvZuO8KvJRspvFeVXE21tb3Xf2BlU8yIdZdauqs1GcdkJSF2V8Nf1V3NvevhZnm7eK/fHuTjLM5gdvvN3vdrfi9zYnWVJWxfid9zardC8fDvPx7jSmOd3E3GieiO/ndVxnySiOD4+OD649LvcmqPckQf3HBfW7/X6v1+/3tq5vX7/R7XYeOdB9SHgk4qyftJy173D2huczX/8BAACAH69o+h578/p/dfo+fBQG+TDrnnVaAAAAwHdo+p//i00x/TTbpRB5/Q8AAAA/Nn9/7B67avJK9N//hbJcje5Obv4yOkmauOTkXHvduYdbrAed6MKskWmx1Zk9SrPL0ett0Ovz6C9nxeHj8oieIoGNBQmEf4aNNmbjdlvenp9pe1kf5MNsMy2G7/ZCklxYqbOb9V8+PvprmA7/H+PRhSgcHh0fbP7hT8e3p7ncbVq5ezLbQPHIPooluXx2f9/jQyP+om1qtcklmvW73vbbfXD8K+3lK0/R573wRhvzxnpbrn97/GtNn73NRaNfj3423Uz3nCO/Fy63MZevvtUUb109JYv+aVmcnzU+3a33YBbPdC+eIItrS+5FODx6JYTwRFn8ZFEWAGflcNEqdH/9f3jd7TzDXPvN6v7b73F1vxfebGPe3JhOrJ2NU2b07vIZfb7G3j3/rKvbv8OVNubKPHjRGtv0+6/7/bar6nTx/2Jhv9WwHzV/qHOfnfw5vPbp53fePjr58KODjw4+7vevbXV/0+1e74fV6TBmxZJMAXh5ZeWX0Xr9t6gs88nve9vbvaTey+KySN+Py3xnN4vzcZ2V6V4y3s3iSVnURVoMm8oH+U5WxdX+ZFKUdTwoynhSVPnN6Te/xLOvfqmy8OtxnafVZJglVRanxbhO0jreyas0nuz/bphXe1k5vbiaZGk+yNOkzotx3Cn2yzTbjOMqyx4IzHeycZ0P8qY6jidlPkrKW/EHxXB/lMU7WZWW+aQu2gbnfeXjQVGOkjo/FzbP+mYDwAvi08/v/PHD4+ODT56w8v+vWk9z1aO9nj+LoQIAM8tWaQAAAAAAAAAAAAAA4MXwtPv/VFRensrKc7fTeQFGsbAynwROjTnbeQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATvN1AAAA//92jZ2z") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[], 0x44}}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 13.54735517s ago: executing program 5 (id=7154): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}]}, 0x0) write$bt_hci(r1, &(0x7f0000000140)=ANY=[], 0x28) 12.835360412s ago: executing program 5 (id=7181): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 12.835278242s ago: executing program 36 (id=7181): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.515093545s ago: executing program 3 (id=7645): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x8000) 1.347416856s ago: executing program 3 (id=7652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 1.287539984s ago: executing program 3 (id=7655): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.201422615s ago: executing program 2 (id=7662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 1.109939137s ago: executing program 2 (id=7669): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1.08407664s ago: executing program 6 (id=7673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1.039764426s ago: executing program 9 (id=7675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 1.036539856s ago: executing program 2 (id=7676): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.012913139s ago: executing program 8 (id=7677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) 985.488743ms ago: executing program 9 (id=7678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 958.639676ms ago: executing program 2 (id=7679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 937.926299ms ago: executing program 9 (id=7680): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 879.576957ms ago: executing program 9 (id=7681): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 878.070507ms ago: executing program 2 (id=7691): unshare(0x44040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x400000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000013, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 795.206738ms ago: executing program 8 (id=7682): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 786.666349ms ago: executing program 6 (id=7683): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 745.019494ms ago: executing program 8 (id=7684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 663.543555ms ago: executing program 8 (id=7685): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1000, &(0x7f0000001dc0)={0xf, 0x0, 0x40000}, 0x20) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 582.497465ms ago: executing program 2 (id=7686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x789c, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x2}, 0x0, 0x0) 582.334756ms ago: executing program 8 (id=7687): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x2, 0xfffffffe, 0xb84, 0x7, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x800, 0xffffffff, 0x0, 0xffff18e5, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x201, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x4000, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0xffffffff, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x0, 0xffffbffc, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x6, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0x22}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x2, 0x81}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0xc0) 393.93476ms ago: executing program 3 (id=7688): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 393.755869ms ago: executing program 8 (id=7689): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 320.119839ms ago: executing program 3 (id=7690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 291.307643ms ago: executing program 6 (id=7692): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 291.132183ms ago: executing program 3 (id=7693): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 290.570653ms ago: executing program 6 (id=7694): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./file2\x00', 0x8010, &(0x7f0000000140), 0x1, 0x555, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x2e, 0xb, 0x0, 0x0, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x8000) 161.391009ms ago: executing program 6 (id=7695): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7ff, 0x0) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 44.032475ms ago: executing program 9 (id=7696): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000580)={0x1}, 0x8) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 4.27781ms ago: executing program 6 (id=7697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000740)='io_uring_req_failed\x00', r0, 0x0, 0x12}, 0x18) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_MKDIRAT={0x25, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 0s ago: executing program 9 (id=7698): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) kernel console output (not intermixed with test programs): 15] Node 0 DMA32 free:2945992kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 191.127303][T17515] lowmem_reserve[]: 0 0 4978 4978 [ 191.132374][T17515] Node 0 Normal free:3970700kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:119600kB inactive_anon:84kB active_file:84176kB inactive_file:9864kB unevictable:0kB writepending:1252kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:178328kB local_pcp:89676kB free_cma:0kB [ 191.165845][T17515] lowmem_reserve[]: 0 0 0 0 [ 191.170551][T17515] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.183288][T17515] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945992kB [ 191.199415][T17515] Node 0 Normal: 1662*4kB (UME) 1090*8kB (UM) 449*16kB (UME) 528*32kB (UM) 350*64kB (UM) 196*128kB (UME) 139*256kB (UM) 83*512kB (UM) 36*1024kB (UME) 59*2048kB (UM) 891*4096kB (UM) = 3972248kB [ 191.218713][T17515] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 191.228122][T17515] 25404 total pagecache pages [ 191.232953][T17515] 27 pages in swap cache [ 191.237190][T17515] Free swap = 124052kB [ 191.241462][T17515] Total swap = 124996kB [ 191.245801][T17515] 2097051 pages RAM [ 191.249650][T17515] 0 pages HighMem/MovableOnly [ 191.254311][T17515] 81271 pages reserved [ 191.276509][T17503] can0 (unregistered): slcan off ptm0. [ 191.299190][T17503] Falling back ldisc for ptm0. [ 191.326227][T17546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17546 comm=syz.7.5843 [ 191.338841][T17546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17546 comm=syz.7.5843 [ 191.797369][T17584] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 191.878919][T17587] loop5: detected capacity change from 0 to 512 [ 191.894094][T17587] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 191.921731][T17587] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 191.953135][T17587] EXT4-fs (loop5): 1 truncate cleaned up [ 191.965746][T17587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.158694][ T7169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.903327][T17633] can0: slcan on ptm0. [ 192.905686][T17630] netlink: 'syz.3.5887': attribute type 8 has an invalid length. [ 192.915192][T17630] __nla_validate_parse: 5 callbacks suppressed [ 192.915205][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5887'. [ 192.969134][T17633] can0 (unregistered): slcan off ptm0. [ 192.974945][T17633] Falling back ldisc for ptm0. [ 193.366761][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5890'. [ 193.368992][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5889'. [ 193.399566][T17659] syz_tun: entered promiscuous mode [ 193.411368][T17659] syz_tun: refused to change device tx_queue_len [ 193.456525][T17669] loop6: detected capacity change from 0 to 128 [ 193.468550][T17665] can0: slcan on ptm1. [ 193.512248][T17673] netlink: 'syz.7.5898': attribute type 1 has an invalid length. [ 193.520279][T17673] netlink: 'syz.7.5898': attribute type 4 has an invalid length. [ 193.527994][T17673] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.5898'. [ 193.559133][T17665] can0 (unregistered): slcan off ptm1. [ 193.572641][T17665] Falling back ldisc for ptm1. [ 193.646014][T17689] loop5: detected capacity change from 0 to 1024 [ 193.653573][T17689] EXT4-fs: Ignoring removed oldalloc option [ 193.670217][T17693] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 193.682951][T17689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.716301][T17689] ext4 filesystem being mounted at /866/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.794708][T17705] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 193.804870][ T7169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 193.832339][T17715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5916'. [ 193.841422][T17715] netlink: 'syz.2.5916': attribute type 7 has an invalid length. [ 193.849157][T17715] netlink: 'syz.2.5916': attribute type 8 has an invalid length. [ 193.849807][T17711] vhci_hcd vhci_hcd.2: invalid port number 96 [ 193.856868][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5916'. [ 193.862982][T17711] vhci_hcd vhci_hcd.2: default hub control req: 8011 v0005 i0060 l7 [ 193.882303][T17717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=17717 comm=syz.5.5914 [ 193.898784][T17717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5914'. [ 194.038204][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5929'. [ 194.060829][T17745] bridge0: port 1(gretap0) entered blocking state [ 194.067324][T17745] bridge0: port 1(gretap0) entered forwarding state [ 194.075686][T17745] 8021q: adding VLAN 0 to HW filter on device .` [ 194.083188][T17745] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.092269][T17745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.202734][T17748] netlink: 'syz.3.5931': attribute type 10 has an invalid length. [ 194.220440][T17748] team0: Port device dummy0 added [ 194.244631][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5933'. [ 194.253704][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5933'. [ 194.268806][ T3486] Process accounting resumed [ 194.553989][T17765] can0: slcan on ptm0. [ 194.589545][T17765] can0 (unregistered): slcan off ptm0. [ 194.589619][ T2155] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.604254][T17765] Falling back ldisc for ptm0. [ 194.609550][ T2155] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.634915][ T2155] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.657714][ T2155] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.721245][T17783] loop7: detected capacity change from 0 to 1024 [ 194.738307][T17783] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 194.749403][T17783] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 194.768175][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 194.768190][ T29] audit: type=1326 audit(1768380366.888:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 194.798019][ T29] audit: type=1326 audit(1768380366.888:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 194.798863][T17783] JBD2: no valid journal superblock found [ 194.821702][ T29] audit: type=1326 audit(1768380366.888:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 194.827377][T17783] EXT4-fs (loop7): Could not load journal inode [ 194.864020][ T29] audit: type=1326 audit(1768380366.888:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 194.887607][ T29] audit: type=1326 audit(1768380366.888:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 194.911625][ T29] audit: type=1326 audit(1768380366.888:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 194.935208][ T29] audit: type=1326 audit(1768380366.888:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 194.958711][ T29] audit: type=1326 audit(1768380366.898:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 194.982343][ T29] audit: type=1326 audit(1768380366.898:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 195.005893][ T29] audit: type=1326 audit(1768380366.898:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17786 comm="syz.3.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 195.238831][T17803] can0: slcan on ptm0. [ 195.340075][T17803] can0 (unregistered): slcan off ptm0. [ 195.352651][T17803] Falling back ldisc for ptm0. [ 195.659953][T17834] loop5: detected capacity change from 0 to 1024 [ 195.671638][T17834] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 195.682754][T17834] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 195.754014][T17834] JBD2: no valid journal superblock found [ 195.759808][T17834] EXT4-fs (loop5): Could not load journal inode [ 196.286637][T17847] Falling back ldisc for ttyS3. [ 197.053112][T17905] tipc: New replicast peer: 255.255.255.255 [ 197.059300][T17905] tipc: Enabled bearer , priority 10 [ 197.081602][T17908] loop5: detected capacity change from 0 to 2048 [ 197.122215][T17908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.144649][T17920] loop6: detected capacity change from 0 to 1024 [ 197.153458][T17920] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 197.164476][T17920] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 197.176037][T17920] JBD2: no valid journal superblock found [ 197.181863][T17920] EXT4-fs (loop6): Could not load journal inode [ 197.200085][ T7169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.355848][T17934] loop6: detected capacity change from 0 to 1024 [ 197.363074][T17934] EXT4-fs: inline encryption not supported [ 197.383961][T17934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.433304][T12646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.552714][T17966] loop6: detected capacity change from 0 to 512 [ 197.570718][T17966] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.584910][T17966] EXT4-fs (loop6): 1 truncate cleaned up [ 197.591091][T17966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.658606][T17950] loop7: detected capacity change from 0 to 512 [ 197.680136][T12646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.692317][T17950] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 197.715345][T17950] EXT4-fs (loop7): mount failed [ 197.913076][T18015] netlink: 'syz.5.6047': attribute type 1 has an invalid length. [ 197.935923][T18015] bond5: (slave ip6gretap1): making interface the new active one [ 197.945085][T18015] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 197.954475][T18020] loop7: detected capacity change from 0 to 1024 [ 197.969751][T18020] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 197.980749][T18020] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 197.992072][T18020] JBD2: no valid journal superblock found [ 197.997797][T18020] EXT4-fs (loop7): Could not load journal inode [ 198.058821][T18036] 9p: Bad value for 'rfdno' [ 198.098037][T18042] __nla_validate_parse: 7 callbacks suppressed [ 198.098075][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6058'. [ 198.128031][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6058'. [ 198.141319][T18046] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 198.955989][T18099] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 198.964326][T18099] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 199.170139][T18124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18124 comm=syz.6.6090 [ 199.182750][T18124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18124 comm=syz.6.6090 [ 199.203971][ T2155] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x79 [ 199.446928][T18155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6106'. [ 199.456087][T18155] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 199.793541][T18198] SELinux: failed to load policy [ 199.822584][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 199.822600][ T29] audit: type=1400 audit(1768380371.948:7665): avc: denied { write } for pid=18201 comm="syz.3.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.874315][T18206] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 199.934525][T18214] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6134'. [ 200.119605][ T29] audit: type=1400 audit(1768380372.248:7666): avc: denied { bind } for pid=18227 comm="syz.7.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.205999][T18231] atomic_op ffff88810d4a7528 conn xmit_atomic 0000000000000000 [ 200.249902][ T29] audit: type=1400 audit(1768380372.378:7667): avc: denied { mount } for pid=18234 comm="syz.6.6143" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 200.556943][T18280] loop7: detected capacity change from 0 to 1024 [ 200.565255][T18280] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 200.576232][T18280] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 200.587547][T18280] JBD2: no valid journal superblock found [ 200.593560][T18280] EXT4-fs (loop7): Could not load journal inode [ 200.694268][T18284] loop5: detected capacity change from 0 to 512 [ 200.728296][ T29] audit: type=1400 audit(1768380372.848:7668): avc: denied { bind } for pid=18287 comm="syz.7.6166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.750146][T18284] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 200.763594][T18284] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 200.779344][T18284] EXT4-fs (loop5): mount failed [ 200.810691][ T29] audit: type=1326 audit(1768380372.938:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.7.6169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52386f749 code=0x7ffc0000 [ 200.834346][ T29] audit: type=1326 audit(1768380372.938:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.7.6169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52386f749 code=0x7ffc0000 [ 200.857830][ T29] audit: type=1326 audit(1768380372.938:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.7.6169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52386f749 code=0x7ffc0000 [ 200.881342][ T29] audit: type=1326 audit(1768380372.938:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.7.6169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd52386f749 code=0x7ffc0000 [ 200.904852][ T29] audit: type=1326 audit(1768380372.938:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18294 comm="syz.7.6169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52386f749 code=0x7ffc0000 [ 200.932833][T18299] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6170'. [ 201.001003][T18303] SELinux: ebitmap: truncated map [ 201.008135][T18303] SELinux: failed to load policy [ 201.041315][T18305] netlink: 'syz.7.6173': attribute type 1 has an invalid length. [ 201.075357][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6176'. [ 201.100960][T18313] netlink: 'syz.7.6177': attribute type 1 has an invalid length. [ 201.224485][T18328] loop7: detected capacity change from 0 to 1024 [ 201.240602][T18328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.267307][T12699] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.289349][T18332] macsec1: entered allmulticast mode [ 201.294685][T18332] macvlan0: entered allmulticast mode [ 201.300778][T18332] macvlan0: left allmulticast mode [ 201.905642][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6197'. [ 202.156440][T18385] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18385 comm=syz.2.6209 [ 202.182975][T15935] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.233638][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6214'. [ 202.244135][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6214'. [ 202.256947][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6214'. [ 202.745669][T18449] netlink: 'syz.3.6237': attribute type 27 has an invalid length. [ 202.783509][T18449] bridge0: port 1(gretap0) entered disabled state [ 202.834335][T18449] bridge3: left promiscuous mode [ 202.839345][T18449] bridge3: left allmulticast mode [ 202.884955][T18450] bridge0: port 1(gretap0) entered blocking state [ 202.891485][T18450] bridge0: port 1(gretap0) entered forwarding state [ 202.901804][T18450] 8021q: adding VLAN 0 to HW filter on device .` [ 202.910212][T18450] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.923030][T18450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.946478][T15935] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.966321][T15935] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.976913][T15935] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.985902][T15935] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.596009][T18459] loop9: detected capacity change from 0 to 7 [ 203.612336][T18459] Buffer I/O error on dev loop9, logical block 0, async page read [ 203.620304][T18459] Buffer I/O error on dev loop9, logical block 0, async page read [ 203.628105][T18459] loop9: unable to read partition table [ 203.634040][T18459] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 203.634040][T18459] ) failed (rc=-5) [ 204.189001][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.195306][ T5860] Bluetooth: hci0: command 0x1003 tx timeout [ 204.319790][T18480] __nla_validate_parse: 1 callbacks suppressed [ 204.319807][T18480] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6249'. [ 204.334982][T18480] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.513561][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6259'. [ 204.522573][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6259'. [ 204.547286][T18504] netlink: 'syz.3.6260': attribute type 13 has an invalid length. [ 204.566703][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6259'. [ 204.566735][ T2155] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.575620][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6259'. [ 204.609779][T18504] gretap0: refused to change device tx_queue_len [ 204.629838][T18504] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 204.659045][ T2155] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.667766][ T2155] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.699177][ T2155] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.768094][T18515] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6265'. [ 205.334551][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6278'. [ 205.502861][T18605] hub 2-0:1.0: USB hub found [ 205.517725][T18605] hub 2-0:1.0: 8 ports detected [ 205.582640][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 205.582654][ T29] audit: type=1326 audit(1768380377.708:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e281f749 code=0x7ffc0000 [ 205.655267][ T29] audit: type=1326 audit(1768380377.738:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f25e281f749 code=0x7ffc0000 [ 205.678995][ T29] audit: type=1326 audit(1768380377.738:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e281f749 code=0x7ffc0000 [ 205.702613][ T29] audit: type=1326 audit(1768380377.738:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e281f749 code=0x7ffc0000 [ 205.727437][ T29] audit: type=1326 audit(1768380377.738:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f25e281f749 code=0x7ffc0000 [ 205.742840][T18620] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 205.751034][ T29] audit: type=1326 audit(1768380377.748:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e281f749 code=0x7ffc0000 [ 205.783030][ T29] audit: type=1326 audit(1768380377.758:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18617 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25e2852005 code=0x7ffc0000 [ 205.806723][ T29] audit: type=1326 audit(1768380377.758:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e281f749 code=0x7ffc0000 [ 205.830274][ T29] audit: type=1326 audit(1768380377.758:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f25e281f749 code=0x7ffc0000 [ 205.853758][ T29] audit: type=1326 audit(1768380377.758:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18612 comm="syz.5.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25e281f749 code=0x7ffc0000 [ 205.967653][T18628] can0: slcan on ttyS3. [ 206.019226][T18627] can0 (unregistered): slcan off ttyS3. [ 206.069305][T18632] netlink: 'syz.2.6295': attribute type 1 has an invalid length. [ 206.576973][T18684] xt_CT: No such helper "pptp" [ 206.612951][T18689] netlink: 'syz.5.6320': attribute type 27 has an invalid length. [ 206.653161][T18689] veth2: left promiscuous mode [ 206.657952][T18689] veth2: left allmulticast mode [ 206.714775][T18692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.730611][T18692] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.761896][T18692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.777445][T12026] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.787895][T12026] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.807059][T12026] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.825718][T12026] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.901826][T18701] netlink: 'syz.3.6325': attribute type 29 has an invalid length. [ 206.912042][T18701] netlink: 'syz.3.6325': attribute type 29 has an invalid length. [ 206.938285][T18701] netlink: 524 bytes leftover after parsing attributes in process `syz.3.6325'. [ 207.005668][T18704] bridge0: entered promiscuous mode [ 207.022575][T18704] bridge0: port 2(macsec1) entered blocking state [ 207.029173][T18704] bridge0: port 2(macsec1) entered disabled state [ 207.045565][T18704] macsec1: entered allmulticast mode [ 207.050938][T18704] bridge0: entered allmulticast mode [ 207.059543][T18704] macsec1: left allmulticast mode [ 207.064608][T18704] bridge0: left allmulticast mode [ 207.084457][T18704] bridge0: left promiscuous mode [ 207.318362][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6331'. [ 207.337683][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6331'. [ 207.505786][ T5294] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 207.515681][ T5294] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.734516][T18767] netlink: 'syz.5.6355': attribute type 3 has an invalid length. [ 207.757059][ T2367] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.491310][T18820] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 209.458640][T18874] netlink: 'syz.2.6401': attribute type 16 has an invalid length. [ 209.466583][T18874] __nla_validate_parse: 1 callbacks suppressed [ 209.466599][T18874] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6401'. [ 209.720738][T18896] sctp: [Deprecated]: syz.5.6412 (pid 18896) Use of int in maxseg socket option. [ 209.720738][T18896] Use struct sctp_assoc_value instead [ 209.788986][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 209.795158][ T5860] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.061483][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6417'. [ 210.192554][T18914] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 210.362056][T18916] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6419'. [ 210.643263][T18927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.909594][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 210.909607][ T29] audit: type=1326 audit(1768380639.039:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 210.964546][ T29] audit: type=1326 audit(1768380639.069:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 210.988218][ T29] audit: type=1326 audit(1768380639.069:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 211.011869][ T29] audit: type=1326 audit(1768380639.069:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 211.035397][ T29] audit: type=1326 audit(1768380639.069:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 211.059123][ T29] audit: type=1326 audit(1768380639.069:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 211.082650][ T29] audit: type=1326 audit(1768380639.069:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 211.106138][ T29] audit: type=1326 audit(1768380639.069:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 211.129675][ T29] audit: type=1326 audit(1768380639.069:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 211.153170][ T29] audit: type=1326 audit(1768380639.069:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18952 comm="syz.3.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 211.210490][T18960] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6438'. [ 211.219576][T18960] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6438'. [ 211.449254][T18983] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 211.622923][T19005] loop5: detected capacity change from 0 to 512 [ 211.630025][T19005] EXT4-fs: Ignoring removed oldalloc option [ 211.636078][T19005] ext4: Unknown parameter 'nouser_xattr' [ 216.717675][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 216.717691][ T29] audit: type=1400 audit(1768380644.839:7888): avc: denied { mounton } for pid=19007 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 216.746298][T15935] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.780216][T15935] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.837889][T19007] chnl_net:caif_netlink_parms(): no params data found [ 216.854348][T15935] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.884750][T19007] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.891865][T19007] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.899166][T19007] bridge_slave_0: entered allmulticast mode [ 216.905478][T19007] bridge_slave_0: entered promiscuous mode [ 216.912613][T15935] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.923934][T19007] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.931051][T19007] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.938387][T19007] bridge_slave_1: entered allmulticast mode [ 216.944831][T19007] bridge_slave_1: entered promiscuous mode [ 216.960886][T19007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.971371][T19007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.989881][T19007] team0: Port device team_slave_0 added [ 216.998356][T19007] team0: Port device team_slave_1 added [ 217.015243][T19007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.022319][T19007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.048279][T19007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.061832][T19007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.068780][T19007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.094797][T19007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.119997][T15935] gretap0: left allmulticast mode [ 217.125069][T15935] gretap0: left promiscuous mode [ 217.130388][T15935] bridge0: port 3(gretap0) entered disabled state [ 217.137281][T15935] bridge_slave_1: left allmulticast mode [ 217.142918][T15935] bridge_slave_1: left promiscuous mode [ 217.148520][T15935] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.156050][T15935] bridge_slave_0: left allmulticast mode [ 217.161693][T15935] bridge_slave_0: left promiscuous mode [ 217.167298][T15935] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.196359][ T29] audit: type=1400 audit(1768380645.319:7889): avc: denied { connect } for pid=19023 comm="syz.3.6464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.241071][T15935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.250914][T19031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6465'. [ 217.260426][ T29] audit: type=1326 audit(1768380645.389:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 217.287512][ T29] audit: type=1326 audit(1768380645.409:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 217.311061][ T29] audit: type=1326 audit(1768380645.409:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 217.334827][ T29] audit: type=1326 audit(1768380645.409:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 217.358489][ T29] audit: type=1326 audit(1768380645.409:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 217.382060][ T29] audit: type=1326 audit(1768380645.409:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 217.405554][ T29] audit: type=1326 audit(1768380645.409:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 217.429232][ T29] audit: type=1326 audit(1768380645.409:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz.3.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 217.453140][T15935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.462181][T15935] bond0 (unregistering): Released all slaves [ 217.472960][T19007] hsr_slave_0: entered promiscuous mode [ 217.479108][T19007] hsr_slave_1: entered promiscuous mode [ 217.485056][T19007] debugfs: 'hsr0' already exists in 'hsr' [ 217.490819][T19007] Cannot create hsr debugfs directory [ 217.496398][T19026] netlink: 'syz.2.6463': attribute type 12 has an invalid length. [ 217.526607][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6470'. [ 217.538774][T15935] hsr_slave_0: left promiscuous mode [ 217.544444][T15935] hsr_slave_1: left promiscuous mode [ 217.551346][T15935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.559153][T15935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.646123][T15935] team0 (unregistering): Port device team_slave_1 removed [ 217.686715][T15935] team0 (unregistering): Port device team_slave_0 removed [ 217.750148][T19045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.757555][T19045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.767551][T19045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.774974][T19045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.120060][T19007] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 218.147663][T19007] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 218.184460][T19007] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 218.211838][T19007] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 218.250198][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6484'. [ 218.266675][T19007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.278501][T19007] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.293977][T15935] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.301135][T15935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.334416][T15935] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.341516][T15935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.365973][T19007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.376416][T19007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.530290][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6487'. [ 218.614984][T19007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.647167][T19102] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.740905][T19115] netlink: 'syz.2.6494': attribute type 33 has an invalid length. [ 218.748749][T19115] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6494'. [ 218.800075][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6494'. [ 218.896554][T19007] veth0_vlan: entered promiscuous mode [ 218.926550][T19007] veth1_vlan: entered promiscuous mode [ 218.956481][T19007] veth0_macvtap: entered promiscuous mode [ 218.970613][T19131] gre0: entered promiscuous mode [ 218.975597][T19131] gre0: entered allmulticast mode [ 219.002861][T19007] veth1_macvtap: entered promiscuous mode [ 219.032645][T19007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.061943][T19007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.103146][T19142] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6504'. [ 219.113154][ T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.154354][ T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.164350][T19142] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6504'. [ 219.176616][ T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.215883][ T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.245974][T19150] loop8: detected capacity change from 0 to 4096 [ 219.265076][T19150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.526467][T19169] netlink: 'syz.5.6514': attribute type 10 has an invalid length. [ 219.534381][T19169] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6514'. [ 219.563329][T19169] dummy0: entered promiscuous mode [ 219.586445][T19169] bridge0: port 3(dummy0) entered blocking state [ 219.592932][T19169] bridge0: port 3(dummy0) entered disabled state [ 219.627424][T19169] dummy0: entered allmulticast mode [ 219.643619][T19169] bridge0: port 3(dummy0) entered blocking state [ 219.650049][T19169] bridge0: port 3(dummy0) entered forwarding state [ 219.912992][T19193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6525'. [ 220.083468][ T52] kworker/u8:3 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 220.097550][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.097576][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.097589][ T52] Workqueue: loop8 loop_rootcg_workfn [ 220.097618][ T52] Call Trace: [ 220.097625][ T52] [ 220.097634][ T52] __dump_stack+0x1d/0x30 [ 220.097679][ T52] dump_stack_lvl+0x95/0xd0 [ 220.097698][ T52] dump_stack+0x15/0x1b [ 220.097719][ T52] dump_header+0x81/0x240 [ 220.097772][ T52] oom_kill_process+0x295/0x350 [ 220.097800][ T52] out_of_memory+0x97b/0xb80 [ 220.097821][ T52] try_charge_memcg+0x610/0xa10 [ 220.097864][ T52] charge_memcg+0x51/0xc0 [ 220.097958][ T52] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 220.098017][ T52] __read_swap_cache_async+0x17b/0x2d0 [ 220.098053][ T52] swap_cluster_readahead+0x262/0x3c0 [ 220.098113][ T52] shmem_swapin_folio+0x8b4/0x11e0 [ 220.098142][ T52] ? xas_load+0x413/0x430 [ 220.098179][ T52] ? filemap_get_entry+0x34b/0x390 [ 220.098227][ T52] shmem_get_folio_gfp+0x26c/0xd50 [ 220.098251][ T52] ? __memcg_slab_post_alloc_hook+0x7e/0x530 [ 220.098291][ T52] shmem_write_begin+0xfc/0x1f0 [ 220.098378][ T52] generic_perform_write+0x184/0x490 [ 220.098408][ T52] ? __mark_inode_dirty+0x1af/0x750 [ 220.098493][ T52] shmem_file_write_iter+0xc5/0xf0 [ 220.098599][ T52] lo_rw_aio+0x673/0x720 [ 220.098626][ T52] loop_process_work+0x56d/0xaa0 [ 220.098652][ T52] ? queue_delayed_work_on+0xde/0x140 [ 220.098684][ T52] ? __rcu_read_unlock+0x4f/0x70 [ 220.098836][ T52] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 220.098861][ T52] ? __list_add_valid_or_report+0x38/0xe0 [ 220.098893][ T52] ? perf_cgroup_switch+0x10c/0x480 [ 220.098926][ T52] ? __set_next_task_fair+0x5b/0x150 [ 220.098959][ T52] loop_rootcg_workfn+0x22/0x30 [ 220.098981][ T52] process_scheduled_works+0x4ce/0x9d0 [ 220.099028][ T52] worker_thread+0x582/0x770 [ 220.099053][ T52] kthread+0x489/0x510 [ 220.099083][ T52] ? __pfx_worker_thread+0x10/0x10 [ 220.099111][ T52] ? __pfx_kthread+0x10/0x10 [ 220.099254][ T52] ret_from_fork+0x149/0x290 [ 220.099278][ T52] ? __pfx_kthread+0x10/0x10 [ 220.099310][ T52] ret_from_fork_asm+0x1a/0x30 [ 220.099347][ T52] [ 220.316612][ T52] memory: usage 307200kB, limit 307200kB, failcnt 201 [ 220.323532][ T52] memory+swap: usage 309412kB, limit 9007199254740988kB, failcnt 0 [ 220.331565][ T52] kmem: usage 305868kB, limit 9007199254740988kB, failcnt 0 [ 220.338852][ T52] Memory cgroup stats for /syz8: [ 220.346893][ T52] cache 1359872 [ 220.355319][ T52] rss 0 [ 220.358264][ T52] shmem 0 [ 220.361318][ T52] mapped_file 0 [ 220.364777][ T52] dirty 4096 [ 220.367947][ T52] writeback 1339392 [ 220.371761][ T52] workingset_refault_anon 86 [ 220.376347][ T52] workingset_refault_file 4 [ 220.380847][ T52] swap 2265088 [ 220.384201][ T52] swapcached 4096 [ 220.387811][ T52] pgpgin 1395 [ 220.391087][ T52] pgpgout 1062 [ 220.394437][ T52] pgfault 1043 [ 220.397833][ T52] pgmajfault 25 [ 220.401298][ T52] inactive_anon 4096 [ 220.405177][ T52] active_anon 0 [ 220.408655][ T52] inactive_file 1351680 [ 220.412912][ T52] active_file 8192 [ 220.416666][ T52] unevictable 0 [ 220.420127][ T52] hierarchical_memory_limit 314572800 [ 220.425556][ T52] hierarchical_memsw_limit 9223372036854771712 [ 220.431717][ T52] total_cache 1359872 [ 220.435685][ T52] total_rss 0 [ 220.438973][ T52] total_shmem 0 [ 220.442470][ T52] total_mapped_file 0 [ 220.446566][ T52] total_dirty 4096 [ 220.450302][ T52] total_writeback 1339392 [ 220.454678][ T52] total_workingset_refault_anon 86 [ 220.459788][ T52] total_workingset_refault_file 4 [ 220.464793][ T52] total_swap 2265088 [ 220.468666][ T52] total_swapcached 4096 [ 220.472821][ T52] total_pgpgin 1395 [ 220.476619][ T52] total_pgpgout 1062 [ 220.480523][ T52] total_pgfault 1043 [ 220.484480][ T52] total_pgmajfault 25 [ 220.488512][ T52] total_inactive_anon 4096 [ 220.492956][ T52] total_active_anon 0 [ 220.496913][ T52] total_inactive_file 1351680 [ 220.501576][ T52] total_active_file 8192 [ 220.505829][ T52] total_unevictable 0 [ 220.509837][ T52] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.6460,pid=19149,uid=0 [ 220.524536][ T52] Memory cgroup out of memory: Killed process 19149 (syz.8.6460) total-vm:95944kB, anon-rss:1256kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 220.788852][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.078022][T19251] loop5: detected capacity change from 0 to 1024 [ 221.085229][T19251] EXT4-fs: Ignoring removed orlov option [ 221.116583][T19251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.139650][T19260] netlink: 'syz.2.6556': attribute type 7 has an invalid length. [ 221.187561][ T7169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.210172][T19263] ip6gre0: Caught tx_queue_len zero misconfig [ 221.223831][T19263] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 221.304746][T19271] loop8: detected capacity change from 0 to 512 [ 221.323042][T19271] EXT4-fs: Ignoring removed oldalloc option [ 221.335917][T19271] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.351798][T19271] EXT4-fs (loop8): too many log groups per flexible block group [ 221.363954][T19271] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 221.377781][T19271] EXT4-fs (loop8): mount failed [ 221.581567][T19303] netlink: 'syz.6.6575': attribute type 13 has an invalid length. [ 221.625929][T19303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.651599][T19307] bridge0: entered promiscuous mode [ 221.670065][T19307] bridge0: port 2(macvtap1) entered blocking state [ 221.676642][T19307] bridge0: port 2(macvtap1) entered disabled state [ 221.703494][T19307] macvtap1: entered allmulticast mode [ 221.709062][T19307] bridge0: entered allmulticast mode [ 221.716326][T19307] macvtap1: left allmulticast mode [ 221.721538][T19307] bridge0: left allmulticast mode [ 221.727692][T19307] bridge0: left promiscuous mode [ 221.739125][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 221.739165][ T29] audit: type=1400 audit(1768380649.859:8081): avc: denied { create } for pid=19318 comm="syz.6.6582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.786566][ T29] audit: type=1400 audit(1768380649.869:8082): avc: denied { connect } for pid=19318 comm="syz.6.6582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.806863][ T29] audit: type=1400 audit(1768380649.889:8083): avc: denied { setopt } for pid=19315 comm="syz.8.6581" laddr=fe80::a lport=39383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.828768][ T29] audit: type=1400 audit(1768380649.889:8084): avc: denied { shutdown } for pid=19315 comm="syz.8.6581" laddr=fe80::a lport=39383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.850847][ T29] audit: type=1400 audit(1768380649.889:8085): avc: denied { read } for pid=19315 comm="syz.8.6581" laddr=fe80::a lport=39383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.883018][ T29] audit: type=1326 audit(1768380650.009:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.6.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 221.907087][ T29] audit: type=1326 audit(1768380650.009:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.6.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 221.962042][ T29] audit: type=1326 audit(1768380650.059:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.6.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 221.985583][ T29] audit: type=1326 audit(1768380650.059:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.6.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 222.009569][ T29] audit: type=1326 audit(1768380650.059:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.6.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 222.119745][T19342] usb usb8: usbfs: process 19342 (syz.8.6592) did not claim interface 0 before use [ 222.234725][T19361] netlink: 'syz.5.6601': attribute type 22 has an invalid length. [ 222.243029][T19361] netlink: 'syz.5.6601': attribute type 22 has an invalid length. [ 222.266867][T19367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.276120][T19367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.336401][T19371] delete_channel: no stack [ 222.387507][T19387] xt_policy: neither incoming nor outgoing policy selected [ 222.460627][T19389] SELinux: ebitmap: empty map [ 222.466983][T19389] SELinux: failed to load policy [ 222.472514][T19392] loop8: detected capacity change from 0 to 4096 [ 222.479796][T19392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.488198][T19392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.517694][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.676358][T19415] loop8: detected capacity change from 0 to 512 [ 222.703673][T19415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.722014][T19415] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.761928][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.041021][ T3485] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 223.048728][ T3485] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 223.089092][ T3485] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 223.128154][ T3485] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 223.128229][T19473] SELinux: failed to load policy [ 223.300811][T19491] syz.3.6658: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 223.315480][T19491] CPU: 0 UID: 0 PID: 19491 Comm: syz.3.6658 Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.315508][T19491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.315520][T19491] Call Trace: [ 223.315528][T19491] [ 223.315536][T19491] __dump_stack+0x1d/0x30 [ 223.315589][T19491] dump_stack_lvl+0x95/0xd0 [ 223.315610][T19491] dump_stack+0x15/0x1b [ 223.315655][T19491] warn_alloc+0x12b/0x1a0 [ 223.315683][T19491] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 223.315716][T19491] __vmalloc_node_range_noprof+0xa0/0x1310 [ 223.315750][T19491] ? common_lsm_audit+0x1ca/0x230 [ 223.315779][T19491] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 223.315818][T19491] ? slow_avc_audit+0x104/0x140 [ 223.315856][T19491] ? should_fail_ex+0x30/0x280 [ 223.315877][T19491] ? should_failslab+0x8c/0xb0 [ 223.315902][T19491] vmalloc_user_noprof+0x7d/0xb0 [ 223.315930][T19491] ? xskq_create+0x80/0xe0 [ 223.315949][T19491] xskq_create+0x80/0xe0 [ 223.316046][T19491] xsk_init_queue+0x95/0xf0 [ 223.316091][T19491] xsk_setsockopt+0x3f5/0x640 [ 223.316124][T19491] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.316193][T19491] __sys_setsockopt+0x184/0x200 [ 223.316223][T19491] __x64_sys_setsockopt+0x64/0x80 [ 223.316254][T19491] x64_sys_call+0x21d5/0x3000 [ 223.316360][T19491] do_syscall_64+0xca/0x2b0 [ 223.316397][T19491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.316422][T19491] RIP: 0033:0x7f00c5d9f749 [ 223.316436][T19491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.316473][T19491] RSP: 002b:00007f00c4807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.316490][T19491] RAX: ffffffffffffffda RBX: 00007f00c5ff5fa0 RCX: 00007f00c5d9f749 [ 223.316502][T19491] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 223.316516][T19491] RBP: 00007f00c5e23f91 R08: 0000000000000004 R09: 0000000000000000 [ 223.316530][T19491] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.316543][T19491] R13: 00007f00c5ff6038 R14: 00007f00c5ff5fa0 R15: 00007ffe3969ddf8 [ 223.316562][T19491] [ 223.316568][T19491] Mem-Info: [ 223.529727][T19491] active_anon:45788 inactive_anon:6091 isolated_anon:0 [ 223.529727][T19491] active_file:21064 inactive_file:2462 isolated_file:0 [ 223.529727][T19491] unevictable:0 dirty:175 writeback:0 [ 223.529727][T19491] slab_reclaimable:3546 slab_unreclaimable:84597 [ 223.529727][T19491] mapped:30685 shmem:27800 pagetables:1700 [ 223.529727][T19491] sec_pagetables:0 bounce:0 [ 223.529727][T19491] kernel_misc_reclaimable:0 [ 223.529727][T19491] free:1761717 free_pcp:13381 free_cma:0 [ 223.575306][T19491] Node 0 active_anon:184080kB inactive_anon:24364kB active_file:84256kB inactive_file:9848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122740kB dirty:700kB writeback:0kB shmem:112128kB kernel_stack:5312kB pagetables:6800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.603071][T19491] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.632882][T19491] lowmem_reserve[]: 0 2880 7859 7859 [ 223.638293][T19491] Node 0 DMA32 free:2945992kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 223.669768][T19491] lowmem_reserve[]: 0 0 4978 4978 [ 223.674830][T19491] Node 0 Normal free:4083544kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:186052kB inactive_anon:24364kB active_file:84256kB inactive_file:9848kB unevictable:0kB writepending:700kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:49272kB local_pcp:38188kB free_cma:0kB [ 223.708302][T19491] lowmem_reserve[]: 0 0 0 0 [ 223.713153][T19491] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 223.726066][T19491] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945992kB [ 223.742292][T19491] Node 0 Normal: 1803*4kB (UM) 1501*8kB (UE) 870*16kB (UE) 798*32kB (UME) 164*64kB (UME) 390*128kB (UME) 332*256kB (UME) 249*512kB (UME) 172*1024kB (UM) 107*2048kB (UM) 819*4096kB (UM) = 4081460kB [ 223.762066][T19491] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 223.771403][T19491] 52534 total pagecache pages [ 223.776130][T19491] 87 pages in swap cache [ 223.780430][T19491] Free swap = 79516kB [ 223.784493][T19491] Total swap = 124996kB [ 223.788711][T19491] 2097051 pages RAM [ 223.792617][T19491] 0 pages HighMem/MovableOnly [ 223.797286][T19491] 81271 pages reserved [ 223.835866][T19497] loop8: detected capacity change from 0 to 4096 [ 223.861468][T19497] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.965685][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.344021][T19521] __nla_validate_parse: 4 callbacks suppressed [ 224.344109][T19521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6671'. [ 224.359419][T19521] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6671'. [ 224.368400][T19521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6671'. [ 224.439218][T19521] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6671'. [ 224.916882][T19548] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 225.228049][T19536] Set syz1 is full, maxelem 65536 reached [ 225.493260][T19560] xt_hashlimit: max too large, truncated to 1048576 [ 225.528262][T19560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.621844][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6700'. [ 226.652238][T19589] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 226.735645][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6709'. [ 226.746476][T19605] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 226.782575][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 226.782590][ T29] audit: type=1400 audit(1768380654.909:8269): avc: denied { setopt } for pid=19609 comm="syz.2.6711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.852535][T19613] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6712'. [ 226.870808][ T29] audit: type=1400 audit(1768380654.989:8270): avc: denied { write } for pid=19614 comm="syz.2.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 227.051454][T19623] serio: Serial port ptm0 [ 227.141537][ T29] audit: type=1326 audit(1768380655.269:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19632 comm="syz.8.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95695f749 code=0x7ffc0000 [ 227.166448][ T29] audit: type=1326 audit(1768380655.269:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19632 comm="syz.8.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95695f749 code=0x7ffc0000 [ 227.190078][ T29] audit: type=1326 audit(1768380655.269:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19632 comm="syz.8.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95695f749 code=0x7ffc0000 [ 227.213802][ T29] audit: type=1326 audit(1768380655.269:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19632 comm="syz.8.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95695f749 code=0x7ffc0000 [ 227.237459][ T29] audit: type=1326 audit(1768380655.269:8275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19632 comm="syz.8.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95695f749 code=0x7ffc0000 [ 227.261054][ T29] audit: type=1326 audit(1768380655.269:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19632 comm="syz.8.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95695f749 code=0x7ffc0000 [ 227.284618][ T29] audit: type=1326 audit(1768380655.269:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19632 comm="syz.8.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95695f749 code=0x7ffc0000 [ 227.308182][ T29] audit: type=1326 audit(1768380655.269:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19632 comm="syz.8.6720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95695f749 code=0x7ffc0000 [ 227.350356][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6723'. [ 227.458538][T19653] program syz.8.6729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.501980][T19661] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6733'. [ 227.514176][T19661] hsr_slave_0: left promiscuous mode [ 227.521345][T19661] hsr_slave_1: left promiscuous mode [ 227.579003][T19673] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 227.999210][T19745] syzkaller0: entered allmulticast mode [ 228.017312][T19745] syzkaller0 (unregistering): left allmulticast mode [ 228.074295][T19753] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 228.082029][T19753] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 228.100410][T19755] 9p: Could not find request transport: f0xffffffffffffffff [ 228.220347][T19770] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6780'. [ 228.325950][T19781] SELinux: failed to load policy [ 228.454749][T19797] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19797 comm=syz.5.6793 [ 229.101193][T19882] lo: entered promiscuous mode [ 229.106129][T19882] lo: entered allmulticast mode [ 229.136296][T19882] tunl0: entered promiscuous mode [ 229.141394][T19882] tunl0: entered allmulticast mode [ 229.156296][T19882] gre0: entered promiscuous mode [ 229.161365][T19882] gre0: entered allmulticast mode [ 229.168661][T19882] gretap0: entered allmulticast mode [ 229.177147][T19882] erspan0: entered promiscuous mode [ 229.182416][T19882] erspan0: entered allmulticast mode [ 229.190311][T19882] ip_vti0: entered promiscuous mode [ 229.195545][T19882] ip_vti0: entered allmulticast mode [ 229.203011][T19882] ip6_vti0: entered promiscuous mode [ 229.208792][T19882] ip6_vti0: entered allmulticast mode [ 229.217610][T19882] sit0: entered promiscuous mode [ 229.222702][T19882] sit0: entered allmulticast mode [ 229.252037][T19882] ip6tnl0: entered promiscuous mode [ 229.257280][T19882] ip6tnl0: entered allmulticast mode [ 229.280174][T19882] ip6gre0: entered promiscuous mode [ 229.285770][T19882] ip6gre0: entered allmulticast mode [ 229.305504][T19882] syz_tun: entered promiscuous mode [ 229.310892][T19882] syz_tun: entered allmulticast mode [ 229.322623][T19882] ip6gretap0: entered promiscuous mode [ 229.328138][T19882] ip6gretap0: entered allmulticast mode [ 229.351400][T19882] bridge0: entered promiscuous mode [ 229.356646][T19882] bridge0: entered allmulticast mode [ 229.392872][T19882] vcan0: entered promiscuous mode [ 229.397941][T19882] vcan0: entered allmulticast mode [ 229.421246][T19882] .`: entered promiscuous mode [ 229.426070][T19882] bond_slave_0: entered promiscuous mode [ 229.432023][T19882] bond_slave_1: entered promiscuous mode [ 229.437902][T19882] .`: entered allmulticast mode [ 229.442828][T19882] bond_slave_0: entered allmulticast mode [ 229.448642][T19882] bond_slave_1: entered allmulticast mode [ 229.455832][T19882] team0: entered promiscuous mode [ 229.460934][T19882] team_slave_0: entered promiscuous mode [ 229.466735][T19882] geneve1: entered promiscuous mode [ 229.472105][T19882] team0: entered allmulticast mode [ 229.477639][T19882] team_slave_0: entered allmulticast mode [ 229.483466][T19882] geneve1: entered allmulticast mode [ 229.506764][T19882] nlmon0: entered promiscuous mode [ 229.512206][T19882] nlmon0: entered allmulticast mode [ 229.522505][T19882] caif0: entered promiscuous mode [ 229.527596][T19882] caif0: entered allmulticast mode [ 229.533121][T19882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.871518][T19983] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.943196][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6824'. [ 230.083769][T20024] program syz.3.6836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.214677][T20039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6844'. [ 230.596699][T20073] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6857'. [ 230.714020][T20088] loop8: detected capacity change from 0 to 512 [ 230.732581][T20088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.747837][T20088] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.763082][T20088] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.6862: corrupted inode contents [ 230.775210][T20088] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.6862: mark_inode_dirty error [ 230.787171][T20088] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.6862: corrupted inode contents [ 230.799390][T20088] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.6862: mark_inode_dirty error [ 230.830928][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.904130][T20112] lo speed is unknown, defaulting to 1000 [ 230.920667][T20112] lo speed is unknown, defaulting to 1000 [ 230.930339][T20112] lo speed is unknown, defaulting to 1000 [ 230.988397][T20112] infiniband syz1: set active [ 230.993289][T20112] infiniband syz1: added lo [ 230.997882][ T3485] lo speed is unknown, defaulting to 1000 [ 231.018792][T20112] RDS/IB: syz1: added [ 231.023075][T20112] smc: adding ib device syz1 with port count 1 [ 231.033071][T20112] smc: ib device syz1 port 1 has no pnetid [ 231.039358][ T3485] lo speed is unknown, defaulting to 1000 [ 231.045445][T20112] lo speed is unknown, defaulting to 1000 [ 231.080154][T20112] lo speed is unknown, defaulting to 1000 [ 231.104353][T20127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20127 comm=syz.3.6873 [ 231.115050][T20112] lo speed is unknown, defaulting to 1000 [ 231.152144][T20112] lo speed is unknown, defaulting to 1000 [ 231.185823][T20112] lo speed is unknown, defaulting to 1000 [ 231.320916][T20139] lo: entered promiscuous mode [ 231.325828][T20139] lo: entered allmulticast mode [ 231.331920][T20139] tunl0: entered promiscuous mode [ 231.336953][T20139] tunl0: entered allmulticast mode [ 231.343191][T20139] gre0: entered promiscuous mode [ 231.348158][T20139] gre0: entered allmulticast mode [ 231.356144][T20139] gretap0: entered promiscuous mode [ 231.361395][T20139] gretap0: entered allmulticast mode [ 231.368309][T20139] erspan0: entered promiscuous mode [ 231.373661][T20139] erspan0: entered allmulticast mode [ 231.380385][T20139] ip_vti0: entered promiscuous mode [ 231.385649][T20139] ip_vti0: entered allmulticast mode [ 231.392320][T20139] ip6_vti0: entered promiscuous mode [ 231.397632][T20139] ip6_vti0: entered allmulticast mode [ 231.414265][T20139] sit0: entered promiscuous mode [ 231.419281][T20139] sit0: entered allmulticast mode [ 231.427223][T20139] ip6tnl0: entered promiscuous mode [ 231.432504][T20139] ip6tnl0: entered allmulticast mode [ 231.446545][T20139] ip6gre0: entered promiscuous mode [ 231.451918][T20139] ip6gre0: entered allmulticast mode [ 231.463556][T20139] syz_tun: entered promiscuous mode [ 231.468802][T20139] syz_tun: entered allmulticast mode [ 231.475628][T20139] ip6gretap0: entered promiscuous mode [ 231.481141][T20139] ip6gretap0: entered allmulticast mode [ 231.487860][T20139] bridge0: entered promiscuous mode [ 231.493205][T20139] bridge0: entered allmulticast mode [ 231.499846][T20139] vcan0: entered promiscuous mode [ 231.504896][T20139] vcan0: entered allmulticast mode [ 231.510902][T20139] bond0: entered promiscuous mode [ 231.515934][T20139] bond_slave_0: entered promiscuous mode [ 231.521826][T20139] bond_slave_1: entered promiscuous mode [ 231.527515][T20139] bond0: entered allmulticast mode [ 231.532787][T20139] bond_slave_0: entered allmulticast mode [ 231.538486][T20139] bond_slave_1: entered allmulticast mode [ 231.546071][T20139] team0: entered promiscuous mode [ 231.551179][T20139] team_slave_0: entered promiscuous mode [ 231.556920][T20139] team_slave_1: entered promiscuous mode [ 231.562656][T20139] team0: entered allmulticast mode [ 231.567784][T20139] team_slave_0: entered allmulticast mode [ 231.573533][T20139] team_slave_1: entered allmulticast mode [ 231.580969][T20139] dummy0: entered promiscuous mode [ 231.586072][T20139] dummy0: entered allmulticast mode [ 231.592226][T20139] nlmon0: entered promiscuous mode [ 231.597449][T20139] nlmon0: entered allmulticast mode [ 231.603815][T20139] caif0: entered promiscuous mode [ 231.608826][T20139] caif0: entered allmulticast mode [ 231.614081][T20139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.629694][ T3485] lo speed is unknown, defaulting to 1000 [ 231.756124][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6890'. [ 231.790642][T20170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.804186][T20170] bond0: (slave batadv1): Opening slave failed [ 231.813165][T20178] ALSA: seq fatal error: cannot create timer (-19) [ 231.856796][T20184] bridge0: port 3(ipvlan2) entered blocking state [ 231.863408][T20184] bridge0: port 3(ipvlan2) entered disabled state [ 231.871431][T20184] ipvlan2: entered allmulticast mode [ 231.877206][T20184] ipvlan2: left allmulticast mode [ 231.918786][T20190] lo: entered promiscuous mode [ 231.923678][T20190] lo: entered allmulticast mode [ 231.929159][T20190] tunl0: entered promiscuous mode [ 231.934315][T20190] tunl0: entered allmulticast mode [ 231.940688][T20190] gre0: entered promiscuous mode [ 231.945761][T20190] gre0: entered allmulticast mode [ 231.961670][T20190] gretap0: entered promiscuous mode [ 231.966911][T20190] gretap0: entered allmulticast mode [ 231.974693][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 231.974707][ T29] audit: type=1326 audit(1768380660.099:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 232.008225][T20190] erspan0: entered promiscuous mode [ 232.013491][T20190] erspan0: entered allmulticast mode [ 232.025718][T20190] ip_vti0: entered promiscuous mode [ 232.031168][T20190] ip_vti0: entered allmulticast mode [ 232.044561][ T29] audit: type=1326 audit(1768380660.099:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 232.068179][ T29] audit: type=1326 audit(1768380660.099:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 232.091684][ T29] audit: type=1326 audit(1768380660.099:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 232.111704][T20209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.115081][ T29] audit: type=1326 audit(1768380660.099:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20199 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a7c012005 code=0x7ffc0000 [ 232.124296][T20190] ip6_vti0: entered promiscuous mode [ 232.146843][ T29] audit: type=1326 audit(1768380660.099:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 232.146875][ T29] audit: type=1326 audit(1768380660.099:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 232.152262][T20190] ip6_vti0: entered allmulticast mode [ 232.175705][ T29] audit: type=1326 audit(1768380660.099:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 232.227980][ T29] audit: type=1326 audit(1768380660.099:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 232.228865][T20190] sit0: entered promiscuous mode [ 232.251689][ T29] audit: type=1326 audit(1768380660.099:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.6.6901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7bfdf749 code=0x7ffc0000 [ 232.256625][T20190] sit0: entered allmulticast mode [ 232.286000][T20209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.294667][T20190] ip6tnl0: entered promiscuous mode [ 232.300008][T20190] ip6tnl0: entered allmulticast mode [ 232.306292][T20190] ip6gre0: entered promiscuous mode [ 232.311593][T20190] ip6gre0: entered allmulticast mode [ 232.317857][T20190] syz_tun: entered promiscuous mode [ 232.323399][T20190] syz_tun: entered allmulticast mode [ 232.330393][T20190] bridge0: entered promiscuous mode [ 232.335703][T20190] bridge0: entered allmulticast mode [ 232.342009][T20190] bond0: entered promiscuous mode [ 232.347059][T20190] bond_slave_0: entered promiscuous mode [ 232.352886][T20190] bond_slave_1: entered promiscuous mode [ 232.358634][T20190] bond0: entered allmulticast mode [ 232.363784][T20190] bond_slave_0: entered allmulticast mode [ 232.369650][T20190] bond_slave_1: entered allmulticast mode [ 232.380603][T20190] team0: entered promiscuous mode [ 232.385684][T20190] team_slave_0: entered promiscuous mode [ 232.391727][T20190] team_slave_1: entered promiscuous mode [ 232.397438][T20190] geneve1: entered promiscuous mode [ 232.402850][T20190] team0: entered allmulticast mode [ 232.407969][T20190] team_slave_0: entered allmulticast mode [ 232.413772][T20190] team_slave_1: entered allmulticast mode [ 232.419670][T20190] geneve1: entered allmulticast mode [ 232.430364][T20190] nlmon0: entered promiscuous mode [ 232.435530][T20190] nlmon0: entered allmulticast mode [ 232.455731][T20190] caif0: entered promiscuous mode [ 232.460824][T20190] caif0: entered allmulticast mode [ 232.465990][T20190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.763115][T20253] option changes via remount are deprecated (pid=20251 comm=syz.5.6918) [ 232.771513][T20253] cgroup: option or name mismatch, new: 0x0 "kmem_cache_free", old: 0x0 "" [ 232.786889][T20255] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6920'. [ 232.857954][T20267] 9p: Bad value for 'rfdno' [ 232.911031][T20274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6930'. [ 232.937227][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6932'. [ 232.946206][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6932'. [ 232.975249][T12015] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.975262][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6932'. [ 232.975284][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6932'. [ 233.013519][T12015] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.028573][T12015] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.043550][T12015] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.141502][T20307] netlink: 'syz.8.6944': attribute type 2 has an invalid length. [ 233.214610][ T3485] Process accounting resumed [ 233.281563][T20325] vlan2: entered promiscuous mode [ 233.304778][T20324] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 233.373889][T20335] netlink: 'syz.2.6957': attribute type 1 has an invalid length. [ 233.521536][T20358] atomic_op ffff8881797d4128 conn xmit_atomic 0000000000000000 [ 233.617602][T20362] SELinux: Context @ is not valid (left unmapped). [ 233.734945][T20374] loop8: detected capacity change from 0 to 1024 [ 233.765176][T20374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.790093][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.991597][T20409] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 234.051338][T20419] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20419 comm=syz.6.6994 [ 234.063900][T20419] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20419 comm=syz.6.6994 [ 234.249649][T20458] syz_tun: refused to change device tx_queue_len [ 234.528050][T20514] ALSA: seq fatal error: cannot create timer (-19) [ 234.568770][T20519] ref_ctr_offset mismatch. inode: 0x1fe offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 234.619959][T20527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.637579][T20527] bond1: (slave batadv1): Opening slave failed [ 234.653163][T20532] rdma_rxe: rxe_newlink: failed to add lo [ 234.682283][T20538] can0: slcan on ttyS3. [ 234.769153][T20537] can0 (unregistered): slcan off ttyS3. [ 234.832420][T20556] ip6gre2: entered promiscuous mode [ 234.837671][T20556] ip6gre2: entered allmulticast mode [ 234.862235][ T3485] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 234.877881][ T3485] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 235.096183][T20574] netlink: 'syz.2.7065': attribute type 1 has an invalid length. [ 235.110950][T20574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.247245][T20590] loop5: detected capacity change from 0 to 1024 [ 235.284963][T20590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.327250][ T7169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.422719][T20609] lo speed is unknown, defaulting to 1000 [ 235.653822][T20637] netlink: 'syz.8.7090': attribute type 1 has an invalid length. [ 235.661689][T20637] __nla_validate_parse: 18 callbacks suppressed [ 235.661703][T20637] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7090'. [ 236.177694][T20664] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 236.207913][T20639] Set syz1 is full, maxelem 65536 reached [ 236.553013][T20692] lo speed is unknown, defaulting to 1000 [ 237.169644][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 237.169660][ T29] audit: type=1400 audit(3915864313.300:8554): avc: denied { mount } for pid=20697 comm="syz.6.7127" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 237.259833][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7120'. [ 237.275321][ T29] audit: type=1326 audit(3915864313.400:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20709 comm="syz.3.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 237.298861][ T29] audit: type=1326 audit(3915864313.400:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20709 comm="syz.3.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 237.322492][ T29] audit: type=1326 audit(3915864313.400:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20709 comm="syz.3.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 237.346018][ T29] audit: type=1326 audit(3915864313.400:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20709 comm="syz.3.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 237.369641][ T29] audit: type=1326 audit(3915864313.400:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20709 comm="syz.3.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c5d9f749 code=0x7ffc0000 [ 237.490745][T20722] can0: slcan on ttyS3. [ 237.539358][T20722] can0 (unregistered): slcan off ttyS3. [ 237.548341][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7132'. [ 237.636491][T20739] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7136'. [ 237.645515][T20739] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7136'. [ 237.660021][T20739] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7136'. [ 237.669025][T20739] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7136'. [ 237.696640][T20745] netlink: 'syz.3.7138': attribute type 21 has an invalid length. [ 237.713731][T20741] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7137'. [ 237.722855][T20741] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7137'. [ 237.743751][T20745] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7138'. [ 237.811465][T20757] batadv_slave_1: entered promiscuous mode [ 237.819223][T20757] batadv_slave_1 (unregistering): left promiscuous mode [ 237.836391][T20759] netlink: 'syz.5.7144': attribute type 1 has an invalid length. [ 237.850638][T20759] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.869446][ T5860] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.869769][T20759] bond6: (slave geneve4): making interface the new active one [ 237.890996][T20763] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 237.893629][T20759] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 237.906883][T12047] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.916827][T12047] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.947075][T12047] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.962509][T12047] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.971325][ T29] audit: type=1400 audit(3915864314.090:8560): avc: denied { write } for pid=20768 comm="syz.8.7148" path="socket:[60317]" dev="sockfs" ino=60317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.016786][T20775] SELinux: policydb version 398647949 does not match my version range 15-35 [ 238.026931][T20777] loop5: detected capacity change from 0 to 736 [ 238.034368][T20775] SELinux: failed to load policy [ 238.058357][ T29] audit: type=1400 audit(3915864314.180:8561): avc: denied { mount } for pid=20776 comm="syz.5.7152" name="/" dev="loop5" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 238.109262][ T29] audit: type=1400 audit(3915864314.220:8562): avc: denied { unmount } for pid=7169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 238.201838][ T29] audit: type=1400 audit(3915864314.330:8563): avc: denied { map } for pid=20793 comm="syz.3.7159" path="/" dev="tmpfs" ino=7608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 238.270403][T20795] netlink: 'syz.2.7160': attribute type 21 has an invalid length. [ 238.278494][T20795] netlink: 'syz.2.7160': attribute type 1 has an invalid length. [ 238.407234][T20810] SELinux: policydb version 398647949 does not match my version range 15-35 [ 238.418837][T20810] SELinux: failed to load policy [ 238.649073][T20827] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 238.790271][T20839] hub 9-0:1.0: USB hub found [ 238.794991][T20839] hub 9-0:1.0: 8 ports detected [ 238.958673][T20845] lo speed is unknown, defaulting to 1000 [ 239.035188][T20845] chnl_net:caif_netlink_parms(): no params data found [ 239.068821][T20845] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.075969][T20845] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.083315][T20845] bridge_slave_0: entered allmulticast mode [ 239.089783][T20845] bridge_slave_0: entered promiscuous mode [ 239.096416][T20845] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.103528][T20845] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.110734][T20845] bridge_slave_1: entered allmulticast mode [ 239.117152][T20845] bridge_slave_1: entered promiscuous mode [ 239.136284][T20845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.148825][T20845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.170858][T20845] team0: Port device team_slave_0 added [ 239.177492][T20845] team0: Port device team_slave_1 added [ 239.194603][T20845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.201594][T20845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.227591][T20845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.238862][T20845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.245891][T20845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.271809][T20845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.315704][T20845] hsr_slave_0: entered promiscuous mode [ 239.329588][T20845] hsr_slave_1: entered promiscuous mode [ 239.345909][T20845] debugfs: 'hsr0' already exists in 'hsr' [ 239.351755][T20845] Cannot create hsr debugfs directory [ 239.479125][T20845] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 239.488281][T20845] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 239.497651][T20845] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 239.514221][T20845] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 239.560469][T20845] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.567604][T20845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.574997][T20845] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.582061][T20845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.637063][T20845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.650319][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.658126][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.670032][T20845] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.681131][T12051] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.688209][T12051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.698133][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.705271][ T2486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.767192][T20845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.863761][T20845] veth0_vlan: entered promiscuous mode [ 239.872323][T20845] veth1_vlan: entered promiscuous mode [ 239.889785][T20845] veth0_macvtap: entered promiscuous mode [ 239.897523][T20845] veth1_macvtap: entered promiscuous mode [ 239.909344][T20845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.921541][T20845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.933010][T12039] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.941753][T12039] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.950913][T12039] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.959745][T12039] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.154801][T20958] vlan2: entered allmulticast mode [ 240.435291][T20995] hub 9-0:1.0: USB hub found [ 240.441085][T20995] hub 9-0:1.0: 8 ports detected [ 240.472003][T20999] serio: Serial port ttyS3 [ 240.612055][T21022] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.778798][T21050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21050 comm=syz.6.7255 [ 240.798531][T21048] loop9: detected capacity change from 0 to 1764 [ 240.902959][T21058] __nla_validate_parse: 28 callbacks suppressed [ 240.903020][T21058] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7259'. [ 240.972840][T21051] syz.8.7256 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 240.983955][T21051] CPU: 0 UID: 0 PID: 21051 Comm: syz.8.7256 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.984034][T21051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.984047][T21051] Call Trace: [ 240.984053][T21051] [ 240.984059][T21051] __dump_stack+0x1d/0x30 [ 240.984085][T21051] dump_stack_lvl+0x95/0xd0 [ 240.984108][T21051] dump_stack+0x15/0x1b [ 240.984127][T21051] dump_header+0x81/0x240 [ 240.984199][T21051] oom_kill_process+0x295/0x350 [ 240.984220][T21051] out_of_memory+0x97b/0xb80 [ 240.984240][T21051] try_charge_memcg+0x610/0xa10 [ 240.984351][T21051] charge_memcg+0x51/0xc0 [ 240.984389][T21051] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 240.984453][T21051] __read_swap_cache_async+0x17b/0x2d0 [ 240.984488][T21051] swap_cluster_readahead+0x262/0x3c0 [ 240.984524][T21051] swapin_readahead+0xde/0x820 [ 240.984622][T21051] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 240.984645][T21051] ? lruvec_stat_mod_folio+0xd6/0x120 [ 240.984729][T21051] ? __rcu_read_unlock+0x4f/0x70 [ 240.984750][T21051] ? swap_cache_get_folio+0x277/0x280 [ 240.984779][T21051] do_swap_page+0x2b4/0x21e0 [ 240.984810][T21051] ? __pfx_default_wake_function+0x10/0x10 [ 240.984908][T21051] handle_mm_fault+0x9d8/0x2c60 [ 240.984944][T21051] do_user_addr_fault+0x630/0x1080 [ 240.984981][T21051] exc_page_fault+0x62/0xa0 [ 240.985018][T21051] asm_exc_page_fault+0x26/0x30 [ 240.985083][T21051] RIP: 0033:0x7fd9568359ec [ 240.985099][T21051] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 240.985116][T21051] RSP: 002b:00007ffe32abba60 EFLAGS: 00010202 [ 240.985131][T21051] RAX: 0000000000000000 RBX: 00007fd956bb5fa0 RCX: 0000000000000000 [ 240.985210][T21051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556d9a3808 [ 240.985221][T21051] RBP: 00007fd956bb7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 240.985233][T21051] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003afd3 [ 240.985246][T21051] R13: 00007ffe32abbb50 R14: ffffffffffffffff R15: 00007ffe32abbb70 [ 240.985266][T21051] [ 240.985272][T21051] memory: usage 307200kB, limit 307200kB, failcnt 564 [ 241.200176][T21051] memory+swap: usage 84460kB, limit 9007199254740988kB, failcnt 0 [ 241.208405][T21051] kmem: usage 72908kB, limit 9007199254740988kB, failcnt 0 [ 241.215619][T21051] Memory cgroup stats for /syz8: [ 241.227812][T21051] cache 0 [ 241.235830][T21051] rss 24576 [ 241.238994][T21051] shmem 0 [ 241.241932][T21051] mapped_file 0 [ 241.245384][T21051] dirty 0 [ 241.248309][T21051] writeback 4096 [ 241.251871][T21051] workingset_refault_anon 463 [ 241.256532][T21051] workingset_refault_file 4 [ 241.261125][T21051] swap 348160 [ 241.264472][T21051] swapcached 16384 [ 241.268184][T21051] pgpgin 55811 [ 241.271576][T21051] pgpgout 55804 [ 241.275035][T21051] pgfault 46591 [ 241.278493][T21051] pgmajfault 49 [ 241.281996][T21051] inactive_anon 4096 [ 241.285886][T21051] active_anon 24576 [ 241.289810][T21051] inactive_file 0 [ 241.293492][T21051] active_file 0 [ 241.296946][T21051] unevictable 0 [ 241.300628][T21051] hierarchical_memory_limit 314572800 [ 241.306015][T21051] hierarchical_memsw_limit 9223372036854771712 [ 241.312198][T21051] total_cache 0 [ 241.315653][T21051] total_rss 24576 [ 241.319318][T21051] total_shmem 0 [ 241.322772][T21051] total_mapped_file 0 [ 241.326743][T21051] total_dirty 0 [ 241.330235][T21051] total_writeback 4096 [ 241.334294][T21051] total_workingset_refault_anon 463 [ 241.339515][T21051] total_workingset_refault_file 4 [ 241.344529][T21051] total_swap 348160 [ 241.348330][T21051] total_swapcached 16384 [ 241.352664][T21051] total_pgpgin 55811 [ 241.356594][T21051] total_pgpgout 55804 [ 241.360590][T21051] total_pgfault 46591 [ 241.364558][T21051] total_pgmajfault 49 [ 241.368540][T21051] total_inactive_anon 4096 [ 241.372970][T21051] total_active_anon 24576 [ 241.377291][T21051] total_inactive_file 0 [ 241.381559][T21051] total_active_file 0 [ 241.385532][T21051] total_unevictable 0 [ 241.389736][T21051] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.7256,pid=21051,uid=0 [ 241.404459][T21051] Memory cgroup out of memory: Killed process 21051 (syz.8.7256) total-vm:93836kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 241.496292][T21086] binfmt_misc: register: failed to install interpreter file ./file0 [ 241.530057][T21093] loop8: detected capacity change from 0 to 128 [ 241.545788][T21096] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 241.884292][T21175] loop8: detected capacity change from 0 to 512 [ 241.892968][T21175] EXT4-fs (loop8): 1 truncate cleaned up [ 241.901174][T21175] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.929877][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.030723][T21208] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7299'. [ 242.225223][T21249] loop8: detected capacity change from 0 to 512 [ 242.232799][T21249] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 242.241965][T21249] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.263534][T21249] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.7303: Allocating blocks 41-42 which overlap fs metadata [ 242.291279][T21249] __quota_error: 72 callbacks suppressed [ 242.291292][T21249] Quota error (device loop8): write_blk: dquota write failed [ 242.304673][T21249] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 242.337406][T21249] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.7303: Allocating blocks 41-42 which overlap fs metadata [ 242.363956][T21249] Quota error (device loop8): write_blk: dquota write failed [ 242.369396][ T29] audit: type=1326 audit(3915864318.490:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.9.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b182f749 code=0x7ffc0000 [ 242.371988][T21249] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 242.394909][ T29] audit: type=1326 audit(3915864318.490:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.9.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b182f749 code=0x7ffc0000 [ 242.406037][T21249] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.7303: Failed to acquire dquot type 1 [ 242.428511][ T29] audit: type=1326 audit(3915864318.490:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.9.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b182f749 code=0x7ffc0000 [ 242.440964][T21249] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 242.463300][ T29] audit: type=1326 audit(3915864318.490:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.9.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96b182f749 code=0x7ffc0000 [ 242.501216][ T29] audit: type=1326 audit(3915864318.490:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.9.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b182f749 code=0x7ffc0000 [ 242.527639][ T29] audit: type=1326 audit(3915864318.490:8641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.9.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b182f749 code=0x7ffc0000 [ 242.528099][T21249] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7303: corrupted inode contents [ 242.597866][T21249] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.7303: mark_inode_dirty error [ 242.610820][T12039] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.614997][T21249] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7303: corrupted inode contents [ 242.644305][T21249] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.7303: mark_inode_dirty error [ 242.663238][T21249] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7303: corrupted inode contents [ 242.675579][T21291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7310'. [ 242.685275][T12039] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.695819][T21249] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 242.717707][T21249] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7303: corrupted inode contents [ 242.745616][T21249] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.7303: mark_inode_dirty error [ 242.760589][T12039] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.761875][T21249] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 242.780927][T21249] EXT4-fs (loop8): 1 truncate cleaned up [ 242.787243][T21249] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.827565][T21308] batadv_slave_1: entered promiscuous mode [ 242.834217][T21249] EXT4-fs (loop8): shut down requested (1) [ 242.841708][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7318'. [ 242.851579][T12039] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.863641][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.879568][T21308] batadv_slave_1 (unregistering): left promiscuous mode [ 242.910566][T21314] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7322'. [ 242.921302][T21314] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7322'. [ 242.946396][T12039] bridge0: port 3(dummy0) entered disabled state [ 242.954843][T12039] bridge_slave_1: left allmulticast mode [ 242.960603][T12039] bridge_slave_1: left promiscuous mode [ 242.966427][T12039] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.996374][T12039] bridge_slave_0: left promiscuous mode [ 243.002230][T12039] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.074145][T12039] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 243.102760][T12039] bond6 (unregistering): (slave geneve4): Releasing active interface [ 243.122007][T12039] bond2 (unregistering): (slave geneve2): Releasing active interface [ 243.133976][T12039] geneve1 (unregistering): left promiscuous mode [ 243.140494][T12039] geneve1 (unregistering): left allmulticast mode [ 243.147919][T12039] team0: Port device geneve1 removed [ 243.187329][T21344] 9pnet: p9_errstr2errno: server reported unknown error [ 243.202721][T21351] vhci_hcd vhci_hcd.4: default hub control req: c118 v0303 i0000 l0 [ 243.231480][T12039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.240450][T12039] bond_slave_0: left promiscuous mode [ 243.246160][T12039] bond_slave_0: left allmulticast mode [ 243.252676][T12039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.263515][T12039] bond_slave_1: left promiscuous mode [ 243.269150][T12039] bond_slave_1: left allmulticast mode [ 243.275086][T12039] bond0 (unregistering): Released all slaves [ 243.284832][T12039] bond1 (unregistering): Released all slaves [ 243.295373][T12039] bond2 (unregistering): Released all slaves [ 243.304486][T12039] bond3 (unregistering): Released all slaves [ 243.314696][T12039] bond4 (unregistering): Released all slaves [ 243.325687][T12039] bond5 (unregistering): Released all slaves [ 243.334602][T12039] bond6 (unregistering): Released all slaves [ 243.343616][T21324] netlink: 'syz.6.7325': attribute type 15 has an invalid length. [ 243.352268][T21324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7325'. [ 243.361691][T21355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7340'. [ 243.371192][T21324] netlink: 'syz.6.7325': attribute type 15 has an invalid length. [ 243.379826][T21324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7325'. [ 243.393184][T12039] tipc: Disabling bearer [ 243.398244][T12039] tipc: Left network mode [ 243.444217][T12039] hsr_slave_0: left promiscuous mode [ 243.458377][T12039] hsr_slave_1: left promiscuous mode [ 243.465461][T12039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.475409][T12039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.487060][T21367] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 243.567077][T12039] team_slave_1 (unregistering): left promiscuous mode [ 243.574701][T12039] team_slave_1 (unregistering): left allmulticast mode [ 243.594028][T21373] netlink: 'syz.3.7349': attribute type 3 has an invalid length. [ 243.602258][T12039] team0 (unregistering): Port device team_slave_1 removed [ 243.612628][T21371] loop9: detected capacity change from 0 to 512 [ 243.625271][T12039] team_slave_0 (unregistering): left promiscuous mode [ 243.632227][T12039] team_slave_0 (unregistering): left allmulticast mode [ 243.636982][T21371] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 243.653108][T12039] team0 (unregistering): Port device team_slave_0 removed [ 243.780774][T21397] netem: incorrect ge model size [ 243.785764][T21397] netem: change failed [ 243.861102][T21413] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 243.893382][T21414] loop9: detected capacity change from 0 to 1024 [ 243.924747][T21414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.959134][T20845] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.959301][T12039] IPVS: stop unused estimator thread 0... [ 244.017750][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7378'. [ 244.049596][T21435] team0: Device gtp0 is of different type [ 244.063854][T21441] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 244.218506][T21462] netlink: 'syz.9.7390': attribute type 1 has an invalid length. [ 244.235458][T21464] ip6gre1: entered promiscuous mode [ 244.240851][T21464] ip6gre1: entered allmulticast mode [ 244.333260][T21476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21476 comm=syz.6.7397 [ 244.345961][T21476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21476 comm=syz.6.7397 [ 244.616945][T21515] sctp: [Deprecated]: syz.9.7412 (pid 21515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.616945][T21515] Use struct sctp_sack_info instead [ 244.673836][T21522] netlink: 'syz.6.7418': attribute type 12 has an invalid length. [ 244.691108][T21524] lo: left promiscuous mode [ 244.695749][T21524] lo: left allmulticast mode [ 244.712401][T21524] tunl0: left promiscuous mode [ 244.717278][T21524] tunl0: left allmulticast mode [ 244.725004][T21524] gre0: left promiscuous mode [ 244.729804][T21524] gre0: left allmulticast mode [ 244.750737][T21524] gretap0: left allmulticast mode [ 244.766281][T21524] erspan0: left promiscuous mode [ 244.771366][T21524] erspan0: left allmulticast mode [ 244.779506][T21524] ip_vti0: left promiscuous mode [ 244.784471][T21524] ip_vti0: left allmulticast mode [ 244.791508][T21524] ip6_vti0: left promiscuous mode [ 244.796747][T21524] ip6_vti0: left allmulticast mode [ 244.812717][T21524] sit0: left promiscuous mode [ 244.817433][T21524] sit0: left allmulticast mode [ 244.835698][T21524] ip6tnl0: left promiscuous mode [ 244.840820][T21524] ip6tnl0: left allmulticast mode [ 244.850136][T21524] ip6gre0: left promiscuous mode [ 244.855140][T21524] ip6gre0: left allmulticast mode [ 244.862671][T21524] syz_tun: left promiscuous mode [ 244.867646][T21524] syz_tun: left allmulticast mode [ 244.875225][T21524] ip6gretap0: left promiscuous mode [ 244.880791][T21524] ip6gretap0: left allmulticast mode [ 244.888513][T21524] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.895809][T21524] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.903190][T21524] bridge0: left promiscuous mode [ 244.908132][T21524] bridge0: left allmulticast mode [ 244.915677][T21524] vcan0: left promiscuous mode [ 244.921650][T21524] vcan0: left allmulticast mode [ 244.928266][T21524] .`: left promiscuous mode [ 244.932818][T21524] bond_slave_0: left promiscuous mode [ 244.938275][T21524] bond_slave_1: left promiscuous mode [ 244.943932][T21524] .`: left allmulticast mode [ 244.948555][T21524] bond_slave_0: left allmulticast mode [ 244.954716][T21524] bond_slave_1: left allmulticast mode [ 244.961715][T21524] team0: left promiscuous mode [ 244.966479][T21524] team_slave_0: left promiscuous mode [ 244.972102][T21524] geneve1: left promiscuous mode [ 244.977240][T21524] team0: left allmulticast mode [ 244.983027][T21524] team_slave_0: left allmulticast mode [ 244.988494][T21524] geneve1: left allmulticast mode [ 244.995916][T21524] nlmon0: left promiscuous mode [ 245.000996][T21524] nlmon0: left allmulticast mode [ 245.007434][T21524] caif0: left promiscuous mode [ 245.012219][T21524] caif0: left allmulticast mode [ 245.121684][T21524] bridge1: left promiscuous mode [ 245.129580][T21524] veth2: left promiscuous mode [ 245.134383][T21524] veth2: left allmulticast mode [ 245.161644][T21524] bridge2: left promiscuous mode [ 245.166655][T21524] bridge2: left allmulticast mode [ 245.198167][T21524] ip6gre2: left promiscuous mode [ 245.203359][T21524] ip6gre2: left allmulticast mode [ 245.219430][T15928] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.228321][T15928] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.252209][T15928] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.261219][T15928] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.278512][T15928] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.287526][T15928] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.334850][T21565] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 245.349696][T15928] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.358656][T15928] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.402356][T21573] sd 0:0:1:0: device reset [ 245.469897][T21578] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 245.485909][T21578] vhci_hcd vhci_hcd.2: invalid port number 96 [ 245.492062][T21578] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 245.528093][T21593] dvmrp5: entered allmulticast mode [ 245.549876][T21593] syz_tun: entered allmulticast mode [ 245.570577][T21593] dvmrp5: left allmulticast mode [ 245.616201][T21612] netlink: 'syz.8.7458': attribute type 7 has an invalid length. [ 245.627279][T21592] syz_tun: left allmulticast mode [ 245.723856][T21634] netlink: 'syz.9.7468': attribute type 6 has an invalid length. [ 245.770426][T21641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21641 comm=syz.2.7471 [ 245.797079][T21648] netlink: 'syz.9.7474': attribute type 1 has an invalid length. [ 245.861259][T21660] loop9: detected capacity change from 0 to 256 [ 245.870885][T21663] loop8: detected capacity change from 0 to 1024 [ 245.874953][T21661] lo speed is unknown, defaulting to 1000 [ 245.877973][T21663] EXT4-fs: inline encryption not supported [ 245.891495][T21660] vfat filesystem being mounted at /61/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 245.916134][T21663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.949794][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.012292][T21679] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 246.082213][T21687] bridge0: port 3(batadv1) entered blocking state [ 246.088818][T21687] bridge0: port 3(batadv1) entered disabled state [ 246.095717][T21687] batadv1: entered allmulticast mode [ 246.101780][T21687] batadv1: entered promiscuous mode [ 246.589373][T12005] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 246.598759][T12005] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 246.704353][ T3407] kernel write not supported for file bpf-prog (pid: 3407 comm: kworker/0:3) [ 246.762465][T21764] netlink: 'syz.9.7525': attribute type 14 has an invalid length. [ 246.770439][T21764] __nla_validate_parse: 6 callbacks suppressed [ 246.770456][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7525'. [ 246.823389][T12005] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.836146][T21764] netlink: 'syz.9.7525': attribute type 14 has an invalid length. [ 246.844065][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7525'. [ 246.855811][T12005] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.865603][T12005] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.874601][T12005] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.916819][T21773] xt_hashlimit: max too large, truncated to 1048576 [ 246.936724][T21773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.318290][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 247.318304][ T29] audit: type=1400 audit(3915864323.440:8876): avc: denied { create } for pid=21803 comm="syz.9.7543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.367509][T21791] loop8: detected capacity change from 0 to 32768 [ 247.406285][ T29] audit: type=1400 audit(3915864323.470:8877): avc: denied { bind } for pid=21803 comm="syz.9.7543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.409090][T21806] bridge0: port 3(batadv1) entered blocking state [ 247.425789][ T29] audit: type=1400 audit(3915864323.470:8878): avc: denied { name_bind } for pid=21803 comm="syz.9.7543" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 247.425855][ T29] audit: type=1400 audit(3915864323.470:8879): avc: denied { node_bind } for pid=21803 comm="syz.9.7543" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 247.425878][ T29] audit: type=1400 audit(3915864323.500:8880): avc: denied { write } for pid=21803 comm="syz.9.7543" name="icmp6" dev="proc" ino=4026533195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 247.425916][ T29] audit: type=1400 audit(3915864323.530:8881): avc: denied { ioctl } for pid=21805 comm="syz.9.7544" path="socket:[65117]" dev="sockfs" ino=65117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.524714][T21806] bridge0: port 3(batadv1) entered disabled state [ 247.532515][ T29] audit: type=1400 audit(3915864323.660:8882): avc: denied { mounton } for pid=21788 comm="syz.8.7536" path="/proc/470/task" dev="proc" ino=65086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 247.541690][T21806] batadv1: entered allmulticast mode [ 247.562316][T21806] batadv1: entered promiscuous mode [ 247.567895][T21791] loop8: p1 p3 < > [ 247.614359][T21808] lo speed is unknown, defaulting to 1000 [ 247.637847][ T29] audit: type=1400 audit(3915864323.690:8883): avc: denied { mount } for pid=21788 comm="syz.8.7536" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 247.659823][ T29] audit: type=1400 audit(3915864323.710:8884): avc: denied { allowed } for pid=21810 comm="syz.3.7546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 247.679237][ T29] audit: type=1400 audit(3915864323.710:8885): avc: denied { create } for pid=21810 comm="syz.3.7546" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 247.718823][T21816] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 247.881989][T15928] Bluetooth: hci0: Frame reassembly failed (-84) [ 247.909094][T15928] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 247.918359][T15928] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 248.156492][T21867] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7570'. [ 248.201575][T21873] lo: left promiscuous mode [ 248.206171][T21873] lo: left allmulticast mode [ 248.213298][T21873] tunl0: left promiscuous mode [ 248.218166][T21873] tunl0: left allmulticast mode [ 248.226276][T21873] gre0: left promiscuous mode [ 248.231068][T21873] gre0: left allmulticast mode [ 248.243514][T21873] gretap0: left promiscuous mode [ 248.248514][T21873] gretap0: left allmulticast mode [ 248.257372][T21873] erspan0: left promiscuous mode [ 248.262362][T21873] erspan0: left allmulticast mode [ 248.269753][T21873] ip_vti0: left promiscuous mode [ 248.274789][T21873] ip_vti0: left allmulticast mode [ 248.290483][T21873] ip6_vti0: left promiscuous mode [ 248.295565][T21873] ip6_vti0: left allmulticast mode [ 248.303427][T21873] sit0: left promiscuous mode [ 248.308144][T21873] sit0: left allmulticast mode [ 248.317331][T21873] ip6tnl0: left promiscuous mode [ 248.322378][T21873] ip6tnl0: left allmulticast mode [ 248.329963][T21873] ip6gre0: left promiscuous mode [ 248.335022][T21873] ip6gre0: left allmulticast mode [ 248.349681][T21873] syz_tun: left promiscuous mode [ 248.354711][T21873] syz_tun: left allmulticast mode [ 248.363791][T21873] ip6gretap0: left promiscuous mode [ 248.370152][T21873] ip6gretap0: left allmulticast mode [ 248.377283][T21873] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.384477][T21873] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.392983][T21873] bridge0: left promiscuous mode [ 248.397947][T21873] bridge0: left allmulticast mode [ 248.405934][T21873] vcan0: left promiscuous mode [ 248.410841][T21873] vcan0: left allmulticast mode [ 248.416784][T21873] bond0: left promiscuous mode [ 248.421570][T21873] bond_slave_0: left promiscuous mode [ 248.427055][T21873] bond_slave_1: left promiscuous mode [ 248.433473][T21873] bond0: left allmulticast mode [ 248.438331][T21873] bond_slave_0: left allmulticast mode [ 248.443895][T21873] bond_slave_1: left allmulticast mode [ 248.451739][T21873] team0: left promiscuous mode [ 248.456528][T21873] team_slave_0: left promiscuous mode [ 248.462786][T21873] team_slave_1: left promiscuous mode [ 248.468208][T21873] team0: left allmulticast mode [ 248.473266][T21873] team_slave_0: left allmulticast mode [ 248.478721][T21873] team_slave_1: left allmulticast mode [ 248.485733][T21873] dummy0: left promiscuous mode [ 248.491471][T21873] dummy0: left allmulticast mode [ 248.498041][T21873] nlmon0: left promiscuous mode [ 248.503042][T21873] nlmon0: left allmulticast mode [ 248.509364][T21873] caif0: left promiscuous mode [ 248.514189][T21873] caif0: left allmulticast mode [ 248.554538][T21873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.571237][T21873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.615778][ T3400] lo speed is unknown, defaulting to 1000 [ 248.622462][ T3400] syz1: Port: 1 Link DOWN [ 248.627012][T12051] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.636357][ T3400] lo speed is unknown, defaulting to 1000 [ 248.638418][T12051] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.679924][T12051] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.697714][T12051] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.802066][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7585'. [ 248.811025][T21911] validate_nla: 1 callbacks suppressed [ 248.811040][T21911] netlink: 'syz.8.7585': attribute type 11 has an invalid length. [ 248.824506][T21911] netlink: 'syz.8.7585': attribute type 14 has an invalid length. [ 248.841185][T21911] vxlan0: entered promiscuous mode [ 248.847098][T12051] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.851141][T21912] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 248.864662][T12051] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.873809][T12051] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.884316][T21912] vhci_hcd vhci_hcd.2: invalid port number 96 [ 248.887318][T12051] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.890530][T21912] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 248.923930][T21918] netlink: 'syz.2.7593': attribute type 29 has an invalid length. [ 248.933550][T21918] netlink: 'syz.2.7593': attribute type 29 has an invalid length. [ 248.949803][T21918] netlink: 500 bytes leftover after parsing attributes in process `syz.2.7593'. [ 248.999168][T21928] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.7599'. [ 249.008535][T21928] netlink: zone id is out of range [ 249.013792][T21928] netlink: zone id is out of range [ 249.036627][T21928] netlink: zone id is out of range [ 249.043008][T21928] netlink: zone id is out of range [ 249.058536][T21928] netlink: set zone limit has 8 unknown bytes [ 249.085662][T21936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'. [ 249.094620][T21936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'. [ 249.104637][T21936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'. [ 249.166391][T21948] loop9: detected capacity change from 0 to 512 [ 249.175252][T21948] EXT4-fs (loop9): 1 truncate cleaned up [ 249.181418][T21948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.208688][T20845] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.230295][T21953] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 249.276136][T21961] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.7614'. [ 249.285661][T21961] netlink: zone id is out of range [ 249.290846][T21961] netlink: zone id is out of range [ 249.296439][T21961] netlink: zone id is out of range [ 249.302481][T21961] netlink: zone id is out of range [ 249.318479][T21961] netlink: set zone limit has 8 unknown bytes [ 249.706834][T22005] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.714154][T22005] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.737012][T22006] loop8: detected capacity change from 0 to 512 [ 249.751757][T22006] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 249.761719][T22006] EXT4-fs (loop8): orphan cleanup on readonly fs [ 249.769725][T22006] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.7634: corrupted inode contents [ 249.772616][T22005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.782868][T22006] EXT4-fs (loop8): Remounting filesystem read-only [ 249.792183][T22005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.795785][T22006] EXT4-fs (loop8): 1 truncate cleaned up [ 249.810185][T15928] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 249.810212][T15928] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 249.810231][T15928] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 249.843089][T22006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.875868][T12051] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.884885][T12051] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.893968][T22003] lo speed is unknown, defaulting to 1000 [ 249.917146][T12051] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.926155][T12051] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.949086][ T5860] Bluetooth: hci0: command 0x1003 tx timeout [ 249.955180][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 249.964131][T12051] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.973124][T12051] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.994540][T12051] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.003507][T12051] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.165576][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.444479][T22049] SELinux: failed to load policy [ 250.479527][T22067] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 250.682011][T22097] serio: Serial port ptm0 [ 250.813402][T22108] lo speed is unknown, defaulting to 1000 [ 250.964064][T22115] loop8: detected capacity change from 0 to 1024 [ 251.001625][T22115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.026472][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.277746][T22128] loop8: detected capacity change from 0 to 1024 [ 251.293206][T22128] EXT4-fs: Ignoring removed orlov option [ 251.300713][T22129] hub 9-0:1.0: USB hub found [ 251.305435][T22129] hub 9-0:1.0: 8 ports detected [ 251.322511][T22128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.418375][T22137] netlink: 'syz.6.7694': attribute type 1 has an invalid length. [ 251.678203][T12047] ================================================================== [ 251.686327][T12047] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 251.695887][T12047] [ 251.698203][T12047] write to 0xffff88814aa71518 of 2 bytes by task 22139 on cpu 1: [ 251.705913][T12047] copy_folio_from_iter_atomic+0x760/0x1150 [ 251.711828][T12047] generic_perform_write+0x2c2/0x490 [ 251.717208][T12047] ext4_buffered_write_iter+0x1ee/0x3c0 [ 251.722774][T12047] ext4_file_write_iter+0x387/0xf60 [ 251.728009][T12047] iter_file_splice_write+0x66b/0xa20 [ 251.733370][T12047] direct_splice_actor+0x156/0x2a0 [ 251.738474][T12047] splice_direct_to_actor+0x312/0x680 [ 251.743919][T12047] do_splice_direct+0xda/0x150 [ 251.748669][T12047] do_sendfile+0x380/0x650 [ 251.753074][T12047] __x64_sys_sendfile64+0x105/0x150 [ 251.758262][T12047] x64_sys_call+0x2db1/0x3000 [ 251.762931][T12047] do_syscall_64+0xca/0x2b0 [ 251.767432][T12047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.773314][T12047] [ 251.775626][T12047] read to 0xffff88814aa71400 of 1024 bytes by task 12047 on cpu 0: [ 251.783497][T12047] copy_folio_from_iter_atomic+0x760/0x1150 [ 251.789387][T12047] generic_perform_write+0x2c2/0x490 [ 251.794664][T12047] shmem_file_write_iter+0xc5/0xf0 [ 251.799770][T12047] lo_rw_aio+0x673/0x720 [ 251.803996][T12047] loop_process_work+0x56d/0xaa0 [ 251.808921][T12047] loop_workfn+0x31/0x40 [ 251.813150][T12047] process_scheduled_works+0x4ce/0x9d0 [ 251.818602][T12047] worker_thread+0x582/0x770 [ 251.823186][T12047] kthread+0x489/0x510 [ 251.827273][T12047] ret_from_fork+0x149/0x290 [ 251.831862][T12047] ret_from_fork_asm+0x1a/0x30 [ 251.836620][T12047] [ 251.838934][T12047] Reported by Kernel Concurrency Sanitizer on: [ 251.845079][T12047] CPU: 0 UID: 0 PID: 12047 Comm: kworker/u8:42 Not tainted syzkaller #0 PREEMPT(voluntary) [ 251.855135][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.865182][T12047] Workqueue: loop8 loop_workfn [ 251.869936][T12047] ================================================================== [ 252.133854][T19007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.