last executing test programs: 4.264554891s ago: executing program 4 (id=1318): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a8, &(0x7f0000000980)="$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") unshare(0x2000400) fsmount(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x50, 0x6e}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast1, 0x4e22, 0x1, 'ovf\x00', 0x0, 0x10000, 0x100004}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x2000, 0x200000001, 'sh\x00', 0x9, 0x821}, 0x2c) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 4.179527459s ago: executing program 3 (id=1320): r0 = syz_clone(0x2800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xd5}], 0x1}, 0x0) syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x3, 0x1, 0x0, 0x0, 0xd4, 0x0, 0xc0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) dup(r4) 3.944813622s ago: executing program 3 (id=1322): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) 3.884042948s ago: executing program 3 (id=1323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@loopback, @in=@private=0xa010102, 0x4e23, 0x0, 0x9, 0x20, 0x2, 0x0, 0x20, 0x73, r4}, {0x3, 0x2, 0x3, 0x2, 0x0, 0x1375, 0xc, 0x4}, {0x9, 0x6c3, 0x8000000000000001, 0x3ff}, 0x0, 0x26e6bba, 0x2, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d3, 0x32}, 0xa, @in=@multicast1, 0x3505, 0x1, 0x1, 0x7a, 0x6, 0x8, 0x7}}, 0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0xa) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r9, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000fefffeb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.66768508s ago: executing program 3 (id=1325): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x2a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2ee4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b70300000000edff8400000083000000bf090000000000005509010000000000950000b7020000000000008500000084000000b72f0d6344cd632a2600000000000000000000000000edb8e44b8234e574cddec83c6d035f9b3793e6aaf13ad10dd7f68d3fda13c85d1269ad2631c55747aab7a6e80e6e87302df15401826b9aeff826aa071853d161e712200ad2b84a533d5c49d96fba86b886f01a613b54fd50dfafe3c1a94ea215d7a815428e8f028480761fe594c65730243ecf85dd9b2381a58a9f5ce408a9e450896a828e3f5c6fbdac0629f6a2977d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, 0x0) 3.451188711s ago: executing program 4 (id=1326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000580)='vegas', 0x5) msgget$private(0x0, 0x21) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.2577363s ago: executing program 0 (id=1329): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0xd9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x1]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/14, 0xe}, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r5, r1}, 0xc) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) 3.25366814s ago: executing program 1 (id=1330): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="e1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xa86, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x2, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x9ff7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x3, 0x0, 0xfffc, 0x6}, {0xff, 0x0, 0x1}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x3a, 0x359281c220f1625c}, @union={0xf, 0x2, 0x0, 0x5, 0x0, 0x28, [{0xc, 0x1, 0x800}, {0x4, 0x5, 0xff}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x2e, 0x0]}}, &(0x7f0000001100)=""/154, 0x53, 0x9a, 0x0, 0x3}, 0x28) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001280)={0x0, 0x7, 0x10}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000012c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32, @ANYBLOB="ef00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04001000020000000400"/28], 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0xf, &(0x7f0000000f80)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x758}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001000)='GPL\x00', 0x401, 0x5, &(0x7f0000001040)=""/5, 0x76fc5568c2ebd761, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001240)={0x3, 0x9, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001480)=[r6, r7, 0x1, r8, r9, r10, 0xffffffffffffffff, 0x1], &(0x7f00000014c0)=[{0x5, 0x4, 0x9, 0x1a}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) 3.233972622s ago: executing program 0 (id=1331): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000600)=0x2f, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x670, 0x278, 0x278, 0xffffffff, 0x140, 0x140, 0x5a0, 0x5a0, 0xffffffff, 0x5a0, 0x5a0, 0x5, &(0x7f0000000580), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], 'wlan1\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x29, 0x6, 0x7, 0x6}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv6=@empty, @ipv6=@empty, @icmp_id=0x68, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x5, 0x1, [0x8, 0x8, 0x2, 0x2d, 0x6b4, 0x4, 0x7fff, 0x1, 0x310b, 0xff, 0x6, 0xc, 0x4, 0xdd, 0x0, 0x6943], 0xf}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'bond0\x00', {0xc4}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x32, 0xff, 0xd, 0x10, 0x7ff, 0x0, 0x10}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x9}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00, 0x4ddbb05b4555e0cb, 0xffffff00], 'syz_tun\x00', 'nr0\x00', {0xc4f9202bff4b047f}, {}, 0x3b, 0x6, 0x4, 0x4a}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x800, 0x3], 0x1, 0x8, 0x7, [@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @local, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @private2, @mcast1, @private0, @empty, @dev={0xfe, 0x80, '\x00', 0x20}, @private2={0xfc, 0x2, '\x00', 0x1}], 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x66, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0xa6ff, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={0x0, 0x0, 0x8}, 0x18) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @empty}, 0x10) 3.15041784s ago: executing program 1 (id=1332): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file3\x00', 0x88, &(0x7f0000000740)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x64}}, {@norecovery}, {@nodiscard}, {@grpquota}]}, 0x6, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) brk(0x20ffc004) symlinkat(0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) 3.112190154s ago: executing program 0 (id=1333): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c00)={{r1}, &(0x7f0000001a40), &(0x7f0000001bc0)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) capset(0x0, 0x0) set_mempolicy(0x1, 0x0, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x46, &(0x7f00000000c0)='vlan0\x00', 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0xfffffffe}, 0x8) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @remote}, {0x6, @remote}, 0x4, {0x2, 0x4e20, @loopback}, 'bridge0\x00'}) 3.111669014s ago: executing program 0 (id=1334): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, 0x0, &(0x7f0000000080)=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) getrandom(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0x4, 0x81) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = semget$private(0x0, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) semop(r4, &(0x7f0000000140)=[{0x1, 0x5, 0x1800}, {0x4, 0x5, 0x800}, {0x4, 0x6f, 0x800}], 0x3) 3.069551209s ago: executing program 1 (id=1335): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="3f031c000302140006001e008900", 0xe, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7, 0xffec}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x9d}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000001b000)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 2.924724363s ago: executing program 0 (id=1337): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000cc14000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000201fd"], 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x20000080) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) 2.757136229s ago: executing program 3 (id=1338): connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x848, &(0x7f0000000040)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@cpuset_v2_mode}]}) 2.598152875s ago: executing program 0 (id=1339): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x6, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xdd, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb1d, 0x2, 0xdf}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3e7, 0xc3, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf1, 0x5, 0x5}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c0300"], 0x0) unshare(0x42000000) 2.521994402s ago: executing program 4 (id=1340): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) 2.287094166s ago: executing program 2 (id=1341): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) close(r4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) unshare(0x42000000) 1.974243216s ago: executing program 1 (id=1342): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) memfd_create(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") lstat(&(0x7f0000000280)='./file2\x00', &(0x7f00000003c0)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r4, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r7, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="2f0602020000000095b3af83ab09b2b4000000000062eb4d0002000000000000000100"/56], 0x38) 1.255421167s ago: executing program 4 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef900300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) getitimer(0x1, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r2, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 1.216476791s ago: executing program 4 (id=1344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001"], 0x110}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r6}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0xfffffffffffffffe) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x34, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xe6, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000009c0)={0x74, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4084840) keyctl$search(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 1.12182602s ago: executing program 2 (id=1345): r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x63}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r2, 0x4bfa, &(0x7f0000002f80)=""/61) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03100001000000", @ANYRES32, @ANYBLOB="0000000000a46200"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202080, 0x0) fdatasync(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 1.054943347s ago: executing program 2 (id=1346): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000540)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000280), 0x8, 0x1c, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x10000008, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @loopback, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 975.178205ms ago: executing program 1 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() timerfd_create(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbee2, 0x40010, 0xffffffffffffffff, 0xc21e1000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20004000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x3, 0xfb97}, {0x2, 0x4}], 0x3) semop(r2, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}, {0x1, 0x3}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 974.652975ms ago: executing program 2 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000003c0)={0x4}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000300), 0x1) fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r6}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/671], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r7}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 916.99035ms ago: executing program 4 (id=1349): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000280)) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDSKBENT(r1, 0x4b47, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000004200), 0x0, 0x0) preadv2(r2, &(0x7f00000055c0)=[{&(0x7f0000005300)=""/66, 0x42}], 0x1, 0x7, 0x5, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f1", 0x1) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) creat(&(0x7f00000000c0)='./bus\x00', 0x182) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 916.50143ms ago: executing program 2 (id=1350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000580)='vegas', 0x5) msgget$private(0x0, 0x21) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 674.892014ms ago: executing program 3 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mkdir(0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e24, @rand_addr=0xdffefc13}}) 110.10352ms ago: executing program 1 (id=1352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000280), 0x0, 0x35, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000080), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1353): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000540)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x56}}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x71) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x20040084) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$tipc(0x1e, 0x5, 0x0) gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}}, 0xc8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) kernel console output (not intermixed with test programs): T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.008274][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.131132][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 110.149689][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 110.316179][ T5414] netlink: 'syz.1.598': attribute type 13 has an invalid length. [ 110.398002][ T3464] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.382143][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 111.404716][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 111.473863][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 111.483643][ T5452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.492193][ T5452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.529118][ T5454] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.614013][ T5462] netlink: 'syz.0.617': attribute type 7 has an invalid length. [ 111.622109][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 111.689998][ T5464] geneve2: entered promiscuous mode [ 111.696492][ T5464] geneve2: entered allmulticast mode [ 111.963656][ T5476] tipc: Enabling of bearer rejected, failed to enable media [ 112.543568][ T3832] Bluetooth: hci0: command 0x1003 tx timeout [ 112.550334][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.864127][ T5491] tipc: Started in network mode [ 112.869050][ T5491] tipc: Node identity 22f0acf83468, cluster identity 4711 [ 112.877514][ T5491] tipc: Enabled bearer , priority 0 [ 112.887976][ T5491] syzkaller0: entered promiscuous mode [ 112.894768][ T5491] syzkaller0: entered allmulticast mode [ 112.906086][ T5491] tipc: Resetting bearer [ 112.944859][ T5490] tipc: Resetting bearer [ 112.960384][ T5490] tipc: Disabling bearer [ 113.253419][ T5499] __nla_validate_parse: 23 callbacks suppressed [ 113.253459][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 113.268830][ T5499] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 113.282036][ T5501] loop2: detected capacity change from 0 to 512 [ 113.315411][ T5501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.332536][ T5501] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.386341][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.396922][ T5506] loop4: detected capacity change from 0 to 256 [ 113.412132][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 113.412147][ T29] audit: type=1326 audit(1761105235.612:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 113.454837][ T29] audit: type=1326 audit(1761105235.652:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 113.479698][ T29] audit: type=1326 audit(1761105235.652:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 113.504527][ T29] audit: type=1326 audit(1761105235.652:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 113.529219][ T29] audit: type=1326 audit(1761105235.652:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 113.554152][ T29] audit: type=1326 audit(1761105235.652:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 113.578924][ T29] audit: type=1400 audit(1761105235.652:5312): avc: denied { create } for pid=5505 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.599857][ T29] audit: type=1326 audit(1761105235.652:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 113.624498][ T29] audit: type=1326 audit(1761105235.652:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5505 comm="syz.4.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 113.649146][ T29] audit: type=1400 audit(1761105235.652:5315): avc: denied { write } for pid=5505 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.661439][ T5511] loop2: detected capacity change from 0 to 128 [ 113.677540][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 113.697942][ T5508] vlan2: entered allmulticast mode [ 113.703258][ T5508] bridge0: entered allmulticast mode [ 113.709063][ T5508] bridge2: port 1(vlan2) entered blocking state [ 113.715786][ T5508] bridge2: port 1(vlan2) entered disabled state [ 113.738084][ T5508] vlan2: entered promiscuous mode [ 113.744297][ T5508] bridge0: entered promiscuous mode [ 113.879267][ T5525] loop2: detected capacity change from 0 to 164 [ 113.907589][ T5525] bio_check_eod: 7642 callbacks suppressed [ 113.907656][ T5525] syz.2.639: attempt to access beyond end of device [ 113.907656][ T5525] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 113.930969][ T5525] syz.2.639: attempt to access beyond end of device [ 113.930969][ T5525] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 114.081165][ T5537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'. [ 114.091340][ T5537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'. [ 114.141718][ T5541] loop3: detected capacity change from 0 to 2048 [ 114.154844][ T5541] EXT4-fs (loop3): failed to initialize system zone (-117) [ 114.164053][ T5541] EXT4-fs (loop3): mount failed [ 114.166965][ T5538] macsec1: entered promiscuous mode [ 114.174482][ T5538] bridge0: entered promiscuous mode [ 114.180515][ T5538] bridge0: port 3(macsec1) entered blocking state [ 114.189126][ T5538] bridge0: port 3(macsec1) entered disabled state [ 114.197551][ T5538] macsec1: entered allmulticast mode [ 114.204193][ T5538] bridge0: entered allmulticast mode [ 114.212063][ T5538] macsec1: left allmulticast mode [ 114.218343][ T5538] bridge0: left allmulticast mode [ 114.227588][ T5538] bridge0: left promiscuous mode [ 114.389392][ T5556] syzkaller0: entered promiscuous mode [ 114.395368][ T5556] syzkaller0: entered allmulticast mode [ 115.288787][ T5561] loop1: detected capacity change from 0 to 256 [ 115.981903][ T5580] loop2: detected capacity change from 0 to 512 [ 116.016209][ T5580] EXT4-fs: Ignoring removed oldalloc option [ 116.072704][ T5580] EXT4-fs (loop2): 1 truncate cleaned up [ 116.079133][ T5580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.195148][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.399462][ T5604] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 116.501293][ T5603] loop4: detected capacity change from 0 to 1024 [ 116.512203][ T5603] ext4: Unknown parameter 'uid<00000000000000000000' [ 117.097688][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.106370][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.194711][ T5618] loop4: detected capacity change from 0 to 1024 [ 117.250160][ T5618] EXT4-fs: Ignoring removed bh option [ 117.295915][ T5618] EXT4-fs: inline encryption not supported [ 117.331815][ T5618] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.426955][ T5618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 117.493422][ T5624] tipc: Started in network mode [ 117.498375][ T5624] tipc: Node identity d6d7d211e873, cluster identity 4711 [ 117.505636][ T5624] tipc: Enabled bearer , priority 0 [ 117.518994][ T5618] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.665: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.542593][ T5624] syzkaller0: entered promiscuous mode [ 117.548239][ T5624] syzkaller0: entered allmulticast mode [ 117.552116][ T5618] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.665: lblock 0 mapped to illegal pblock 48 (length 1) [ 117.583658][ T5624] tipc: Resetting bearer [ 117.589234][ T5618] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.665: Failed to acquire dquot type 0 [ 117.601480][ T5623] tipc: Resetting bearer [ 117.610821][ T5618] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 117.629760][ T5618] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.665: mark_inode_dirty error [ 117.643404][ T5623] tipc: Disabling bearer [ 117.643480][ T5618] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 117.661211][ T5618] EXT4-fs (loop4): 1 orphan inode deleted [ 117.668700][ T5618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.682648][ T3331] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.698680][ T3331] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 117.785159][ T5629] tipc: Enabled bearer , priority 0 [ 117.793535][ T5629] syzkaller0: entered promiscuous mode [ 117.799073][ T5629] syzkaller0: entered allmulticast mode [ 117.828140][ T5608] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.665: lblock 0 mapped to illegal pblock 16 (length 1) [ 117.931078][ T5629] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 117.959476][ T5629] tipc: Resetting bearer [ 117.974184][ T5628] tipc: Resetting bearer [ 117.974638][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.990755][ T3312] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 118.004991][ T3312] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 118.005670][ T5628] tipc: Disabling bearer [ 118.016327][ T3312] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 118.396231][ T5653] loop4: detected capacity change from 0 to 512 [ 118.404944][ T5653] EXT4-fs: Mount option(s) incompatible with ext3 [ 118.431314][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 118.431347][ T29] audit: type=1400 audit(1761105240.632:5465): avc: denied { getopt } for pid=5651 comm="syz.4.681" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.437876][ T5653] loop4: detected capacity change from 0 to 512 [ 118.463092][ T5657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.679'. [ 118.474392][ T5657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.679'. [ 118.483429][ T5657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.679'. [ 118.485595][ T5658] netlink: 'syz.3.678': attribute type 13 has an invalid length. [ 118.503983][ T5657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.679'. [ 118.511442][ T5654] $Hÿ: left promiscuous mode [ 118.515515][ T5653] EXT4-fs (loop4): too many log groups per flexible block group [ 118.526979][ T5653] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 118.540615][ T5653] EXT4-fs (loop4): mount failed [ 118.554485][ T5654] ipvlan0: left allmulticast mode [ 118.559695][ T5654] veth0_vlan: left allmulticast mode [ 118.566527][ T5654] macvtap1: left promiscuous mode [ 118.571643][ T5654] macvtap1: left allmulticast mode [ 118.578597][ T5654] ip6gre1: left allmulticast mode [ 118.594392][ T5654] gretap1: left promiscuous mode [ 118.600349][ T29] audit: type=1400 audit(1761105240.802:5466): avc: denied { create } for pid=5651 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.601479][ T5654] vti0: left allmulticast mode [ 118.721978][ T29] audit: type=1400 audit(1761105240.922:5467): avc: denied { watch } for pid=5662 comm="syz.4.682" path="/117" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.753395][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.760881][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.768316][ T29] audit: type=1400 audit(1761105240.952:5468): avc: denied { open } for pid=5662 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.768478][ T5663] loop4: detected capacity change from 0 to 2048 [ 118.787883][ T29] audit: type=1400 audit(1761105240.952:5469): avc: denied { kernel } for pid=5662 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.787913][ T29] audit: type=1400 audit(1761105240.952:5470): avc: denied { tracepoint } for pid=5662 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.812930][ T5658] team_slave_0: left promiscuous mode [ 118.842212][ T5658] team_slave_1: left promiscuous mode [ 118.870451][ T5663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.871718][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 118.887312][ T29] audit: type=1400 audit(1761105241.072:5471): avc: denied { write } for pid=5664 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.913622][ T29] audit: type=1400 audit(1761105241.072:5472): avc: denied { nlmsg_write } for pid=5664 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.934399][ T29] audit: type=1400 audit(1761105241.092:5473): avc: denied { mount } for pid=5662 comm="syz.4.682" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.067757][ T29] audit: type=1400 audit(1761105241.102:5474): avc: denied { setattr } for pid=5662 comm="syz.4.682" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.159790][ T3331] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.168350][ T3331] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.177813][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.182517][ T3331] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.195807][ T3331] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.260177][ T5675] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 119.268873][ T5675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.281700][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.298650][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 119.394120][ T5682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.688'. [ 119.403398][ T5682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.688'. [ 119.425672][ T5682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.688'. [ 119.583516][ T5682] loop2: detected capacity change from 0 to 764 [ 120.213492][ T5699] netlink: 'syz.1.692': attribute type 4 has an invalid length. [ 120.997740][ T5718] tipc: Started in network mode [ 121.003010][ T5718] tipc: Node identity 869d2bf9dd11, cluster identity 4711 [ 121.010221][ T5718] tipc: Enabled bearer , priority 0 [ 121.028633][ T5718] syzkaller0: entered promiscuous mode [ 121.035945][ T5718] syzkaller0: entered allmulticast mode [ 121.074470][ T5718] tipc: Resetting bearer [ 121.139996][ T5725] loop4: detected capacity change from 0 to 512 [ 121.166835][ T5725] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 121.176555][ T5717] tipc: Resetting bearer [ 121.263929][ T5725] EXT4-fs (loop4): invalid journal inode [ 121.270037][ T5725] EXT4-fs (loop4): can't get journal size [ 121.270645][ T5717] tipc: Disabling bearer [ 121.283704][ T5725] EXT4-fs (loop4): 1 truncate cleaned up [ 121.290082][ T5725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.756404][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.000311][ T5745] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 122.321921][ T5756] .`: (slave bond_slave_0): Releasing backup interface [ 122.332651][ T5756] .`: (slave bond_slave_1): Releasing backup interface [ 122.345250][ T5756] team0: Port device team_slave_0 removed [ 122.354202][ T5756] team0: Port device team_slave_1 removed [ 122.360651][ T5756] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.692782][ T5756] team0: Mode changed to "loadbalance" [ 122.730628][ T5759] loop4: detected capacity change from 0 to 1024 [ 122.747788][ T5759] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.773846][ T5759] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #11: comm syz.4.706: iget: bogus i_mode (1) [ 122.800203][ T5759] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.706: couldn't read orphan inode 11 (err -117) [ 122.832896][ T5759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.891051][ T5748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.288575][ T5743] syz.4.706 (5743) used greatest stack depth: 6072 bytes left [ 123.328720][ T5772] loop2: detected capacity change from 0 to 8192 [ 123.379805][ T5772] team0 (unregistering): Port device team_slave_0 removed [ 123.390955][ T5772] team0 (unregistering): Port device team_slave_1 removed [ 123.431959][ T5803] tipc: Enabling of bearer rejected, failed to enable media [ 123.567637][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 123.567654][ T29] audit: type=1400 audit(1761105245.772:5778): avc: denied { ioctl } for pid=5812 comm="syz.1.731" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.667542][ T29] audit: type=1400 audit(1761105245.872:5779): avc: denied { sqpoll } for pid=5812 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.806757][ T29] audit: type=1326 audit(1761105246.012:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 124.066875][ T5824] tipc: Enabled bearer , priority 0 [ 124.079541][ T5824] tipc: Disabling bearer [ 124.115638][ T29] audit: type=1326 audit(1761105246.012:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 124.140150][ T29] audit: type=1326 audit(1761105246.012:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 124.164601][ T29] audit: type=1326 audit(1761105246.012:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 124.189629][ T29] audit: type=1326 audit(1761105246.012:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 124.214430][ T29] audit: type=1326 audit(1761105246.012:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13161d810 code=0x7ffc0000 [ 124.239336][ T29] audit: type=1326 audit(1761105246.012:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 124.263188][ T29] audit: type=1326 audit(1761105246.012:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 124.387507][ T5827] tipc: Enabled bearer , priority 0 [ 124.403974][ T5827] syzkaller0: entered promiscuous mode [ 124.409799][ T5827] syzkaller0: entered allmulticast mode [ 124.464447][ T5827] __nla_validate_parse: 8 callbacks suppressed [ 124.464466][ T5827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 124.483201][ T5827] tipc: Resetting bearer [ 124.509371][ T5826] tipc: Resetting bearer [ 124.523840][ T5826] tipc: Disabling bearer [ 124.576415][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 124.603843][ T5838] loop2: detected capacity change from 0 to 1024 [ 124.611717][ T5838] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.624459][ T5838] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.636845][ T5838] JBD2: no valid journal superblock found [ 124.643942][ T5838] EXT4-fs (loop2): Could not load journal inode [ 124.722489][ T5852] loop1: detected capacity change from 0 to 512 [ 124.739447][ T5852] EXT4-fs (loop1): too many log groups per flexible block group [ 124.749300][ T5852] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 124.757799][ T5852] EXT4-fs (loop1): mount failed [ 125.138149][ T5877] Cannot find add_set index 0 as target [ 125.583880][ T5883] loop2: detected capacity change from 0 to 128 [ 125.591432][ T5883] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.605353][ T5883] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.623842][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 126.395481][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.404260][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.244581][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.754'. [ 127.298790][ T5901] siw: device registration error -23 [ 127.333727][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 127.348648][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 127.429964][ T5906] tipc: Enabled bearer , priority 0 [ 127.447250][ T5906] syzkaller0: entered promiscuous mode [ 127.454161][ T5906] syzkaller0: entered allmulticast mode [ 127.483037][ T5906] tipc: Resetting bearer [ 127.498728][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 127.515719][ T5905] tipc: Resetting bearer [ 127.528311][ T5905] tipc: Disabling bearer [ 127.614725][ T5911] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 127.664129][ T5911] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.674028][ T5911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.705647][ T5916] tipc: Enabled bearer , priority 0 [ 127.713958][ T5916] syzkaller0: entered promiscuous mode [ 127.719517][ T5916] syzkaller0: entered allmulticast mode [ 127.736200][ T5916] tipc: Resetting bearer [ 127.747774][ T5915] tipc: Resetting bearer [ 127.759002][ T5915] tipc: Disabling bearer [ 127.782275][ T5924] loop4: detected capacity change from 0 to 764 [ 127.790348][ T5922] loop1: detected capacity change from 0 to 4096 [ 127.800900][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.801473][ T5924] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 127.831913][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.947634][ T5931] syzkaller1: entered promiscuous mode [ 127.954699][ T5931] syzkaller1: entered allmulticast mode [ 128.176464][ T5943] geneve2: entered promiscuous mode [ 128.182321][ T5943] geneve2: entered allmulticast mode [ 128.256936][ T5945] tipc: Enabling of bearer rejected, failed to enable media [ 128.580347][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 128.580422][ T29] audit: type=1326 audit(1761105250.782:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.611201][ T29] audit: type=1326 audit(1761105250.792:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.635203][ T29] audit: type=1326 audit(1761105250.802:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.658564][ T29] audit: type=1326 audit(1761105250.812:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.683137][ T29] audit: type=1326 audit(1761105250.822:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.706783][ T29] audit: type=1326 audit(1761105250.832:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.730408][ T29] audit: type=1326 audit(1761105250.842:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.753926][ T29] audit: type=1326 audit(1761105250.852:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.777917][ T29] audit: type=1326 audit(1761105250.862:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.802103][ T29] audit: type=1326 audit(1761105250.872:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 128.877032][ T5956] loop2: detected capacity change from 0 to 1024 [ 128.893879][ T5956] EXT4-fs: Ignoring removed orlov option [ 128.905886][ T5956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.969290][ T5962] loop4: detected capacity change from 0 to 164 [ 128.978355][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 129.722499][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.305832][ T5982] netlink: 14 bytes leftover after parsing attributes in process `syz.3.786'. [ 130.361082][ T5991] loop4: detected capacity change from 0 to 128 [ 130.432541][ T5994] syz.4.788: attempt to access beyond end of device [ 130.432541][ T5994] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 130.448771][ T5994] syz.4.788: attempt to access beyond end of device [ 130.448771][ T5994] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 130.463430][ T5994] syz.4.788: attempt to access beyond end of device [ 130.463430][ T5994] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 130.478217][ T5994] syz.4.788: attempt to access beyond end of device [ 130.478217][ T5994] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 130.500886][ T5994] syz.4.788: attempt to access beyond end of device [ 130.500886][ T5994] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 130.516875][ T5994] syz.4.788: attempt to access beyond end of device [ 130.516875][ T5994] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 130.531585][ T5994] syz.4.788: attempt to access beyond end of device [ 130.531585][ T5994] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 130.545840][ T5994] syz.4.788: attempt to access beyond end of device [ 130.545840][ T5994] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 130.577128][ T5994] syz.4.788: attempt to access beyond end of device [ 130.577128][ T5994] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 130.596112][ T5994] syz.4.788: attempt to access beyond end of device [ 130.596112][ T5994] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 130.648873][ T5999] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 130.778026][ T6007] tipc: Enabled bearer , priority 0 [ 130.785971][ T6007] syzkaller0: entered promiscuous mode [ 130.792746][ T6007] syzkaller0: entered allmulticast mode [ 130.802790][ T6007] tipc: Resetting bearer [ 130.810172][ T6006] tipc: Resetting bearer [ 130.818541][ T6006] tipc: Disabling bearer [ 130.850804][ T6010] loop3: detected capacity change from 0 to 512 [ 130.857727][ T6010] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.884394][ T6029] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 131.952324][ T6030] loop2: detected capacity change from 0 to 128 [ 131.962252][ T6029] SELinux: failed to load policy [ 131.968216][ T6030] FAT-fs (loop2): Directory bread(block 162) failed [ 131.977419][ T6030] FAT-fs (loop2): Directory bread(block 163) failed [ 131.985171][ T6030] FAT-fs (loop2): Directory bread(block 164) failed [ 131.991914][ T6030] FAT-fs (loop2): Directory bread(block 165) failed [ 131.999825][ T6030] FAT-fs (loop2): Directory bread(block 166) failed [ 132.008244][ T6030] FAT-fs (loop2): Directory bread(block 167) failed [ 132.016167][ T6030] FAT-fs (loop2): Directory bread(block 168) failed [ 132.024485][ T6030] FAT-fs (loop2): Directory bread(block 169) failed [ 132.121424][ T6030] FAT-fs (loop2): Directory bread(block 162) failed [ 132.130628][ T6035] 9pnet_fd: Insufficient options for proto=fd [ 132.149301][ T6035] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 132.168168][ T6030] FAT-fs (loop2): Directory bread(block 163) failed [ 132.249026][ T6046] loop4: detected capacity change from 0 to 128 [ 132.318697][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.809'. [ 132.327250][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 132.363980][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 132.446767][ T6050] loop2: detected capacity change from 0 to 8192 [ 134.233898][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 134.233916][ T29] audit: type=1326 audit(1761105256.442:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.2.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a31cefc9 code=0x7ffc0000 [ 134.332451][ T29] audit: type=1326 audit(1761105256.482:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 134.356635][ T29] audit: type=1326 audit(1761105256.482:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 134.380774][ T29] audit: type=1326 audit(1761105256.482:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 134.405220][ T29] audit: type=1326 audit(1761105256.482:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 134.430161][ T29] audit: type=1326 audit(1761105256.482:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 134.453922][ T29] audit: type=1326 audit(1761105256.482:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 134.477803][ T29] audit: type=1326 audit(1761105256.482:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 134.501671][ T29] audit: type=1326 audit(1761105256.482:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13161d810 code=0x7ffc0000 [ 134.525238][ T29] audit: type=1326 audit(1761105256.482:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 134.571400][ T6094] bridge0: entered promiscuous mode [ 134.590760][ T6094] macsec1: entered promiscuous mode [ 134.598627][ T6097] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 134.601617][ T6094] bridge0: port 3(macsec1) entered blocking state [ 134.615556][ T6094] bridge0: port 3(macsec1) entered disabled state [ 134.720173][ T6094] macsec1: entered allmulticast mode [ 134.725847][ T6094] bridge0: entered allmulticast mode [ 134.757354][ T6094] macsec1: left allmulticast mode [ 134.757433][ T6094] bridge0: left allmulticast mode [ 134.760105][ T6094] bridge0: left promiscuous mode [ 134.815170][ T6054] loop1: detected capacity change from 0 to 512 [ 134.989058][ T6054] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.810: invalid fast symlink length 39 [ 135.026536][ T6107] loop4: detected capacity change from 0 to 1024 [ 135.043388][ T6054] EXT4-fs (loop1): get root inode failed [ 135.049192][ T6054] EXT4-fs (loop1): mount failed [ 135.058494][ T6107] EXT4-fs: inline encryption not supported [ 135.114947][ T6107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.265024][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.333337][ T6122] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.442111][ T6127] loop3: detected capacity change from 0 to 8192 [ 135.748177][ T6122] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.107366][ T6122] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.060946][ T6122] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.168249][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 137.195120][ T3464] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.217630][ T3464] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.244728][ T3464] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.262157][ T3464] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.273775][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.838'. [ 137.284040][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.838'. [ 137.327744][ T6158] loop1: detected capacity change from 0 to 512 [ 137.338555][ T6162] netlink: 'syz.3.840': attribute type 4 has an invalid length. [ 137.384724][ T6158] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.400256][ T6158] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 137.443976][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 137.461155][ T6158] EXT4-fs (loop1): 1 truncate cleaned up [ 137.461187][ T6174] tipc: Enabled bearer , priority 0 [ 137.470211][ T6158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.501121][ T6174] syzkaller0: entered promiscuous mode [ 137.506684][ T6174] syzkaller0: entered allmulticast mode [ 137.519569][ T6174] tipc: Resetting bearer [ 137.527905][ T6172] tipc: Resetting bearer [ 137.541956][ T6172] tipc: Disabling bearer [ 137.660636][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 137.954325][ T6244] netlink: 'syz.3.856': attribute type 10 has an invalid length. [ 137.962280][ T6244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.856'. [ 138.078813][ T6237] bridge_slave_0: left allmulticast mode [ 138.084580][ T6237] bridge_slave_0: left promiscuous mode [ 138.090372][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.098793][ T6237] bridge_slave_1: left allmulticast mode [ 138.104585][ T6237] bridge_slave_1: left promiscuous mode [ 138.110294][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.120531][ T6237] bond0: (slave bond_slave_0): Releasing backup interface [ 138.133835][ T6237] bond0: (slave bond_slave_1): Releasing backup interface [ 138.143879][ T6237] team0: Port device team_slave_0 removed [ 138.152111][ T6237] team0: Port device team_slave_1 removed [ 138.158885][ T6237] bond1: (slave gretap1): Releasing active interface [ 138.167041][ T6237] vlan0: left promiscuous mode [ 138.171874][ T6237] bridge0: left promiscuous mode [ 138.177267][ T6237] bridge2: port 1(vlan0) entered disabled state [ 138.186979][ T6244] veth1_vlan: left promiscuous mode [ 138.203883][ T6244] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 138.460713][ T6287] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.695339][ T6313] loop3: detected capacity change from 0 to 760 [ 138.731663][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.866'. [ 138.741581][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.866'. [ 138.807047][ T6313] gretap1: left promiscuous mode [ 138.812111][ T6313] ipvlan2: left promiscuous mode [ 138.855518][ T6329] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 138.855518][ T6329] program syz.3.867 not setting count and/or reply_len properly [ 139.246748][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 139.246765][ T29] audit: type=1326 audit(1761105261.452:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa131615e67 code=0x7ffc0000 [ 139.280103][ T29] audit: type=1326 audit(1761105261.482:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1315bb099 code=0x7ffc0000 [ 139.303621][ T29] audit: type=1326 audit(1761105261.482:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa131615e67 code=0x7ffc0000 [ 139.326953][ T29] audit: type=1326 audit(1761105261.482:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1315bb099 code=0x7ffc0000 [ 139.350601][ T29] audit: type=1326 audit(1761105261.482:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 139.374204][ T29] audit: type=1326 audit(1761105261.542:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa131615e67 code=0x7ffc0000 [ 139.398274][ T29] audit: type=1326 audit(1761105261.542:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1315bb099 code=0x7ffc0000 [ 139.422292][ T29] audit: type=1326 audit(1761105261.542:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 139.446146][ T29] audit: type=1326 audit(1761105261.542:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa131615e67 code=0x7ffc0000 [ 139.446188][ T29] audit: type=1326 audit(1761105261.542:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1315bb099 code=0x7ffc0000 [ 139.734205][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 139.862244][ T6409] loop4: detected capacity change from 0 to 1024 [ 140.039388][ T6409] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.116157][ T6409] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 140.180148][ T6409] EXT4-fs (loop4): orphan cleanup on readonly fs [ 140.215149][ T6409] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 140.230124][ T6409] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 140.241717][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.257331][ T6409] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.878: Freeing blocks not in datazone - block = 0, count = 4096 [ 140.281367][ T6409] EXT4-fs (loop4): 1 orphan inode deleted [ 140.287897][ T6409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.514990][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.541457][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 140.558029][ T6424] bond0: (slave ip6gretap0): Removing an active aggregator [ 140.565656][ T37] bond0: Warning: Found an uninitialized port [ 140.572728][ T6424] bond0: (slave ip6gretap0): Releasing backup interface [ 140.596175][ T6430] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 140.610885][ T6433] netlink: 'syz.4.887': attribute type 1 has an invalid length. [ 140.710950][ T6437] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.755229][ T6437] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.814919][ T6437] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.862079][ T6451] cgroup: name respecified [ 140.869611][ T6437] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.934358][ T297] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.947157][ T3464] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.948650][ T6451] loop3: detected capacity change from 0 to 512 [ 140.970616][ T3464] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.971324][ T6451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.984518][ T3464] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.992666][ T6451] EXT4-fs (loop3): 1 truncate cleaned up [ 141.005054][ T6451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.248910][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.280085][ T6472] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 141.655843][ T6485] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.210784][ T6490] netlink: 'syz.0.902': attribute type 4 has an invalid length. [ 142.219714][ T6490] __nla_validate_parse: 8 callbacks suppressed [ 142.219734][ T6490] netlink: 17 bytes leftover after parsing attributes in process `syz.0.902'. [ 142.434417][ T6485] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.508839][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 142.518931][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 142.554984][ T6485] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.724021][ T6485] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.763859][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.774873][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.654938][ T6519] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 143.662918][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.912'. [ 143.671991][ T6519] netlink: 236 bytes leftover after parsing attributes in process `syz.1.912'. [ 143.681037][ T6519] netlink: 68 bytes leftover after parsing attributes in process `syz.1.912'. [ 143.995035][ T6529] debugfs: 'ptm1' already exists in 'caif_serial' [ 144.362092][ T6533] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 144.365794][ T6532] tipc: Enabled bearer , priority 0 [ 144.379259][ T6532] syzkaller0: entered promiscuous mode [ 144.384874][ T6532] syzkaller0: entered allmulticast mode [ 144.393756][ T6532] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 144.410829][ T6532] tipc: Resetting bearer [ 144.418305][ T6530] tipc: Resetting bearer [ 144.424113][ T6530] tipc: Disabling bearer [ 144.493141][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 144.493159][ T29] audit: type=1400 audit(1761105266.702:6915): avc: denied { getopt } for pid=6536 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.527104][ T6537] netlink: 'syz.4.919': attribute type 4 has an invalid length. [ 145.751293][ T6562] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967272. macoff=96 [ 145.801896][ T29] audit: type=1326 audit(1761105268.002:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 145.834867][ T29] audit: type=1326 audit(1761105268.032:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 145.858706][ T29] audit: type=1326 audit(1761105268.032:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 145.882404][ T29] audit: type=1326 audit(1761105268.032:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 145.906638][ T29] audit: type=1326 audit(1761105268.032:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 145.930267][ T29] audit: type=1326 audit(1761105268.032:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 145.953996][ T29] audit: type=1326 audit(1761105268.032:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 145.977400][ T29] audit: type=1326 audit(1761105268.032:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 146.001070][ T29] audit: type=1326 audit(1761105268.032:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb185fefc9 code=0x7ffc0000 [ 146.190407][ T6566] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 146.242995][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 146.254126][ T6570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.283615][ T6568] loop1: detected capacity change from 0 to 512 [ 146.340212][ T6574] netlink: 'syz.3.926': attribute type 4 has an invalid length. [ 146.349156][ T6574] netlink: 17 bytes leftover after parsing attributes in process `syz.3.926'. [ 146.480575][ T297] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.493781][ T6568] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.928: bad orphan inode 15 [ 146.527728][ T297] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.541325][ T6568] ext4_test_bit(bit=14, block=5) = 0 [ 146.586961][ T6568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.631480][ T297] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.743564][ T297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.883673][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.279057][ T6589] loop1: detected capacity change from 0 to 128 [ 147.300151][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 147.537596][ T297] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.550741][ T6597] loop1: detected capacity change from 0 to 512 [ 147.559221][ T6597] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.937: iget: bad i_size value: 38620345925642 [ 147.572171][ T6597] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.937: couldn't read orphan inode 15 (err -117) [ 147.585174][ T6597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.616749][ T6597] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.937: bg 0: block 5: invalid block bitmap [ 147.641447][ T6597] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 147.655010][ T6597] EXT4-fs (loop1): This should not happen!! Data will be lost [ 147.655010][ T6597] [ 147.665728][ T6597] EXT4-fs (loop1): Total free blocks count 0 [ 147.671746][ T6597] EXT4-fs (loop1): Free/Dirty block details [ 147.678912][ T6597] EXT4-fs (loop1): free_blocks=0 [ 147.685039][ T6597] EXT4-fs (loop1): dirty_blocks=2 [ 147.690160][ T6597] EXT4-fs (loop1): Block reservation details [ 147.697270][ T6597] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 147.937474][ T6607] team0 (unregistering): Port device team_slave_0 removed [ 147.947264][ T6607] team0 (unregistering): Port device team_slave_1 removed [ 147.956763][ T6608] loop3: detected capacity change from 0 to 512 [ 147.972678][ T6608] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.980736][ T6608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 147.988920][ T6608] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.999125][ T6608] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.941: iget: bad i_size value: 12154761577498 [ 148.022155][ T6608] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.941: couldn't read orphan inode 13 (err -117) [ 148.044133][ T6608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.056855][ T6608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.869182][ T6618] loop4: detected capacity change from 0 to 512 [ 148.885124][ T6618] EXT4-fs: Ignoring removed nobh option [ 148.890965][ T6618] EXT4-fs: quotafile must be on filesystem root [ 148.924660][ T6618] loop4: detected capacity change from 0 to 1764 [ 148.937795][ T6622] netlink: 'wÞ£ÿ': attribute type 5 has an invalid length. [ 148.949681][ T6622] batman_adv: batadv0: Adding interface: vxlan0 [ 148.956040][ T6622] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.993826][ T6622] batman_adv: batadv0: Interface activated: vxlan0 [ 149.003685][ T31] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.033643][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.042082][ T31] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.105665][ T31] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.593534][ T3832] Bluetooth: hci0: command 0x1003 tx timeout [ 149.663747][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.761599][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 149.761617][ T29] audit: type=1400 audit(1761105271.962:6950): avc: denied { read write } for pid=6643 comm="syz.2.954" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 149.792301][ T29] audit: type=1400 audit(1761105271.962:6951): avc: denied { open } for pid=6643 comm="syz.2.954" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 149.819258][ T6640] loop4: detected capacity change from 0 to 2048 [ 149.832229][ T6646] loop3: detected capacity change from 0 to 512 [ 149.850520][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.850551][ T6646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.868533][ T6646] EXT4-fs (loop3): 1 truncate cleaned up [ 149.877351][ T6646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.915856][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 149.950315][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.971132][ T6640] loop4: unable to read partition table [ 149.981054][ T6640] loop4: partition table beyond EOD, truncated [ 149.988802][ T6640] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 150.018456][ T29] audit: type=1400 audit(1761105272.212:6952): avc: denied { create } for pid=6649 comm="syz.2.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 150.039524][ T29] audit: type=1400 audit(1761105272.212:6953): avc: denied { ioctl } for pid=6649 comm="syz.2.956" path="socket:[18147]" dev="sockfs" ino=18147 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 150.209945][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.366844][ T6660] netlink: 120 bytes leftover after parsing attributes in process `syz.3.960'. [ 150.375963][ T6660] netlink: 120 bytes leftover after parsing attributes in process `syz.3.960'. [ 150.481535][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.961'. [ 150.558471][ T6666] netem: change failed [ 150.673781][ T29] audit: type=1400 audit(1761105272.872:6954): avc: denied { load_policy } for pid=6672 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 150.676870][ T6673] SELinux: ebitmap: truncated map [ 150.790072][ T6673] SELinux: failed to load policy [ 151.119636][ T29] audit: type=1400 audit(1761105272.932:6955): avc: denied { mount } for pid=6668 comm="syz.1.962" name="/" dev="rpc_pipefs" ino=17370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 151.147787][ T29] audit: type=1326 audit(1761105273.352:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 151.172461][ T29] audit: type=1326 audit(1761105273.352:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 151.197166][ T29] audit: type=1326 audit(1761105273.352:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 151.221852][ T29] audit: type=1326 audit(1761105273.352:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.0.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 151.225967][ T6682] netlink: 'syz.0.965': attribute type 27 has an invalid length. [ 151.747671][ T6698] loop1: detected capacity change from 0 to 2048 [ 151.763509][ T6700] tipc: Enabling of bearer rejected, failed to enable media [ 151.913773][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.931478][ T6698] loop1: unable to read partition table [ 151.956871][ T6698] loop1: partition table beyond EOD, truncated [ 151.964252][ T6698] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 151.994793][ T3832] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 152.298142][ T6710] SELinux: ebitmap: truncated map [ 152.311724][ T6710] SELinux: failed to load policy [ 152.361104][ T6717] bridge2: entered promiscuous mode [ 152.595948][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 152.671677][ T6749] SELinux: Context system_u:object is not valid (left unmapped). [ 152.725130][ T6755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'. [ 152.810727][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 152.977583][ T6777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.992807][ T6777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.037293][ T6780] netlink: 144 bytes leftover after parsing attributes in process `syz.2.984'. [ 153.052456][ T6782] Cannot find add_set index 0 as target [ 153.126291][ T6786] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 153.579572][ T6807] netlink: 'syz.1.988': attribute type 7 has an invalid length. [ 153.634097][ T6812] loop3: detected capacity change from 0 to 2048 [ 153.694625][ T6812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 153.737248][ T6812] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 153.790620][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 153.820563][ T6834] netlink: 120 bytes leftover after parsing attributes in process `syz.1.991'. [ 153.828780][ T6836] --map-set only usable from mangle table [ 153.829826][ T6834] netlink: 120 bytes leftover after parsing attributes in process `syz.1.991'. [ 154.289613][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 154.299381][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 154.794163][ T6932] can0: slcan on ttyS3. [ 154.892425][ T6932] can0 (unregistered): slcan off ttyS3. [ 155.376688][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 155.376707][ T29] audit: type=1400 audit(1761105277.582:7109): avc: denied { connect } for pid=6937 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.411597][ T6946] netlink: 'syz.1.1008': attribute type 10 has an invalid length. [ 155.420338][ T6941] veth0_to_team: entered promiscuous mode [ 155.440695][ T29] audit: type=1400 audit(1761105277.642:7110): avc: denied { block_suspend } for pid=6939 comm="syz.2.1005" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.465726][ T6942] loop4: detected capacity change from 0 to 512 [ 155.473283][ T6942] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.488507][ T6946] bond2: option mode: unable to set because the bond device has slaves [ 155.513593][ T29] audit: type=1400 audit(1761105277.712:7111): avc: denied { mount } for pid=6938 comm="syz.4.1007" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 155.583892][ T29] audit: type=1326 audit(1761105277.762:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a31cefc9 code=0x7ffc0000 [ 155.607874][ T29] audit: type=1326 audit(1761105277.762:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a31cefc9 code=0x7ffc0000 [ 155.631685][ T29] audit: type=1326 audit(1761105277.762:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3a31cefc9 code=0x7ffc0000 [ 155.655359][ T29] audit: type=1326 audit(1761105277.762:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a31cefc9 code=0x7ffc0000 [ 155.679087][ T29] audit: type=1326 audit(1761105277.762:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a31cefc9 code=0x7ffc0000 [ 155.702523][ T29] audit: type=1326 audit(1761105277.762:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff3a31cefc9 code=0x7ffc0000 [ 155.726557][ T29] audit: type=1326 audit(1761105277.762:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.2.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a31cefc9 code=0x7ffc0000 [ 155.730737][ T6951] loop2: detected capacity change from 0 to 2048 [ 155.763118][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 155.781713][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 155.794182][ T6951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 155.809927][ T6951] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 155.842710][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 155.902141][ T6964] SELinux: ebitmap: truncated map [ 155.908873][ T6964] SELinux: failed to load policy [ 155.992074][ T6967] loop2: detected capacity change from 0 to 2048 [ 156.024815][ T6967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.055192][ T6976] netlink: 'syz.0.1017': attribute type 30 has an invalid length. [ 156.104866][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.127474][ T6981] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 156.136563][ T6981] netlink: 'syz.2.1019': attribute type 2 has an invalid length. [ 156.188272][ T6985] unsupported nla_type 52263 [ 156.884413][ T7000] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 157.378124][ T7007] loop3: detected capacity change from 0 to 512 [ 157.403076][ T7007] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.709063][ T7025] loop3: detected capacity change from 0 to 512 [ 158.727171][ T7025] EXT4-fs: Ignoring removed nobh option [ 158.733994][ T7025] EXT4-fs: quotafile must be on filesystem root [ 158.831088][ T7030] can0: slcan on ttyS3. [ 158.846797][ T7028] __nla_validate_parse: 4 callbacks suppressed [ 158.846816][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 158.863295][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 158.892895][ T7014] loop3: detected capacity change from 0 to 1764 [ 158.933750][ T7030] can0 (unregistered): slcan off ttyS3. [ 159.031855][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 160.383528][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 160.383545][ T29] audit: type=1326 audit(1761105282.582:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 160.414275][ T29] audit: type=1326 audit(1761105282.582:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 160.439021][ T29] audit: type=1326 audit(1761105282.582:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 160.463735][ T29] audit: type=1326 audit(1761105282.582:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 160.489171][ T29] audit: type=1326 audit(1761105282.582:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 160.514312][ T29] audit: type=1400 audit(1761105282.582:7305): avc: denied { ioctl } for pid=7061 comm="syz.0.1044" path="socket:[19891]" dev="sockfs" ino=19891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.540904][ T29] audit: type=1326 audit(1761105282.582:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 160.566156][ T29] audit: type=1326 audit(1761105282.582:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 160.590672][ T29] audit: type=1326 audit(1761105282.582:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 160.615542][ T29] audit: type=1326 audit(1761105282.582:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.0.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 160.946634][ T7055] syzkaller0: entered promiscuous mode [ 160.952954][ T7055] syzkaller0: entered allmulticast mode [ 161.424817][ T7060] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 161.435530][ T7060] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 161.930375][ T7076] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1057'. [ 162.045852][ T7078] can0: slcan on ttyS3. [ 162.123661][ T7078] can0 (unregistered): slcan off ttyS3. [ 162.173875][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 162.588844][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 162.658189][ T7096] netlink: 'syz.3.1053': attribute type 16 has an invalid length. [ 162.667276][ T7096] netlink: 'syz.3.1053': attribute type 17 has an invalid length. [ 162.712050][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 162.782316][ T7096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.790594][ T7096] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.800423][ T7096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.025125][ T3900] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.055196][ T3900] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.784852][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 164.260522][ T7151] loop3: detected capacity change from 0 to 128 [ 164.289861][ T7151] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.401057][ T7151] ext4 filesystem being mounted at /244/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.525072][ T7151] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.1070: checksumming directory block 0 [ 164.614405][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.842289][ T7160] loop3: detected capacity change from 0 to 512 [ 164.865872][ T7160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.898977][ T7160] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.949947][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 165.008786][ T7164] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 165.039361][ T3464] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.085647][ T7164] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 165.116976][ T37] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.129533][ T7164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.157886][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.234021][ T3464] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.262178][ T7173] loop3: detected capacity change from 0 to 1024 [ 165.284707][ T7173] EXT4-fs: Ignoring removed orlov option [ 165.345525][ T7173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.457672][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.036908][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 166.036928][ T29] audit: type=1400 audit(1761105288.242:7414): avc: denied { write } for pid=7179 comm="syz.3.1078" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.067790][ T7180] loop3: detected capacity change from 0 to 4096 [ 166.078067][ T7180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.133426][ T29] audit: type=1400 audit(1761105288.302:7415): avc: denied { append } for pid=7179 comm="syz.3.1078" path="/248/file0/pids.current" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 166.251062][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.255361][ T29] audit: type=1400 audit(1761105288.452:7416): avc: denied { bind } for pid=7186 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.327866][ T7187] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 166.334559][ T7187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.344236][ T7187] vhci_hcd vhci_hcd.0: Device attached [ 166.350291][ T29] audit: type=1400 audit(1761105288.492:7417): avc: denied { setopt } for pid=7186 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.428610][ T7191] vhci_hcd: connection closed [ 166.428859][ T37] vhci_hcd: stop threads [ 166.438086][ T37] vhci_hcd: release socket [ 166.442605][ T37] vhci_hcd: disconnect device [ 166.447541][ T29] audit: type=1400 audit(1761105288.642:7418): avc: denied { mount } for pid=7193 comm="syz.3.1081" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 166.470042][ T29] audit: type=1326 audit(1761105288.642:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.3.1081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e6761efc9 code=0x0 [ 166.549768][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.550086][ T29] audit: type=1400 audit(1761105288.752:7420): avc: denied { write } for pid=7193 comm="syz.3.1081" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.572682][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.581407][ T29] audit: type=1400 audit(1761105288.752:7421): avc: denied { ioctl } for pid=7193 comm="syz.3.1081" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.667581][ T29] audit: type=1400 audit(1761105288.872:7422): avc: denied { write } for pid=7202 comm="syz.0.1083" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.693713][ T7203] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1083'. [ 166.706244][ T7203] pim6reg: entered allmulticast mode [ 166.713560][ T7203] pim6reg: left allmulticast mode [ 166.776100][ T7205] batadv_slave_1: entered promiscuous mode [ 166.784906][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 166.796663][ T7205] batadv_slave_1 (unregistering): left promiscuous mode [ 167.043924][ T29] audit: type=1400 audit(1761105289.252:7423): avc: denied { create } for pid=7206 comm="syz.1.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 167.046152][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 167.076535][ T7207] macvtap0: entered promiscuous mode [ 167.081965][ T7207] dummy0: entered promiscuous mode [ 167.087482][ T7207] macvtap0: entered allmulticast mode [ 167.093259][ T7207] dummy0: entered allmulticast mode [ 167.114845][ T3513] Bluetooth: hci0: command 0x1003 tx timeout [ 167.120890][ T3832] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.009115][ T7220] loop2: detected capacity change from 0 to 4096 [ 168.052061][ T7220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.100676][ T7220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.006756][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.073626][ T7243] wireguard0: entered promiscuous mode [ 169.079305][ T7243] wireguard0: entered allmulticast mode [ 169.110792][ T7249] netlink: 'syz.2.1094': attribute type 4 has an invalid length. [ 169.119616][ T7249] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1094'. [ 169.318656][ T7254] 9pnet: Could not find request transport: f3 [ 169.329886][ T7254] SELinux: ebitmap: truncated map [ 169.338404][ T7254] SELinux: failed to load policy [ 169.440349][ T7265] loop4: detected capacity change from 0 to 764 [ 169.449734][ T7265] rock: directory entry would overflow storage [ 169.456196][ T7265] rock: sig=0x4f50, size=4, remaining=3 [ 169.461875][ T7265] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 169.633930][ T7270] bridge_slave_0: left allmulticast mode [ 169.639732][ T7270] bridge_slave_0: left promiscuous mode [ 169.645606][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.659185][ T7270] bridge_slave_1: left allmulticast mode [ 169.665236][ T7270] bridge_slave_1: left promiscuous mode [ 169.671354][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.690153][ T7270] bond0: (slave bond_slave_0): Releasing backup interface [ 169.700160][ T7270] bond0: (slave bond_slave_1): Releasing backup interface [ 169.719313][ T7261] loop2: detected capacity change from 0 to 128 [ 169.878299][ T7270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.144876][ T7274] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 170.162856][ T7274] netem: change failed [ 170.280360][ T7290] loop4: detected capacity change from 0 to 2048 [ 170.500799][ T7301] bridge0: entered promiscuous mode [ 170.506167][ T7301] macsec1: entered promiscuous mode [ 170.512639][ T7301] bridge0: port 3(macsec1) entered blocking state [ 170.519246][ T7301] bridge0: port 3(macsec1) entered disabled state [ 170.525989][ T7301] macsec1: entered allmulticast mode [ 170.531581][ T7301] bridge0: entered allmulticast mode [ 170.539697][ T7301] macsec1: left allmulticast mode [ 170.545056][ T7301] bridge0: left allmulticast mode [ 170.550983][ T7301] bridge0: left promiscuous mode [ 170.579794][ T7302] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1111'. [ 170.612086][ T7296] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1111'. [ 170.749227][ T7306] loop3: detected capacity change from 0 to 256 [ 170.799938][ T7306] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 170.808877][ T7306] FAT-fs (loop3): Filesystem has been set read-only [ 170.845240][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 171.108631][ T7328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=7328 comm=syz.0.1123 [ 171.132710][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 171.132730][ T29] audit: type=1326 audit(1761105293.312:7635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.162700][ T29] audit: type=1326 audit(1761105293.312:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.186533][ T29] audit: type=1326 audit(1761105293.312:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.210425][ T29] audit: type=1326 audit(1761105293.312:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.234304][ T29] audit: type=1326 audit(1761105293.312:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.257865][ T29] audit: type=1326 audit(1761105293.312:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.281674][ T29] audit: type=1326 audit(1761105293.312:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.305404][ T29] audit: type=1326 audit(1761105293.312:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.329091][ T29] audit: type=1326 audit(1761105293.312:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.352945][ T29] audit: type=1326 audit(1761105293.312:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 171.495504][ T7351] 9pnet_fd: Insufficient options for proto=fd [ 171.949935][ T7361] xt_hashlimit: max too large, truncated to 1048576 [ 171.957748][ T7361] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.366832][ T7372] loop4: detected capacity change from 0 to 512 [ 172.440801][ T7372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 172.520341][ T7372] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.567917][ T7372] EXT4-fs (loop4): shut down requested (1) [ 172.618958][ T7372] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 172.720799][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 172.808605][ T7383] netlink: 'syz.2.1139': attribute type 30 has an invalid length. [ 172.886902][ T7381] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 172.893489][ T7381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.924499][ T7381] vhci_hcd vhci_hcd.0: Device attached [ 172.964996][ T7385] vhci_hcd: connection closed [ 172.965284][ T31] vhci_hcd: stop threads [ 172.975319][ T31] vhci_hcd: release socket [ 172.979853][ T31] vhci_hcd: disconnect device [ 174.213507][ T7419] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 174.306317][ T7427] 9pnet: Could not find request transport: f3 [ 174.317924][ T7427] SELinux: ebitmap: truncated map [ 174.324823][ T7427] SELinux: failed to load policy [ 174.518663][ T7438] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1153'. [ 175.372431][ T7464] xt_nat: multiple ranges no longer supported [ 175.387083][ T7463] loop4: detected capacity change from 0 to 1024 [ 175.549381][ T7463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.842453][ T7470] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 175.897775][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.967317][ T7483] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.1167'. [ 175.993507][ T7483] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.1167'. [ 176.073939][ T111] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.223478][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 176.223496][ T29] audit: type=1326 audit(1761105298.402:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.1.1170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb185fefc9 code=0x0 [ 176.323136][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.324911][ T29] audit: type=1400 audit(1761105298.492:8103): avc: denied { ioctl } for pid=7488 comm="syz.4.1169" path="socket:[21994]" dev="sockfs" ino=21994 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.339485][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.110622][ T7509] xt_hashlimit: max too large, truncated to 1048576 [ 177.194057][ T7514] x_tables: unsorted underflow at hook 2 [ 177.221121][ T7516] loop2: detected capacity change from 0 to 128 [ 177.229073][ T7516] msdos: Bad value for 'gid' [ 177.235078][ T7516] msdos: Bad value for 'gid' [ 177.245077][ T29] audit: type=1400 audit(1761105299.452:8104): avc: denied { remount } for pid=7515 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.278767][ T7516] loop2: detected capacity change from 0 to 512 [ 177.344396][ T7516] EXT4-fs (loop2): orphan cleanup on readonly fs [ 177.354350][ T7516] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.1177: ea_inode file size=4 entry size=6 [ 177.383801][ T7516] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 177.435215][ T7516] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.1177: corrupted inode contents [ 177.479636][ T7516] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.1177: mark_inode_dirty error [ 177.524976][ T7516] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.1177: corrupted inode contents [ 177.569806][ T7516] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.1177: mark_inode_dirty error [ 177.619507][ T7516] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.1177: mark inode dirty (error -117) [ 177.660451][ T7516] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 177.671527][ T7516] EXT4-fs (loop2): 1 orphan inode deleted [ 177.680181][ T7516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 178.043644][ T29] audit: type=1400 audit(1761105300.252:8105): avc: denied { connect } for pid=7525 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 178.064516][ T29] audit: type=1400 audit(1761105300.252:8106): avc: denied { setopt } for pid=7525 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.085361][ T29] audit: type=1400 audit(1761105300.252:8107): avc: denied { write } for pid=7525 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.106243][ T29] audit: type=1400 audit(1761105300.252:8108): avc: denied { connect } for pid=7525 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.127248][ T29] audit: type=1400 audit(1761105300.252:8109): avc: denied { name_connect } for pid=7525 comm="syz.3.1179" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 178.150854][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.159975][ T3513] Bluetooth: hci0: command 0x1003 tx timeout [ 178.167787][ T3832] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.212210][ T29] audit: type=1326 audit(1761105300.402:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6761efc9 code=0x7ffc0000 [ 178.237050][ T29] audit: type=1326 audit(1761105300.402:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7527 comm="syz.3.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2e6761efc9 code=0x7ffc0000 [ 178.239776][ T7534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1180'. [ 178.269920][ T7534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1180'. [ 178.342780][ T7534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1180'. [ 178.351832][ T7534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1180'. [ 178.961236][ T7548] atomic_op ffff888126a1e928 conn xmit_atomic 0000000000000000 [ 178.965789][ T7534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1180'. [ 178.978860][ T7534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1180'. [ 179.001743][ T7549] bridge0: port 1($Hÿ) entered blocking state [ 179.010654][ T7549] bridge0: port 1($Hÿ) entered disabled state [ 179.018874][ T7549] $Hÿ: entered allmulticast mode [ 179.032309][ T7549] $Hÿ: entered promiscuous mode [ 179.094977][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'. [ 179.121215][ T7556] loop4: detected capacity change from 0 to 128 [ 179.136432][ T7556] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.180887][ T7556] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.227093][ T7567] $Hÿ: renamed from .` [ 179.259006][ T7567] $Hÿ: entered promiscuous mode [ 179.308622][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1188'. [ 179.360847][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.493162][ T7584] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 180.212006][ T7616] loop2: detected capacity change from 0 to 512 [ 180.256296][ T7616] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.339922][ T7616] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 180.367258][ T7616] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.403533][ T7616] EXT4-fs (loop2): 1 truncate cleaned up [ 180.409955][ T7616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.479839][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.486951][ T7626] ipvlan2: entered promiscuous mode [ 180.507905][ T7628] loop3: detected capacity change from 0 to 2048 [ 180.538055][ T7628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.577829][ T7628] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 180.608771][ T7628] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 180.622306][ T7628] EXT4-fs (loop3): This should not happen!! Data will be lost [ 180.622306][ T7628] [ 180.634616][ T7628] EXT4-fs (loop3): Total free blocks count 0 [ 180.640791][ T7628] EXT4-fs (loop3): Free/Dirty block details [ 180.647773][ T7628] EXT4-fs (loop3): free_blocks=2415919504 [ 180.654028][ T7628] EXT4-fs (loop3): dirty_blocks=16 [ 180.659276][ T7628] EXT4-fs (loop3): Block reservation details [ 180.665403][ T7628] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 180.673102][ T7642] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 180.705928][ T7631] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 180.743619][ T7628] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.752255][ T7628] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 180.916387][ T7652] loop3: detected capacity change from 0 to 1024 [ 180.938888][ T7652] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.963979][ T7652] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1214: Invalid block bitmap block 0 in block_group 0 [ 180.988477][ T7652] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1214: Failed to acquire dquot type 0 [ 181.036558][ T7652] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.1214: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.100756][ T7659] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 181.107507][ T7659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.116240][ T7659] vhci_hcd vhci_hcd.0: Device attached [ 181.132633][ T7652] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1214: Invalid inode bitmap blk 0 in block_group 0 [ 181.155875][ T7652] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 181.186115][ T297] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 181.238871][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 181.238891][ T29] audit: type=1400 audit(1761105303.402:8336): avc: denied { setopt } for pid=7665 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.266893][ T7652] EXT4-fs (loop3): 1 orphan inode deleted [ 181.273268][ T7652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.283971][ T7660] vhci_hcd: connection closed [ 181.286241][ T31] vhci_hcd: stop threads [ 181.288977][ T7652] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.290994][ T31] vhci_hcd: release socket [ 181.291013][ T31] vhci_hcd: disconnect device [ 181.343962][ T7652] __nla_validate_parse: 2 callbacks suppressed [ 181.343978][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 181.400893][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1214'. [ 181.476067][ T29] audit: type=1400 audit(1761105303.682:8337): avc: denied { ioctl } for pid=7651 comm="syz.3.1214" path="socket:[22313]" dev="sockfs" ino=22313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.503541][ T29] audit: type=1400 audit(1761105303.682:8338): avc: denied { bind } for pid=7651 comm="syz.3.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.648731][ T7677] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 181.655307][ T7677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.663627][ T7677] vhci_hcd vhci_hcd.0: Device attached [ 181.872671][ T7678] vhci_hcd: connection closed [ 181.902170][ T3464] vhci_hcd: stop threads [ 181.912420][ T4150] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 181.913805][ T3464] vhci_hcd: release socket [ 181.925624][ T3464] vhci_hcd: disconnect device [ 181.971962][ T29] audit: type=1400 audit(1761105304.142:8339): avc: denied { setopt } for pid=7685 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.992138][ T29] audit: type=1400 audit(1761105304.142:8340): avc: denied { create } for pid=7685 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.018462][ T29] audit: type=1400 audit(1761105304.222:8341): avc: denied { execmem } for pid=7688 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 182.501751][ T7697] netlink: 'syz.4.1224': attribute type 21 has an invalid length. [ 182.510847][ T7697] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1224'. [ 182.643183][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 182.685259][ T29] audit: type=1400 audit(1761105304.742:8342): avc: denied { create } for pid=7698 comm="syz.3.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.705394][ T29] audit: type=1400 audit(1761105304.752:8343): avc: denied { bind } for pid=7698 comm="syz.3.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.064301][ T29] audit: type=1400 audit(1761105305.052:8344): avc: denied { checkpoint_restore } for pid=7698 comm="syz.3.1225" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.157370][ T7707] $Hÿ: left allmulticast mode [ 183.163503][ T7707] $Hÿ: left promiscuous mode [ 183.168492][ T7707] bridge0: port 1($Hÿ) entered disabled state [ 183.197279][ T7707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.241657][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1229'. [ 183.259921][ T7707] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1228'. [ 183.276224][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 183.303953][ T29] audit: type=1400 audit(1761105305.512:8345): avc: denied { create } for pid=7713 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 183.487329][ T7722] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1232'. [ 183.497647][ T7722] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 183.688939][ T7729] wireguard0: entered promiscuous mode [ 183.694809][ T7729] wireguard0: entered allmulticast mode [ 183.892892][ T7740] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.284271][ T7752] bond3: option ad_user_port_key: invalid value (1136) [ 184.291305][ T7752] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 184.314486][ T7752] bond3 (unregistering): Released all slaves [ 184.379685][ T7756] x_tables: unsorted underflow at hook 2 [ 184.387769][ T7758] loop3: detected capacity change from 0 to 1024 [ 184.410636][ T7758] EXT4-fs: inline encryption not supported [ 184.426450][ T7758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.516734][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.808044][ T7780] loop2: detected capacity change from 0 to 512 [ 184.826965][ T7782] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.869319][ T7780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.905248][ T7780] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.950592][ T7788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 184.966991][ T7788] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 185.039590][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 185.310710][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1257'. [ 185.537095][ T7806] netlink: 'syz.4.1259': attribute type 10 has an invalid length. [ 185.628860][ T7815] loop4: detected capacity change from 0 to 2048 [ 185.724309][ T7815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 185.994614][ T7819] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.016336][ T7824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7824 comm=syz.1.1262 [ 186.052580][ T7819] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1116 with max blocks 244 with error 28 [ 186.065913][ T7819] EXT4-fs (loop4): This should not happen!! Data will be lost [ 186.065913][ T7819] [ 186.075913][ T7819] EXT4-fs (loop4): Total free blocks count 0 [ 186.081928][ T7819] EXT4-fs (loop4): Free/Dirty block details [ 186.087945][ T7819] EXT4-fs (loop4): free_blocks=2415919104 [ 186.094057][ T7819] EXT4-fs (loop4): dirty_blocks=1376 [ 186.099720][ T7819] EXT4-fs (loop4): Block reservation details [ 186.105905][ T7819] EXT4-fs (loop4): i_reserved_data_blocks=86 [ 186.215084][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.243498][ T7815] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 33 with error 28 [ 186.763712][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 186.763729][ T29] audit: type=1400 audit(1761105308.792:8787): avc: denied { create } for pid=7829 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.792058][ T29] audit: type=1400 audit(1761105308.792:8788): avc: denied { connect } for pid=7829 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.933326][ T7831] __nla_validate_parse: 1 callbacks suppressed [ 186.933353][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 186.948827][ T7831] netlink: 'syz.1.1263': attribute type 15 has an invalid length. [ 186.957105][ T4150] usb 7-1: enqueue for inactive port 0 [ 186.962891][ T4150] usb 7-1: enqueue for inactive port 0 [ 186.974928][ T7831] vxlan0: entered promiscuous mode [ 186.989939][ T297] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.006565][ T297] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.015624][ T297] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.024151][ T297] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.032579][ T4150] vhci_hcd: vhci_device speed not set [ 187.099078][ T7840] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 187.252085][ T7843] netlink: 'syz.0.1267': attribute type 21 has an invalid length. [ 187.261097][ T7843] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1267'. [ 187.327803][ T7844] loop4: detected capacity change from 0 to 1024 [ 187.356297][ T7844] ext4: Bad value for 'barrier' [ 187.379881][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 187.391524][ T7844] loop4: detected capacity change from 0 to 512 [ 187.414918][ T7844] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1277: EA inode hash validation failed [ 187.439700][ T7844] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1277: corrupted inode contents [ 187.458573][ T7844] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.1277: mark_inode_dirty error [ 187.521324][ T7844] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.1277: corrupted inode contents [ 187.609682][ T7844] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.1277: mark_inode_dirty error [ 187.635767][ T29] audit: type=1400 audit(1761105309.802:8789): avc: denied { read } for pid=7854 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.713487][ T7844] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.1277: mark inode dirty (error -117) [ 187.775631][ T7844] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 187.818929][ T7844] EXT4-fs (loop4): 1 orphan inode deleted [ 187.899686][ T7844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.932127][ T29] audit: type=1400 audit(1761105310.132:8790): avc: denied { write } for pid=7842 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.027707][ T29] audit: type=1400 audit(1761105310.162:8791): avc: denied { nlmsg_write } for pid=7842 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.050012][ T29] audit: type=1400 audit(1761105310.162:8792): avc: denied { mounton } for pid=7842 comm="syz.4.1277" path="/230/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.080852][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.114973][ T29] audit: type=1326 audit(1761105310.312:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 188.140003][ T29] audit: type=1326 audit(1761105310.312:8794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 188.164013][ T29] audit: type=1326 audit(1761105310.312:8795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 188.190903][ T29] audit: type=1326 audit(1761105310.312:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7858 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663269efc9 code=0x7ffc0000 [ 188.309322][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 188.325534][ T7861] loop3: detected capacity change from 0 to 512 [ 188.355596][ T7853] Set syz1 is full, maxelem 65536 reached [ 188.369971][ T7861] EXT4-fs: Ignoring removed oldalloc option [ 188.395460][ T7861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.425772][ T7861] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.470385][ T7861] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1282: bg 0: block 217: padding at end of block bitmap is not set [ 188.585965][ T7867] siw: device registration error -23 [ 188.644545][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.684918][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1278'. [ 188.713769][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 188.713849][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 188.722999][ T7875] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1275'. [ 188.799731][ T7877] loop3: detected capacity change from 0 to 1024 [ 188.822834][ T7877] EXT4-fs: Ignoring removed nobh option [ 188.828520][ T7877] EXT4-fs: Ignoring removed bh option [ 188.888771][ T7880] loop2: detected capacity change from 0 to 1024 [ 188.892770][ T7877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.099448][ T7894] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1284'. [ 189.114046][ T7894] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.144749][ T7894] bond_slave_0: left promiscuous mode [ 189.184196][ T7894] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.195138][ T7894] bond_slave_1: left promiscuous mode [ 189.210621][ T7894] $Hÿ (unregistering): Released all slaves [ 189.357545][ T7893] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1279: Allocating blocks 497-513 which overlap fs metadata [ 189.385358][ T7898] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.394047][ T7893] EXT4-fs (loop3): Remounting filesystem read-only [ 189.444835][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 189.445699][ T7898] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.464003][ T7906] loop2: detected capacity change from 0 to 512 [ 189.471051][ T7906] EXT4-fs: Ignoring removed oldalloc option [ 189.479206][ T7876] EXT4-fs (loop3): pa ffff8881006d7850: logic 48, phys. 193, len 20 [ 189.485851][ T7906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.501100][ T7876] delete_channel: no stack [ 189.501556][ T7906] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.545578][ T7906] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1288: bg 0: block 217: padding at end of block bitmap is not set [ 189.570914][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.580852][ T7898] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.618146][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.628572][ T7898] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.649941][ T7918] tipc: Enabled bearer , priority 0 [ 189.659706][ T7918] syzkaller0: entered promiscuous mode [ 189.665758][ T7918] syzkaller0: entered allmulticast mode [ 189.682923][ T7918] tipc: Resetting bearer [ 189.694126][ T7917] tipc: Resetting bearer [ 189.704579][ T7917] tipc: Disabling bearer [ 189.736969][ T111] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.785089][ T31] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.804793][ T7924] loop2: detected capacity change from 0 to 512 [ 189.811947][ T31] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.813344][ T7924] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.834226][ T31] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.861869][ T7924] EXT4-fs (loop2): 1 truncate cleaned up [ 189.870977][ T7924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.907432][ T7927] tipc: Enabled bearer , priority 0 [ 189.939756][ T7927] syzkaller0: entered promiscuous mode [ 189.946104][ T7927] syzkaller0: entered allmulticast mode [ 189.992724][ T7929] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.015023][ T7927] tipc: Resetting bearer [ 190.029620][ T7926] tipc: Resetting bearer [ 190.049731][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.065027][ T7926] tipc: Disabling bearer [ 190.085948][ T7929] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.154304][ T7929] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.181596][ T7935] netlink: 'syz.2.1297': attribute type 10 has an invalid length. [ 190.194465][ T7929] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.214413][ T7935] netlink: 'syz.2.1297': attribute type 10 has an invalid length. [ 190.246939][ T7935] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 190.258663][ T7934] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 190.265300][ T7934] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.285642][ T7934] vhci_hcd vhci_hcd.0: Device attached [ 190.324115][ T7935] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 190.334990][ T7936] vhci_hcd: connection closed [ 190.335249][ T31] vhci_hcd: stop threads [ 190.344245][ T31] vhci_hcd: release socket [ 190.348727][ T31] vhci_hcd: disconnect device [ 190.387428][ T7940] loop2: detected capacity change from 0 to 764 [ 190.620649][ T31] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.635843][ T31] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.657660][ T31] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.678057][ T31] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.697852][ T7944] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 190.810835][ T7956] loop2: detected capacity change from 0 to 512 [ 190.837747][ T7956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.886331][ T7956] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.916812][ T7956] EXT4-fs (loop2): 1 truncate cleaned up [ 190.929047][ T7956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.053058][ T7971] xt_hashlimit: max too large, truncated to 1048576 [ 191.096242][ T7966] 9pnet: Could not find request transport: r [ 191.105697][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.128975][ T7977] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 191.210018][ T7979] loop4: detected capacity change from 0 to 512 [ 191.218199][ T7979] EXT4-fs: Ignoring removed oldalloc option [ 191.225319][ T7979] ext4: Unknown parameter 'uid<00000000000000000000' [ 192.079348][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 192.079365][ T29] audit: type=1326 audit(1761105314.282:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.119995][ T7988] loop3: detected capacity change from 0 to 512 [ 192.128448][ T7988] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 192.184225][ T7988] netlink: 'syz.3.1314': attribute type 32 has an invalid length. [ 192.196320][ T29] audit: type=1326 audit(1761105314.322:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.221286][ T29] audit: type=1326 audit(1761105314.322:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.246402][ T29] audit: type=1326 audit(1761105314.322:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.271691][ T29] audit: type=1326 audit(1761105314.322:9078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.296487][ T29] audit: type=1326 audit(1761105314.322:9079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.321139][ T29] audit: type=1326 audit(1761105314.322:9080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.347006][ T29] audit: type=1326 audit(1761105314.322:9081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.372156][ T29] audit: type=1326 audit(1761105314.322:9082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.397103][ T29] audit: type=1326 audit(1761105314.322:9083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa13161efc9 code=0x7ffc0000 [ 192.437873][ T7988] loop3: detected capacity change from 0 to 512 [ 192.454942][ T7988] EXT4-fs (loop3): too many log groups per flexible block group [ 192.474438][ T7988] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 192.481627][ T7988] EXT4-fs (loop3): mount failed [ 192.833681][ T8031] loop4: detected capacity change from 0 to 512 [ 192.845910][ T8034] __nla_validate_parse: 1 callbacks suppressed [ 192.845927][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 192.896264][ T8031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.921485][ T8031] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.934901][ T8037] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 192.941598][ T8037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.949753][ T8037] vhci_hcd vhci_hcd.0: Device attached [ 193.044926][ T8045] vhci_hcd: connection closed [ 193.050487][ T8078] vhci_hcd: stop threads [ 193.060798][ T8078] vhci_hcd: release socket [ 193.065340][ T8078] vhci_hcd: disconnect device [ 193.186354][ T8085] loop2: detected capacity change from 0 to 8192 [ 193.260025][ T8085] netem: incorrect ge model size [ 193.322902][ T8092] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 193.329481][ T8092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.350257][ T8092] vhci_hcd vhci_hcd.0: Device attached [ 193.438908][ T8094] vhci_hcd: connection closed [ 193.439133][ T8078] vhci_hcd: stop threads [ 193.448151][ T8078] vhci_hcd: release socket [ 193.452618][ T8078] vhci_hcd: disconnect device [ 193.605465][ T8105] bond2 (unregistering): Released all slaves [ 193.630584][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.678342][ T8111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8111 comm=syz.4.1326 [ 193.690983][ T8111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8111 comm=syz.4.1326 [ 193.694620][ T3900] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 193.714475][ T3900] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.862050][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1331'. [ 194.058724][ T8135] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.068712][ T8135] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.147391][ T8135] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.157572][ T8135] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.255723][ T8135] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.265872][ T8135] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.411347][ T8135] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.422300][ T8135] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.494330][ T8074] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.502876][ T8074] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.517076][ T8074] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.525563][ T8074] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.591707][ T8197] new mount options do not match the existing superblock, will be ignored [ 194.981312][ T8199] loop4: detected capacity change from 0 to 2048 [ 195.066724][ T8074] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.075084][ T8074] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.673830][ T8074] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.682096][ T8074] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.730567][ T8199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 195.794843][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 195.855161][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 195.864306][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 195.873728][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 195.962396][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 195.971403][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 195.980704][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 196.048110][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 196.057971][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1344'. [ 196.129391][ T8263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8263 comm=syz.2.1350 [ 196.138871][ T8260] loop4: detected capacity change from 0 to 1024 [ 196.143306][ T8263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8263 comm=syz.2.1350 [ 196.162821][ T8260] EXT4-fs: Ignoring removed oldalloc option [ 196.168870][ T8260] EXT4-fs: Ignoring removed bh option [ 196.185478][ T8260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.074016][ T8278] loop2: detected capacity change from 0 to 512 [ 197.080907][ T8278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.091630][ T8278] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.116359][ T8278] EXT4-fs (loop2): 1 truncate cleaned up [ 197.160927][ T8269] ================================================================== [ 197.169447][ T8269] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 197.176618][ T8269] [ 197.178972][ T8269] write to 0xffff88810049b6ac of 4 bytes by task 8260 on cpu 1: [ 197.186717][ T8269] xas_set_mark+0x12b/0x140 [ 197.191269][ T8269] __folio_start_writeback+0x155/0x390 [ 197.196859][ T8269] ext4_bio_write_folio+0x5ad/0x9f0 [ 197.202209][ T8269] mpage_process_page_bufs+0x4a1/0x620 [ 197.207802][ T8269] mpage_prepare_extent_to_map+0x786/0xc00 [ 197.213666][ T8269] ext4_do_writepages+0xa05/0x2750 [ 197.218920][ T8269] ext4_writepages+0x176/0x300 [ 197.223832][ T8269] do_writepages+0x1c6/0x310 [ 197.228561][ T8269] file_write_and_wait_range+0x156/0x2c0 [ 197.234232][ T8269] generic_buffers_fsync_noflush+0x45/0x120 [ 197.240179][ T8269] ext4_sync_file+0x1ab/0x690 [ 197.244912][ T8269] vfs_fsync_range+0x10d/0x130 [ 197.249771][ T8269] ext4_buffered_write_iter+0x34f/0x3c0 [ 197.255633][ T8269] ext4_file_write_iter+0x387/0xf60 [ 197.260879][ T8269] iter_file_splice_write+0x666/0xa60 [ 197.266423][ T8269] direct_splice_actor+0x156/0x2a0 [ 197.271936][ T8269] splice_direct_to_actor+0x312/0x680 [ 197.277353][ T8269] do_splice_direct+0xda/0x150 [ 197.282242][ T8269] do_sendfile+0x380/0x650 [ 197.286696][ T8269] __x64_sys_sendfile64+0x105/0x150 [ 197.292104][ T8269] x64_sys_call+0x2bb4/0x3000 [ 197.296913][ T8269] do_syscall_64+0xd2/0x200 [ 197.301458][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.307378][ T8269] [ 197.309792][ T8269] read to 0xffff88810049b6ac of 4 bytes by task 8269 on cpu 0: [ 197.317454][ T8269] xas_find_marked+0x5dc/0x620 [ 197.322268][ T8269] find_get_entry+0x5d/0x380 [ 197.326897][ T8269] filemap_get_folios_tag+0x92/0x210 [ 197.332338][ T8269] mpage_prepare_extent_to_map+0x320/0xc00 [ 197.338199][ T8269] ext4_do_writepages+0x708/0x2750 [ 197.343357][ T8269] ext4_writepages+0x176/0x300 [ 197.348268][ T8269] do_writepages+0x1c6/0x310 [ 197.352967][ T8269] file_write_and_wait_range+0x156/0x2c0 [ 197.358642][ T8269] generic_buffers_fsync_noflush+0x45/0x120 [ 197.364585][ T8269] ext4_sync_file+0x1ab/0x690 [ 197.369359][ T8269] vfs_fsync_range+0x10d/0x130 [ 197.374252][ T8269] ext4_buffered_write_iter+0x34f/0x3c0 [ 197.379890][ T8269] ext4_file_write_iter+0x387/0xf60 [ 197.385222][ T8269] iter_file_splice_write+0x666/0xa60 [ 197.390817][ T8269] direct_splice_actor+0x156/0x2a0 [ 197.396166][ T8269] splice_direct_to_actor+0x312/0x680 [ 197.401859][ T8269] do_splice_direct+0xda/0x150 [ 197.406679][ T8269] do_sendfile+0x380/0x650 [ 197.411573][ T8269] __x64_sys_sendfile64+0x105/0x150 [ 197.416988][ T8269] x64_sys_call+0x2bb4/0x3000 [ 197.421719][ T8269] do_syscall_64+0xd2/0x200 [ 197.426267][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.432284][ T8269] [ 197.434620][ T8269] value changed: 0x0a000021 -> 0x04000021 [ 197.440354][ T8269] [ 197.442785][ T8269] Reported by Kernel Concurrency Sanitizer on: [ 197.448972][ T8269] CPU: 0 UID: 0 PID: 8269 Comm: syz.4.1349 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.458728][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.468863][ T8269] ================================================================== [ 197.531299][ T8278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.594239][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.759060][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.