last executing test programs: 1m14.028257852s ago: executing program 1 (id=470): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r0, r2, 0x0) 1m13.986619255s ago: executing program 1 (id=473): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 1m13.811369969s ago: executing program 1 (id=476): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1m13.592677647s ago: executing program 1 (id=478): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$eJzs3T9qFGEYBvDXGJM1FqYQbCxGbKwW9QaDRBAHhJUptHIg2mRFmTSj1Z7ATryDF/AGnsJTpEq3kp0hk782mpls5veDMA95GPb9YNnd4vt23977sLP9cff9t1/fYzRKYiViFvsRmwepca25rizyWhw1CwBg2UwmRdr3DFysskyLGxGxfqrJf/QyEAAAAAAAAAAAAP/M/n8AGB77/6++skyLjebz23H2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD92Z/Pb8//8tf3fADA/+f9HwCG59XrNy/SLNuaJMkoYm9W5VVeX+v+2fNs61GysNnetVdV+fXD/nHdJ0159/7XT4uw0fRPjvfN/Wvx8EHdH3RPX2Yn+vXY7mD9AAAAAAAAAAAAAAAAAAAAcBmMk0Nnnu8fj8/r63Tk+wFOnN9fjVurnS0DAAAAAAAAAAAAAAAAAAAAltru5y87xXT6rmzD71P/GUxILscYXYSb5z8BBKGY9vzCBAAAAAAAAAAAAAAAAAAAA9Qe+u17EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoT/v7/xcXznzgn3c6XysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNz+BAAA//9auV53") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m13.038478912s ago: executing program 1 (id=490): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m12.821602649s ago: executing program 1 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m12.787506472s ago: executing program 32 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.153477495s ago: executing program 4 (id=1866): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 3.516831906s ago: executing program 4 (id=1874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 3.394195426s ago: executing program 4 (id=1876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x21f1, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x200}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}, 0x1, 0x0, 0x0, 0xc000442}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x50, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 3.34010979s ago: executing program 4 (id=1877): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file7\x00', 0x4) 3.287936084s ago: executing program 4 (id=1879): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) iopl(0x3) ioperm(0x0, 0x5, 0x92) 2.8494881s ago: executing program 4 (id=1884): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.60414902s ago: executing program 0 (id=1894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) 1.671446105s ago: executing program 0 (id=1914): getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r0) 1.537622796s ago: executing program 0 (id=1908): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x24c, &(0x7f0000000840)={0x0, 0xaee7, 0x400, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.279868756s ago: executing program 5 (id=1913): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) 1.266069517s ago: executing program 2 (id=1915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) 918.625776ms ago: executing program 0 (id=1916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x0, r2, 0xb) 799.889575ms ago: executing program 3 (id=1918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) acct(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x2ca}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) stat(0x0, 0x0) 735.554121ms ago: executing program 0 (id=1919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x401}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x68}}, 0x0) 722.128781ms ago: executing program 5 (id=1920): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5b, 0x20000000, 0x4000003}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 634.821288ms ago: executing program 3 (id=1921): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 609.7527ms ago: executing program 5 (id=1922): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r5, 0x25, 0x4}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) 464.957392ms ago: executing program 0 (id=1923): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 317.437994ms ago: executing program 2 (id=1924): ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 316.871344ms ago: executing program 5 (id=1934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000700)="dc", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmmsg$inet6(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='y', 0x1}], 0x1}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 294.953496ms ago: executing program 5 (id=1925): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 294.749466ms ago: executing program 3 (id=1926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(r2, r3) 255.050729ms ago: executing program 3 (id=1927): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xb, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20007, 0xc8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) munlockall() bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 208.101653ms ago: executing program 5 (id=1928): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x4}, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 204.955453ms ago: executing program 2 (id=1929): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 188.352825ms ago: executing program 3 (id=1930): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 139.054218ms ago: executing program 3 (id=1931): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80001, 0x0) write(r3, &(0x7f0000004200)='4', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 36.431227ms ago: executing program 2 (id=1932): socket(0x2a, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 423.45µs ago: executing program 2 (id=1933): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1184, 0x4004}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 2 (id=1935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): tected capacity change from 0 to 512 [ 84.410519][ T6042] EXT4-fs: Ignoring removed bh option [ 84.422071][ T6042] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.431290][ T6042] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 84.453558][ T6042] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 84.529950][ T3833] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 84.534053][ T6004] syz.5.932 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 84.539303][ T3833] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 84.553441][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.5.932 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 84.553471][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.553483][ T6004] Call Trace: [ 84.553490][ T6004] [ 84.553538][ T6004] __dump_stack+0x1d/0x30 [ 84.553612][ T6004] dump_stack_lvl+0xe8/0x140 [ 84.553632][ T6004] dump_stack+0x15/0x1b [ 84.553649][ T6004] dump_header+0x81/0x220 [ 84.553699][ T6004] oom_kill_process+0x342/0x400 [ 84.553731][ T6004] out_of_memory+0x979/0xb80 [ 84.553764][ T6004] try_charge_memcg+0x5e6/0x9e0 [ 84.553792][ T6004] obj_cgroup_charge_pages+0xa6/0x150 [ 84.553872][ T6004] __memcg_kmem_charge_page+0x9f/0x170 [ 84.553904][ T6004] __alloc_frozen_pages_noprof+0x188/0x360 [ 84.554020][ T6004] alloc_pages_mpol+0xb3/0x250 [ 84.554051][ T6004] alloc_pages_noprof+0x90/0x130 [ 84.554137][ T6004] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 84.554250][ T6004] __kvmalloc_node_noprof+0x30f/0x4e0 [ 84.554279][ T6004] ? ip_set_alloc+0x1f/0x30 [ 84.554308][ T6004] ? ip_set_alloc+0x1f/0x30 [ 84.554406][ T6004] ? __kmalloc_cache_noprof+0x189/0x320 [ 84.554455][ T6004] ip_set_alloc+0x1f/0x30 [ 84.554486][ T6004] hash_netiface_create+0x282/0x740 [ 84.554519][ T6004] ? __pfx_hash_netiface_create+0x10/0x10 [ 84.554631][ T6004] ip_set_create+0x3cc/0x960 [ 84.554658][ T6004] ? __nla_parse+0x40/0x60 [ 84.554682][ T6004] nfnetlink_rcv_msg+0x4c6/0x590 [ 84.554756][ T6004] netlink_rcv_skb+0x120/0x220 [ 84.554804][ T6004] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 84.554838][ T6004] nfnetlink_rcv+0x16b/0x1690 [ 84.554867][ T6004] ? nlmon_xmit+0x4f/0x60 [ 84.554892][ T6004] ? consume_skb+0x49/0x150 [ 84.555038][ T6004] ? nlmon_xmit+0x4f/0x60 [ 84.555063][ T6004] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 84.555087][ T6004] ? __dev_queue_xmit+0x1200/0x2000 [ 84.555115][ T6004] ? __dev_queue_xmit+0x182/0x2000 [ 84.555137][ T6004] ? ref_tracker_free+0x37d/0x3e0 [ 84.555162][ T6004] ? __netlink_deliver_tap+0x4dc/0x500 [ 84.555186][ T6004] netlink_unicast+0x5c0/0x690 [ 84.555271][ T6004] netlink_sendmsg+0x58b/0x6b0 [ 84.555344][ T6004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.555366][ T6004] __sock_sendmsg+0x145/0x180 [ 84.555393][ T6004] ____sys_sendmsg+0x31e/0x4e0 [ 84.555418][ T6004] ___sys_sendmsg+0x17b/0x1d0 [ 84.555466][ T6004] __x64_sys_sendmsg+0xd4/0x160 [ 84.555570][ T6004] x64_sys_call+0x191e/0x2ff0 [ 84.555592][ T6004] do_syscall_64+0xd2/0x200 [ 84.555617][ T6004] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.555655][ T6004] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.555679][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.555701][ T6004] RIP: 0033:0x7fb2e414ebe9 [ 84.555717][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.555734][ T6004] RSP: 002b:00007fb2e2baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.555755][ T6004] RAX: ffffffffffffffda RBX: 00007fb2e4375fa0 RCX: 00007fb2e414ebe9 [ 84.555778][ T6004] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 84.555832][ T6004] RBP: 00007fb2e41d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 84.555867][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.555879][ T6004] R13: 00007fb2e4376038 R14: 00007fb2e4375fa0 R15: 00007ffc226b5a08 [ 84.555898][ T6004] [ 84.555909][ T6004] memory: usage 307200kB, limit 307200kB, failcnt 137 [ 84.572114][ T6042] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 84.575574][ T6004] memory+swap: usage 307776kB, limit 9007199254740988kB, failcnt 0 [ 84.607692][ T6042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.609783][ T6004] kmem: usage 298860kB, limit 9007199254740988kB, failcnt 0 [ 84.609803][ T6004] Memory cgroup stats for /syz5: [ 84.941316][ T6004] cache 8192 [ 84.949548][ T6004] rss 8531968 [ 84.952947][ T6004] shmem 0 [ 84.955970][ T6004] mapped_file 0 [ 84.959524][ T6004] dirty 0 [ 84.962489][ T6004] writeback 0 [ 84.965851][ T6004] workingset_refault_anon 2 [ 84.970586][ T6004] workingset_refault_file 0 [ 84.975105][ T6004] swap 589824 [ 84.978444][ T6004] swapcached 126976 [ 84.982279][ T6004] pgpgin 22306 [ 84.985925][ T6004] pgpgout 20221 [ 84.989410][ T6004] pgfault 26068 [ 84.992874][ T6004] pgmajfault 2 [ 84.996339][ T6004] inactive_anon 0 [ 85.000013][ T6004] active_anon 0 [ 85.003759][ T6004] inactive_file 0 [ 85.007550][ T6004] active_file 8192 [ 85.011355][ T6004] unevictable 8531968 [ 85.015361][ T6004] hierarchical_memory_limit 314572800 [ 85.020845][ T6004] hierarchical_memsw_limit 9223372036854771712 [ 85.027211][ T6004] total_cache 8192 [ 85.031011][ T6004] total_rss 8531968 [ 85.034875][ T6004] total_shmem 0 [ 85.038703][ T6004] total_mapped_file 0 [ 85.042840][ T6004] total_dirty 0 [ 85.046584][ T6004] total_writeback 0 [ 85.050510][ T6004] total_workingset_refault_anon 2 [ 85.055571][ T6004] total_workingset_refault_file 0 [ 85.060645][ T6004] total_swap 589824 [ 85.064468][ T6004] total_swapcached 126976 [ 85.068953][ T6004] total_pgpgin 22306 [ 85.072860][ T6004] total_pgpgout 20221 [ 85.076855][ T6004] total_pgfault 26068 [ 85.080870][ T6004] total_pgmajfault 2 [ 85.084785][ T6004] total_inactive_anon 0 [ 85.088979][ T6004] total_active_anon 0 [ 85.093030][ T6004] total_inactive_file 0 [ 85.097229][ T6004] total_active_file 8192 [ 85.101628][ T6004] total_unevictable 8531968 [ 85.106151][ T6004] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.932,pid=6003,uid=0 [ 85.120886][ T6004] Memory cgroup out of memory: Killed process 6004 (syz.5.932) total-vm:95944kB, anon-rss:9136kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 85.141623][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.582147][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 85.582164][ T29] audit: type=1400 audit(1755073082.305:3383): avc: denied { ioctl } for pid=6058 comm="syz.4.952" path="socket:[14819]" dev="sockfs" ino=14819 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.629023][ T29] audit: type=1326 audit(1755073082.345:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.2.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 85.653384][ T29] audit: type=1326 audit(1755073082.345:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.2.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 85.677470][ T29] audit: type=1326 audit(1755073082.345:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.2.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 85.701323][ T29] audit: type=1326 audit(1755073082.345:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.2.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 85.724937][ T29] audit: type=1326 audit(1755073082.345:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.2.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 85.736861][ T6059] : renamed from bond0 (while UP) [ 85.749058][ T4815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.770285][ T6065] netlink: 'syz.2.965': attribute type 30 has an invalid length. [ 85.856641][ T6072] __nla_validate_parse: 4 callbacks suppressed [ 85.856659][ T6072] netlink: 3 bytes leftover after parsing attributes in process `syz.5.956'. [ 85.871921][ T6072] 0ªX¹¦À: renamed from caif0 [ 85.881607][ T6072] 0ªX¹¦À: entered allmulticast mode [ 85.886967][ T6072] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 85.903029][ T6071] sch_fq: defrate 4294967295 ignored. [ 85.983849][ T6075] loop4: detected capacity change from 0 to 512 [ 85.986460][ T29] audit: type=1326 audit(1755073082.705:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 85.990563][ T6075] EXT4-fs: Ignoring removed bh option [ 86.025789][ T6075] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.035208][ T6075] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 86.052096][ T29] audit: type=1326 audit(1755073082.745:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 86.075869][ T29] audit: type=1326 audit(1755073082.745:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 86.086183][ T6075] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 86.099524][ T29] audit: type=1326 audit(1755073082.745:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb2e414ec23 code=0x7ffc0000 [ 86.147338][ T6075] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 86.158729][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.215602][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.242531][ T6089] loop4: detected capacity change from 0 to 1024 [ 86.249767][ T6089] EXT4-fs: Ignoring removed orlov option [ 86.260524][ T6089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.323570][ T6080] netlink: 'syz.0.961': attribute type 10 has an invalid length. [ 86.324307][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.331964][ T6080] bridge0: port 4(team0) entered blocking state [ 86.346807][ T6080] bridge0: port 4(team0) entered disabled state [ 86.353444][ T6080] team0: entered allmulticast mode [ 86.358613][ T6080] team_slave_0: entered allmulticast mode [ 86.364375][ T6080] team_slave_1: entered allmulticast mode [ 86.371665][ T6080] team0: entered promiscuous mode [ 86.376825][ T6080] team_slave_0: entered promiscuous mode [ 86.382746][ T6080] team_slave_1: entered promiscuous mode [ 86.413055][ T6095] loop4: detected capacity change from 0 to 1024 [ 86.420611][ T6095] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 86.450055][ T6095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.528298][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.569277][ T6103] netlink: 'syz.0.969': attribute type 30 has an invalid length. [ 86.746835][ T6122] loop4: detected capacity change from 0 to 512 [ 86.755264][ T6122] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.765509][ T6122] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.975: corrupted in-inode xattr: overlapping e_value [ 86.780984][ T6122] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.975: couldn't read orphan inode 15 (err -117) [ 86.793923][ T6122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.892427][ T6131] loop5: detected capacity change from 0 to 1024 [ 86.956963][ T6131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.106733][ T6131] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.977: Allocating blocks 449-513 which overlap fs metadata [ 87.141742][ T6130] EXT4-fs (loop5): pa ffff8881071dc230: logic 48, phys. 177, len 21 [ 87.149900][ T6130] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 87.195360][ T4815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.207156][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.538769][ T6146] netlink: 'syz.4.980': attribute type 10 has an invalid length. [ 87.963300][ T6161] Set syz1 is full, maxelem 65536 reached [ 88.963344][ T6182] wireguard0: entered promiscuous mode [ 88.969018][ T6182] wireguard0: entered allmulticast mode [ 89.230859][ T6185] bridge0: port 5(macsec1) entered blocking state [ 89.239549][ T6185] bridge0: port 5(macsec1) entered disabled state [ 89.261803][ T6185] macsec1: entered allmulticast mode [ 89.269415][ T6185] bridge0: entered allmulticast mode [ 89.303144][ T6185] macsec1: left allmulticast mode [ 89.309385][ T6185] bridge0: left allmulticast mode [ 89.446739][ T6190] bond0: entered promiscuous mode [ 89.452048][ T6190] bond0: entered allmulticast mode [ 89.457425][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.466620][ T6190] bond0 (unregistering): Released all slaves [ 89.516688][ T6194] netlink: 'syz.5.1000': attribute type 10 has an invalid length. [ 90.345097][ T6233] netlink: 'syz.3.1017': attribute type 30 has an invalid length. [ 90.591243][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 90.591257][ T29] audit: type=1326 audit(1755073087.315:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 90.622282][ T29] audit: type=1326 audit(1755073087.345:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 90.646159][ T29] audit: type=1326 audit(1755073087.365:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 90.674362][ T29] audit: type=1326 audit(1755073087.395:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 90.698201][ T29] audit: type=1326 audit(1755073087.415:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 90.723013][ T29] audit: type=1326 audit(1755073087.445:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 90.747178][ T29] audit: type=1326 audit(1755073087.465:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 90.777383][ T29] audit: type=1326 audit(1755073087.495:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 90.831651][ T29] audit: type=1326 audit(1755073087.545:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 90.848001][ T6245] Set syz1 is full, maxelem 65536 reached [ 90.923812][ T29] audit: type=1326 audit(1755073087.645:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6259 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 91.095368][ T6281] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1034'. [ 91.122553][ T6281] 0ªX¹¦À: renamed from caif0 [ 91.138251][ T6281] 0ªX¹¦À: entered allmulticast mode [ 91.143578][ T6281] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 91.327533][ T6283] bridge0: entered promiscuous mode [ 91.348543][ T6283] bridge0: port 2(macsec1) entered blocking state [ 91.356805][ T6283] bridge0: port 2(macsec1) entered disabled state [ 91.367943][ T6283] macsec1: entered allmulticast mode [ 91.377893][ T6283] bridge0: entered allmulticast mode [ 91.404527][ T6283] macsec1: left allmulticast mode [ 91.411878][ T6283] bridge0: left allmulticast mode [ 91.454741][ T6283] bridge0: left promiscuous mode [ 91.585788][ T6315] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 91.692824][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.700215][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.711159][ T6320] batman_adv: batadv0: Interface deactivated: dummy0 [ 91.738071][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.748163][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.778814][ T3841] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.792279][ T3841] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.811462][ T3841] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.831573][ T3841] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.320055][ T6329] tipc: Started in network mode [ 92.324980][ T6329] tipc: Node identity 4ae785632154, cluster identity 4711 [ 92.332181][ T6329] tipc: Enabled bearer , priority 0 [ 92.343439][ T6327] tipc: Resetting bearer [ 92.354339][ T6327] tipc: Disabling bearer [ 92.529658][ T6350] netlink: 'syz.0.1067': attribute type 3 has an invalid length. [ 92.538620][ T6348] loop4: detected capacity change from 0 to 512 [ 92.545239][ T6350] netlink: 'syz.0.1067': attribute type 3 has an invalid length. [ 92.553994][ T6348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.564596][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 92.579435][ T6348] EXT4-fs (loop4): 1 truncate cleaned up [ 92.586324][ T3817] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.591319][ T6348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.607618][ T3817] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.616182][ T3817] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.624890][ T3817] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.673404][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.682727][ T6362] loop3: detected capacity change from 0 to 512 [ 92.702329][ T6362] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1071: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 92.742156][ T6362] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1071: Bad quota inode: 3, type: 0 [ 92.774495][ T6362] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 92.789677][ T6362] EXT4-fs (loop3): mount failed [ 92.893528][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 92.903483][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.911123][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.921079][ T6386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.928877][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.094984][ T6395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6395 comm=syz.5.1095 [ 93.190955][ T6400] loop4: detected capacity change from 0 to 128 [ 93.198804][ T6400] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.212144][ T6400] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.237863][ T3817] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.298282][ T6402] bridge0: entered promiscuous mode [ 93.329487][ T6402] bridge0: port 2(macsec1) entered blocking state [ 93.339972][ T6402] bridge0: port 2(macsec1) entered disabled state [ 93.353729][ T6402] macsec1: entered allmulticast mode [ 93.360754][ T6402] bridge0: entered allmulticast mode [ 93.395940][ T6415] loop4: detected capacity change from 0 to 512 [ 93.404863][ T6417] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1105'. [ 93.416713][ T6415] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.420264][ T6402] macsec1: left allmulticast mode [ 93.429972][ T6402] bridge0: left allmulticast mode [ 93.436201][ T6415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.451675][ T6415] EXT4-fs (loop4): 1 truncate cleaned up [ 93.465007][ T6415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.479646][ T6402] bridge0: left promiscuous mode [ 93.522572][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.555640][ T6424] loop4: detected capacity change from 0 to 128 [ 93.566846][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 93.576320][ T6425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.584788][ T6425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.613302][ T6424] syz.4.1097: attempt to access beyond end of device [ 93.613302][ T6424] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 93.827738][ T6446] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1100'. [ 93.900700][ T6452] loop2: detected capacity change from 0 to 512 [ 93.930495][ T6452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.960457][ T6452] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.995747][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.183327][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 94.197898][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.205682][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.225378][ T6464] tipc: Disabling bearer [ 94.366359][ T6465] bridge0: port 3(macsec1) entered blocking state [ 94.381646][ T6465] bridge0: port 3(macsec1) entered disabled state [ 94.396781][ T6465] macsec1: entered allmulticast mode [ 94.403912][ T6465] bridge0: entered allmulticast mode [ 94.431981][ T6465] macsec1: left allmulticast mode [ 94.437511][ T6465] bridge0: left allmulticast mode [ 94.456601][ T6479] loop2: detected capacity change from 0 to 128 [ 94.595690][ T6488] loop3: detected capacity change from 0 to 128 [ 94.613955][ T6488] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.657206][ T6488] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.694559][ T3819] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.941043][ T6502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1129'. [ 95.579912][ T6506] loop2: detected capacity change from 0 to 128 [ 95.586610][ T6506] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.752900][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 95.752919][ T29] audit: type=1326 audit(1755073092.475:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 95.782868][ T29] audit: type=1326 audit(1755073092.475:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 95.783154][ T6506] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.852389][ T29] audit: type=1326 audit(1755073092.475:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 95.876149][ T29] audit: type=1326 audit(1755073092.475:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 95.899653][ T29] audit: type=1326 audit(1755073092.475:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 95.923608][ T29] audit: type=1326 audit(1755073092.475:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 95.947090][ T29] audit: type=1326 audit(1755073092.475:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 95.970929][ T29] audit: type=1326 audit(1755073092.475:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 95.994487][ T29] audit: type=1326 audit(1755073092.475:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 96.017938][ T29] audit: type=1326 audit(1755073092.565:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6509 comm="syz.3.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 96.157673][ T6517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6517 comm=syz.2.1134 [ 96.247710][ T6524] loop5: detected capacity change from 0 to 128 [ 96.255407][ T6524] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.276220][ T6524] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.316411][ T3841] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.378334][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1139'. [ 96.407620][ T6528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.429388][ T6528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.452563][ T6528] batman_adv: batadv0: Removing interface: dummy0 [ 96.460273][ T6532] loop2: detected capacity change from 0 to 128 [ 96.592657][ T6532] syz.2.1142: attempt to access beyond end of device [ 96.592657][ T6532] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 96.752311][ T6544] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 96.775992][ T6544] hsr_slave_0: left promiscuous mode [ 96.783525][ T6544] hsr_slave_1: left promiscuous mode [ 96.887603][ T6550] loop5: detected capacity change from 0 to 512 [ 96.928725][ T6550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.964949][ T6550] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.148860][ T4815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.335747][ T6568] loop3: detected capacity change from 0 to 128 [ 97.694092][ T6591] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 97.701279][ T6588] tipc: Enabled bearer , priority 0 [ 97.710391][ T6585] tipc: Resetting bearer [ 97.734201][ T6585] tipc: Disabling bearer [ 97.778099][ T6591] hsr_slave_0: left promiscuous mode [ 97.785747][ T6591] hsr_slave_1: left promiscuous mode [ 97.825924][ T6598] loop3: detected capacity change from 0 to 128 [ 97.915291][ T6598] syz.3.1169: attempt to access beyond end of device [ 97.915291][ T6598] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 98.043914][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1172'. [ 98.052956][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1172'. [ 98.100783][ T6604] ip6gretap0: entered promiscuous mode [ 98.103607][ T6608] loop3: detected capacity change from 0 to 128 [ 98.118790][ T6608] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.140569][ T6604] syz_tun: entered promiscuous mode [ 98.146605][ T6604] debugfs: 'hsr0' already exists in 'hsr' [ 98.152408][ T6604] Cannot create hsr debugfs directory [ 98.160251][ T6604] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 98.170733][ T6604] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 98.183657][ T6608] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.295253][ T6620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1181'. [ 98.441536][ T6633] loop5: detected capacity change from 0 to 128 [ 98.456176][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.456176][ T6633] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 98.470478][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.470478][ T6633] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 98.484249][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.484249][ T6633] loop5: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 98.498720][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.498720][ T6633] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 98.537647][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.537647][ T6633] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 98.552055][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.552055][ T6633] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 98.566025][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.566025][ T6633] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 98.639055][ T6633] bio_check_eod: 2 callbacks suppressed [ 98.639075][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.639075][ T6633] loop5: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 98.664356][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.664356][ T6633] loop5: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 98.680238][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.680238][ T6633] loop5: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 98.694095][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.694095][ T6633] loop5: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 98.709033][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.709033][ T6633] loop5: rw=2049, sector=441, nr_sectors = 8 limit=128 [ 98.752254][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.752254][ T6633] loop5: rw=2049, sector=457, nr_sectors = 8 limit=128 [ 98.772415][ T6633] syz.5.1186: attempt to access beyond end of device [ 98.772415][ T6633] loop5: rw=2049, sector=473, nr_sectors = 8 limit=128 [ 98.810141][ T3841] kworker/u8:40: attempt to access beyond end of device [ 98.810141][ T3841] loop5: rw=1, sector=305, nr_sectors = 1 limit=128 [ 98.856811][ T6643] loop5: detected capacity change from 0 to 128 [ 98.877271][ T6643] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.901097][ T6643] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.009646][ T6646] loop5: detected capacity change from 0 to 512 [ 99.030207][ T6646] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1190: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 99.055184][ T6646] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1190: Bad quota inode: 3, type: 0 [ 99.073523][ T6646] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 99.088525][ T6646] EXT4-fs (loop5): mount failed [ 99.161218][ T6656] loop3: detected capacity change from 0 to 512 [ 99.190324][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.206066][ T6656] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.240836][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.306779][ T6674] loop2: detected capacity change from 0 to 128 [ 99.321169][ T6674] syz.2.1200: attempt to access beyond end of device [ 99.321169][ T6674] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 99.335556][ T6674] syz.2.1200: attempt to access beyond end of device [ 99.335556][ T6674] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 99.429919][ T6679] loop4: detected capacity change from 0 to 128 [ 99.436709][ T6679] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.458469][ T6679] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.763358][ T6691] loop4: detected capacity change from 0 to 2048 [ 99.801784][ T6691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.839669][ T3309] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 99.965076][ T3309] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 100.015961][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.058345][ T6701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6701 comm=syz.0.1211 [ 100.206993][ T6718] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1219'. [ 100.254013][ T6675] syz.3.1198 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 100.268214][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.3.1198 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 100.268248][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.268262][ T6675] Call Trace: [ 100.268268][ T6675] [ 100.268275][ T6675] __dump_stack+0x1d/0x30 [ 100.268370][ T6675] dump_stack_lvl+0xe8/0x140 [ 100.268472][ T6675] dump_stack+0x15/0x1b [ 100.268490][ T6675] dump_header+0x81/0x220 [ 100.268526][ T6675] oom_kill_process+0x342/0x400 [ 100.268637][ T6675] out_of_memory+0x979/0xb80 [ 100.268678][ T6675] try_charge_memcg+0x5e6/0x9e0 [ 100.268713][ T6675] obj_cgroup_charge_pages+0xa6/0x150 [ 100.268815][ T6675] __memcg_kmem_charge_page+0x9f/0x170 [ 100.268858][ T6675] __alloc_frozen_pages_noprof+0x188/0x360 [ 100.268933][ T6675] alloc_pages_mpol+0xb3/0x250 [ 100.268973][ T6675] alloc_pages_noprof+0x90/0x130 [ 100.269007][ T6675] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 100.269055][ T6675] __kvmalloc_node_noprof+0x30f/0x4e0 [ 100.269139][ T6675] ? ip_set_alloc+0x1f/0x30 [ 100.269170][ T6675] ? ip_set_alloc+0x1f/0x30 [ 100.269213][ T6675] ? __kmalloc_cache_noprof+0x189/0x320 [ 100.269244][ T6675] ip_set_alloc+0x1f/0x30 [ 100.269338][ T6675] hash_netiface_create+0x282/0x740 [ 100.269374][ T6675] ? __pfx_hash_netiface_create+0x10/0x10 [ 100.269409][ T6675] ip_set_create+0x3cc/0x960 [ 100.269510][ T6675] ? __nla_parse+0x40/0x60 [ 100.269536][ T6675] nfnetlink_rcv_msg+0x4c6/0x590 [ 100.269660][ T6675] netlink_rcv_skb+0x120/0x220 [ 100.269681][ T6675] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 100.269715][ T6675] nfnetlink_rcv+0x16b/0x1690 [ 100.269805][ T6675] ? __list_del_entry_valid_or_report+0x65/0x130 [ 100.269837][ T6675] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 100.269913][ T6675] ? should_fail_ex+0x30/0x280 [ 100.269935][ T6675] ? selinux_nlmsg_lookup+0x99/0x890 [ 100.270039][ T6675] ? __rcu_read_unlock+0x34/0x70 [ 100.270062][ T6675] ? __netlink_lookup+0x266/0x2a0 [ 100.270088][ T6675] netlink_unicast+0x5c0/0x690 [ 100.270122][ T6675] netlink_sendmsg+0x58b/0x6b0 [ 100.270146][ T6675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.270222][ T6675] __sock_sendmsg+0x145/0x180 [ 100.270250][ T6675] ____sys_sendmsg+0x31e/0x4e0 [ 100.270276][ T6675] ___sys_sendmsg+0x17b/0x1d0 [ 100.270353][ T6675] __x64_sys_sendmsg+0xd4/0x160 [ 100.270445][ T6675] x64_sys_call+0x191e/0x2ff0 [ 100.270468][ T6675] do_syscall_64+0xd2/0x200 [ 100.270495][ T6675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.270557][ T6675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 100.270583][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.270605][ T6675] RIP: 0033:0x7f8db1acebe9 [ 100.270624][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.270644][ T6675] RSP: 002b:00007f8db0516038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.270718][ T6675] RAX: ffffffffffffffda RBX: 00007f8db1cf6090 RCX: 00007f8db1acebe9 [ 100.270733][ T6675] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 100.270772][ T6675] RBP: 00007f8db1b51e19 R08: 0000000000000000 R09: 0000000000000000 [ 100.270785][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.270799][ T6675] R13: 00007f8db1cf6128 R14: 00007f8db1cf6090 R15: 00007fff678f28c8 [ 100.270818][ T6675] [ 100.270826][ T6675] memory: usage 307200kB, limit 307200kB, failcnt 453 [ 100.604670][ T6675] memory+swap: usage 307532kB, limit 9007199254740988kB, failcnt 0 [ 100.612578][ T6675] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 100.620028][ T6675] Memory cgroup stats for /syz3: [ 100.620451][ T6675] cache 0 [ 100.628454][ T6675] rss 0 [ 100.631329][ T6675] shmem 0 [ 100.634353][ T6675] mapped_file 0 [ 100.637812][ T6675] dirty 0 [ 100.640777][ T6675] writeback 0 [ 100.644068][ T6675] workingset_refault_anon 1140 [ 100.648912][ T6675] workingset_refault_file 810 [ 100.653596][ T6675] swap 339968 [ 100.656899][ T6675] swapcached 8192 [ 100.660684][ T6675] pgpgin 39551 [ 100.664176][ T6675] pgpgout 39548 [ 100.667689][ T6675] pgfault 56568 [ 100.671312][ T6675] pgmajfault 211 [ 100.674891][ T6675] inactive_anon 4096 [ 100.675220][ T6727] loop2: detected capacity change from 0 to 2048 [ 100.678899][ T6675] active_anon 4096 [ 100.689266][ T6675] inactive_file 0 [ 100.692920][ T6675] active_file 4096 [ 100.696777][ T6675] unevictable 0 [ 100.700278][ T6675] hierarchical_memory_limit 314572800 [ 100.705801][ T6675] hierarchical_memsw_limit 9223372036854771712 [ 100.712113][ T6675] total_cache 0 [ 100.715871][ T6675] total_rss 0 [ 100.719294][ T6675] total_shmem 0 [ 100.722776][ T6675] total_mapped_file 0 [ 100.726768][ T6675] total_dirty 0 [ 100.730303][ T6675] total_writeback 0 [ 100.734183][ T6675] total_workingset_refault_anon 1140 [ 100.739488][ T6675] total_workingset_refault_file 810 [ 100.744678][ T6675] total_swap 339968 [ 100.748498][ T6675] total_swapcached 8192 [ 100.752684][ T6675] total_pgpgin 39551 [ 100.756561][ T6675] total_pgpgout 39548 [ 100.760650][ T6675] total_pgfault 56568 [ 100.764604][ T6675] total_pgmajfault 211 [ 100.768696][ T6675] total_inactive_anon 4096 [ 100.773105][ T6675] total_active_anon 4096 [ 100.777332][ T6675] total_inactive_file 0 [ 100.781489][ T6675] total_active_file 4096 [ 100.785802][ T6675] total_unevictable 0 [ 100.789853][ T6675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1198,pid=6671,uid=0 [ 100.804433][ T6675] Memory cgroup out of memory: Killed process 6671 (syz.3.1198) total-vm:95812kB, anon-rss:944kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 100.822537][ T6729] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.860657][ T6729] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.871801][ T6727] loop2: p1 < > p4 [ 100.876808][ T6727] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.930005][ T6729] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.942863][ T6734] capability: warning: `syz.2.1224' uses deprecated v2 capabilities in a way that may be insecure [ 100.967914][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 100.967932][ T29] audit: type=1326 audit(1755073097.685:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 100.998590][ T29] audit: type=1326 audit(1755073097.725:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 101.023520][ T29] audit: type=1326 audit(1755073097.725:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 101.047108][ T29] audit: type=1326 audit(1755073097.725:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 101.071265][ T29] audit: type=1326 audit(1755073097.775:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 101.094750][ T29] audit: type=1326 audit(1755073097.775:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 101.118334][ T29] audit: type=1326 audit(1755073097.775:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 101.141969][ T29] audit: type=1326 audit(1755073097.775:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 101.166458][ T6729] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.169238][ T29] audit: type=1326 audit(1755073097.825:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.5.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e414ebe9 code=0x7ffc0000 [ 101.235468][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 101.244594][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 101.278161][ T3817] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.288217][ T29] audit: type=1400 audit(1755073098.005:3910): avc: denied { getopt } for pid=6745 comm="syz.2.1232" lport=57406 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 101.312556][ T3817] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.339032][ T3817] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.347284][ T3817] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.426834][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1241'. [ 101.452371][ T6768] loop2: detected capacity change from 0 to 2048 [ 101.472773][ T6768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.547484][ T3305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 101.563525][ T3305] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 101.582471][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.614496][ T6781] loop2: detected capacity change from 0 to 512 [ 101.692468][ T6781] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.1244: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 101.752310][ T6781] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1244: Bad quota inode: 3, type: 0 [ 101.776775][ T6781] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 101.810705][ T6781] EXT4-fs (loop2): mount failed [ 101.900226][ T6785] loop2: detected capacity change from 0 to 2048 [ 101.970731][ T6785] loop2: p1 < > p4 [ 101.977120][ T6785] loop2: p4 size 8388608 extends beyond EOD, truncated [ 102.239088][ T6795] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.255108][ T6779] syz.5.1243 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 102.269398][ T6779] CPU: 1 UID: 0 PID: 6779 Comm: syz.5.1243 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 102.269432][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.269445][ T6779] Call Trace: [ 102.269454][ T6779] [ 102.269535][ T6779] __dump_stack+0x1d/0x30 [ 102.269558][ T6779] dump_stack_lvl+0xe8/0x140 [ 102.269652][ T6779] dump_stack+0x15/0x1b [ 102.269677][ T6779] dump_header+0x81/0x220 [ 102.269713][ T6779] oom_kill_process+0x342/0x400 [ 102.269750][ T6779] out_of_memory+0x979/0xb80 [ 102.269782][ T6779] try_charge_memcg+0x5e6/0x9e0 [ 102.269832][ T6779] obj_cgroup_charge_pages+0xa6/0x150 [ 102.269869][ T6779] __memcg_kmem_charge_page+0x9f/0x170 [ 102.269943][ T6779] __alloc_frozen_pages_noprof+0x188/0x360 [ 102.269978][ T6779] alloc_pages_mpol+0xb3/0x250 [ 102.270010][ T6779] alloc_pages_noprof+0x90/0x130 [ 102.270109][ T6779] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 102.270158][ T6779] __kvmalloc_node_noprof+0x30f/0x4e0 [ 102.270192][ T6779] ? ip_set_alloc+0x1f/0x30 [ 102.270283][ T6779] ? ip_set_alloc+0x1f/0x30 [ 102.270309][ T6779] ? __kmalloc_cache_noprof+0x189/0x320 [ 102.270361][ T6779] ip_set_alloc+0x1f/0x30 [ 102.270386][ T6779] hash_netiface_create+0x282/0x740 [ 102.270472][ T6779] ? __pfx_hash_netiface_create+0x10/0x10 [ 102.270500][ T6779] ip_set_create+0x3cc/0x960 [ 102.270525][ T6779] ? __nla_parse+0x40/0x60 [ 102.270547][ T6779] nfnetlink_rcv_msg+0x4c6/0x590 [ 102.270596][ T6779] netlink_rcv_skb+0x120/0x220 [ 102.270612][ T6779] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 102.270666][ T6779] nfnetlink_rcv+0x16b/0x1690 [ 102.270702][ T6779] ? __list_del_entry_valid_or_report+0x65/0x130 [ 102.270728][ T6779] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 102.270774][ T6779] ? ___slab_alloc+0x11b/0x900 [ 102.270799][ T6779] ? should_fail_ex+0x30/0x280 [ 102.270817][ T6779] ? selinux_nlmsg_lookup+0x99/0x890 [ 102.270859][ T6779] ? __rcu_read_unlock+0x34/0x70 [ 102.270878][ T6779] ? __netlink_lookup+0x266/0x2a0 [ 102.270899][ T6779] netlink_unicast+0x5c0/0x690 [ 102.270937][ T6779] netlink_sendmsg+0x58b/0x6b0 [ 102.271017][ T6779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.271036][ T6779] __sock_sendmsg+0x145/0x180 [ 102.271119][ T6779] ____sys_sendmsg+0x31e/0x4e0 [ 102.271141][ T6779] ___sys_sendmsg+0x17b/0x1d0 [ 102.271211][ T6779] __x64_sys_sendmsg+0xd4/0x160 [ 102.271234][ T6779] x64_sys_call+0x191e/0x2ff0 [ 102.271253][ T6779] do_syscall_64+0xd2/0x200 [ 102.271299][ T6779] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.271389][ T6779] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.271410][ T6779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.271448][ T6779] RIP: 0033:0x7fb2e414ebe9 [ 102.271466][ T6779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.271546][ T6779] RSP: 002b:00007fb2e2b8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.271565][ T6779] RAX: ffffffffffffffda RBX: 00007fb2e4376090 RCX: 00007fb2e414ebe9 [ 102.271607][ T6779] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 102.271618][ T6779] RBP: 00007fb2e41d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.271629][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.271640][ T6779] R13: 00007fb2e4376128 R14: 00007fb2e4376090 R15: 00007ffc226b5a08 [ 102.271656][ T6779] [ 102.271678][ T6779] memory: usage 307200kB, limit 307200kB, failcnt 265 [ 102.611295][ T6779] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 102.619235][ T6779] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 102.626500][ T6779] Memory cgroup stats for /syz5: [ 102.629021][ T6779] cache 0 [ 102.636974][ T6779] rss 0 [ 102.639803][ T6779] shmem 0 [ 102.642858][ T6779] mapped_file 0 [ 102.646331][ T6779] dirty 0 [ 102.649626][ T6779] writeback 0 [ 102.653068][ T6779] workingset_refault_anon 62 [ 102.657920][ T6779] workingset_refault_file 0 [ 102.662795][ T6779] swap 192512 [ 102.666116][ T6779] swapcached 0 [ 102.669520][ T6779] pgpgin 39093 [ 102.672896][ T6779] pgpgout 39093 [ 102.676518][ T6779] pgfault 53461 [ 102.680056][ T6779] pgmajfault 37 [ 102.683520][ T6779] inactive_anon 0 [ 102.687158][ T6779] active_anon 0 [ 102.690683][ T6779] inactive_file 0 [ 102.694304][ T6779] active_file 0 [ 102.697737][ T6779] unevictable 0 [ 102.701223][ T6779] hierarchical_memory_limit 314572800 [ 102.706610][ T6779] hierarchical_memsw_limit 9223372036854771712 [ 102.713184][ T6779] total_cache 0 [ 102.716802][ T6779] total_rss 0 [ 102.720075][ T6779] total_shmem 0 [ 102.723669][ T6779] total_mapped_file 0 [ 102.727672][ T6779] total_dirty 0 [ 102.731159][ T6779] total_writeback 0 [ 102.734993][ T6779] total_workingset_refault_anon 62 [ 102.740215][ T6779] total_workingset_refault_file 0 [ 102.745247][ T6779] total_swap 192512 [ 102.749083][ T6779] total_swapcached 0 [ 102.752959][ T6779] total_pgpgin 39093 [ 102.756833][ T6779] total_pgpgout 39093 [ 102.760804][ T6779] total_pgfault 53461 [ 102.764884][ T6779] total_pgmajfault 37 [ 102.768857][ T6779] total_inactive_anon 0 [ 102.772984][ T6779] total_active_anon 0 [ 102.776938][ T6779] total_inactive_file 0 [ 102.781198][ T6779] total_active_file 0 [ 102.785157][ T6779] total_unevictable 0 [ 102.789158][ T6779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1243,pid=6770,uid=0 [ 102.803722][ T6779] Memory cgroup out of memory: Killed process 6770 (syz.5.1243) total-vm:95812kB, anon-rss:1072kB, file-rss:22192kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 102.822018][ T6803] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 102.841240][ T6795] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.867830][ T6803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.883771][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 102.894331][ T6803] bond0 (unregistering): Released all slaves [ 102.906182][ T6795] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.965116][ T6816] loop4: detected capacity change from 0 to 2048 [ 102.983019][ T6795] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.009966][ T6816] Alternate GPT is invalid, using primary GPT. [ 103.016463][ T6816] loop4: p1 p2 p3 [ 103.034250][ T3819] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.050556][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1263'. [ 103.053928][ T3819] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.099499][ T6821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.110389][ T3819] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.114764][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1263'. [ 103.130887][ T6821] bond1 (unregistering): Released all slaves [ 103.178953][ T3819] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.192294][ T6831] netlink: 'syz.3.1267': attribute type 3 has an invalid length. [ 103.340477][ T6844] loop5: detected capacity change from 0 to 1024 [ 103.347878][ T6844] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 103.356326][ T6844] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.367404][ T6844] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 103.402680][ T6844] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 103.414125][ T6844] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #17: comm syz.5.1272: iget: bad i_size value: 4398046511204 [ 103.427603][ T6844] EXT4-fs (loop5): no journal found [ 103.445137][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1274'. [ 104.115238][ T6848] syz.4.1273 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 104.126313][ T6848] CPU: 1 UID: 0 PID: 6848 Comm: syz.4.1273 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 104.126407][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.126422][ T6848] Call Trace: [ 104.126473][ T6848] [ 104.126482][ T6848] __dump_stack+0x1d/0x30 [ 104.126584][ T6848] dump_stack_lvl+0xe8/0x140 [ 104.126606][ T6848] dump_stack+0x15/0x1b [ 104.126626][ T6848] dump_header+0x81/0x220 [ 104.126663][ T6848] oom_kill_process+0x342/0x400 [ 104.126717][ T6848] out_of_memory+0x979/0xb80 [ 104.126746][ T6848] try_charge_memcg+0x5e6/0x9e0 [ 104.126778][ T6848] charge_memcg+0x51/0xc0 [ 104.126837][ T6848] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 104.126877][ T6848] __read_swap_cache_async+0x1df/0x350 [ 104.126962][ T6848] swap_cluster_readahead+0x277/0x3e0 [ 104.127002][ T6848] swapin_readahead+0xde/0x6f0 [ 104.127030][ T6848] ? __filemap_get_folio+0x4f7/0x6b0 [ 104.127142][ T6848] ? __rcu_read_unlock+0x34/0x70 [ 104.127164][ T6848] ? swap_cache_get_folio+0x77/0x200 [ 104.127261][ T6848] do_swap_page+0x301/0x2430 [ 104.127360][ T6848] ? css_rstat_updated+0xb7/0x240 [ 104.127386][ T6848] ? __pfx_default_wake_function+0x10/0x10 [ 104.127417][ T6848] handle_mm_fault+0x9a5/0x2c20 [ 104.127507][ T6848] do_user_addr_fault+0x636/0x1090 [ 104.127558][ T6848] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 104.127593][ T6848] exc_page_fault+0x62/0xa0 [ 104.127666][ T6848] asm_exc_page_fault+0x26/0x30 [ 104.127698][ T6848] RIP: 0033:0x7fcb7cdd563c [ 104.127718][ T6848] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 104.127740][ T6848] RSP: 002b:00007ffccf264e30 EFLAGS: 00010283 [ 104.127760][ T6848] RAX: 0000000000000000 RBX: 00007fcb7d127080 RCX: 0000000000000000 [ 104.127775][ T6848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557bf7f808 [ 104.127789][ T6848] RBP: 00007fcb7d127da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 104.127884][ T6848] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000019716 [ 104.127899][ T6848] R13: 00007ffccf264f20 R14: ffffffffffffffff R15: 00007ffccf264f40 [ 104.127933][ T6848] [ 104.127942][ T6848] memory: usage 307200kB, limit 307200kB, failcnt 291 [ 104.201711][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1289'. [ 104.205141][ T6848] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 104.205161][ T6848] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 104.376386][ T6848] Memory cgroup stats for /syz4: [ 104.377308][ T6848] cache 0 [ 104.385363][ T6848] rss 0 [ 104.388196][ T6848] shmem 0 [ 104.391274][ T6848] mapped_file 0 [ 104.394821][ T6848] dirty 0 [ 104.397771][ T6848] writeback 4096 [ 104.401406][ T6848] workingset_refault_anon 2057 [ 104.406183][ T6848] workingset_refault_file 128 [ 104.410935][ T6848] swap 208896 [ 104.414258][ T6848] swapcached 4096 [ 104.417990][ T6848] pgpgin 103759 [ 104.421631][ T6848] pgpgout 103754 [ 104.425442][ T6848] pgfault 98760 [ 104.428969][ T6848] pgmajfault 265 [ 104.432521][ T6848] inactive_anon 4096 [ 104.436486][ T6848] active_anon 0 [ 104.440085][ T6848] inactive_file 16384 [ 104.444244][ T6848] active_file 0 [ 104.448024][ T6848] unevictable 0 [ 104.451526][ T6848] hierarchical_memory_limit 314572800 [ 104.456928][ T6848] hierarchical_memsw_limit 9223372036854771712 [ 104.463131][ T6848] total_cache 0 [ 104.466603][ T6848] total_rss 0 [ 104.470014][ T6848] total_shmem 0 [ 104.473572][ T6848] total_mapped_file 0 [ 104.477646][ T6848] total_dirty 0 [ 104.481141][ T6848] total_writeback 4096 [ 104.485221][ T6848] total_workingset_refault_anon 2057 [ 104.490667][ T6848] total_workingset_refault_file 128 [ 104.495977][ T6848] total_swap 208896 [ 104.499902][ T6848] total_swapcached 4096 [ 104.504083][ T6848] total_pgpgin 103759 [ 104.508070][ T6848] total_pgpgout 103754 [ 104.512220][ T6848] total_pgfault 98760 [ 104.516210][ T6848] total_pgmajfault 265 [ 104.520293][ T6848] total_inactive_anon 4096 [ 104.524712][ T6848] total_active_anon 0 [ 104.528828][ T6848] total_inactive_file 16384 [ 104.533360][ T6848] total_active_file 0 [ 104.537439][ T6848] total_unevictable 0 [ 104.541464][ T6848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1273,pid=6848,uid=0 [ 104.556324][ T6848] Memory cgroup out of memory: Killed process 6848 (syz.4.1273) total-vm:95812kB, anon-rss:948kB, file-rss:22060kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 104.696009][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'. [ 104.779881][ T6880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.801550][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 104.819147][ T6880] bond0 (unregistering): Released all slaves [ 104.829724][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1288'. [ 104.902695][ T6890] sch_fq: defrate 0 ignored. [ 104.949764][ T6895] tipc: Failed to remove unknown binding: 66,1,1/0:3766916494/3766916496 [ 104.964117][ T6892] loop4: detected capacity change from 0 to 1024 [ 104.985232][ T6892] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 104.994271][ T6892] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.005440][ T6892] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 105.021715][ T6892] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 105.041961][ T6892] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #17: comm syz.4.1291: iget: bad i_size value: 4398046511204 [ 105.057251][ T6892] EXT4-fs (loop4): no journal found [ 105.095582][ T6910] loop3: detected capacity change from 0 to 512 [ 105.109973][ T6910] ext4: Unknown parameter 'euid>00000000000000000000' [ 105.121841][ T6910] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1298'. [ 105.197897][ T6921] loop5: detected capacity change from 0 to 1024 [ 105.431303][ T6961] loop3: detected capacity change from 0 to 512 [ 105.450132][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.463207][ T6961] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.483237][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.841361][ T6982] loop4: detected capacity change from 0 to 512 [ 105.853038][ T6982] ext4: Unknown parameter 'euid>00000000000000000000' [ 105.925719][ T6990] loop4: detected capacity change from 0 to 512 [ 105.929112][ T6988] loop2: detected capacity change from 0 to 1024 [ 105.941548][ T6990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.971146][ T6990] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.054830][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.115142][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 106.115160][ T29] audit: type=1400 audit(1755073102.835:4012): avc: denied { read } for pid=7000 comm="syz.4.1337" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.165501][ T29] audit: type=1326 audit(1755073102.885:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8db1ac5ba7 code=0x7ffc0000 [ 106.189107][ T29] audit: type=1326 audit(1755073102.885:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8db1a6add9 code=0x7ffc0000 [ 106.212832][ T29] audit: type=1326 audit(1755073102.885:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8db1ac5ba7 code=0x7ffc0000 [ 106.236672][ T29] audit: type=1326 audit(1755073102.885:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8db1a6add9 code=0x7ffc0000 [ 106.260260][ T29] audit: type=1326 audit(1755073102.885:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 106.284633][ T29] audit: type=1326 audit(1755073102.915:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 106.308141][ T29] audit: type=1326 audit(1755073102.915:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 106.331682][ T29] audit: type=1326 audit(1755073102.915:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 106.355114][ T29] audit: type=1326 audit(1755073102.915:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 106.418799][ T7009] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.489950][ T7009] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.536484][ T7019] __nla_validate_parse: 7 callbacks suppressed [ 106.536502][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'. [ 106.554286][ T7009] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.590140][ T7023] netlink: 'syz.0.1347': attribute type 10 has an invalid length. [ 106.599707][ T7009] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.668329][ T3831] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.682057][ T3831] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.698059][ T3831] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.715805][ T7029] loop2: detected capacity change from 0 to 512 [ 106.725387][ T3831] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.736791][ T7029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.750003][ T7029] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.798088][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.844113][ T7043] loop2: detected capacity change from 0 to 128 [ 106.874423][ T7043] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.887526][ T7043] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.969805][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.991668][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 107.008749][ T7048] batadv0 (unregistering): left allmulticast mode [ 107.015303][ T7048] batadv0 (unregistering): left promiscuous mode [ 107.021812][ T7048] bridge0: port 1(batadv0) entered disabled state [ 107.073353][ T7056] sch_fq: defrate 0 ignored. [ 107.091475][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1363'. [ 107.105594][ T7058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.117420][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 107.127270][ T7058] bond2 (unregistering): Released all slaves [ 107.193949][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 107.230470][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 107.295953][ T7073] loop2: detected capacity change from 0 to 512 [ 107.303847][ T7073] ext4: Unknown parameter 'euid>00000000000000000000' [ 107.336923][ T7073] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1368'. [ 107.449994][ T7083] loop2: detected capacity change from 0 to 2048 [ 107.509381][ T7083] loop2: p1 < > p4 [ 107.514081][ T7083] loop2: p4 size 8388608 extends beyond EOD, truncated [ 107.622403][ T7092] loop4: detected capacity change from 0 to 1024 [ 107.640571][ T7092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.694630][ T7088] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 107.729770][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.007999][ T7120] tipc: Failed to remove unknown binding: 66,1,1/0:3698525791/3698525793 [ 108.115389][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 108.133013][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'. [ 108.162141][ T7143] loop4: detected capacity change from 0 to 512 [ 108.191177][ T7143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.205479][ T7149] tipc: Failed to remove unknown binding: 66,1,1/8432298:3233666539/3233666541 [ 108.218428][ T7143] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.252435][ T7152] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 108.272960][ T7152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.295891][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 108.317441][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.326945][ T7152] bond2 (unregistering): Released all slaves [ 108.777527][ T7195] netlink: 'syz.3.1415': attribute type 1 has an invalid length. [ 108.807054][ T7195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.820620][ T7195] bond1 (unregistering): Released all slaves [ 109.156313][ T7209] loop3: detected capacity change from 0 to 2048 [ 109.188619][ T7209] loop3: p1 < > p4 [ 109.193150][ T7209] loop3: p4 size 8388608 extends beyond EOD, truncated [ 109.229455][ T7211] loop3: detected capacity change from 0 to 2048 [ 109.258872][ T7211] loop3: p1 < > p4 [ 109.263174][ T7211] loop3: p4 size 8388608 extends beyond EOD, truncated [ 109.314267][ T7213] loop3: detected capacity change from 0 to 164 [ 109.327699][ T7213] Unable to read rock-ridge attributes [ 109.407501][ T7213] Unable to read rock-ridge attributes [ 109.416023][ T7213] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 109.569964][ T7227] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 109.578073][ T7226] loop3: detected capacity change from 0 to 1024 [ 109.585361][ T7227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.586090][ T7226] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 109.601212][ T7226] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.612160][ T7226] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 109.622411][ T7226] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 109.633528][ T7226] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #17: comm syz.3.1430: iget: bad i_size value: 4398046511204 [ 109.633984][ T7227] bond0 (unregistering): Released all slaves [ 109.656146][ T7226] EXT4-fs (loop3): no journal found [ 109.759881][ T7240] loop3: detected capacity change from 0 to 512 [ 109.776040][ T7238] loop5: detected capacity change from 0 to 2048 [ 109.792813][ T7240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.806444][ T7240] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.828630][ T7238] loop5: p1 < > p4 [ 109.833058][ T7238] loop5: p4 size 8388608 extends beyond EOD, truncated [ 109.916215][ T7246] loop2: detected capacity change from 0 to 1024 [ 109.961455][ T7246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.007475][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.028994][ T7246] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1439: Allocating blocks 497-513 which overlap fs metadata [ 110.076191][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.139875][ T7274] loop2: detected capacity change from 0 to 1024 [ 110.146894][ T7274] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 110.155756][ T7274] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.166886][ T7274] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 110.177475][ T7274] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 110.189777][ T7274] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #17: comm syz.2.1450: iget: bad i_size value: 4398046511204 [ 110.203510][ T7274] EXT4-fs (loop2): no journal found [ 110.330326][ T7285] loop2: detected capacity change from 0 to 512 [ 110.341647][ T7288] netlink: 'syz.5.1455': attribute type 10 has an invalid length. [ 110.351482][ T7288] netlink: 'syz.5.1455': attribute type 10 has an invalid length. [ 110.360983][ T7285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.361706][ T7288] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.405416][ T7285] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.419709][ T7295] netlink: 'syz.3.1457': attribute type 13 has an invalid length. [ 110.444483][ T7295] gretap0: refused to change device tx_queue_len [ 110.451878][ T7295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 110.533122][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.337403][ T7320] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.410279][ T7320] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.434810][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 111.434832][ T29] audit: type=1400 audit(1755073108.155:4263): avc: denied { kexec_image_load } for pid=7324 comm="syz.3.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 111.490583][ T7320] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.500681][ T29] audit: type=1326 audit(1755073108.215:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 111.524231][ T29] audit: type=1326 audit(1755073108.215:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 111.547946][ T29] audit: type=1326 audit(1755073108.215:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 111.571615][ T29] audit: type=1326 audit(1755073108.215:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.3.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 111.611647][ T7336] netlink: 'syz.0.1470': attribute type 10 has an invalid length. [ 111.620184][ T7336] bond0: (slave dummy0): Releasing backup interface [ 111.632211][ T7336] dummy0: entered promiscuous mode [ 111.637563][ T7336] dummy0: entered allmulticast mode [ 111.643130][ T7336] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.655311][ T7336] team0: Failed to send options change via netlink (err -105) [ 111.662870][ T7336] team0: Port device dummy0 added [ 111.671805][ T7340] netlink: 'syz.0.1470': attribute type 10 has an invalid length. [ 111.681014][ T7320] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.700072][ T7340] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.717395][ T7340] dummy0: left promiscuous mode [ 111.723384][ T7340] dummy0: left allmulticast mode [ 111.730344][ T7340] team0: Failed to send options change via netlink (err -105) [ 111.743931][ T7340] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.761355][ T7340] team0: Port device dummy0 removed [ 111.771819][ T7340] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.775017][ T29] audit: type=1326 audit(1755073108.485:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 111.804121][ T29] audit: type=1326 audit(1755073108.485:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 111.827747][ T29] audit: type=1326 audit(1755073108.495:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 111.851325][ T29] audit: type=1326 audit(1755073108.495:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 111.875055][ T29] audit: type=1326 audit(1755073108.495:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565365ebe9 code=0x7ffc0000 [ 111.917338][ T6994] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.926079][ T6994] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.947950][ T6994] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.018534][ T3862] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.094084][ T7362] loop5: detected capacity change from 0 to 2048 [ 112.124381][ T7363] __nla_validate_parse: 6 callbacks suppressed [ 112.124398][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 112.128896][ T7366] ip6gre2: entered allmulticast mode [ 112.159315][ T7362] loop5: p1 < > p4 [ 112.163779][ T7362] loop5: p4 size 8388608 extends beyond EOD, truncated [ 112.386391][ T7377] loop4: detected capacity change from 0 to 8192 [ 112.596425][ T7397] netlink: 'syz.0.1495': attribute type 13 has an invalid length. [ 112.608689][ T7399] netlink: 'syz.2.1497': attribute type 10 has an invalid length. [ 112.617681][ T7399] team0: Port device dummy0 added [ 112.626052][ T7399] team0: Port device dummy0 removed [ 112.632821][ T7399] dummy0: entered promiscuous mode [ 112.638502][ T7399] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 112.668496][ T7397] gretap0: refused to change device tx_queue_len [ 112.675433][ T7397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 112.683230][ T7405] loop2: detected capacity change from 0 to 128 [ 112.755466][ T7411] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1502'. [ 112.782430][ T7413] loop3: detected capacity change from 0 to 2048 [ 112.799991][ T7413] EXT4-fs (loop3): failed to initialize system zone (-117) [ 112.809492][ T7413] EXT4-fs (loop3): mount failed [ 112.842947][ T7413] geneve2: entered promiscuous mode [ 112.859303][ T3862] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.903979][ T3862] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.919258][ T7422] loop4: detected capacity change from 0 to 1024 [ 112.932952][ T3862] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.943305][ T3862] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.956112][ T7422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.024582][ T7422] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.1504: Allocating blocks 497-513 which overlap fs metadata [ 113.092144][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.096961][ T7434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=797 sclass=netlink_route_socket pid=7434 comm=syz.2.1510 [ 113.114499][ T7437] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1507'. [ 113.123764][ T7437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1507'. [ 113.181478][ T7443] gretap0: refused to change device tx_queue_len [ 113.188647][ T7443] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 113.428780][ T7445] validate_nla: 2 callbacks suppressed [ 113.428796][ T7445] netlink: 'syz.4.1515': attribute type 10 has an invalid length. [ 113.437211][ T7449] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1514'. [ 113.456754][ T7445] team0: Port device dummy0 added [ 113.465348][ T7445] netlink: 'syz.4.1515': attribute type 10 has an invalid length. [ 113.480161][ T7445] team0: Port device dummy0 removed [ 113.487859][ T7445] : (slave dummy0): Enslaving as an active interface with an up link [ 113.520394][ T7451] loop5: detected capacity change from 0 to 2048 [ 113.527008][ T7451] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 113.564194][ T7455] ip6gre1: entered allmulticast mode [ 113.611886][ T7457] loop5: detected capacity change from 0 to 164 [ 113.622238][ T7458] loop4: detected capacity change from 0 to 2048 [ 113.630411][ T7457] Unable to read rock-ridge attributes [ 113.649725][ T7458] loop4: p3 p4 < > [ 113.653578][ T7458] loop4: p3 size 57344 extends beyond EOD, truncated [ 113.728650][ T7457] Unable to read rock-ridge attributes [ 113.736413][ T7457] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 113.781994][ T7464] netlink: 'syz.3.1522': attribute type 7 has an invalid length. [ 113.789913][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 113.808401][ T7466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=417 sclass=netlink_route_socket pid=7466 comm=syz.5.1523 [ 113.837557][ T7470] pim6reg1: entered promiscuous mode [ 113.843018][ T7470] pim6reg1: entered allmulticast mode [ 114.416234][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 114.425779][ T7473] loop5: detected capacity change from 0 to 512 [ 114.433302][ T7473] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.444226][ T7473] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.451030][ T7473] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.1537: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 114.469312][ T7473] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.1537: Bad quota inode: 3, type: 0 [ 114.481473][ T7473] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 114.496290][ T7473] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 114.504694][ T7473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.533031][ T4815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.549795][ T7486] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1542'. [ 114.805121][ T7509] netlink: 'syz.5.1541': attribute type 10 has an invalid length. [ 114.894998][ T7518] wg2: entered promiscuous mode [ 114.897967][ T7517] loop3: detected capacity change from 0 to 512 [ 114.900314][ T7518] wg2: entered allmulticast mode [ 114.912408][ T7517] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.922831][ T7517] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.930600][ T7517] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1544: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 114.948994][ T7517] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1544: Bad quota inode: 3, type: 0 [ 114.968199][ T7517] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 114.983404][ T7517] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 115.006376][ T7517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.047797][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.388985][ T7540] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.398934][ T7540] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.500384][ T7540] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.510379][ T7540] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.630753][ T7540] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.640684][ T7540] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.652746][ T7549] loop2: detected capacity change from 0 to 2048 [ 115.679945][ T7540] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.689967][ T7540] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.708782][ T7549] loop2: p3 p4 < > [ 115.712825][ T7549] loop2: p3 size 57344 extends beyond EOD, truncated [ 115.755614][ T3817] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.763927][ T3817] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.775014][ T6994] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.783330][ T6994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.794528][ T6994] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.802777][ T6994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.814025][ T6994] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.822333][ T6994] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.027760][ T7575] loop3: detected capacity change from 0 to 128 [ 116.128781][ T7579] bridge0: entered allmulticast mode [ 116.134896][ T7579] bridge_slave_1: left allmulticast mode [ 116.140955][ T7579] bridge_slave_1: left promiscuous mode [ 116.146807][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.196139][ T7579] bridge_slave_0: left allmulticast mode [ 116.201875][ T7579] bridge_slave_0: left promiscuous mode [ 116.207595][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.285994][ T7592] loop4: detected capacity change from 0 to 512 [ 116.296737][ T7592] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.312026][ T7592] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.318671][ T7592] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1574: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 116.336684][ T7592] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1574: Bad quota inode: 3, type: 0 [ 116.347944][ T7592] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 116.362654][ T7592] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 116.370484][ T7592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.510949][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.620065][ T7601] unsupported nla_type 52263 [ 116.891286][ T7628] netlink: 'syz.4.1589': attribute type 10 has an invalid length. [ 116.900550][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 116.900569][ T29] audit: type=1326 audit(1755073113.625:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 116.935549][ T29] audit: type=1326 audit(1755073113.655:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 116.959330][ T29] audit: type=1326 audit(1755073113.655:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 116.982979][ T29] audit: type=1326 audit(1755073113.655:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 117.006681][ T29] audit: type=1326 audit(1755073113.655:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 117.030179][ T29] audit: type=1326 audit(1755073113.655:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 117.053774][ T29] audit: type=1326 audit(1755073113.655:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 117.077305][ T29] audit: type=1326 audit(1755073113.655:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 117.100930][ T29] audit: type=1326 audit(1755073113.655:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 117.124436][ T29] audit: type=1326 audit(1755073113.655:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.3.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db1acebe9 code=0x7ffc0000 [ 117.306593][ T7654] netlink: 'syz.2.1599': attribute type 10 has an invalid length. [ 117.319023][ T7654] $Hÿ: (slave dummy0): Releasing backup interface [ 117.326066][ T7654] dummy0: left promiscuous mode [ 117.337033][ T7654] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 117.340532][ T7656] loop3: detected capacity change from 0 to 512 [ 117.347020][ T7654] team0: Failed to send options change via netlink (err -105) [ 117.360120][ T7654] team0: Port device dummy0 added [ 117.383754][ T7661] netlink: 'syz.2.1599': attribute type 10 has an invalid length. [ 117.406032][ T7661] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 117.416347][ T7656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.436564][ T7656] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.439330][ T7661] team0: Failed to send options change via netlink (err -105) [ 117.491935][ T7661] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 117.518706][ T7661] team0: Port device dummy0 removed [ 117.525705][ T7661] dummy0: entered promiscuous mode [ 117.546299][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.559173][ T7661] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 117.969273][ T7701] loop3: detected capacity change from 0 to 512 [ 117.976318][ T7701] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.014501][ T7701] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.065618][ T7701] EXT4-fs (loop3): 1 truncate cleaned up [ 118.072966][ T7701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.136077][ T7711] bridge0: entered allmulticast mode [ 118.179399][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 118.248665][ T7717] loop4: detected capacity change from 0 to 512 [ 118.256827][ T7717] EXT4-fs (loop4): 1 truncate cleaned up [ 118.274736][ T7717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.315650][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.411053][ T7739] netlink: 'syz.4.1634': attribute type 10 has an invalid length. [ 118.419554][ T7739] : (slave dummy0): Releasing backup interface [ 118.429399][ T7739] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.438365][ T7739] team0: Failed to send options change via netlink (err -105) [ 118.446001][ T7739] team0: Port device dummy0 added [ 118.461476][ T7741] netlink: 'syz.4.1634': attribute type 10 has an invalid length. [ 118.495986][ T7741] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.524729][ T7741] team0: Failed to send options change via netlink (err -105) [ 118.535563][ T7741] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.546433][ T7741] team0: Port device dummy0 removed [ 118.555623][ T7741] : (slave dummy0): Enslaving as an active interface with an up link [ 118.633692][ T7756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1640'. [ 118.716092][ T7773] pim6reg1: entered promiscuous mode [ 118.721546][ T7773] pim6reg1: entered allmulticast mode [ 118.789791][ T7785] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 118.800459][ T7785] bond0: (slave dummy0): Releasing backup interface [ 118.810345][ T7785] dummy0: entered promiscuous mode [ 118.816230][ T7785] dummy0: entered allmulticast mode [ 118.823092][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.845449][ T7787] loop4: detected capacity change from 0 to 512 [ 118.848441][ T7790] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 118.868422][ T7785] team0: Failed to send options change via netlink (err -105) [ 118.876033][ T7785] team0: Port device dummy0 added [ 118.883086][ T7787] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.902342][ T7790] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.946879][ T7790] dummy0: left promiscuous mode [ 118.954601][ T7790] dummy0: left allmulticast mode [ 118.962138][ T7787] SELinux: failed to load policy [ 118.967459][ T7790] team0: Failed to send options change via netlink (err -105) [ 118.978750][ T7790] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 118.989254][ T3309] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 118.999705][ T7790] team0: Port device dummy0 removed [ 119.011791][ T7790] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.163847][ T7809] loop4: detected capacity change from 0 to 512 [ 119.180972][ T7809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.200609][ T7809] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.330075][ T7822] sd 0:0:1:0: device reset [ 119.341599][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.365278][ T7826] bond_slave_1: mtu less than device minimum [ 119.397957][ T7830] loop5: detected capacity change from 0 to 512 [ 119.413337][ T7830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.432950][ T7830] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.612556][ T4815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.622357][ T7838] tipc: Started in network mode [ 119.627418][ T7838] tipc: Node identity 16755fd242d8, cluster identity 4711 [ 119.634865][ T7838] tipc: Enabled bearer , priority 0 [ 119.642734][ T7837] tipc: Resetting bearer [ 119.677957][ T7837] tipc: Disabling bearer [ 119.692659][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1680'. [ 119.724005][ T7854] loop5: detected capacity change from 0 to 512 [ 119.732173][ T7854] EXT4-fs (loop5): 1 truncate cleaned up [ 119.738815][ T7854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.773997][ T4815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.779089][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1683'. [ 119.802216][ T7863] loop2: detected capacity change from 0 to 512 [ 119.833634][ T7863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.856839][ T7863] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.890123][ T7877] loop5: detected capacity change from 0 to 2048 [ 119.918557][ T7877] loop5: p3 p4 < > [ 119.922527][ T7877] loop5: p3 size 57344 extends beyond EOD, truncated [ 119.992811][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.074380][ T7891] sd 0:0:1:0: device reset [ 120.092656][ T7893] loop2: detected capacity change from 0 to 128 [ 120.417933][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1698'. [ 120.775659][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1712'. [ 120.796363][ T7929] loop2: detected capacity change from 0 to 512 [ 120.804146][ T7929] EXT4-fs (loop2): 1 truncate cleaned up [ 120.810281][ T7929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.833600][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.881221][ T7942] loop4: detected capacity change from 0 to 128 [ 120.960737][ T7953] bio_check_eod: 99 callbacks suppressed [ 120.960753][ T7953] syz.4.1718: attempt to access beyond end of device [ 120.960753][ T7953] loop4: rw=2049, sector=145, nr_sectors = 32 limit=128 [ 120.987451][ T7955] vlan2: entered allmulticast mode [ 120.992718][ T7955] bridge_slave_1: entered allmulticast mode [ 121.005963][ T7953] syz.4.1718: attempt to access beyond end of device [ 121.005963][ T7953] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 121.036975][ T7953] syz.4.1718: attempt to access beyond end of device [ 121.036975][ T7953] loop4: rw=2049, sector=201, nr_sectors = 24 limit=128 [ 121.052212][ T7942] syz.4.1718: attempt to access beyond end of device [ 121.052212][ T7942] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 121.065984][ T7942] syz.4.1718: attempt to access beyond end of device [ 121.065984][ T7942] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 121.083283][ T7953] syz.4.1718: attempt to access beyond end of device [ 121.083283][ T7953] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 121.097467][ T7942] syz.4.1718: attempt to access beyond end of device [ 121.097467][ T7942] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 121.111611][ T7942] syz.4.1718: attempt to access beyond end of device [ 121.111611][ T7942] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 121.126655][ T7942] syz.4.1718: attempt to access beyond end of device [ 121.126655][ T7942] loop4: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 121.143182][ T7942] syz.4.1718: attempt to access beyond end of device [ 121.143182][ T7942] loop4: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 121.198349][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 121.228405][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1725'. [ 121.349481][ T7969] netlink: zone id is out of range [ 121.361035][ T7969] netlink: zone id is out of range [ 121.366456][ T7969] netlink: zone id is out of range [ 121.371724][ T7969] netlink: zone id is out of range [ 121.378271][ T7969] netlink: zone id is out of range [ 121.383844][ T7969] netlink: zone id is out of range [ 121.389503][ T7969] netlink: zone id is out of range [ 121.395046][ T7969] netlink: zone id is out of range [ 121.407381][ T7969] netlink: zone id is out of range [ 121.438060][ T7977] loop5: detected capacity change from 0 to 128 [ 121.448630][ T7977] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.485997][ T7977] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.532543][ T3862] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.674455][ T7997] loop3: detected capacity change from 0 to 512 [ 121.696324][ T7997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.709850][ T7997] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.803637][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.886612][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1747'. [ 122.049093][ T8027] loop2: detected capacity change from 0 to 128 [ 122.056077][ T8027] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.083792][ T8027] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.130820][ T3862] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.139613][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 122.139630][ T29] audit: type=1326 audit(1755073118.855:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.196225][ T8035] loop3: detected capacity change from 0 to 2048 [ 122.239312][ T29] audit: type=1326 audit(1755073118.895:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.263029][ T29] audit: type=1326 audit(1755073118.895:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.286654][ T29] audit: type=1326 audit(1755073118.915:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.310195][ T29] audit: type=1326 audit(1755073118.925:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.333654][ T29] audit: type=1326 audit(1755073118.935:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.375272][ T29] audit: type=1326 audit(1755073119.085:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.398914][ T29] audit: type=1326 audit(1755073119.085:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.422447][ T29] audit: type=1326 audit(1755073119.085:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.449007][ T8042] all: renamed from lo (while UP) [ 122.451694][ T29] audit: type=1326 audit(1755073119.175:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8031 comm="syz.4.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 122.479451][ T8035] loop3: p3 p4 < > [ 122.483333][ T8035] loop3: p3 size 57344 extends beyond EOD, truncated [ 122.502839][ T8044] uprobe: syz.0.1761:8044 failed to unregister, leaking uprobe [ 122.510776][ T8044] uprobe: syz.0.1761:8044 failed to unregister, leaking uprobe [ 122.569148][ T8040] loop2: detected capacity change from 0 to 512 [ 122.583661][ T8046] loop9: detected capacity change from 0 to 7 [ 122.592373][ T8046] loop9: [ 122.603203][ T8040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.616260][ T8040] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.695666][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.729822][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 122.784938][ T8061] loop2: detected capacity change from 0 to 512 [ 122.792940][ T8061] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 122.935455][ T8072] loop5: detected capacity change from 0 to 164 [ 123.047969][ T8081] uprobe: syz.5.1785:8081 failed to unregister, leaking uprobe [ 123.055837][ T8081] uprobe: syz.5.1785:8081 failed to unregister, leaking uprobe [ 123.104961][ T8086] loop5: detected capacity change from 0 to 512 [ 123.132781][ T8086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.145742][ T8086] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.181711][ T4815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.216689][ T8097] loop5: detected capacity change from 0 to 512 [ 123.223877][ T8097] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 123.634560][ T8114] netlink: 'syz.5.1790': attribute type 1 has an invalid length. [ 123.649761][ T8114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.666604][ T8114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.678899][ T8114] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.693405][ T8114] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 123.697628][ T8117] loop4: detected capacity change from 0 to 512 [ 123.720900][ T8117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.733705][ T8117] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.769909][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.836484][ T3389] IPVS: starting estimator thread 0... [ 123.886318][ T8145] bridge0: port 1(batadv0) entered blocking state [ 123.893122][ T8145] bridge0: port 1(batadv0) entered disabled state [ 123.908608][ T8145] batadv0: entered allmulticast mode [ 123.920033][ T8145] batadv0: entered promiscuous mode [ 123.937370][ T8145] __nla_validate_parse: 1 callbacks suppressed [ 123.937386][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1802'. [ 123.952678][ T8137] IPVS: using max 2832 ests per chain, 141600 per kthread [ 123.960608][ T8145] batadv0 (unregistering): left allmulticast mode [ 123.967289][ T8145] batadv0 (unregistering): left promiscuous mode [ 123.973894][ T8145] bridge0: port 1(batadv0) entered disabled state [ 124.026879][ T8154] netlink: 'syz.3.1805': attribute type 1 has an invalid length. [ 124.041136][ T8154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.069099][ T8154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.076198][ T8154] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 124.102949][ T8154] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 124.161498][ T8165] loop2: detected capacity change from 0 to 256 [ 124.168206][ T8165] vfat: Unknown parameter 'ÿ' [ 124.247893][ T8173] uprobe: syz.4.1815:8173 failed to unregister, leaking uprobe [ 124.256134][ T8173] uprobe: syz.4.1815:8173 failed to unregister, leaking uprobe [ 124.712837][ T8200] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 124.721341][ T8199] loop3: detected capacity change from 0 to 2048 [ 124.727014][ T8200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.742629][ T8200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.750359][ T8199] Alternate GPT is invalid, using primary GPT. [ 124.750425][ T8200] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 124.751835][ T8200] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 124.757006][ T8199] loop3: p2 p3 p7 [ 124.981973][ T8213] uprobe: syz.3.1829:8213 failed to unregister, leaking uprobe [ 124.989929][ T8213] uprobe: syz.3.1829:8213 failed to unregister, leaking uprobe [ 125.070186][ T8224] loop3: detected capacity change from 0 to 164 [ 125.199936][ T8237] loop2: detected capacity change from 0 to 1024 [ 125.206926][ T8237] EXT4-fs: Ignoring removed orlov option [ 125.216655][ T8237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.479146][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.497670][ T8252] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1854'. [ 125.513751][ T8255] uprobe: syz.2.1844:8255 failed to unregister, leaking uprobe [ 125.521522][ T8255] uprobe: syz.2.1844:8255 failed to unregister, leaking uprobe [ 125.878040][ T3396] IPVS: starting estimator thread 0... [ 125.968520][ T8262] IPVS: using max 3408 ests per chain, 170400 per kthread [ 126.168994][ T8279] loop5: detected capacity change from 0 to 128 [ 126.245788][ T8282] bio_check_eod: 101 callbacks suppressed [ 126.245807][ T8282] syz.5.1853: attempt to access beyond end of device [ 126.245807][ T8282] loop5: rw=2049, sector=145, nr_sectors = 32 limit=128 [ 126.265793][ T8282] syz.5.1853: attempt to access beyond end of device [ 126.265793][ T8282] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 126.279782][ T8282] syz.5.1853: attempt to access beyond end of device [ 126.279782][ T8282] loop5: rw=2049, sector=201, nr_sectors = 24 limit=128 [ 126.293784][ T8279] syz.5.1853: attempt to access beyond end of device [ 126.293784][ T8279] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 126.318542][ T8279] syz.5.1853: attempt to access beyond end of device [ 126.318542][ T8279] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 126.371922][ T8279] syz.5.1853: attempt to access beyond end of device [ 126.371922][ T8279] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 126.372172][ T8291] pim6reg1: entered promiscuous mode [ 126.391189][ T8291] pim6reg1: entered allmulticast mode [ 126.443479][ T8282] syz.5.1853: attempt to access beyond end of device [ 126.443479][ T8282] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 126.463815][ T8279] syz.5.1853: attempt to access beyond end of device [ 126.463815][ T8279] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 126.481036][ T8279] syz.5.1853: attempt to access beyond end of device [ 126.481036][ T8279] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 126.497071][ T8279] syz.5.1853: attempt to access beyond end of device [ 126.497071][ T8279] loop5: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 126.562459][ T8298] pim6reg1: entered promiscuous mode [ 126.567887][ T8298] pim6reg1: entered allmulticast mode [ 126.611943][ T8300] loop2: detected capacity change from 0 to 512 [ 126.630393][ T8302] netlink: 'syz.5.1864': attribute type 1 has an invalid length. [ 126.647000][ T8302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.661100][ T8300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.676760][ T8300] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.689684][ T8302] bond2 (unregistering): Released all slaves [ 126.773588][ T8308] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.802828][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.813062][ T8308] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.870849][ T8308] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.930737][ T8319] bridge0: port 1(batadv0) entered blocking state [ 126.937465][ T8319] bridge0: port 1(batadv0) entered disabled state [ 126.958485][ T8319] batadv0: entered allmulticast mode [ 126.964405][ T8319] batadv0: entered promiscuous mode [ 127.081868][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'. [ 127.092465][ T8308] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.139848][ T8320] batadv0 (unregistering): left allmulticast mode [ 127.146393][ T8320] batadv0 (unregistering): left promiscuous mode [ 127.152945][ T8320] bridge0: port 1(batadv0) entered disabled state [ 127.212678][ T3817] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.226304][ T3817] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.258181][ T3817] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.287096][ T3817] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.542189][ T8337] loop2: detected capacity change from 0 to 512 [ 127.550625][ T8337] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm gtp: corrupted in-inode xattr: invalid ea_ino [ 127.564240][ T8337] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 127.599392][ T8337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.627617][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 127.627634][ T29] audit: type=1326 audit(1755073124.345:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.658931][ T29] audit: type=1326 audit(1755073124.345:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.682923][ T29] audit: type=1326 audit(1755073124.345:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.706528][ T29] audit: type=1326 audit(1755073124.345:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.730305][ T29] audit: type=1326 audit(1755073124.345:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.754715][ T29] audit: type=1326 audit(1755073124.345:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.817991][ T8344] team0 (unregistering): left allmulticast mode [ 127.824397][ T8344] team_slave_0: left allmulticast mode [ 127.829913][ T8344] team_slave_1: left allmulticast mode [ 127.835398][ T8344] team0 (unregistering): left promiscuous mode [ 127.841644][ T8344] team_slave_0: left promiscuous mode [ 127.847198][ T8344] team_slave_1: left promiscuous mode [ 127.850038][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.852761][ T8344] bridge0: port 4(team0) entered disabled state [ 127.871623][ T29] audit: type=1326 audit(1755073124.455:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.895506][ T29] audit: type=1326 audit(1755073124.455:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.919313][ T29] audit: type=1326 audit(1755073124.455:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.943219][ T29] audit: type=1326 audit(1755073124.455:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7cefebe9 code=0x7ffc0000 [ 127.978348][ T8344] team0 (unregistering): Port device team_slave_0 removed [ 127.993839][ T8344] team0 (unregistering): Port device team_slave_1 removed [ 128.024061][ T8352] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.040207][ T8354] loop5: detected capacity change from 0 to 256 [ 128.046946][ T8354] vfat: Unknown parameter 'ÿ' [ 128.070874][ T8352] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.120002][ T8352] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.184906][ T8352] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.964389][ T8382] loop5: detected capacity change from 0 to 2048 [ 129.057134][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'. [ 129.066732][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'. [ 129.132280][ T8395] netlink: 'syz.5.1901': attribute type 1 has an invalid length. [ 129.175829][ T8395] bond2: entered promiscuous mode [ 129.181113][ T8395] bond2: entered allmulticast mode [ 129.187981][ T8395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.197499][ T8403] tipc: Failed to remove unknown binding: 66,1,1/8432298:3622838732/3622838734 [ 129.215000][ T8395] ip6gretap1: entered promiscuous mode [ 129.217323][ T8403] tipc: Failed to remove unknown binding: 66,1,1/8432298:3622838732/3622838734 [ 129.220891][ T8395] ip6gretap1: entered allmulticast mode [ 129.229884][ T8403] tipc: Failed to remove unknown binding: 66,1,1/8432298:3622838732/3622838734 [ 129.236168][ T8395] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 129.278740][ T3862] net_ratelimit: 3 callbacks suppressed [ 129.278772][ T3862] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 129.375524][ T8418] netlink: 'syz.2.1906': attribute type 13 has an invalid length. [ 129.433360][ T1579] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 129.446335][ T8418] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 129.481505][ T8418] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.502132][ T8418] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 129.520231][ T8416] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.530116][ T8416] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.632984][ T8416] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.642894][ T8416] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.729183][ T8416] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.739006][ T8416] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.811998][ T8416] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.822880][ T8416] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.887001][ T3862] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.895303][ T3862] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.907677][ T3862] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.915998][ T3862] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.929791][ T3817] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.938189][ T3817] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.963399][ T3817] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.971707][ T3817] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.013160][ T8435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8435 comm=syz.3.1917 [ 130.025763][ T8435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8435 comm=syz.3.1917 [ 130.138775][ T8439] netlink: 'syz.0.1919': attribute type 1 has an invalid length. [ 130.165254][ T8439] bond3: entered promiscuous mode [ 130.170519][ T8439] bond3: entered allmulticast mode [ 130.175917][ T8439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.176301][ T8444] loop3: detected capacity change from 0 to 1024 [ 130.189612][ T8444] EXT4-fs: Ignoring removed orlov option [ 130.198336][ T8444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.198996][ T8439] ip6gretap1: entered promiscuous mode [ 130.216940][ T8439] ip6gretap1: entered allmulticast mode [ 130.223406][ T8439] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 130.268608][ T3817] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.468436][ T3862] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.553410][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.571243][ T8455] team0 (unregistering): Port device team_slave_0 removed [ 130.579459][ T8455] team0 (unregistering): Port device team_slave_1 removed [ 130.654676][ T8465] bridge0: port 1(batadv0) entered blocking state [ 130.661377][ T8465] bridge0: port 1(batadv0) entered disabled state [ 130.667392][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1930'. [ 130.667980][ T8465] batadv0: entered allmulticast mode [ 130.682817][ T8465] batadv0: entered promiscuous mode [ 130.703204][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 130.714559][ T8465] batadv0 (unregistering): left allmulticast mode [ 130.721093][ T8465] batadv0 (unregistering): left promiscuous mode [ 130.721628][ T8471] loop3: detected capacity change from 0 to 512 [ 130.727533][ T8465] bridge0: port 1(batadv0) entered disabled state [ 130.735270][ T8471] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.747445][ T8471] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.758783][ T8471] EXT4-fs (loop3): 1 truncate cleaned up [ 130.764954][ T8471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.862368][ T8478] ================================================================== [ 130.870499][ T8478] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 130.877643][ T8478] [ 130.880060][ T8478] write to 0xffff8881198e254c of 4 bytes by task 8471 on cpu 0: [ 130.887733][ T8478] xas_set_mark+0x12b/0x140 [ 130.892268][ T8478] __folio_start_writeback+0x1dd/0x440 [ 130.897770][ T8478] ext4_bio_write_folio+0x5ad/0x9f0 [ 130.902976][ T8478] mpage_process_page_bufs+0x4a1/0x620 [ 130.908434][ T8478] mpage_prepare_extent_to_map+0x786/0xc00 [ 130.914274][ T8478] ext4_do_writepages+0xa05/0x2750 [ 130.919393][ T8478] ext4_writepages+0x176/0x300 [ 130.924157][ T8478] do_writepages+0x1c3/0x310 [ 130.928750][ T8478] file_write_and_wait_range+0x156/0x2c0 [ 130.934394][ T8478] generic_buffers_fsync_noflush+0x45/0x120 [ 130.940381][ T8478] ext4_sync_file+0x1ab/0x690 [ 130.945068][ T8478] vfs_fsync_range+0x10d/0x130 [ 130.949944][ T8478] ext4_buffered_write_iter+0x34f/0x3c0 [ 130.955506][ T8478] ext4_file_write_iter+0xdbf/0xf00 [ 130.960717][ T8478] iter_file_splice_write+0x666/0x9e0 [ 130.966178][ T8478] direct_splice_actor+0x153/0x2a0 [ 130.971287][ T8478] splice_direct_to_actor+0x30f/0x680 [ 130.976674][ T8478] do_splice_direct+0xda/0x150 [ 130.981526][ T8478] do_sendfile+0x380/0x650 [ 130.985980][ T8478] __x64_sys_sendfile64+0x105/0x150 [ 130.991197][ T8478] x64_sys_call+0x2bb0/0x2ff0 [ 130.995895][ T8478] do_syscall_64+0xd2/0x200 [ 131.000502][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.006401][ T8478] [ 131.008723][ T8478] read to 0xffff8881198e254c of 4 bytes by task 8478 on cpu 1: [ 131.016262][ T8478] xas_find_marked+0x5dc/0x620 [ 131.021032][ T8478] find_get_entry+0x5d/0x380 [ 131.025636][ T8478] filemap_get_folios_tag+0x92/0x210 [ 131.030920][ T8478] filemap_fdatawait_range+0x88/0x1d0 [ 131.036493][ T8478] __writeback_single_inode+0xdb/0x7c0 [ 131.042004][ T8478] writeback_single_inode+0x167/0x3e0 [ 131.047417][ T8478] sync_inode_metadata+0x5b/0x90 [ 131.052470][ T8478] generic_buffers_fsync_noflush+0xd9/0x120 [ 131.058479][ T8478] ext4_sync_file+0x1ab/0x690 [ 131.063180][ T8478] vfs_fsync_range+0x10d/0x130 [ 131.067948][ T8478] ext4_buffered_write_iter+0x34f/0x3c0 [ 131.073504][ T8478] ext4_file_write_iter+0xdbf/0xf00 [ 131.078714][ T8478] iter_file_splice_write+0x666/0x9e0 [ 131.084082][ T8478] direct_splice_actor+0x153/0x2a0 [ 131.089285][ T8478] splice_direct_to_actor+0x30f/0x680 [ 131.094657][ T8478] do_splice_direct+0xda/0x150 [ 131.099435][ T8478] do_sendfile+0x380/0x650 [ 131.103868][ T8478] __x64_sys_sendfile64+0x105/0x150 [ 131.109075][ T8478] x64_sys_call+0x2bb0/0x2ff0 [ 131.113752][ T8478] do_syscall_64+0xd2/0x200 [ 131.118444][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.124367][ T8478] [ 131.126705][ T8478] value changed: 0x0a000021 -> 0x04000021 [ 131.132427][ T8478] [ 131.134749][ T8478] Reported by Kernel Concurrency Sanitizer on: [ 131.140983][ T8478] CPU: 1 UID: 0 PID: 8478 Comm: syz.3.1931 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 131.153393][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.163458][ T8478] ================================================================== [ 131.278913][ T8471] ================================================================== [ 131.287139][ T8471] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 131.294473][ T8471] [ 131.296822][ T8471] write to 0xffff8881198e254c of 4 bytes by task 8478 on cpu 0: [ 131.304521][ T8471] __xa_set_mark+0x172/0x1a0 [ 131.309157][ T8471] __folio_mark_dirty+0x3af/0x4d0 [ 131.314312][ T8471] mark_buffer_dirty+0x11e/0x210 [ 131.319274][ T8471] block_write_end+0x12d/0x210 [ 131.324065][ T8471] ext4_write_end+0x134/0x720 [ 131.328759][ T8471] generic_perform_write+0x312/0x490 [ 131.334079][ T8471] ext4_buffered_write_iter+0x1ee/0x3c0 [ 131.339668][ T8471] ext4_file_write_iter+0xdbf/0xf00 [ 131.344978][ T8471] iter_file_splice_write+0x666/0x9e0 [ 131.350375][ T8471] direct_splice_actor+0x153/0x2a0 [ 131.355593][ T8471] splice_direct_to_actor+0x30f/0x680 [ 131.360985][ T8471] do_splice_direct+0xda/0x150 [ 131.365773][ T8471] do_sendfile+0x380/0x650 [ 131.370313][ T8471] __x64_sys_sendfile64+0x105/0x150 [ 131.375531][ T8471] x64_sys_call+0x2bb0/0x2ff0 [ 131.380235][ T8471] do_syscall_64+0xd2/0x200 [ 131.384767][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.390687][ T8471] [ 131.393017][ T8471] read to 0xffff8881198e254c of 4 bytes by task 8471 on cpu 1: [ 131.400566][ T8471] xas_find_marked+0x5dc/0x620 [ 131.405358][ T8471] find_get_entry+0x5d/0x380 [ 131.409968][ T8471] filemap_get_folios_tag+0x92/0x210 [ 131.415268][ T8471] filemap_write_and_wait_range+0x1d3/0x340 [ 131.421290][ T8471] ext4_file_write_iter+0xe04/0xf00 [ 131.426703][ T8471] iter_file_splice_write+0x666/0x9e0 [ 131.432099][ T8471] direct_splice_actor+0x153/0x2a0 [ 131.437221][ T8471] splice_direct_to_actor+0x30f/0x680 [ 131.442716][ T8471] do_splice_direct+0xda/0x150 [ 131.447502][ T8471] do_sendfile+0x380/0x650 [ 131.451948][ T8471] __x64_sys_sendfile64+0x105/0x150 [ 131.457170][ T8471] x64_sys_call+0x2bb0/0x2ff0 [ 131.461870][ T8471] do_syscall_64+0xd2/0x200 [ 131.466406][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.472313][ T8471] [ 131.474649][ T8471] value changed: 0x00000021 -> 0x0a000021 [ 131.480520][ T8471] [ 131.482921][ T8471] Reported by Kernel Concurrency Sanitizer on: [ 131.489087][ T8471] CPU: 1 UID: 0 PID: 8471 Comm: syz.3.1931 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 131.501604][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.511675][ T8471] ================================================================== [ 131.653148][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.862977][ T3817] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.873751][ T1579] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.884808][ T1579] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.895908][ T1579] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0