last executing test programs: 5m32.062059156s ago: executing program 32 (id=216): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xa00) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000a00)={{0x80, 0x6}, 'port0\x00', 0x82, 0x250012, 0x0, 0x2c1d, 0x4, 0x2, 0x4, 0x0, 0x7cce8c743ee810de}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m26.01963822s ago: executing program 33 (id=446): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 4m26.724257116s ago: executing program 6 (id=3103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 4m26.579474635s ago: executing program 6 (id=3106): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 4m26.549321409s ago: executing program 6 (id=3109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 4m26.548988139s ago: executing program 6 (id=3111): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x451c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80, 0x10000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x7, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r0) 4m26.46239351s ago: executing program 6 (id=3119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m26.445664252s ago: executing program 6 (id=3120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a1ab00000000000000003200000008001701560000008a"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 4m11.049848218s ago: executing program 34 (id=3135): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x10, 0x8001, 0x80400250}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r1, 0x4be7, 0x4c3, 0x63, 0x0, 0x0) 4m11.020519592s ago: executing program 35 (id=3120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a1ab00000000000000003200000008001701560000008a"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 2m16.398822739s ago: executing program 7 (id=8384): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x33}, {0xffff, 0x4, 0x0, 0x0, 0x80000001, 0x6, 0x1000000, 0x80000000}, {0x800, 0x0, 0x6, 0xffffffffffffffff}, 0x9, 0x200000, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d3, 0x2b}, 0x2, @in6=@remote, 0x0, 0x2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 2m16.346064836s ago: executing program 7 (id=8388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2m16.306555621s ago: executing program 7 (id=8391): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x25dfdc00, {0xa, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m16.264768227s ago: executing program 7 (id=8393): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x1000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 2m16.204045945s ago: executing program 7 (id=8395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0', 0x1, 0xfffffffffffffffc) 2m15.861959349s ago: executing program 7 (id=8409): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) inotify_init1(0x80000) 2m15.861787349s ago: executing program 36 (id=8409): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) inotify_init1(0x80000) 2m5.697626627s ago: executing program 3 (id=8824): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x2b28, 0x0, 0x2000000, 0x91}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2m5.622845177s ago: executing program 3 (id=8829): r0 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x24000890, 0x1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x41, 0x0, 0x0) 2m5.581921352s ago: executing program 3 (id=8831): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) close_range(r0, r1, 0x0) 2m5.531124858s ago: executing program 3 (id=8836): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd64}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 2m5.504841752s ago: executing program 3 (id=8837): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m5.449787049s ago: executing program 3 (id=8839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x102004, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x84510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x0, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2) 1m50.32416397s ago: executing program 37 (id=8839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x102004, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x84510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x0, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2) 1m44.794534976s ago: executing program 5 (id=9499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x3, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 1m44.776081949s ago: executing program 5 (id=9488): r0 = socket(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r2, 0x0, 0x7fffffffffffffff) 1m44.210268832s ago: executing program 1 (id=9495): r0 = socket$inet(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) shutdown(r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 1m44.184793325s ago: executing program 1 (id=9497): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_read_part_table(0x5c2, &(0x7f0000000000)="$eJzs2z1oU2sYB/AnavCil+vi5GQdnFwURzOoJFFRCNEu4qCgiBi4EEGIECjoYDO0NEPp2KUUsvRjapqhw6Wlhc6ldOil0KHTpV0KXZpL6Xv39vYDhN8PDg/v+/7Pec4znPEEv7QL8U+3281ERPfy8e/ubeULT2+WHpZfRWTiTUT0/PXH1MFJJiX+e+qttF5P67HRK53+nSfZ1trL3dtv5xsX0nlfuq6Ot3tPPBxnbiK3cO37j2pxoJb7tFqsb/5cWX4xuZ0vt583mlPPso/fp9xiqpdS/RK1+Baf411UohIfonpK/UdaG3f3bxRbMx8f7BU6g3P3Uq50wjmP2v9rz9DrZv3Rnenrw/drs0vlrYuHucr/+LoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh/E7mFa99/VIsDtdyn1WJ98+fK8ovJ7Xy5/bzRnHqWffw+5RZTvZTql6jFt/gc76ISlfgQ1VPqP9LauLt/o9ia+fhgr9AZnLuXcqUTznnU/l97hl4364/uTF8fvl+bXSpvXTzMVS6f0QsAAAAAAAAAAAAAAAAAAABAROQLT2+WHpZfRWTiTUT8+fvczMF+N/3vnkm5W6mup/2x0Sud/p0n2dbay93bb+cbf6f9vt8i+iLi6ni799yH4dj+DQAA///B9JXf") 1m44.119468724s ago: executing program 1 (id=9503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'C'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m44.07091313s ago: executing program 1 (id=9508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000"], 0x10c}}, 0x0) 1m43.99125232s ago: executing program 1 (id=9512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m43.958366745s ago: executing program 1 (id=9513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 1m43.796595276s ago: executing program 5 (id=9521): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) alarm(0x5) 1m43.707940637s ago: executing program 5 (id=9524): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {}, 0x7}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 1m43.705137158s ago: executing program 5 (id=9525): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m43.654490094s ago: executing program 5 (id=9529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1m28.937017132s ago: executing program 38 (id=9513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 1m28.607546165s ago: executing program 39 (id=9529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.433460624s ago: executing program 8 (id=13616): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111}}, 0x20) 1.243754349s ago: executing program 8 (id=13618): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x1003ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.228711021s ago: executing program 9 (id=13619): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1088a02, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x13c42) preadv2(r1, 0x0, 0x0, 0x0, 0x4b07, 0xa) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.155931921s ago: executing program 9 (id=13630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.054284524s ago: executing program 9 (id=13625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") 889.671115ms ago: executing program 9 (id=13633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 844.750011ms ago: executing program 9 (id=13635): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 787.300548ms ago: executing program 9 (id=13637): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 722.328287ms ago: executing program 2 (id=13642): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 656.131605ms ago: executing program 2 (id=13645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) write(r2, &(0x7f0000000200)="89", 0xffe3) 637.879478ms ago: executing program 8 (id=13646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 586.296374ms ago: executing program 8 (id=13647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 551.209399ms ago: executing program 2 (id=13650): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 501.213905ms ago: executing program 2 (id=13653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 402.417518ms ago: executing program 8 (id=13656): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x6, @mcast2, 0x10001}]}, &(0x7f0000000140)=0x10) 395.821839ms ago: executing program 2 (id=13657): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x1, &(0x7f0000000340)=""/1, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 347.506605ms ago: executing program 8 (id=13658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e03"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 347.142625ms ago: executing program 2 (id=13659): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="610302ff9d7901fd13119936213ecb83544902010f6592c5beba27d702278f5a248142c57f"], 0x1d) 303.679251ms ago: executing program 4 (id=13661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 286.931253ms ago: executing program 4 (id=13662): r0 = syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe874, 0x40, 0x2000000, 0xad4}, &(0x7f0000000140), &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) 267.374945ms ago: executing program 0 (id=13663): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0xfffffffffff7f78e, 0x2) 218.345582ms ago: executing program 4 (id=13664): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000800004"], 0x50) 174.574418ms ago: executing program 0 (id=13665): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1ffffffffffffffd}, 0x18) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) close(r0) 174.235498ms ago: executing program 0 (id=13666): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) 152.83517ms ago: executing program 0 (id=13667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 152.37214ms ago: executing program 4 (id=13668): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) 103.107097ms ago: executing program 0 (id=13669): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454a83, 0x120, 0x9}, 0x18) 87.202789ms ago: executing program 0 (id=13670): r0 = socket(0x11, 0x80003, 0x402) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) epoll_create1(0x0) r1 = io_uring_setup(0x3d35, &(0x7f0000000080)={0x0, 0xeec2, 0x80, 0x2, 0x116}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 65.066992ms ago: executing program 4 (id=13671): openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1ff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) 0s ago: executing program 4 (id=13672): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) read(r0, &(0x7f0000002040)=""/76, 0x4c) kernel console output (not intermixed with test programs): 5 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 316.540921][T28940] EXT4-fs (loop8): 1 truncate cleaned up [ 316.551085][T28940] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.570438][T28953] netlink: 'syz.4.11198': attribute type 21 has an invalid length. [ 316.581342][ T29] audit: type=1326 audit(1768332880.851:12672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 316.605304][ T29] audit: type=1326 audit(1768332880.851:12673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 316.609780][T28953] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11198'. [ 316.628977][ T29] audit: type=1326 audit(1768332880.851:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 316.629004][ T29] audit: type=1326 audit(1768332880.851:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 316.638549][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11198'. [ 316.661808][ T29] audit: type=1326 audit(1768332880.851:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 316.688501][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.694450][ T29] audit: type=1326 audit(1768332880.851:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 316.750667][ T29] audit: type=1326 audit(1768332880.851:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 316.774360][ T29] audit: type=1326 audit(1768332880.851:12679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 316.798057][ T29] audit: type=1326 audit(1768332880.851:12680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.4.11197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da5d8f749 code=0x7ffc0000 [ 317.025886][T28983] loop4: detected capacity change from 0 to 128 [ 317.035459][T28983] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 317.043424][T28983] FAT-fs (loop4): Filesystem has been set read-only [ 317.050690][T28983] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 317.227173][T29003] bond0: option arp_validate: invalid value (18446744073709551615) [ 317.948471][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11236'. [ 317.957581][T29036] netlink: 'syz.0.11236': attribute type 11 has an invalid length. [ 317.965519][T29036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11236'. [ 318.481156][T29099] SELinux: Context @ is not valid (left unmapped). [ 319.201884][T29059] syz.4.11247 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 319.213128][T29059] CPU: 0 UID: 0 PID: 29059 Comm: syz.4.11247 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.213206][T29059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.213223][T29059] Call Trace: [ 319.213231][T29059] [ 319.213240][T29059] __dump_stack+0x1d/0x30 [ 319.213306][T29059] dump_stack_lvl+0x95/0xd0 [ 319.213376][T29059] dump_stack+0x15/0x1b [ 319.213399][T29059] dump_header+0x81/0x240 [ 319.213423][T29059] oom_kill_process+0x295/0x350 [ 319.213531][T29059] out_of_memory+0x97b/0xb80 [ 319.213556][T29059] try_charge_memcg+0x610/0xa10 [ 319.213650][T29059] charge_memcg+0x51/0xc0 [ 319.213757][T29059] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 319.213798][T29059] __read_swap_cache_async+0x17b/0x2d0 [ 319.213837][T29059] swap_cluster_readahead+0x362/0x3c0 [ 319.213912][T29059] swapin_readahead+0xde/0x820 [ 319.213942][T29059] ? _raw_spin_lock+0x52/0xa0 [ 319.213977][T29059] ? block_dirty_folio+0xc1/0x110 [ 319.214011][T29059] ? inode_to_bdi+0x47/0xa0 [ 319.214063][T29059] ? __rcu_read_unlock+0x4f/0x70 [ 319.214085][T29059] ? swap_cache_get_folio+0x277/0x280 [ 319.214130][T29059] do_swap_page+0x2b4/0x21e0 [ 319.214250][T29059] ? do_wp_page+0xb35/0x2510 [ 319.214273][T29059] ? _raw_spin_lock+0x52/0xa0 [ 319.214372][T29059] ? block_dirty_folio+0xc1/0x110 [ 319.214396][T29059] ? inode_to_bdi+0x47/0xa0 [ 319.214452][T29059] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 319.214480][T29059] ? __pfx_default_wake_function+0x10/0x10 [ 319.214513][T29059] handle_mm_fault+0x9d8/0x2c60 [ 319.214584][T29059] do_user_addr_fault+0x630/0x1080 [ 319.214614][T29059] ? switch_fpu_return+0xe/0x20 [ 319.214638][T29059] exc_page_fault+0x62/0xa0 [ 319.214732][T29059] asm_exc_page_fault+0x26/0x30 [ 319.214754][T29059] RIP: 0033:0x7f4da5c49170 [ 319.214770][T29059] Code: 68 00 00 00 00 e9 00 00 00 00 ff 25 3a af 36 00 68 00 00 00 00 e9 00 00 00 00 ff 25 32 af 36 00 68 08 00 00 00 e9 b0 fe ff ff 25 2a af 36 00 68 20 00 00 00 e9 a0 fe ff ff ff 25 22 af 36 00 [ 319.214790][T29059] RSP: 002b:00007fff690df668 EFLAGS: 00010207 [ 319.214846][T29059] RAX: 00000000005f1e6c RBX: 00007f4da6b15720 RCX: 000000000000000a [ 319.214860][T29059] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000001b3401609c [ 319.214874][T29059] RBP: fffffffffffffff4 R08: 0000000000000008 R09: 0000000000009bc4 [ 319.214938][T29059] R10: 0000000000000006 R11: 0000000000000006 R12: 000000000000df58 [ 319.214948][T29059] R13: 000000000000df44 R14: 000000000000000c R15: 000000000000000c [ 319.214966][T29059] [ 319.214995][T29059] memory: usage 307200kB, limit 307200kB, failcnt 279 [ 319.464645][T29059] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 319.472561][T29059] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 319.479881][T29059] Memory cgroup stats for /syz4: [ 319.504248][T29059] cache 0 [ 319.512144][T29059] rss 0 [ 319.514949][T29059] shmem 0 [ 319.517918][T29059] mapped_file 0 [ 319.521398][T29059] dirty 0 [ 319.524382][T29059] writeback 0 [ 319.527669][T29059] workingset_refault_anon 26 [ 319.532269][T29059] workingset_refault_file 0 [ 319.536847][T29059] swap 278528 [ 319.540157][T29059] swapcached 12288 [ 319.543938][T29059] pgpgin 35745 [ 319.547388][T29059] pgpgout 35737 [ 319.550854][T29059] pgfault 57887 [ 319.554363][T29059] pgmajfault 27 [ 319.557895][T29059] inactive_anon 8192 [ 319.561793][T29059] active_anon 4096 [ 319.565571][T29059] inactive_file 20480 [ 319.569559][T29059] active_file 0 [ 319.573052][T29059] unevictable 0 [ 319.576533][T29059] hierarchical_memory_limit 314572800 [ 319.581921][T29059] hierarchical_memsw_limit 9223372036854771712 [ 319.588158][T29059] total_cache 0 [ 319.591639][T29059] total_rss 0 [ 319.595021][T29059] total_shmem 0 [ 319.598492][T29059] total_mapped_file 0 [ 319.602480][T29059] total_dirty 0 [ 319.605967][T29059] total_writeback 0 [ 319.609801][T29059] total_workingset_refault_anon 26 [ 319.615132][T29059] total_workingset_refault_file 0 [ 319.620181][T29059] total_swap 278528 [ 319.624016][T29059] total_swapcached 12288 [ 319.628335][T29059] total_pgpgin 35745 [ 319.632235][T29059] total_pgpgout 35737 [ 319.636248][T29059] total_pgfault 57887 [ 319.640238][T29059] total_pgmajfault 27 [ 319.644255][T29059] total_inactive_anon 8192 [ 319.648723][T29059] total_active_anon 4096 [ 319.653072][T29059] total_inactive_file 20480 [ 319.657590][T29059] total_active_file 0 [ 319.661578][T29059] total_unevictable 0 [ 319.665598][T29059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.11247,pid=29059,uid=0 [ 319.680659][T29059] Memory cgroup out of memory: Killed process 29059 (syz.4.11247) total-vm:95884kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 319.874713][T29196] loop8: detected capacity change from 0 to 512 [ 319.894886][T29196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 319.933805][T29196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.954510][T29206] __nla_validate_parse: 2 callbacks suppressed [ 319.954526][T29206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11316'. [ 319.970342][T29196] ext4 filesystem being mounted at /1689/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.037611][T29218] netlink: 'syz.0.11318': attribute type 1 has an invalid length. [ 320.048098][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.060793][T29220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11332'. [ 320.090473][T29226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11324'. [ 320.104116][T29224] loop8: detected capacity change from 0 to 512 [ 320.199580][T29238] hub 9-0:1.0: USB hub found [ 320.224733][T29238] hub 9-0:1.0: 8 ports detected [ 320.294781][T29248] loop4: detected capacity change from 0 to 1024 [ 320.311769][T29248] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.367568][T29248] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11335: bg 0: block 112: padding at end of block bitmap is not set [ 320.384052][T29256] loop8: detected capacity change from 0 to 2048 [ 320.421246][T29248] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 320.433680][T29248] EXT4-fs (loop4): This should not happen!! Data will be lost [ 320.433680][T29248] [ 320.446343][T29264] batadv_slave_1: entered promiscuous mode [ 320.455142][T29263] batadv_slave_1: left promiscuous mode [ 320.541622][T29272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11342'. [ 320.577481][T29280] loop4: detected capacity change from 0 to 512 [ 320.591716][T29280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 320.626091][T29280] EXT4-fs (loop4): 1 truncate cleaned up [ 320.646704][T29288] netlink: 'syz.0.11351': attribute type 7 has an invalid length. [ 320.780996][T29313] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11364'. [ 320.814567][T29317] netlink: 'syz.9.11366': attribute type 1 has an invalid length. [ 320.867936][T29323] loop9: detected capacity change from 0 to 764 [ 320.893635][T29323] rock: directory entry would overflow storage [ 320.899837][T29323] rock: sig=0x4f50, size=4, remaining=3 [ 320.899862][T29327] SELinux: policydb version 0 does not match my version range 15-35 [ 320.905427][T29323] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 320.932167][T29323] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 320.945978][T29327] SELinux: failed to load policy [ 320.985024][T29336] loop8: detected capacity change from 0 to 1024 [ 321.006168][T29341] program syz.2.11378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.006504][T29336] EXT4-fs: Ignoring removed bh option [ 321.030018][T29341] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 321.650215][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 321.650284][ T29] audit: type=1400 audit(1768332885.991:12837): avc: denied { cpu } for pid=29395 comm="syz.2.11403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 321.697422][ T29] audit: type=1400 audit(1768332886.031:12838): avc: denied { create } for pid=29398 comm="syz.8.11404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 321.717238][ T29] audit: type=1400 audit(1768332886.031:12839): avc: denied { bind } for pid=29398 comm="syz.8.11404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 321.788518][ T29] audit: type=1400 audit(1768332886.131:12840): avc: denied { create } for pid=29404 comm="syz.8.11406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.831299][ T29] audit: type=1400 audit(1768332886.151:12841): avc: denied { connect } for pid=29404 comm="syz.8.11406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.851324][ T29] audit: type=1400 audit(1768332886.151:12842): avc: denied { write } for pid=29404 comm="syz.8.11406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.905098][ T29] audit: type=1400 audit(1768332886.251:12843): avc: denied { create } for pid=29409 comm="syz.8.11409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.926726][T29410] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11409'. [ 321.956218][ T29] audit: type=1400 audit(1768332886.271:12844): avc: denied { write } for pid=29409 comm="syz.8.11409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.976991][ T29] audit: type=1400 audit(1768332886.271:12845): avc: denied { read } for pid=29409 comm="syz.8.11409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.997589][ T29] audit: type=1400 audit(1768332886.291:12846): avc: denied { create } for pid=29411 comm="syz.4.11410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 322.048126][T29414] loop8: detected capacity change from 0 to 512 [ 322.093005][T29414] ext4 filesystem being mounted at /1714/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.127940][T29429] SELinux: Context system_u:object_r:console_device_t:s0 is not valid (left unmapped). [ 322.138019][T29414] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11411: bg 0: block 217: padding at end of block bitmap is not set [ 322.163029][T29414] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 322.329534][T29458] pimreg: left allmulticast mode [ 322.336080][T29461] netlink: 'syz.9.11431': attribute type 178 has an invalid length. [ 322.403462][T29471] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11435'. [ 322.416521][T29463] loop9: detected capacity change from 0 to 8192 [ 322.576755][T29485] loop8: detected capacity change from 0 to 512 [ 322.607076][T29485] ext4 filesystem being mounted at /1723/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.672315][T29492] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 322.720913][T29504] netlink: 'syz.8.11456': attribute type 1 has an invalid length. [ 322.873361][T29527] EXT4-fs: Ignoring removed bh option [ 322.904121][T29529] syzkaller1: entered promiscuous mode [ 322.909631][T29529] syzkaller1: entered allmulticast mode [ 322.981914][T29539] sctp: [Deprecated]: syz.2.11466 (pid 29539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.981914][T29539] Use struct sctp_sack_info instead [ 323.002586][T29540] journal_path: Lookup failure for './file0' [ 323.008686][T29540] EXT4-fs: error: could not find journal device path [ 323.061513][T29546] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.075257][T29551] xt_hashlimit: max too large, truncated to 1048576 [ 323.092644][T29551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.102105][T29546] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11469: bg 0: block 217: padding at end of block bitmap is not set [ 323.140146][T29546] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 323.416518][T29597] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 323.469653][T29602] netlink: 268 bytes leftover after parsing attributes in process `syz.2.11505'. [ 323.616224][T29624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 323.751213][T29629] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 323.751213][T29629] program syz.2.11518 not setting count and/or reply_len properly [ 323.806245][T29633] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11509'. [ 323.815377][T29633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11509'. [ 324.035065][T29654] netlink: 'syz.8.11520': attribute type 4 has an invalid length. [ 324.075470][T29660] netlink: 'syz.2.11524': attribute type 1 has an invalid length. [ 324.125785][T29667] xt_hashlimit: max too large, truncated to 1048576 [ 324.153631][T29670] IPVS: Error connecting to the multicast addr [ 324.164208][T29667] xt_CT: No such helper "netbios-ns" [ 324.328554][T29689] netlink: 'syz.2.11537': attribute type 1 has an invalid length. [ 324.575775][T29736] pim6reg1: entered promiscuous mode [ 324.581190][T29736] pim6reg1: entered allmulticast mode [ 324.598583][T29740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29740 comm=syz.4.11560 [ 324.713120][T29758] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.918468][T29793] wireguard0: entered promiscuous mode [ 325.096664][T29812] netlink: 'syz.9.11594': attribute type 21 has an invalid length. [ 325.171166][T29821] random: crng reseeded on system resumption [ 325.223997][T29831] netlink: 'syz.8.11603': attribute type 3 has an invalid length. [ 325.312940][T29848] SELinux: policydb version -1821050916 does not match my version range 15-35 [ 325.322733][T29848] SELinux: failed to load policy [ 325.354790][T29856] __nla_validate_parse: 2 callbacks suppressed [ 325.354808][T29856] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11616'. [ 325.364868][T29857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.378751][T29857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.405691][T29861] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 325.765060][T29935] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11650'. [ 325.803537][T29938] set_capacity_and_notify: 4 callbacks suppressed [ 325.803603][T29938] loop4: detected capacity change from 0 to 512 [ 325.833850][T29938] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 325.858862][T29938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 325.883662][T29938] System zones: 1-12 [ 325.887739][T29938] EXT4-fs (loop4): orphan cleanup on readonly fs [ 325.913219][T29938] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.11651: invalid indirect mapped block 12 (level 1) [ 325.962061][T29938] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.11651: invalid indirect mapped block 2 (level 2) [ 326.013172][T29938] EXT4-fs (loop4): 1 truncate cleaned up [ 326.088962][T29966] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 326.097647][T29966] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 326.106222][T29966] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 326.127661][T29966] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 326.136295][T29966] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 326.144783][T29966] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 326.177777][T29966] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 326.186351][T29966] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 326.414893][T30017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.431954][T30023] program syz.4.11687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.433228][T30017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.442586][T30023] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 327.169641][T30047] netlink: 'syz.2.11699': attribute type 1 has an invalid length. [ 327.185911][T30049] netlink: 'syz.0.11700': attribute type 4 has an invalid length. [ 327.213435][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 327.213451][ T29] audit: type=1400 audit(1768332891.561:13162): avc: denied { write } for pid=30052 comm="syz.0.11702" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 327.301704][ T29] audit: type=1400 audit(1768332891.641:13163): avc: denied { setopt } for pid=30062 comm="syz.2.11709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.351484][ T29] audit: type=1400 audit(1768332891.641:13164): avc: denied { map } for pid=30062 comm="syz.2.11709" path="socket:[96387]" dev="sockfs" ino=96387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.375362][ T29] audit: type=1400 audit(1768332891.641:13165): avc: denied { read write } for pid=30062 comm="syz.2.11709" path="socket:[96387]" dev="sockfs" ino=96387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.400090][ T29] audit: type=1400 audit(1768332891.671:13166): avc: denied { shutdown } for pid=30067 comm="syz.9.11710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.543063][ T29] audit: type=1326 audit(1768332891.891:13167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30083 comm="syz.2.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 327.583032][ T29] audit: type=1400 audit(1768332891.891:13168): avc: denied { bind } for pid=30088 comm="syz.4.11719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.603114][ T29] audit: type=1400 audit(1768332891.891:13169): avc: denied { write } for pid=30088 comm="syz.4.11719" path="socket:[96436]" dev="sockfs" ino=96436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.627228][ T29] audit: type=1326 audit(1768332891.911:13170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30083 comm="syz.2.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 327.650945][ T29] audit: type=1326 audit(1768332891.911:13171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30083 comm="syz.2.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 327.728582][T30098] loop9: detected capacity change from 0 to 1024 [ 327.766190][T30098] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.139409][T30160] loop9: detected capacity change from 0 to 512 [ 328.151643][T30158] pim6reg1: entered allmulticast mode [ 328.170807][T30160] EXT4-fs: quotafile must be on filesystem root [ 328.366134][T30179] loop4: detected capacity change from 0 to 1024 [ 328.389714][T30184] gtp0: entered promiscuous mode [ 328.394824][T30184] gtp0: entered allmulticast mode [ 328.400420][T30179] EXT4-fs: Ignoring removed bh option [ 328.415532][T30179] EXT4-fs mount: 22 callbacks suppressed [ 328.415547][T30179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 328.452209][T30179] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.468969][T30179] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.11759: lblock 3 mapped to illegal pblock 3 (length 3) [ 328.483420][T30179] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 328.495716][T30179] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.495716][T30179] [ 328.546626][T13596] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:64: lblock 8 mapped to illegal pblock 8 (length 8) [ 328.574444][T13596] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 328.586958][T13596] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.586958][T13596] [ 328.604196][T25973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 328.801328][T30237] loop9: detected capacity change from 0 to 2048 [ 328.823884][T30237] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.841949][T30237] ext4 filesystem being mounted at /710/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.862536][T30237] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.11795: bg 0: block 345: padding at end of block bitmap is not set [ 328.904701][T30237] EXT4-fs (loop9): Remounting filesystem read-only [ 328.922338][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.028494][T30266] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 329.129028][T30278] IPv6: NLM_F_CREATE should be specified when creating new route [ 329.764072][T30339] pimreg: entered allmulticast mode [ 329.789654][T30339] pimreg: left allmulticast mode [ 330.041066][T30367] loop4: detected capacity change from 0 to 2048 [ 330.061296][T30367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.085260][T30367] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.143328][T30367] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11846: bg 0: block 345: padding at end of block bitmap is not set [ 330.208926][T30367] EXT4-fs (loop4): Remounting filesystem read-only [ 330.261534][T25973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.307358][T30392] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 330.388998][T30407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30407 comm=syz.4.11864 [ 330.423812][T30413] SELinux: policydb version 4376 does not match my version range 15-35 [ 330.432291][T30413] SELinux: failed to load policy [ 330.471732][T30420] batadv_slave_1: entered promiscuous mode [ 330.483172][T30419] batadv_slave_1: left promiscuous mode [ 330.771397][T30455] loop9: detected capacity change from 0 to 512 [ 330.795180][T30455] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.11887: corrupted in-inode xattr: e_value size too large [ 330.822248][T30455] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.11887: couldn't read orphan inode 15 (err -117) [ 330.845641][T30455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.859608][T30461] loop8: detected capacity change from 0 to 1024 [ 330.906026][T30461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.939385][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.975032][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.000955][T30476] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 331.039128][T30483] netlink: 'syz.8.11898': attribute type 1 has an invalid length. [ 331.074381][T30490] loop8: detected capacity change from 0 to 512 [ 331.099765][T30490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.115463][T30490] ext4 filesystem being mounted at /1841/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.148928][T30498] __nla_validate_parse: 11 callbacks suppressed [ 331.148946][T30498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11903'. [ 331.171825][T30498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11903'. [ 331.181398][T30498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11903'. [ 331.190796][T30498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11903'. [ 331.241824][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.308103][T30507] netlink: 'syz.8.11907': attribute type 1 has an invalid length. [ 331.328142][T30509] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 331.363737][T30511] loop8: detected capacity change from 0 to 4096 [ 331.376586][T30511] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.410434][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.958918][T30554] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11928'. [ 332.135257][T30564] loop9: detected capacity change from 0 to 512 [ 332.145010][T30564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.158077][T30564] ext4 filesystem being mounted at /732/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.253064][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.406532][T30593] netlink: 176 bytes leftover after parsing attributes in process `syz.9.11944'. [ 332.621309][T30612] loop9: detected capacity change from 0 to 1024 [ 332.630999][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 332.631058][ T29] audit: type=1400 audit(1768332896.971:13483): avc: denied { mounton } for pid=30611 comm="syz.9.11951" path="/741/file0" dev="tmpfs" ino=3808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 332.633957][T30612] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 332.678926][T30612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 332.688466][T30612] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.11951: lblock 2 mapped to illegal pblock 2 (length 1) [ 332.702805][T30612] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 332.711085][T30612] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.11951: lblock 0 mapped to illegal pblock 48 (length 1) [ 332.733871][T30612] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 332.742737][T30612] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.11951: Failed to acquire dquot type 0 [ 332.785435][T30612] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 332.815807][T30612] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.11951: mark_inode_dirty error [ 332.843786][T30612] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 332.867780][T30612] EXT4-fs (loop9): 1 orphan inode deleted [ 332.874072][T30612] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.886217][T13586] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 332.901861][T13586] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 332.910331][T13586] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:59: Failed to release dquot type 0 [ 332.929099][T30629] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11955'. [ 332.939443][T30612] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.953135][T30612] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz.9.11951: Invalid inode table block 1 in block_group 0 [ 332.966331][ T29] audit: type=1326 audit(1768332897.311:13484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30627 comm="syz.0.11954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a0af749 code=0x7ffc0000 [ 333.002502][T30629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.026392][T30632] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11955'. [ 333.040155][ T29] audit: type=1326 audit(1768332897.331:13485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30627 comm="syz.0.11954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06a0af749 code=0x7ffc0000 [ 333.040246][T30612] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 333.063961][ T29] audit: type=1326 audit(1768332897.331:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30627 comm="syz.0.11954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a0af749 code=0x7ffc0000 [ 333.097076][ T29] audit: type=1326 audit(1768332897.331:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30627 comm="syz.0.11954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a0af749 code=0x7ffc0000 [ 333.120936][ T29] audit: type=1326 audit(1768332897.331:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30627 comm="syz.0.11954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06a0af749 code=0x7ffc0000 [ 333.132470][T30612] EXT4-fs error (device loop9): ext4_quota_off:7270: inode #3: comm syz.9.11951: mark_inode_dirty error [ 333.144759][ T29] audit: type=1326 audit(1768332897.331:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30627 comm="syz.0.11954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a0af749 code=0x7ffc0000 [ 333.230883][T30646] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11962'. [ 333.304681][T30658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.328737][T30658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.360926][T30666] netlink: 'syz.0.11970': attribute type 7 has an invalid length. [ 333.501840][T30683] tap0: tun_chr_ioctl cmd 2148553947 [ 333.848950][T30734] netlink: 'syz.8.12000': attribute type 1 has an invalid length. [ 333.873901][T30737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12001'. [ 333.946226][T30749] loop8: detected capacity change from 0 to 512 [ 334.091876][T30766] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 334.205522][T30780] loop9: detected capacity change from 0 to 7 [ 334.415035][T30804] netlink: 'syz.8.12035': attribute type 8 has an invalid length. [ 334.425069][T30804] bond0: entered promiscuous mode [ 334.430130][T30804] bond_slave_0: entered promiscuous mode [ 334.436979][T30804] bond_slave_1: entered promiscuous mode [ 334.456890][T30804] dummy0: entered promiscuous mode [ 334.464429][T30804] bond0: left promiscuous mode [ 334.469248][T30804] bond_slave_0: left promiscuous mode [ 334.475654][T30804] bond_slave_1: left promiscuous mode [ 334.495347][T30804] dummy0: left promiscuous mode [ 334.577909][T30812] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 335.110567][T30869] netlink: 'syz.9.12059': attribute type 1 has an invalid length. [ 336.214705][T30968] __nla_validate_parse: 6 callbacks suppressed [ 336.214742][T30968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12098'. [ 336.230075][T30968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12098'. [ 336.409707][T30979] binfmt_misc: register: failed to install interpreter file ./file0 [ 336.723672][T31027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12124'. [ 336.745463][T31025] loop8: detected capacity change from 0 to 2048 [ 336.783409][T31025] loop8: p1 < > p4 [ 336.788780][T31025] loop8: p4 size 8388608 extends beyond EOD, truncated [ 336.809289][T31035] loop9: detected capacity change from 0 to 512 [ 336.818833][T31035] ------------[ cut here ]------------ [ 336.824403][T31035] EA inode 11 i_nlink=2 [ 336.824431][T31035] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.9.12128/31035 [ 336.839806][T31035] Modules linked in: [ 336.843815][T31035] CPU: 1 UID: 0 PID: 31035 Comm: syz.9.12128 Not tainted syzkaller #0 PREEMPT(voluntary) [ 336.853798][T31035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.863917][T31035] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 336.870653][T31035] Code: a1 e2 9c ff 4c 8d 2d 6a ed 20 05 49 8d 7e 40 e8 11 6d b8 ff 49 8b 6e 40 4c 89 e7 e8 25 68 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 ac 9b ba 03 66 66 66 2e 0f 1f 84 [ 336.890410][T31035] RSP: 0018:ffffc90001ca75a0 EFLAGS: 00010246 [ 336.896773][T31035] RAX: ffff888102120a90 RBX: ffff88811a9841a8 RCX: ffffffff81bb1e5b [ 336.904803][T31035] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0 [ 336.912832][T31035] RBP: 000000000000000b R08: 000188811a98415b R09: 0000000000000000 [ 336.920887][T31035] R10: ffffc90001ca74d0 R11: 0001c90001ca74d0 R12: ffff88811a984158 [ 336.928956][T31035] R13: ffffffff86dc0bb0 R14: ffff88811a984110 R15: 0000000000000001 [ 336.936979][T31035] FS: 00007f7e697376c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 336.946002][T31035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.952634][T31035] CR2: 0000001b34216ff8 CR3: 000000014f138000 CR4: 00000000003506f0 [ 336.960698][T31035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 336.968729][T31035] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 336.976862][T31035] Call Trace: [ 336.980172][T31035] [ 336.983199][T31035] ext4_xattr_set_entry+0x77f/0x1020 [ 336.988590][T31035] ext4_xattr_ibody_set+0x184/0x3c0 [ 336.993960][T31035] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 337.000016][T31035] __ext4_expand_extra_isize+0x246/0x280 [ 337.005740][T31035] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 337.011273][T31035] ext4_evict_inode+0x7c4/0xd40 [ 337.016233][T31035] ? __pfx_ext4_evict_inode+0x10/0x10 [ 337.021653][T31035] evict+0x2af/0x510 [ 337.025622][T31035] ? __dquot_initialize+0x146/0x7c0 [ 337.030905][T31035] iput+0x4bd/0x650 [ 337.034822][T31035] ext4_process_orphan+0x1a9/0x1c0 [ 337.039956][T31035] ext4_orphan_cleanup+0x6a8/0xa00 [ 337.045439][T31035] ext4_fill_super+0x3411/0x37a0 [ 337.050496][T31035] ? set_blocksize+0x1a8/0x310 [ 337.055378][T31035] ? sb_set_blocksize+0xfc/0x170 [ 337.060346][T31035] ? setup_bdev_super+0x30e/0x370 [ 337.065416][T31035] ? __pfx_ext4_fill_super+0x10/0x10 [ 337.070733][T31035] get_tree_bdev_flags+0x291/0x300 [ 337.075902][T31035] ? __pfx_ext4_fill_super+0x10/0x10 [ 337.081236][T31035] get_tree_bdev+0x1f/0x30 [ 337.085733][T31035] ext4_get_tree+0x1c/0x30 [ 337.090207][T31035] vfs_get_tree+0x57/0x1d0 [ 337.094781][T31035] do_new_mount+0x24d/0x6a0 [ 337.099361][T31035] path_mount+0x4ab/0xb80 [ 337.103768][T31035] ? user_path_at+0xbf/0x130 [ 337.108468][T31035] __se_sys_mount+0x28c/0x2e0 [ 337.113289][T31035] __x64_sys_mount+0x67/0x80 [ 337.117907][T31035] x64_sys_call+0x2cca/0x3000 [ 337.122702][T31035] do_syscall_64+0xca/0x2b0 [ 337.127299][T31035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.133258][T31035] RIP: 0033:0x7f7e6acd0eea [ 337.137692][T31035] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.157437][T31035] RSP: 002b:00007f7e69736e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.165990][T31035] RAX: ffffffffffffffda RBX: 00007f7e69736ef0 RCX: 00007f7e6acd0eea [ 337.166700][T31046] binfmt_misc: register: failed to install interpreter file ./file0 [ 337.174002][T31035] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7e69736eb0 [ 337.174020][T31035] RBP: 0000200000000180 R08: 00007f7e69736ef0 R09: 0000000000800700 [ 337.198103][T31035] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 337.206143][T31035] R13: 00007f7e69736eb0 R14: 000000000000046f R15: 000000000000002c [ 337.214202][T31035] [ 337.217246][T31035] ---[ end trace 0000000000000000 ]--- [ 337.223429][T31035] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.12128: iget: bad extra_isize 90 (inode size 256) [ 337.237199][T31035] EXT4-fs (loop9): Remounting filesystem read-only [ 337.243850][T31035] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 337.252974][T31035] EXT4-fs (loop9): 1 orphan inode deleted [ 337.259221][T31035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.272030][T31035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.309488][T31050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.331710][T31050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.372548][T31062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12138'. [ 337.383887][T31061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12139'. [ 337.418287][T31061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12139'. [ 337.494493][T31078] netlink: 72 bytes leftover after parsing attributes in process `syz.9.12146'. [ 337.561460][T31088] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 337.622168][T31101] netlink: 'syz.4.12155': attribute type 7 has an invalid length. [ 337.630634][T31101] netlink: 'syz.4.12155': attribute type 7 has an invalid length. [ 337.640265][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 337.640280][ T29] audit: type=1400 audit(1768332901.981:13931): avc: denied { name_bind } for pid=31102 comm="syz.2.12156" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 337.668638][ T29] audit: type=1400 audit(1768332901.981:13932): avc: denied { node_bind } for pid=31102 comm="syz.2.12156" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 337.714559][ T29] audit: type=1400 audit(1768332902.061:13933): avc: denied { connect } for pid=31109 comm="syz.0.12159" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.772316][ T29] audit: type=1326 audit(1768332902.111:13934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.2.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 337.796207][ T29] audit: type=1326 audit(1768332902.111:13935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.2.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 337.822749][ T29] audit: type=1326 audit(1768332902.171:13936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.2.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 337.846509][ T29] audit: type=1326 audit(1768332902.171:13937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.2.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 337.870376][ T29] audit: type=1326 audit(1768332902.171:13938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.2.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 337.894065][ T29] audit: type=1326 audit(1768332902.171:13939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.2.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 337.917827][ T29] audit: type=1326 audit(1768332902.171:13940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31115 comm="syz.2.12162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737be9f749 code=0x7ffc0000 [ 337.962014][T31122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.971502][T31122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.337075][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12180'. [ 338.346333][T31153] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12180'. [ 338.356193][T31153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12180'. [ 338.712802][T31197] loop8: detected capacity change from 0 to 512 [ 338.803897][T31197] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.12199: corrupted inode contents [ 338.816781][T31197] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #3: comm syz.8.12199: mark_inode_dirty error [ 338.828515][T31197] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.12199: corrupted inode contents [ 338.840537][T31197] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.12199: mark_inode_dirty error [ 338.853268][T31197] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.12199: Failed to acquire dquot type 0 [ 338.864971][T31197] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.12199: corrupted inode contents [ 338.878236][T31197] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #16: comm syz.8.12199: mark_inode_dirty error [ 338.889889][T31197] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.12199: corrupted inode contents [ 338.901957][T31197] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.12199: mark_inode_dirty error [ 338.914303][T31197] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.12199: corrupted inode contents [ 338.926461][T31197] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 339.009242][T31197] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.12199: corrupted inode contents [ 339.047421][T31197] EXT4-fs error (device loop8): ext4_truncate:4635: inode #16: comm syz.8.12199: mark_inode_dirty error [ 339.061102][T31197] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 339.070630][T31197] EXT4-fs (loop8): 1 truncate cleaned up [ 339.078613][T31197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.092294][T31197] ext4 filesystem being mounted at /1907/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.136570][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.239623][T31221] IPVS: Error connecting to the multicast addr [ 339.267472][T31225] loop8: detected capacity change from 0 to 512 [ 339.274561][T31224] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.282526][T31225] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 339.294586][T31225] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.12208: inode has both inline data and extents flags [ 339.308190][T31225] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.12208: couldn't read orphan inode 15 (err -117) [ 339.320954][T31225] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.366035][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.410039][T31236] netlink: 'syz.4.12217': attribute type 1 has an invalid length. [ 339.453181][T31236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.474187][T31236] bond1: (slave geneve2): making interface the new active one [ 339.483495][T31236] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 339.493617][T13562] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.553103][T13562] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.595733][T13562] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.623841][T13562] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.660513][T31256] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 339.762046][T31278] loop8: detected capacity change from 0 to 1024 [ 339.769691][T31278] EXT4-fs: inline encryption not supported [ 339.794864][T31278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.816841][T31278] EXT4-fs warning (device loop8): ext4_rename_delete:3729: inode #12: comm syz.8.12236: Deleting old file: nlink 2, error=-2 [ 339.858781][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.116871][T31311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 340.154708][T31316] netlink: 'syz.4.12252': attribute type 1 has an invalid length. [ 340.178256][T31316] bond2: (slave ip6gretap1): making interface the new active one [ 340.186479][T31316] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 340.394468][T31327] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 340.441106][T31340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.454565][T31340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.735200][T31367] loop8: detected capacity change from 0 to 512 [ 340.775117][T31367] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 340.791437][T31367] EXT4-fs (loop8): mount failed [ 340.987749][T31403] random: crng reseeded on system resumption [ 341.316160][T31456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.334058][T31456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.780227][T31488] netlink: 'syz.8.12318': attribute type 4 has an invalid length. [ 341.882144][T31498] bond0: (slave dummy0): Releasing backup interface [ 341.899487][T31498] bridge_slave_0: left allmulticast mode [ 341.905335][T31498] bridge_slave_0: left promiscuous mode [ 341.911030][T31498] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.926311][T31498] bridge_slave_1: left allmulticast mode [ 341.932174][T31498] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.943544][T31498] bond0: (slave bond_slave_0): Releasing backup interface [ 341.958869][T31504] netlink: 'syz.2.12324': attribute type 3 has an invalid length. [ 341.968953][T31498] bond0: (slave bond_slave_1): Releasing backup interface [ 341.997768][T31498] team0: Port device team_slave_1 removed [ 342.012283][T31498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.020919][T31506] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 342.033667][T31506] vhci_hcd vhci_hcd.2: invalid port number 96 [ 342.039860][T31506] vhci_hcd vhci_hcd.2: default hub control req: 0308 vfffa i0060 l0 [ 342.048457][T31498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.065904][T31502] bridge0: port 1(team0) entered blocking state [ 342.072229][T31502] bridge0: port 1(team0) entered disabled state [ 342.079022][T31502] team0: entered allmulticast mode [ 342.092170][T31502] team0: left allmulticast mode [ 342.114602][T31492] __nla_validate_parse: 8 callbacks suppressed [ 342.114681][T31492] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12320'. [ 342.129966][T31492] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 342.152509][T31517] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12331'. [ 342.200873][T31521] SELinux: ebitmap: truncated map [ 342.214315][T31521] SELinux: failed to load policy [ 342.271759][T31533] tls_set_device_offload_rx: netdev not found [ 342.586559][T31577] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 342.665690][T31588] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 342.690429][T31593] SELinux: failed to load policy [ 342.730217][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 342.730231][ T29] audit: type=1400 audit(1768332907.071:14121): avc: denied { read } for pid=31597 comm="syz.8.12367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.798191][T31605] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12371'. [ 342.847422][ T29] audit: type=1326 audit(1768332907.191:14122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31610 comm="syz.9.12374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 342.890262][ T29] audit: type=1326 audit(1768332907.191:14123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31610 comm="syz.9.12374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 342.914851][ T29] audit: type=1326 audit(1768332907.231:14124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31610 comm="syz.9.12374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 342.938530][ T29] audit: type=1326 audit(1768332907.231:14125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31610 comm="syz.9.12374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 342.963185][ T29] audit: type=1326 audit(1768332907.231:14126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31610 comm="syz.9.12374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 342.986885][ T29] audit: type=1326 audit(1768332907.231:14127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31610 comm="syz.9.12374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 343.012267][ T29] audit: type=1400 audit(1768332907.251:14128): avc: denied { setopt } for pid=31614 comm="syz.8.12376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.034581][T31619] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 343.106055][T31629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12382'. [ 343.117228][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12379'. [ 343.153716][ T29] audit: type=1326 audit(1768332907.501:14129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31631 comm="syz.9.12384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 343.210005][T31638] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 343.252638][T31642] xt_connbytes: Forcing CT accounting to be enabled [ 343.262376][ T29] audit: type=1326 audit(1768332907.501:14130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31631 comm="syz.9.12384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 343.304252][T31649] loop9: detected capacity change from 0 to 512 [ 343.312488][T31649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.327808][T31649] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.344138][T31649] ext4 filesystem being mounted at /811/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.382301][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.435475][T31668] loop9: detected capacity change from 0 to 1024 [ 343.447823][T31668] EXT4-fs: inline encryption not supported [ 343.454656][T31668] EXT4-fs: Ignoring removed bh option [ 343.467421][T31673] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12402'. [ 343.477669][T31668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 343.490735][T31668] ext4 filesystem being mounted at /812/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.548478][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 343.609264][T31690] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 343.664072][T31699] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12413'. [ 343.751810][T31715] program syz.4.12420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.773775][T31719] loop9: detected capacity change from 0 to 1024 [ 343.787737][T31719] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 343.798842][T31719] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 343.811331][T31719] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 343.822292][T31719] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.12421: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 343.841260][T31719] EXT4-fs (loop9): no journal found [ 343.846758][T31719] EXT4-fs (loop9): can't get journal size [ 343.873842][T31719] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.912510][T31719] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (38281!=20869) [ 343.953965][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.039207][T31749] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 344.364783][T31784] netlink: 'syz.0.12450': attribute type 30 has an invalid length. [ 344.508598][T31812] xt_hashlimit: max too large, truncated to 1048576 [ 344.531174][T31816] program syz.4.12463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.590061][T31824] program syz.0.12466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.609234][T31826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12467'. [ 344.618387][T31826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12467'. [ 344.630305][T31828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12468'. [ 345.453533][T31877] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 345.489608][T31879] atomic_op ffff888104054128 conn xmit_atomic 0000000000000000 [ 345.500190][T31871] SELinux: ebitmap: truncated map [ 345.529881][T31871] SELinux: failed to load policy [ 345.639577][T31901] can0: slcan on ttyS3. [ 345.673432][T31907] netlink: 'syz.9.12503': attribute type 9 has an invalid length. [ 345.743892][T31899] can0 (unregistered): slcan off ttyS3. [ 345.974720][T31948] can0: slcan on ttyS3. [ 346.063771][T31945] can0 (unregistered): slcan off ttyS3. [ 346.170296][T31982] bond1: entered promiscuous mode [ 346.175561][T31982] bond1: entered allmulticast mode [ 346.189496][T31982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.207565][T31987] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.235230][T31991] 9p: Bad value for 'rfdno' [ 346.252735][T31992] Process accounting resumed [ 346.301372][T32004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=32004 comm=syz.0.12550 [ 346.314163][T32004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32004 comm=syz.0.12550 [ 346.343491][T32005] can0: slcan on ttyS3. [ 346.393015][T32002] can0 (unregistered): slcan off ttyS3. [ 346.424724][T32017] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0 [ 346.510504][T32033] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=32033 comm=syz.8.12564 [ 346.523237][T32033] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32033 comm=syz.8.12564 [ 346.603675][T32044] loop9: detected capacity change from 0 to 2048 [ 346.615217][T32044] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.628992][T32047] can0: slcan on ttyS3. [ 346.643781][T32044] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 346.658867][T32044] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 346.671289][T32044] EXT4-fs (loop9): This should not happen!! Data will be lost [ 346.671289][T32044] [ 346.681087][T32044] EXT4-fs (loop9): Total free blocks count 0 [ 346.687176][T32044] EXT4-fs (loop9): Free/Dirty block details [ 346.693245][T32044] EXT4-fs (loop9): free_blocks=2415919504 [ 346.699069][T32044] EXT4-fs (loop9): dirty_blocks=48 [ 346.704256][T32044] EXT4-fs (loop9): Block reservation details [ 346.710246][T32044] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 346.734426][T13576] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 346.784498][T32046] can0 (unregistered): slcan off ttyS3. [ 346.835030][T32060] xt_hashlimit: max too large, truncated to 1048576 [ 346.884128][T32067] netlink: 'syz.9.12577': attribute type 7 has an invalid length. [ 347.018469][T32081] loop8: detected capacity change from 0 to 2048 [ 347.056237][T32081] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.074461][T32081] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 347.089566][T32081] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 347.101968][T32081] EXT4-fs (loop8): This should not happen!! Data will be lost [ 347.101968][T32081] [ 347.111726][T32081] EXT4-fs (loop8): Total free blocks count 0 [ 347.117835][T32081] EXT4-fs (loop8): Free/Dirty block details [ 347.123824][T32081] EXT4-fs (loop8): free_blocks=2415919504 [ 347.129558][T32081] EXT4-fs (loop8): dirty_blocks=48 [ 347.134827][T32081] EXT4-fs (loop8): Block reservation details [ 347.140840][T32081] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 347.280270][T13576] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 347.321027][T32098] syz.9.12593: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 347.335864][T32105] __nla_validate_parse: 11 callbacks suppressed [ 347.335882][T32105] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12597'. [ 347.352007][T32098] CPU: 0 UID: 0 PID: 32098 Comm: syz.9.12593 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 347.352097][T32098] Tainted: [W]=WARN [ 347.352105][T32098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.352121][T32098] Call Trace: [ 347.352129][T32098] [ 347.352138][T32098] __dump_stack+0x1d/0x30 [ 347.352247][T32098] dump_stack_lvl+0x95/0xd0 [ 347.352272][T32098] dump_stack+0x15/0x1b [ 347.352294][T32098] warn_alloc+0x12b/0x1a0 [ 347.352320][T32098] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 347.352373][T32098] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 347.352488][T32098] __vmalloc_node_range_noprof+0xa0/0x1310 [ 347.352592][T32098] ? common_lsm_audit+0x1ca/0x230 [ 347.352625][T32098] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 347.352706][T32098] ? slow_avc_audit+0x104/0x140 [ 347.352746][T32098] ? should_fail_ex+0x30/0x280 [ 347.352774][T32098] ? should_failslab+0x8c/0xb0 [ 347.352801][T32098] vmalloc_user_noprof+0x7d/0xb0 [ 347.352831][T32098] ? xskq_create+0x80/0xe0 [ 347.352890][T32098] xskq_create+0x80/0xe0 [ 347.352911][T32098] xsk_init_queue+0x95/0xf0 [ 347.352948][T32098] xsk_setsockopt+0x3f5/0x640 [ 347.353018][T32098] ? __pfx_xsk_setsockopt+0x10/0x10 [ 347.353078][T32098] __sys_setsockopt+0x184/0x200 [ 347.353105][T32098] __x64_sys_setsockopt+0x64/0x80 [ 347.353159][T32098] x64_sys_call+0x21d5/0x3000 [ 347.353185][T32098] do_syscall_64+0xca/0x2b0 [ 347.353249][T32098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.353274][T32098] RIP: 0033:0x7f7e6accf749 [ 347.353292][T32098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.353331][T32098] RSP: 002b:00007f7e69737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 347.353355][T32098] RAX: ffffffffffffffda RBX: 00007f7e6af25fa0 RCX: 00007f7e6accf749 [ 347.353370][T32098] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 347.353421][T32098] RBP: 00007f7e6ad53f91 R08: 0000000000000004 R09: 0000000000000000 [ 347.353437][T32098] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.353449][T32098] R13: 00007f7e6af26038 R14: 00007f7e6af25fa0 R15: 00007fffe57f1aa8 [ 347.353467][T32098] [ 347.573982][T32098] Mem-Info: [ 347.577124][T32098] active_anon:4903 inactive_anon:56 isolated_anon:0 [ 347.577124][T32098] active_file:27537 inactive_file:2714 isolated_file:0 [ 347.577124][T32098] unevictable:0 dirty:311 writeback:0 [ 347.577124][T32098] slab_reclaimable:3689 slab_unreclaimable:241625 [ 347.577124][T32098] mapped:28880 shmem:1324 pagetables:1579 [ 347.577124][T32098] sec_pagetables:0 bounce:0 [ 347.577124][T32098] kernel_misc_reclaimable:0 [ 347.577124][T32098] free:1520275 free_pcp:11017 free_cma:0 [ 347.623175][T32098] Node 0 active_anon:19636kB inactive_anon:224kB active_file:110148kB inactive_file:10920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115520kB dirty:1168kB writeback:4kB shmem:5192kB kernel_stack:4816kB pagetables:6336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 347.650796][T32098] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.681309][T32098] lowmem_reserve[]: 0 2880 7859 7859 [ 347.686706][T32098] Node 0 DMA32 free:2945992kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 347.718155][T32098] lowmem_reserve[]: 0 0 4978 4978 [ 347.724132][T32098] Node 0 Normal free:3121720kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19752kB inactive_anon:224kB active_file:110148kB inactive_file:10920kB unevictable:0kB writepending:1172kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:38204kB local_pcp:9368kB free_cma:0kB [ 347.753879][T32109] ALSA: seq fatal error: cannot create timer (-19) [ 347.759765][T32098] lowmem_reserve[]: 0 0 0 0 [ 347.768570][T32098] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 347.770419][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 347.770470][ T29] audit: type=1400 audit(1768332912.111:14422): avc: denied { setopt } for pid=32103 comm="syz.8.12596" lport=36814 faddr=fc02:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.781398][T32098] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) [ 347.795084][ T29] audit: type=1400 audit(1768332912.141:14423): avc: denied { create } for pid=32112 comm="syz.2.12600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 347.811396][T32098] 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945992kB [ 347.851232][T32098] Node 0 Normal: 4632*4kB (UME) 2811*8kB (UME) 1469*16kB (UME) 1432*32kB (UME) 779*64kB (UME) 475*128kB (UME) 310*256kB (UME) 262*512kB (UME) 176*1024kB (UM) 82*2048kB (UM) 571*4096kB (UM) = 3121480kB [ 347.871089][T32098] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 347.880736][ T29] audit: type=1400 audit(1768332912.221:14424): avc: denied { load_policy } for pid=32112 comm="syz.2.12600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 347.883231][T32115] SELinux: ebitmap: truncated map [ 347.901627][T32098] 31610 total pagecache pages [ 347.901641][T32098] 105 pages in swap cache [ 347.901651][T32098] Free swap = 124380kB [ 347.901679][T32098] Total swap = 124996kB [ 347.910267][T32115] SELinux: failed to load policy [ 347.912227][T32098] 2097051 pages RAM [ 347.912237][T32098] 0 pages HighMem/MovableOnly [ 347.912244][T32098] 81271 pages reserved [ 347.976655][ T29] audit: type=1400 audit(1768332912.321:14425): avc: denied { open } for pid=32121 comm="syz.2.12604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 348.005460][ T29] audit: type=1400 audit(1768332912.321:14426): avc: denied { kernel } for pid=32121 comm="syz.2.12604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 348.034140][T32122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12604'. [ 348.048120][ T29] audit: type=1400 audit(1768332912.371:14427): avc: denied { create } for pid=32120 comm="syz.9.12602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 348.068242][ T29] audit: type=1400 audit(1768332912.371:14428): avc: denied { connect } for pid=32120 comm="syz.9.12602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 348.088186][ T29] audit: type=1400 audit(1768332912.371:14429): avc: denied { read } for pid=32116 comm="syz.4.12601" dev="nsfs" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 348.101252][T24676] kernel write not supported for file bpf-prog (pid: 24676 comm: kworker/1:14) [ 348.111792][ T29] audit: type=1400 audit(1768332912.371:14430): avc: denied { open } for pid=32116 comm="syz.4.12601" path="net:[4026532375]" dev="nsfs" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 348.142990][ T29] audit: type=1400 audit(1768332912.371:14431): avc: denied { create } for pid=32116 comm="syz.4.12601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 348.281064][T32147] atomic_op ffff88811b373d28 conn xmit_atomic 0000000000000000 [ 349.021179][T32164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12630'. [ 349.121848][T32171] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12621'. [ 349.316843][T32179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12624'. [ 349.514924][T32189] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 349.546354][T32193] netlink: 'syz.0.12635': attribute type 29 has an invalid length. [ 350.100905][T32255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12661'. [ 350.309204][T32279] pim6reg: entered allmulticast mode [ 350.341259][T32279] pim6reg: left allmulticast mode [ 350.350001][T32285] netlink: 48 bytes leftover after parsing attributes in process `syz.9.12677'. [ 350.388694][T32287] loop8: detected capacity change from 0 to 512 [ 350.409151][T32289] netlink: 'syz.0.12671': attribute type 1 has an invalid length. [ 350.424488][T32287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.523521][T32303] netlink: 'syz.0.12682': attribute type 19 has an invalid length. [ 350.531635][T32303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12682'. [ 350.545422][T32303] netlink: 'syz.0.12682': attribute type 19 has an invalid length. [ 350.548857][ T55] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.553520][T32303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12682'. [ 350.604130][ T55] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.614118][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.630347][ T55] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.639888][ T55] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.706523][T32308] Process accounting resumed [ 350.740802][T32320] bridge0: port 3(ipvlan3) entered blocking state [ 350.748225][T32320] bridge0: port 3(ipvlan3) entered disabled state [ 350.755672][T32320] ipvlan3: entered allmulticast mode [ 350.760986][T32320] bridge0: entered allmulticast mode [ 350.767418][T32320] ipvlan3: left allmulticast mode [ 350.772477][T32320] bridge0: left allmulticast mode [ 350.901690][T32346] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12701'. [ 351.013413][T32358] loop8: detected capacity change from 0 to 512 [ 351.023346][T32358] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 351.134792][T32374] loop8: detected capacity change from 0 to 128 [ 351.171554][T32378] gre0: entered promiscuous mode [ 351.176661][T32378] gre0: entered allmulticast mode [ 351.366471][T32407] netlink: 'syz.8.12730': attribute type 21 has an invalid length. [ 351.663891][T32430] usb usb8: usbfs: process 32430 (syz.0.12740) did not claim interface 0 before use [ 351.948382][T32458] loop9: detected capacity change from 0 to 512 [ 351.977004][T32458] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.224883][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.291106][T32480] bridge0: port 3(ipvlan3) entered blocking state [ 352.297745][T32480] bridge0: port 3(ipvlan3) entered disabled state [ 352.304789][T32480] ipvlan3: entered allmulticast mode [ 352.310286][T32480] bridge0: entered allmulticast mode [ 352.316534][T32480] ipvlan3: left allmulticast mode [ 352.321671][T32480] bridge0: left allmulticast mode [ 352.379482][T32488] __nla_validate_parse: 12 callbacks suppressed [ 352.379502][T32488] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12766'. [ 352.429951][T32492] loop9: detected capacity change from 0 to 128 [ 352.493761][T32496] loop8: detected capacity change from 0 to 1024 [ 352.505222][T32496] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.537606][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.569417][T32500] loop8: detected capacity change from 0 to 128 [ 352.576292][T32500] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 352.588798][T32500] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 352.604558][T32500] EXT4-fs (loop8): shut down requested (2) [ 352.619807][T32500] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.916360][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 352.916378][ T29] audit: type=1400 audit(352.896:14597): avc: denied { create } for pid=32514 comm="syz.2.12777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 352.977065][ T29] audit: type=1400 audit(352.926:14598): avc: denied { setopt } for pid=32514 comm="syz.2.12777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 352.996299][ T29] audit: type=1400 audit(352.926:14599): avc: denied { connect } for pid=32514 comm="syz.2.12777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 353.083996][ T29] audit: type=1400 audit(353.026:14600): avc: denied { read write } for pid=32518 comm="syz.8.12779" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 353.107043][ T29] audit: type=1400 audit(353.026:14601): avc: denied { open } for pid=32518 comm="syz.8.12779" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 353.130904][ T29] audit: type=1400 audit(353.026:14602): avc: denied { ioctl } for pid=32518 comm="syz.8.12779" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 353.252063][T32527] Process accounting resumed [ 353.288869][T32532] gre0: entered promiscuous mode [ 353.294731][T32532] gre0: entered allmulticast mode [ 353.435658][ T29] audit: type=1326 audit(353.416:14603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32537 comm="syz.9.12797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 353.501312][ T29] audit: type=1326 audit(353.436:14604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32537 comm="syz.9.12797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 353.525479][ T29] audit: type=1326 audit(353.436:14605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32537 comm="syz.9.12797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 353.548583][ T29] audit: type=1326 audit(353.436:14606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32537 comm="syz.9.12797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6accf749 code=0x7ffc0000 [ 353.748201][T32551] pim6reg: entered allmulticast mode [ 353.757956][T32551] pim6reg: left allmulticast mode [ 353.824534][T32557] bridge0: port 3(ipvlan2) entered blocking state [ 353.831127][T32557] bridge0: port 3(ipvlan2) entered disabled state [ 353.837860][T32557] ipvlan2: entered allmulticast mode [ 353.843206][T32557] bridge0: entered allmulticast mode [ 353.849160][T32557] ipvlan2: left allmulticast mode [ 353.854324][T32557] bridge0: left allmulticast mode [ 353.952637][T32561] xt_hashlimit: max too large, truncated to 1048576 [ 353.960100][T32561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.344210][ T55] nci: nci_rx_work: unknown MT 0x4 [ 355.188713][T32624] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12825'. [ 355.425284][T32647] sch_fq: defrate 4294967295 ignored. [ 355.785324][T32685] loop9: detected capacity change from 0 to 512 [ 355.806277][T32685] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 355.825112][T32685] EXT4-fs (loop9): mount failed [ 355.983531][T32702] loop9: detected capacity change from 0 to 512 [ 356.005580][T32702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.028592][T32702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 356.085141][T32608] syz.4.12817 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 356.099526][T32608] CPU: 1 UID: 0 PID: 32608 Comm: syz.4.12817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 356.099604][T32608] Tainted: [W]=WARN [ 356.099612][T32608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.099628][T32608] Call Trace: [ 356.099636][T32608] [ 356.099645][T32608] __dump_stack+0x1d/0x30 [ 356.099671][T32608] dump_stack_lvl+0x95/0xd0 [ 356.099742][T32608] dump_stack+0x15/0x1b [ 356.099759][T32608] dump_header+0x81/0x240 [ 356.099777][T32608] oom_kill_process+0x295/0x350 [ 356.099806][T32608] out_of_memory+0x97b/0xb80 [ 356.099827][T32608] try_charge_memcg+0x610/0xa10 [ 356.099911][T32608] obj_cgroup_charge_pages+0xa6/0x150 [ 356.099942][T32608] __memcg_kmem_charge_page+0x9f/0x170 [ 356.100031][T32608] __alloc_frozen_pages_noprof+0x18f/0x360 [ 356.100065][T32608] alloc_pages_mpol+0xb3/0x260 [ 356.100091][T32608] alloc_pages_noprof+0x90/0x130 [ 356.100146][T32608] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 356.100181][T32608] __kvmalloc_node_noprof+0x492/0x6b0 [ 356.100282][T32608] ? ip_set_alloc+0x24/0x30 [ 356.100333][T32608] ? ip_set_alloc+0x24/0x30 [ 356.100368][T32608] ip_set_alloc+0x24/0x30 [ 356.100393][T32608] hash_netiface_create+0x282/0x740 [ 356.100494][T32608] ? __pfx_hash_netiface_create+0x10/0x10 [ 356.100531][T32608] ip_set_create+0x3cc/0x970 [ 356.100584][T32608] ? __nla_parse+0x40/0x60 [ 356.100615][T32608] nfnetlink_rcv_msg+0x4c6/0x590 [ 356.100671][T32608] netlink_rcv_skb+0x123/0x220 [ 356.100751][T32608] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 356.100783][T32608] nfnetlink_rcv+0x167/0x16c0 [ 356.100828][T32608] ? __list_del_entry_valid_or_report+0x65/0x130 [ 356.100898][T32608] ? __rmqueue_pcplist+0x9c2/0xb90 [ 356.100929][T32608] ? should_fail_ex+0x30/0x280 [ 356.100955][T32608] ? selinux_nlmsg_lookup+0x99/0x890 [ 356.100994][T32608] ? __rcu_read_unlock+0x34/0x70 [ 356.101011][T32608] ? __netlink_lookup+0x266/0x2a0 [ 356.101028][T32608] netlink_unicast+0x5c0/0x690 [ 356.101057][T32608] netlink_sendmsg+0x58b/0x6b0 [ 356.101140][T32608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.101250][T32608] __sock_sendmsg+0x145/0x180 [ 356.101268][T32608] ____sys_sendmsg+0x31e/0x4a0 [ 356.101296][T32608] ___sys_sendmsg+0x17b/0x1d0 [ 356.101416][T32608] __x64_sys_sendmsg+0xd4/0x160 [ 356.101454][T32608] x64_sys_call+0x17ba/0x3000 [ 356.101545][T32608] do_syscall_64+0xca/0x2b0 [ 356.101576][T32608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.101597][T32608] RIP: 0033:0x7f4da5d8f749 [ 356.101615][T32608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.101636][T32608] RSP: 002b:00007f4da47ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.101705][T32608] RAX: ffffffffffffffda RBX: 00007f4da5fe5fa0 RCX: 00007f4da5d8f749 [ 356.101717][T32608] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 356.101729][T32608] RBP: 00007f4da5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.101739][T32608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.101785][T32608] R13: 00007f4da5fe6038 R14: 00007f4da5fe5fa0 R15: 00007fff690df5d8 [ 356.101807][T32608] [ 356.101904][T32608] memory: usage 307200kB, limit 307200kB, failcnt 642 [ 356.422788][T32608] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 356.430762][T32608] kmem: usage 298320kB, limit 9007199254740988kB, failcnt 0 [ 356.438207][T32608] Memory cgroup stats for /syz4: [ 356.438539][T32608] cache 0 [ 356.446542][T32608] rss 9072640 [ 356.449920][T32608] shmem 0 [ 356.452908][T32608] mapped_file 0 [ 356.456374][T32608] dirty 0 [ 356.459401][T32608] writeback 0 [ 356.462703][T32608] workingset_refault_anon 96 [ 356.467302][T32608] workingset_refault_file 0 [ 356.471801][T32608] swap 458752 [ 356.475181][T32608] swapcached 4096 [ 356.478800][T32608] pgpgin 83520 [ 356.482161][T32608] pgpgout 81300 [ 356.485697][T32608] pgfault 134812 [ 356.489249][T32608] pgmajfault 87 [ 356.492731][T32608] inactive_anon 4096 [ 356.496654][T32608] active_anon 0 [ 356.500178][T32608] inactive_file 4399104 [ 356.504408][T32608] active_file 4689920 [ 356.508382][T32608] unevictable 0 [ 356.511828][T32608] hierarchical_memory_limit 314572800 [ 356.517208][T32608] hierarchical_memsw_limit 9223372036854771712 [ 356.523408][T32608] total_cache 0 [ 356.526897][T32608] total_rss 9072640 [ 356.530728][T32608] total_shmem 0 [ 356.534226][T32608] total_mapped_file 0 [ 356.538222][T32608] total_dirty 0 [ 356.541673][T32608] total_writeback 0 [ 356.545488][T32608] total_workingset_refault_anon 96 [ 356.550585][T32608] total_workingset_refault_file 0 [ 356.555615][T32608] total_swap 458752 [ 356.559420][T32608] total_swapcached 4096 [ 356.563586][T32608] total_pgpgin 83520 [ 356.567582][T32608] total_pgpgout 81300 [ 356.571546][T32608] total_pgfault 134817 [ 356.575623][T32608] total_pgmajfault 87 [ 356.579654][T32608] total_inactive_anon 4096 [ 356.584072][T32608] total_active_anon 0 [ 356.588085][T32608] total_inactive_file 4399104 [ 356.592767][T32608] total_active_file 4689920 [ 356.597295][T32608] total_unevictable 0 [ 356.601496][T32608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.12817,pid=32607,uid=0 [ 356.616367][T32608] Memory cgroup out of memory: Killed process 32607 (syz.4.12817) total-vm:96148kB, anon-rss:9968kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 356.668920][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 356.875194][T32608] syz.4.12817 (32608) used greatest stack depth: 7256 bytes left [ 357.263404][ T324] netlink: 'syz.4.12897': attribute type 1 has an invalid length. [ 357.273596][ T327] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=327 comm=syz.9.12899 [ 357.286149][ T327] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=327 comm=syz.9.12899 [ 357.409171][ T353] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12911'. [ 357.441441][ T358] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 357.590683][ T377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12921'. [ 357.655285][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12922'. [ 357.700331][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12922'. [ 357.781411][ T387] netlink: 176 bytes leftover after parsing attributes in process `syz.8.12925'. [ 357.935181][ T405] netlink: 'syz.2.12935': attribute type 3 has an invalid length. [ 357.944517][ T407] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12934'. [ 357.965683][ T409] netlink: 80 bytes leftover after parsing attributes in process `syz.9.12936'. [ 358.031008][ T419] rdma_op ffff88811cc1a180 conn xmit_rdma 0000000000000000 [ 358.049966][ T417] loop9: detected capacity change from 0 to 1764 [ 358.066280][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 358.066293][ T29] audit: type=1400 audit(358.046:14779): avc: denied { mount } for pid=414 comm="syz.9.12940" name="/" dev="loop9" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 358.148233][ T29] audit: type=1400 audit(358.076:14780): avc: denied { sys_module } for pid=421 comm="syz.8.12942" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 358.148277][ T417] ISOFS: unable to read i-node block [ 358.213188][ T432] lo speed is unknown, defaulting to 1000 [ 358.221873][ T432] lo speed is unknown, defaulting to 1000 [ 358.228749][ T432] lo speed is unknown, defaulting to 1000 [ 358.262120][ T29] audit: type=1400 audit(358.176:14781): avc: denied { unmount } for pid=22652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 358.281903][ T29] audit: type=1400 audit(358.226:14782): avc: denied { name_bind } for pid=433 comm="syz.8.12946" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 358.327416][ T432] infiniband syz1: set down [ 358.332049][ T432] infiniband syz1: added lo [ 358.336781][T24682] lo speed is unknown, defaulting to 1000 [ 358.337060][ T29] audit: type=1400 audit(358.306:14783): avc: denied { map } for pid=437 comm="syz.8.12950" path="socket:[105031]" dev="sockfs" ino=105031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 358.365464][ T29] audit: type=1400 audit(358.306:14784): avc: denied { read } for pid=437 comm="syz.8.12950" path="socket:[105031]" dev="sockfs" ino=105031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 358.405340][ T432] RDS/IB: syz1: added [ 358.409460][ T432] smc: adding ib device syz1 with port count 1 [ 358.416505][ T432] smc: ib device syz1 port 1 has no pnetid [ 358.422675][T24682] lo speed is unknown, defaulting to 1000 [ 358.429725][ T432] lo speed is unknown, defaulting to 1000 [ 358.472129][ T432] lo speed is unknown, defaulting to 1000 [ 358.519245][ T432] lo speed is unknown, defaulting to 1000 [ 358.533157][ T29] audit: type=1326 audit(358.516:14785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=461 comm="syz.8.12960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 358.580990][ T432] lo speed is unknown, defaulting to 1000 [ 358.587758][ T29] audit: type=1326 audit(358.516:14786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=461 comm="syz.8.12960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 358.610768][ T29] audit: type=1326 audit(358.516:14787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=461 comm="syz.8.12960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 358.634601][ T29] audit: type=1326 audit(358.516:14788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=461 comm="syz.8.12960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 358.639571][ T469] xt_hashlimit: max too large, truncated to 1048576 [ 358.689612][ T469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.696873][ T432] lo speed is unknown, defaulting to 1000 [ 358.813686][ T484] netlink: 'syz.0.12968': attribute type 1 has an invalid length. [ 358.968893][ T512] ip6gretap1: entered promiscuous mode [ 358.975362][ T512] ip6gretap1: entered allmulticast mode [ 359.007149][ T517] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=517 comm=syz.9.12982 [ 359.073619][ T523] netlink: 'syz.9.12985': attribute type 21 has an invalid length. [ 359.086901][ T523] netlink: 'syz.9.12985': attribute type 1 has an invalid length. [ 359.095710][ T523] netlink: 144 bytes leftover after parsing attributes in process `syz.9.12985'. [ 359.299106][ T550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12999'. [ 359.343890][ T552] loop8: detected capacity change from 0 to 1024 [ 359.360049][ T558] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13002'. [ 359.383134][ T552] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 359.430255][ T552] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #11: comm syz.8.12992: iget: bogus i_mode (1) [ 359.443130][ T552] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.12992: couldn't read orphan inode 11 (err -117) [ 359.475770][ T552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.520880][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.618618][ T584] hub 9-0:1.0: USB hub found [ 359.653278][ T584] hub 9-0:1.0: 8 ports detected [ 359.671770][ T595] netlink: 'syz.0.13017': attribute type 3 has an invalid length. [ 359.694971][ T597] tls_set_device_offload: netdev not found [ 359.818763][T24673] kernel write not supported for file bpf-prog (pid: 24673 comm: kworker/1:11) [ 359.870344][ T622] IPVS: Error connecting to the multicast addr [ 360.288937][ T641] netlink: 'syz.0.13038': attribute type 1 has an invalid length. [ 360.470761][ T665] loop9: detected capacity change from 0 to 764 [ 360.479460][ T665] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 360.493885][ T665] Symlink component flag not implemented [ 360.500352][ T665] Symlink component flag not implemented (7) [ 360.571688][ T682] SELinux: failed to load policy [ 360.606383][ T690] loop9: detected capacity change from 0 to 512 [ 360.627313][ T690] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 360.642833][ T690] EXT4-fs (loop9): mount failed [ 360.744421][ T712] tipc: Started in network mode [ 360.749348][ T712] tipc: Node identity ac14140f, cluster identity 4711 [ 360.772056][ T712] tipc: New replicast peer: 255.255.255.255 [ 360.778344][ T712] tipc: Enabled bearer , priority 10 [ 360.830551][ T721] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 361.005322][ T751] netlink: 'syz.9.13087': attribute type 20 has an invalid length. [ 361.019273][ T750] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 361.019273][ T750] program syz.4.13086 not setting count and/or reply_len properly [ 361.024319][ T751] netlink: 'syz.9.13087': attribute type 20 has an invalid length. [ 361.038943][T30344] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.055840][T30344] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.078582][T30344] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.094221][T30344] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.161871][ T768] netlink: 'syz.4.13095': attribute type 1 has an invalid length. [ 361.201306][ T778] Cannot find add_set index 0 as target [ 361.239099][ T785] xt_l2tp: v2 tid > 0xffff: 37482740 [ 361.892903][T24673] tipc: Node number set to 2886997007 [ 362.041738][ T861] loop9: detected capacity change from 0 to 1024 [ 362.069230][ T861] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 362.080311][ T861] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 362.102967][ T857] lo speed is unknown, defaulting to 1000 [ 362.121210][ T861] JBD2: no valid journal superblock found [ 362.127926][ T861] EXT4-fs (loop9): Could not load journal inode [ 362.225383][ T861] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 362.299790][ T882] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 363.145897][ T912] loop8: detected capacity change from 0 to 4096 [ 363.158253][ T912] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.187963][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 363.187979][ T29] audit: type=1400 audit(363.166:15035): avc: denied { mount } for pid=911 comm="syz.8.13151" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 363.234288][ T29] audit: type=1400 audit(363.176:15036): avc: denied { add_name } for pid=911 comm="syz.8.13151" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 363.254564][ T29] audit: type=1400 audit(363.176:15037): avc: denied { create } for pid=911 comm="syz.8.13151" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 363.274413][ T29] audit: type=1400 audit(363.176:15038): avc: denied { read } for pid=911 comm="syz.8.13151" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 363.296237][ T29] audit: type=1400 audit(363.176:15039): avc: denied { open } for pid=911 comm="syz.8.13151" path=2F323130362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 363.332616][ T29] audit: type=1400 audit(363.176:15040): avc: denied { setattr } for pid=911 comm="syz.8.13151" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 363.384930][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.439037][ T29] audit: type=1400 audit(363.236:15041): avc: denied { unmount } for pid=10875 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 363.496665][ T29] audit: type=1400 audit(363.466:15042): avc: denied { create } for pid=919 comm="syz.9.13155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.515747][ T29] audit: type=1400 audit(363.466:15043): avc: denied { ioctl } for pid=919 comm="syz.9.13155" path="socket:[106376]" dev="sockfs" ino=106376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.540131][ T29] audit: type=1400 audit(363.476:15044): avc: denied { bind } for pid=919 comm="syz.9.13155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.695387][ T932] netlink: 'syz.8.13161': attribute type 21 has an invalid length. [ 363.703588][ T932] netlink: 'syz.8.13161': attribute type 1 has an invalid length. [ 363.711567][ T932] __nla_validate_parse: 15 callbacks suppressed [ 363.711579][ T932] netlink: 144 bytes leftover after parsing attributes in process `syz.8.13161'. [ 363.857576][ T944] netlink: 380 bytes leftover after parsing attributes in process `syz.8.13168'. [ 363.922971][ T944] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13168'. [ 364.345445][ T962] loop9: detected capacity change from 0 to 512 [ 364.381864][ T964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.399497][ T962] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 364.411343][ T964] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.426447][ T964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.525884][ T976] rdma_rxe: rxe_newlink: failed to add lo [ 364.737592][ T996] 9p: Bad value for 'source' [ 364.880007][ T1012] loop9: detected capacity change from 0 to 1024 [ 364.889383][ T1012] EXT4-fs: Ignoring removed orlov option [ 364.901897][ T1012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.098771][ T1026] loop8: detected capacity change from 0 to 512 [ 365.111343][ T1026] EXT4-fs (loop8): 1 truncate cleaned up [ 365.178824][ T1026] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.312345][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.356313][ T1042] hub 9-0:1.0: USB hub found [ 365.378342][ T1042] hub 9-0:1.0: 8 ports detected [ 365.450099][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.534146][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13221'. [ 365.683252][T13538] nci: nci_rx_work: unknown MT 0x4 [ 365.869708][ T1080] hub 9-0:1.0: USB hub found [ 365.877307][ T1080] hub 9-0:1.0: 8 ports detected [ 365.905983][ T1087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13231'. [ 366.029601][ T1066] loop8: detected capacity change from 0 to 32768 [ 366.055207][ T1103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13238'. [ 366.079105][ T1103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13238'. [ 366.312691][ T1126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.322359][ T1126] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.335506][ T1126] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 366.406795][ T1133] ip6gretap1: entered promiscuous mode [ 366.412342][ T1133] ip6gretap1: entered allmulticast mode [ 366.586040][ T1156] macvtap0: entered promiscuous mode [ 366.591409][ T1156] macvtap0: entered allmulticast mode [ 366.636339][ T1161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13264'. [ 366.647343][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.665266][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.789553][ T1174] hub 2-0:1.0: USB hub found [ 366.794993][ T1174] hub 2-0:1.0: 8 ports detected [ 366.832998][T13553] nci: nci_rsp_packet: unknown rsp opcode 0x304 [ 366.870465][ T1144] loop9: detected capacity change from 0 to 32768 [ 367.146454][ T1207] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13285'. [ 367.166666][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.188004][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.318910][ T1214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.330640][ T1214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.347351][T24673] lo speed is unknown, defaulting to 1000 [ 367.353180][T24673] syz1: Port: 1 Link ACTIVE [ 367.359166][T24673] lo speed is unknown, defaulting to 1000 [ 367.649011][ T1236] netlink: 'syz.9.13297': attribute type 4 has an invalid length. [ 367.656927][ T1236] netlink: 152 bytes leftover after parsing attributes in process `syz.9.13297'. [ 367.675680][ T1236] .`: renamed from bond0 (while UP) [ 367.710382][ T1238] hub 2-0:1.0: USB hub found [ 367.715162][ T1238] hub 2-0:1.0: 8 ports detected [ 367.733424][ T1246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.749633][ T1246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.808712][ T1259] netlink: 'syz.2.13308': attribute type 1 has an invalid length. [ 367.842140][ T1264] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 367.919299][ T1279] hub 2-0:1.0: USB hub found [ 367.924327][ T1279] hub 2-0:1.0: 8 ports detected [ 367.935759][ T1288] loop8: detected capacity change from 0 to 256 [ 368.283752][ T1317] hub 2-0:1.0: USB hub found [ 368.304100][ T1317] hub 2-0:1.0: 8 ports detected [ 368.617062][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 368.617081][ T29] audit: type=1400 audit(368.596:15251): avc: denied { read write } for pid=1344 comm="syz.2.13350" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 368.622215][ T1342] netlink: 'syz.4.13349': attribute type 10 has an invalid length. [ 368.625545][ T29] audit: type=1400 audit(368.596:15252): avc: denied { open } for pid=1344 comm="syz.2.13350" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 368.664732][T24673] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 368.681310][ T1340] bond0: entered promiscuous mode [ 368.691715][ T1340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.723752][ T1342] dummy0: left allmulticast mode [ 368.728815][ T1342] dummy0: left promiscuous mode [ 368.733901][ T1342] bridge0: port 3(dummy0) entered disabled state [ 368.757521][ T29] audit: type=1326 audit(368.736:15253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1348 comm="syz.8.13341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a3df749 code=0x0 [ 368.767108][T24673] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 368.792013][ T1342] team0: Port device dummy0 added [ 368.842420][ T1347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.866168][ T1347] bond2: entered promiscuous mode [ 368.875316][ T1355] __nla_validate_parse: 7 callbacks suppressed [ 368.875331][ T1355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13338'. [ 368.895772][ T1347] bond0: (slave bond2): Enslaving as an active interface with an up link [ 368.944324][ T1355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.973409][ T1355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.111590][ T29] audit: type=1400 audit(369.086:15254): avc: denied { read } for pid=1363 comm="syz.0.13346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 369.310233][ T29] audit: type=1400 audit(369.286:15255): avc: denied { read append } for pid=1375 comm="syz.2.13354" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 369.334232][ T29] audit: type=1400 audit(369.286:15256): avc: denied { open } for pid=1375 comm="syz.2.13354" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 369.365329][ T29] audit: type=1400 audit(369.346:15257): avc: denied { ioctl } for pid=1375 comm="syz.2.13354" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 369.499160][ T29] audit: type=1400 audit(369.476:15258): avc: denied { create } for pid=1389 comm="syz.0.13360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 369.551875][ T29] audit: type=1400 audit(369.506:15259): avc: denied { write } for pid=1389 comm="syz.0.13360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 369.737497][ T1403] loop9: detected capacity change from 0 to 8192 [ 369.747528][T24681] kernel write not supported for file bpf-prog (pid: 24681 comm: kworker/0:12) [ 369.867798][ T29] audit: type=1326 audit(369.846:15260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06a0af749 code=0x7ffc0000 [ 369.913787][ T1417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13370'. [ 369.927145][ T1417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13370'. [ 370.110118][ T1444] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 370.110118][ T1444] program syz.8.13386 not setting count and/or reply_len properly [ 370.144924][ T1445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13388'. [ 370.203342][ T1452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13388'. [ 370.375188][ T1456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.405918][ T1456] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.438702][ T1456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.607901][ T1482] SELinux: failed to load policy [ 370.623281][ T1491] netlink: 'syz.0.13409': attribute type 1 has an invalid length. [ 370.647402][ T1494] IPv6: Can't replace route, no match found [ 370.952381][ T1528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1528 comm=syz.0.13428 [ 370.977012][ T1533] loop9: detected capacity change from 0 to 512 [ 371.006942][ T1533] EXT4-fs (loop9): orphan cleanup on readonly fs [ 371.024967][ T1533] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.13427: corrupted in-inode xattr: invalid size in ea xattr [ 371.053236][ T1533] EXT4-fs (loop9): Remounting filesystem read-only [ 371.063312][ T1533] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.100615][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.326210][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.335388][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.343693][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.381612][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.390215][ T1562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.474568][ T1569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.876729][T22652] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 371.887891][T22652] CPU: 1 UID: 0 PID: 22652 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 371.888014][T22652] Tainted: [W]=WARN [ 371.888023][T22652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.888045][T22652] Call Trace: [ 371.888053][T22652] [ 371.888062][T22652] __dump_stack+0x1d/0x30 [ 371.888093][T22652] dump_stack_lvl+0x95/0xd0 [ 371.888169][T22652] dump_stack+0x15/0x1b [ 371.888195][T22652] dump_header+0x81/0x240 [ 371.888219][T22652] oom_kill_process+0x295/0x350 [ 371.888249][T22652] out_of_memory+0x97b/0xb80 [ 371.888277][T22652] try_charge_memcg+0x610/0xa10 [ 371.888370][T22652] charge_memcg+0x51/0xc0 [ 371.888449][T22652] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 371.888485][T22652] __read_swap_cache_async+0x17b/0x2d0 [ 371.888546][T22652] swap_cluster_readahead+0x262/0x3c0 [ 371.888586][T22652] swapin_readahead+0xde/0x820 [ 371.888624][T22652] ? __rcu_read_unlock+0x4f/0x70 [ 371.888658][T22652] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 371.888707][T22652] ? __list_add_valid_or_report+0x38/0xe0 [ 371.888738][T22652] ? __rcu_read_unlock+0x4f/0x70 [ 371.888764][T22652] ? swap_cache_get_folio+0x277/0x280 [ 371.888808][T22652] do_swap_page+0x2b4/0x21e0 [ 371.888903][T22652] ? _raw_spin_unlock+0x26/0x50 [ 371.888927][T22652] ? __schedule+0x85f/0xcd0 [ 371.888950][T22652] ? __pfx_default_wake_function+0x10/0x10 [ 371.889005][T22652] handle_mm_fault+0x9d8/0x2c60 [ 371.889055][T22652] do_user_addr_fault+0x630/0x1080 [ 371.889108][T22652] exc_page_fault+0x62/0xa0 [ 371.889134][T22652] asm_exc_page_fault+0x26/0x30 [ 371.889152][T22652] RIP: 0033:0x7f7e6ad01fc5 [ 371.889185][T22652] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 371.889207][T22652] RSP: 002b:00007fffe57f1de8 EFLAGS: 00010246 [ 371.889225][T22652] RAX: 0000000000000000 RBX: 0000000000000876 RCX: 00007f7e6ad01fc3 [ 371.889240][T22652] RDX: 00007fffe57f1e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.889253][T22652] RBP: 00007fffe57f1e6c R08: 0000000030850b7c R09: 0000000000000000 [ 371.889263][T22652] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 371.889306][T22652] R13: 00000000000927c0 R14: 000000000005aabe R15: 00007fffe57f1ec0 [ 371.889324][T22652] [ 371.889508][T22652] memory: usage 305380kB, limit 307200kB, failcnt 8919 [ 372.051462][ T1595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13451'. [ 372.070705][T22652] memory+swap: usage 272360kB, limit 9007199254740988kB, failcnt 0 [ 372.070725][T22652] kmem: usage 271936kB, limit 9007199254740988kB, failcnt 0 [ 372.070741][T22652] Memory cgroup stats for /syz9: [ 372.154632][ T1595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13451'. [ 372.161868][T22652] cache 524288 [ 372.171968][T22652] rss 114688 [ 372.175204][T22652] shmem 0 [ 372.178176][T22652] mapped_file 16384 [ 372.181987][T22652] dirty 16384 [ 372.185309][T22652] writeback 0 [ 372.188603][T22652] workingset_refault_anon 63 [ 372.193221][T22652] workingset_refault_file 124 [ 372.197901][T22652] swap 180224 [ 372.201189][T22652] swapcached 131072 [ 372.205039][T22652] pgpgin 164171 [ 372.208508][T22652] pgpgout 164006 [ 372.212142][T22652] pgfault 212222 [ 372.215705][T22652] pgmajfault 38 [ 372.219160][T22652] inactive_anon 4096 [ 372.223068][T22652] active_anon 139264 [ 372.226966][T22652] inactive_file 0 [ 372.230685][T22652] active_file 532480 [ 372.234702][T22652] unevictable 0 [ 372.238188][T22652] hierarchical_memory_limit 314572800 [ 372.243648][T22652] hierarchical_memsw_limit 9223372036854771712 [ 372.249034][T13538] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.249843][T22652] total_cache 524288 [ 372.259027][ T1595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13451'. [ 372.262482][T22652] total_rss 114688 [ 372.262492][T22652] total_shmem 0 [ 372.262562][T22652] total_mapped_file 16384 [ 372.273607][ T1595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13451'. [ 372.275307][T22652] total_dirty 16384 [ 372.293720][T13538] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.295945][T22652] total_writeback 0 [ 372.308306][T22652] total_workingset_refault_anon 63 [ 372.313443][T22652] total_workingset_refault_file 124 [ 372.318643][T22652] total_swap 180224 [ 372.322450][T22652] total_swapcached 131072 [ 372.326821][T22652] total_pgpgin 164171 [ 372.330852][T22652] total_pgpgout 164006 [ 372.334943][T22652] total_pgfault 212222 [ 372.339030][T22652] total_pgmajfault 38 [ 372.343044][T22652] total_inactive_anon 4096 [ 372.347463][T22652] total_active_anon 139264 [ 372.348162][T13538] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.351884][T22652] total_inactive_file 0 [ 372.364768][T22652] total_active_file 532480 [ 372.369193][T22652] total_unevictable 0 [ 372.373237][T22652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.13448,pid=1566,uid=0 [ 372.387999][T22652] Memory cgroup out of memory: Killed process 1566 (syz.9.13448) total-vm:95884kB, anon-rss:1264kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 372.405436][T13538] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.476915][ T1601] netlink: 96 bytes leftover after parsing attributes in process `syz.9.13455'. [ 372.610686][ T1625] netlink: 'syz.4.13464': attribute type 39 has an invalid length. [ 372.647990][ T1623] SELinux: unknown common socke [ 372.673112][ T1623] SELinux: failed to load policy [ 372.696121][ T1632] netlink: 'syz.9.13470': attribute type 21 has an invalid length. [ 372.708726][T24673] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 372.716838][T24673] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.911935][ T1652] netlink: 'syz.8.13478': attribute type 1 has an invalid length. [ 373.279296][ T1706] SELinux: failed to load policy [ 373.286048][ T1717] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 373.319412][ T1721] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 373.394074][ T1733] netlink: 'syz.0.13514': attribute type 39 has an invalid length. [ 373.465970][ T1739] netlink: 'syz.0.13526': attribute type 16 has an invalid length. [ 373.559101][T13582] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 374.134739][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 374.134754][ T29] audit: type=1400 audit(374.116:15377): avc: denied { create } for pid=1759 comm="syz.9.13519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 374.175004][ T29] audit: type=1400 audit(374.146:15378): avc: denied { bind } for pid=1759 comm="syz.9.13519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 374.219591][ T1764] loop9: detected capacity change from 0 to 512 [ 374.231427][ T1764] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 374.241116][ T1764] EXT4-fs (loop9): invalid journal inode [ 374.246891][ T1764] EXT4-fs (loop9): can't get journal size [ 374.272959][ T1762] SELinux: failed to load policy [ 374.282979][ T29] audit: type=1326 audit(374.256:15379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1765 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 374.306077][ T29] audit: type=1326 audit(374.256:15380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1765 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 374.329233][ T29] audit: type=1326 audit(374.256:15381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f2a412005 code=0x7ffc0000 [ 374.352239][ T29] audit: type=1326 audit(374.256:15382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1765 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 374.375294][ T29] audit: type=1326 audit(374.256:15383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1765 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 374.409041][ T29] audit: type=1326 audit(374.266:15384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1765 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 374.432106][ T29] audit: type=1326 audit(374.266:15385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1765 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 374.432462][ T1764] EXT4-fs (loop9): 1 truncate cleaned up [ 374.455283][ T29] audit: type=1326 audit(374.266:15386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1765 comm="syz.8.13522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2a3df749 code=0x7ffc0000 [ 374.523346][ T1764] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.592696][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.743282][ T1800] IPVS: Unknown mcast interface: vcan0 [ 374.817416][ T1810] netlink: 'syz.2.13546': attribute type 1 has an invalid length. [ 374.825319][ T1810] netlink: 'syz.2.13546': attribute type 2 has an invalid length. [ 374.855115][ T1816] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 374.942452][ T1826] lo speed is unknown, defaulting to 1000 [ 375.138636][ T1849] hub 2-0:1.0: USB hub found [ 375.149098][ T1849] hub 2-0:1.0: 8 ports detected [ 375.211873][ T1857] block device autoloading is deprecated and will be removed. [ 375.236679][ T1863] loop8: detected capacity change from 0 to 512 [ 375.267823][ T1863] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.300178][ T1868] netlink: 'syz.2.13573': attribute type 1 has an invalid length. [ 375.311306][ T1874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1874 comm=syz.0.13575 [ 375.323957][ T1874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1874 comm=syz.0.13575 [ 375.579761][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.913602][ T1937] loop9: detected capacity change from 0 to 512 [ 375.920818][ T1937] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 375.930399][ T1937] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 375.943318][ T1928] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 375.951456][ T1928] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 376.137984][ T1937] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.13602: Allocating blocks 41-42 which overlap fs metadata [ 376.164721][ T1937] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.13602: Allocating blocks 41-42 which overlap fs metadata [ 376.199325][ T1937] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.13602: Failed to acquire dquot type 1 [ 376.211192][ T1937] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 376.225951][ T1937] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.13602: corrupted inode contents [ 376.238281][ T1937] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.13602: mark_inode_dirty error [ 376.249913][ T1937] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.13602: corrupted inode contents [ 376.269694][ T1937] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.13602: mark_inode_dirty error [ 376.281413][ T1937] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.13602: corrupted inode contents [ 376.313212][ T1937] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 376.330238][ T1937] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.13602: corrupted inode contents [ 376.352230][ T1937] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.13602: mark_inode_dirty error [ 376.423546][ T1968] __nla_validate_parse: 4 callbacks suppressed [ 376.423565][ T1968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13615'. [ 376.440627][ T1967] loop8: detected capacity change from 0 to 512 [ 376.447155][ T1937] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 376.456925][ T1967] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 376.473656][ T1970] bridge_slave_0: left allmulticast mode [ 376.479322][ T1970] bridge_slave_0: left promiscuous mode [ 376.485167][ T1970] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.495353][ T1937] EXT4-fs (loop9): 1 truncate cleaned up [ 376.501435][ T1937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.515204][ T1937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.527780][ T1967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.558937][ T1970] bridge_slave_1: left allmulticast mode [ 376.565577][ T1970] bridge_slave_1: left promiscuous mode [ 376.571352][ T1970] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.589237][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.612177][ T1975] loop8: detected capacity change from 0 to 1024 [ 376.612528][ T1970] bond0: (slave bond_slave_0): Releasing backup interface [ 376.619663][ T1975] EXT4-fs: Ignoring removed orlov option [ 376.641687][ T1970] bond0: (slave bond_slave_1): Releasing backup interface [ 376.656755][ T1975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.678231][ T1970] team0: Port device team_slave_0 removed [ 376.690923][ T1970] team0: Port device team_slave_1 removed [ 376.719688][ T1970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.794662][ T1992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13624'. [ 376.825745][ T1993] loop9: detected capacity change from 0 to 4096 [ 376.847933][ T1993] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.870976][ T1993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.035749][ T2017] loop9: detected capacity change from 0 to 1024 [ 377.042737][ T2017] EXT4-fs: Ignoring removed orlov option [ 377.059203][ T2017] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.201936][T10875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.416017][ T2060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13655'. [ 377.425059][ T2060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13655'. [ 377.584229][T13539] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x79 [ 377.949641][ T2017] ================================================================== [ 377.957786][ T2017] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 377.965878][ T2017] [ 377.968224][ T2017] write to 0xffff8881046769a8 of 8 bytes by task 2031 on cpu 0: [ 377.975865][ T2017] filemap_splice_read+0x4f4/0x740 [ 377.980991][ T2017] ext4_file_splice_read+0x8f/0xb0 [ 377.986124][ T2017] splice_direct_to_actor+0x26f/0x680 [ 377.991530][ T2017] do_splice_direct+0xda/0x150 [ 377.996301][ T2017] do_sendfile+0x380/0x650 [ 378.000742][ T2017] __x64_sys_sendfile64+0x105/0x150 [ 378.005946][ T2017] x64_sys_call+0x2db1/0x3000 [ 378.010636][ T2017] do_syscall_64+0xca/0x2b0 [ 378.015182][ T2017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.021093][ T2017] [ 378.023428][ T2017] write to 0xffff8881046769a8 of 8 bytes by task 2017 on cpu 1: [ 378.031056][ T2017] filemap_splice_read+0x4f4/0x740 [ 378.036197][ T2017] ext4_file_splice_read+0x8f/0xb0 [ 378.041338][ T2017] splice_direct_to_actor+0x26f/0x680 [ 378.046887][ T2017] do_splice_direct+0xda/0x150 [ 378.051715][ T2017] do_sendfile+0x380/0x650 [ 378.056180][ T2017] __x64_sys_sendfile64+0x105/0x150 [ 378.061397][ T2017] x64_sys_call+0x2db1/0x3000 [ 378.066082][ T2017] do_syscall_64+0xca/0x2b0 [ 378.070620][ T2017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.076530][ T2017] [ 378.078864][ T2017] value changed: 0x0000000000001010 -> 0x0000000000001011 [ 378.085981][ T2017] [ 378.088313][ T2017] Reported by Kernel Concurrency Sanitizer on: [ 378.094474][ T2017] CPU: 1 UID: 0 PID: 2017 Comm: syz.9.13637 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 378.105849][ T2017] Tainted: [W]=WARN [ 378.109672][ T2017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.119741][ T2017] ================================================================== [ 378.175454][T22652] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.