last executing test programs: 1m17.798436941s ago: executing program 2 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1m17.534075143s ago: executing program 2 (id=68): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83c6e613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038d0100a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17680100969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06de269e97fbb0776bf56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105cfdf8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f01000080000000004febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60133641a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2e9a20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1015ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846899c6b23c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33694f40000000000005d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b95bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca86f750189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc681b6c9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8504611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c01446234437b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c64cd14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e87973d574ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7430100bf3825a1996c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb150963b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b16500"/4081], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='hrtimer_init\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) nanosleep(&(0x7f0000000040), 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1m17.355270535s ago: executing program 2 (id=73): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x169) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000540)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) link(0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m17.256685476s ago: executing program 2 (id=76): memfd_create(0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m16.964414268s ago: executing program 2 (id=77): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004110) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lstat(0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0xfd, 0x21d, &(0x7f0000000640)="$eJzs3E9rY1UYB+DXTGYmE5lpV4JuPOhGNxetK5dBWhADSm1EXQi3NNWQmJTciIm46NqVn6O4dCcUv0C/hbsiSFddGWmT/rVVF7bpNM8D5bzlR+AcXk54byDZ//THr9ubRbaZD6JUSVGO2I7DiMUoxYOYeGG6lo7rR3Hedrz57jcHP3z82ecf1Or15dWUVmpr7yyllJ69uvvt9z+99uvgxU9+fvbL49hb/GL/j6Xf9l7ae3n/z7WvWkVqFanbG6Q8rfd6g3y900wbraKdpfRRp5kXzdTqFs3+hXyz09vaGqW8u/G0utVvFkXKu6PUbo7SoJcG/VHKv8xb3ZRlWXpaDf5NY2d1Na/NehfcrH6/lh/d5Sd/Sxo7M9kQADBT5v95Zv6fB0fzf3V6fy8y/wMAAAAAAAAAAAAAwPPgcDxeGI/HCyfryV+UIyoRcfo/99J1/X8c+j8PzvW/FPo/d/7T/d/V//vqYURMv7hbifh9e9gYNibrJF95v778Vjq2ePaqg+Gw8eA0f3uSp4v5w6hO86Ur80fxxuuT/Ch778P6pfxJbNz88QEAAGAuZOnUlc/3WXZdPqnOfT5w6fm9HK+Ub+0YAAAAwD8oRt+1806n2VfMZ1GJO7ENxV0rZv3OBAAA/N/Ohv5Z7wQAAAAAAAAAAAAAAAAAAADm1238nNiszwgAAAAAAAAAAAAAAAAAAAAAAHfNXwEAAP//uwT+CA==") 1m16.159938776s ago: executing program 2 (id=93): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock2(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x0) 1m16.159629516s ago: executing program 32 (id=93): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock2(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x0) 1m9.813914644s ago: executing program 4 (id=205): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) getpid() 1m9.756949355s ago: executing program 4 (id=207): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 1m9.662367456s ago: executing program 4 (id=208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1m9.621445336s ago: executing program 4 (id=209): socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="4f8ffe", 0x3}], 0x1}}], 0x1, 0x0) 1m9.563313087s ago: executing program 4 (id=211): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 1m9.340734869s ago: executing program 4 (id=215): bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 54.305680948s ago: executing program 33 (id=215): bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 1.429514997s ago: executing program 3 (id=1480): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x6, 0x7, 0x15, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x24) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x400002}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0xa, r4, 0x38}, 0x10) 1.308118158s ago: executing program 3 (id=1482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000280)=0xfffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.022745561s ago: executing program 3 (id=1487): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x160801, 0x480000f, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x4, 0x0, 0x0) 943.192121ms ago: executing program 1 (id=1491): io_setup(0x3ff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r1) 896.183702ms ago: executing program 1 (id=1492): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x800000000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xc3ff}}, 0x44000) 839.715722ms ago: executing program 1 (id=1493): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x0, 0x0, 0xc, 0x200002}) close_range(r3, 0xffffffffffffffff, 0x0) 440.267506ms ago: executing program 5 (id=1506): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x800e, &(0x7f00000005c0)={[{@grpid}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 424.191157ms ago: executing program 3 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6020400) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="7cd1f233f595b9483683fb7fcac29b1731c46bffa49ed496fc644240", 0x1c}], 0x1, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x8}, 0x18) 365.900997ms ago: executing program 5 (id=1508): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', &(0x7f0000000200)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(r0) 356.359617ms ago: executing program 0 (id=1509): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 337.358447ms ago: executing program 5 (id=1510): openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x41) write(r0, &(0x7f0000004200)='t', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x40000000) r3 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x0, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 332.728237ms ago: executing program 6 (id=1511): dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0) 275.690298ms ago: executing program 6 (id=1512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) io_uring_setup(0x1c9f, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) lsm_get_self_attr(0x69, 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) msgget$private(0x0, 0x0) 228.460158ms ago: executing program 6 (id=1514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) clock_settime(0x100000000000b00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 124.998829ms ago: executing program 6 (id=1515): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002940)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 124.606919ms ago: executing program 0 (id=1516): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x564, &(0x7f00000008c0)="$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") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x181042, 0x1) write$P9_RREADDIR(r1, &(0x7f0000000100)={0xb}, 0xb) sendfile(r1, r1, &(0x7f0000000240), 0x7f03) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000600459e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='ext4_es_lookup_extent_exit\x00', r2, 0x0, 0x3ff}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000001b40)="a7", 0xa800}], 0x1, 0x8000, 0x0, 0x0) 124.023259ms ago: executing program 5 (id=1517): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4333, &(0x7f0000000000), &(0x7f0000ff5000), &(0x7f0000ff4000)) 32.08403ms ago: executing program 6 (id=1518): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2aaaa"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 31.84208ms ago: executing program 0 (id=1519): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 21.89969ms ago: executing program 0 (id=1520): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000085000000d000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 0s ago: executing program 0 (id=1521): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x3, 0x34e}, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): rsing attributes in process `syz.3.139'. [ 41.746003][ T3671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.776049][ T3671] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.786352][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.793517][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.851415][ T3671] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.861876][ T3671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.876902][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.888486][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.895621][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.018791][ T3671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.045188][ T3363] kernel write not supported for file /vcsu (pid: 3363 comm: kworker/0:2) [ 42.173143][ T3925] netlink: 96 bytes leftover after parsing attributes in process `syz.3.146'. [ 42.184743][ T3924] SELinux: Context /usr/sbin/ntpd is not valid (left unmapped). [ 42.279094][ T3363] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.292885][ T3947] loop1: detected capacity change from 0 to 1024 [ 42.305647][ T3363] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.331731][ T3671] veth0_vlan: entered promiscuous mode [ 42.346709][ T3947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.354453][ T3671] veth1_vlan: entered promiscuous mode [ 42.365445][ T3951] loop6: detected capacity change from 0 to 7823 [ 42.372665][ T3947] EXT4-fs: Mount option(s) incompatible with ext2 [ 42.388760][ T3671] veth0_macvtap: entered promiscuous mode [ 42.398529][ T3671] veth1_macvtap: entered promiscuous mode [ 42.417481][ T3671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.421906][ T3957] loop6: detected capacity change from 7823 to 9855 [ 42.428088][ T3671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.444707][ T3671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.455455][ T3671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.465364][ T3671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.475926][ T3671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.485876][ T3671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.496499][ T3671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.520463][ T3287] Buffer I/O error on dev loop6, logical block 1231, async page read [ 42.563067][ T3671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.606380][ T3671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.617379][ T3671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.627557][ T3671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.638076][ T3671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.648118][ T3671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.659316][ T3671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.669237][ T3671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.679706][ T3671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.707124][ T3671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.721427][ T3972] loop0: detected capacity change from 0 to 2048 [ 42.726996][ T3671] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.736560][ T3671] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.745286][ T3671] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.754135][ T3671] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.759257][ T3972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.815979][ T3287] Buffer I/O error on dev loop6, logical block 1231, async page read [ 42.835169][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.970940][ T3988] loop4: detected capacity change from 0 to 512 [ 43.009977][ T3988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.011159][ T3992] loop0: detected capacity change from 0 to 512 [ 43.059595][ T3992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 43.087912][ T3988] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.108075][ T3992] System zones: 1-12 [ 43.112239][ T3992] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.160: Directory hole found for htree index block 0 [ 43.222448][ T3989] loop3: detected capacity change from 0 to 8192 [ 43.252806][ T3992] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 43.261941][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.274923][ T3992] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.160: Directory hole found for htree index block 0 [ 43.290501][ T3992] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 43.300477][ T3992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.334161][ T3992] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.160: Directory hole found for htree index block 0 [ 43.407825][ T3999] vlan2: entered allmulticast mode [ 43.432545][ T4003] tipc: Started in network mode [ 43.437647][ T4003] tipc: Node identity 722eaea1ad2f, cluster identity 4711 [ 43.444888][ T4003] tipc: Enabled bearer , priority 0 [ 43.467591][ T4007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 43.482113][ T4002] tipc: Resetting bearer [ 43.504889][ T4002] tipc: Disabling bearer [ 43.524450][ T4007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.580294][ T4007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.622155][ T4014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.655404][ T4007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.683212][ T4014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.720955][ T4007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.749977][ T4014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.819370][ T4007] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.828237][ T3980] syz.3.159 (3980) used greatest stack depth: 6208 bytes left [ 43.834909][ T4007] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.851610][ T4007] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.868412][ T4014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.892063][ T4007] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.920191][ T4014] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.971742][ T4014] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.986069][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.003452][ T4014] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.079727][ T4014] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.180060][ T4036] loop1: detected capacity change from 0 to 164 [ 44.222769][ T4036] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 44.253134][ T4036] syz.1.175: attempt to access beyond end of device [ 44.253134][ T4036] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 44.400516][ T4050] netlink: 'gtp': attribute type 7 has an invalid length. [ 44.408956][ T4050] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 44.581271][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.589022][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.616497][ T4063] bridge0: entered allmulticast mode [ 44.631318][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 44.631334][ T30] audit: type=1400 audit(1741619527.191:617): avc: denied { ioctl } for pid=4062 comm="syz.0.187" path="cgroup:[4026532374]" dev="nsfs" ino=4026532374 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.666590][ T4068] bridge_slave_1: left allmulticast mode [ 44.672444][ T4068] bridge_slave_1: left promiscuous mode [ 44.678169][ T4068] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.696708][ T4068] bridge_slave_0: left allmulticast mode [ 44.702629][ T4068] bridge_slave_0: left promiscuous mode [ 44.708456][ T4068] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.718481][ T30] audit: type=1400 audit(1741619527.261:618): avc: denied { read } for pid=4069 comm="syz.1.191" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 44.742926][ T30] audit: type=1400 audit(1741619527.261:619): avc: denied { open } for pid=4069 comm="syz.1.191" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 44.767612][ T30] audit: type=1400 audit(1741619527.261:620): avc: denied { ioctl } for pid=4069 comm="syz.1.191" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 44.831487][ T30] audit: type=1400 audit(1741619527.391:621): avc: denied { watch } for pid=4078 comm="syz.5.192" path="/8/file0/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 44.879059][ T4081] loop4: detected capacity change from 0 to 164 [ 44.907236][ T4088] all: renamed from caif0 [ 44.932909][ T30] audit: type=1400 audit(1741619527.471:622): avc: denied { setopt } for pid=4085 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.952306][ T30] audit: type=1400 audit(1741619527.481:623): avc: denied { mounton } for pid=4080 comm="syz.4.194" path="/36/file0/file0" dev="loop4" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 44.977454][ T4081] syz.4.194: attempt to access beyond end of device [ 44.977454][ T4081] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.996743][ T30] audit: type=1400 audit(1741619527.561:624): avc: denied { create } for pid=4092 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.007327][ T4090] syz.4.194: attempt to access beyond end of device [ 45.007327][ T4090] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 45.034532][ T4095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.041921][ T4095] IPv6: NLM_F_CREATE should be set when creating new route [ 45.053524][ T4097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.197'. [ 45.074772][ T30] audit: type=1400 audit(1741619527.631:625): avc: denied { connect } for pid=4092 comm="syz.0.198" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.095249][ T30] audit: type=1400 audit(1741619527.631:626): avc: denied { ioctl } for pid=4092 comm="syz.0.198" path="socket:[6695]" dev="sockfs" ino=6695 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.197494][ T4108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 45.208465][ T4101] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.215825][ T4101] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.294197][ T4120] loop3: detected capacity change from 0 to 1024 [ 45.318666][ T4101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.329967][ T4101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.341135][ T4120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.367002][ T4101] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.376335][ T4101] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.385152][ T4101] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.393661][ T4101] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.417999][ T4120] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 45.464827][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.489168][ T4130] loop4: detected capacity change from 0 to 512 [ 45.541792][ T4130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.557052][ T4130] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.700671][ T3300] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /42/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 45.939502][ T4153] netlink: 'syz.3.220': attribute type 4 has an invalid length. [ 45.982523][ T4153] netlink: 'syz.3.220': attribute type 4 has an invalid length. [ 46.059095][ T4155] netlink: 576 bytes leftover after parsing attributes in process `syz.3.221'. [ 46.241207][ T4160] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 46.265141][ T4160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.317602][ T4160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.344754][ T4160] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 46.368838][ T4160] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 47.043546][ T4192] netlink: 'syz.5.235': attribute type 27 has an invalid length. [ 47.101161][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.108512][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.191706][ T4192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.209069][ T4192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.277209][ T4192] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.286544][ T4192] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.295548][ T4192] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.304784][ T4192] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.004206][ T4223] process 'syz.3.247' launched './file0' with NULL argv: empty string added [ 48.589683][ T4253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.630249][ T4253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.650949][ T4251] SELinux: failed to load policy [ 48.926783][ T4270] pim6reg: entered allmulticast mode [ 48.935413][ T4270] pim6reg: left allmulticast mode [ 49.171072][ T4277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.195598][ T4277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.206788][ T4279] capability: warning: `syz.5.270' uses deprecated v2 capabilities in a way that may be insecure [ 49.345777][ T4286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 49.501239][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 49.510563][ T4296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.278'. [ 49.519897][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 49.695626][ T4304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.282'. [ 49.718869][ T4301] loop3: detected capacity change from 0 to 8192 [ 49.743086][ T4304] bridge0: entered promiscuous mode [ 49.763999][ T4304] bridge0: left promiscuous mode [ 49.855095][ T4309] xt_CT: No such helper "pptp" [ 49.868736][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 49.868758][ T30] audit: type=1400 audit(1741619532.431:689): avc: denied { read } for pid=4307 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.948584][ T4317] loop3: detected capacity change from 0 to 128 [ 50.051897][ T4317] syz.3.287: attempt to access beyond end of device [ 50.051897][ T4317] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 50.107023][ T4317] syz.3.287: attempt to access beyond end of device [ 50.107023][ T4317] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 50.146439][ T4317] syz.3.287: attempt to access beyond end of device [ 50.146439][ T4317] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.163705][ T30] audit: type=1400 audit(1741619532.721:690): avc: denied { execute } for pid=4324 comm="syz.5.291" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 50.186360][ T4317] syz.3.287: attempt to access beyond end of device [ 50.186360][ T4317] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.226331][ T30] audit: type=1400 audit(1741619532.771:691): avc: denied { listen } for pid=4326 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.276021][ T4317] syz.3.287: attempt to access beyond end of device [ 50.276021][ T4317] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.333857][ T4317] syz.3.287: attempt to access beyond end of device [ 50.333857][ T4317] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.352998][ T30] audit: type=1400 audit(1741619532.911:692): avc: denied { setopt } for pid=4334 comm="syz.5.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.373269][ T4317] syz.3.287: attempt to access beyond end of device [ 50.373269][ T4317] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.382966][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.296'. [ 50.406353][ T4317] syz.3.287: attempt to access beyond end of device [ 50.406353][ T4317] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.452278][ T4317] syz.3.287: attempt to access beyond end of device [ 50.452278][ T4317] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.490958][ T4317] syz.3.287: attempt to access beyond end of device [ 50.490958][ T4317] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.902996][ T30] audit: type=1400 audit(1741619533.461:693): avc: denied { relabelfrom } for pid=4362 comm="syz.5.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 50.924875][ T30] audit: type=1400 audit(1741619533.461:694): avc: denied { relabelto } for pid=4362 comm="syz.5.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 50.987844][ T30] audit: type=1400 audit(1741619533.541:695): avc: denied { search } for pid=4368 comm="syz.1.310" name="/" dev="configfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.011166][ T30] audit: type=1400 audit(1741619533.551:696): avc: denied { read } for pid=4368 comm="syz.1.310" name="/" dev="configfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.034347][ T30] audit: type=1400 audit(1741619533.551:697): avc: denied { open } for pid=4368 comm="syz.1.310" path="/" dev="configfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.184603][ T4380] netlink: 'syz.5.315': attribute type 1 has an invalid length. [ 51.193551][ T4380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.315'. [ 51.269319][ T4387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.318'. [ 51.351310][ T4392] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 51.509998][ T30] audit: type=1326 audit(1741619534.071:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.0.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 51.786597][ T4418] Falling back ldisc for ttyS3. [ 51.830465][ T4432] netlink: '+}[@': attribute type 10 has an invalid length. [ 51.837958][ T4432] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 51.880844][ T4432] team0: Port device geneve1 added [ 52.016154][ T4456] pim6reg1: entered promiscuous mode [ 52.021783][ T4456] pim6reg1: entered allmulticast mode [ 52.188030][ T4465] loop5: detected capacity change from 0 to 128 [ 52.380604][ T4486] loop5: detected capacity change from 0 to 512 [ 52.404342][ T4486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.417747][ T4486] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.449764][ T4486] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.516828][ T4486] EXT4-fs (loop5): 1 truncate cleaned up [ 52.523028][ T4486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.570509][ T4492] loop3: detected capacity change from 0 to 8192 [ 52.587464][ T4486] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 52.597898][ T4492] vfat: Unknown parameter '·' [ 52.617914][ T3671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.730390][ T4504] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 52.838494][ T4517] netlink: 'syz.5.350': attribute type 4 has an invalid length. [ 53.341436][ T4537] loop3: detected capacity change from 0 to 8192 [ 53.430567][ T4537] tipc: Started in network mode [ 53.435730][ T4537] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 53.443392][ T4537] tipc: Enabled bearer , priority 0 [ 53.761145][ T4607] vlan2: entered allmulticast mode [ 53.891443][ T4626] vlan0: entered promiscuous mode [ 53.915286][ T4630] geneve2: entered promiscuous mode [ 53.920707][ T4630] geneve2: entered allmulticast mode [ 54.091677][ T4650] loop3: detected capacity change from 0 to 256 [ 54.108150][ T4650] msdos: Unknown parameter '»ÿ¸èäÓØûyûé/n' [ 54.196884][ T4658] vlan2: entered allmulticast mode [ 54.386086][ T4677] loop3: detected capacity change from 0 to 2048 [ 54.446822][ T4677] loop3: p1 < > p4 [ 54.457644][ T4677] loop3: p4 size 8388608 extends beyond EOD, truncated [ 54.529917][ T3001] loop3: p1 < > p4 [ 54.543786][ T3001] loop3: p4 size 8388608 extends beyond EOD, truncated [ 54.737612][ T3655] udevd[3655]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 54.768248][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 54.809727][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 54.821545][ T3655] udevd[3655]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 54.944607][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 54.944624][ T30] audit: type=1400 audit(1741619537.501:780): avc: denied { create } for pid=4689 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.041267][ T36] tipc: Node number set to 11578026 [ 55.094758][ T4698] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.173146][ T4706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 55.221044][ T4709] netlink: 'syz.3.397': attribute type 12 has an invalid length. [ 55.254478][ T30] audit: type=1326 audit(1741619537.811:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 55.278528][ T30] audit: type=1326 audit(1741619537.811:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 55.373088][ T30] audit: type=1326 audit(1741619537.851:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 55.397078][ T30] audit: type=1400 audit(1741619537.881:784): avc: denied { setopt } for pid=4715 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.417058][ T30] audit: type=1326 audit(1741619537.891:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 55.440739][ T30] audit: type=1326 audit(1741619537.891:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 55.464117][ T30] audit: type=1326 audit(1741619537.891:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4718 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3791eefa25 code=0x7ffc0000 [ 55.487780][ T30] audit: type=1400 audit(1741619537.921:788): avc: denied { name_connect } for pid=4719 comm="syz.3.402" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 55.510006][ T30] audit: type=1326 audit(1741619537.931:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 55.931797][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'. [ 56.127439][ T3373] IPVS: starting estimator thread 0... [ 56.172327][ T4788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.425'. [ 56.188351][ T4788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.425'. [ 56.202633][ T4790] loop5: detected capacity change from 0 to 128 [ 56.216409][ T4782] IPVS: using max 2160 ests per chain, 108000 per kthread [ 56.224311][ T4790] EXT4-fs: Ignoring removed nobh option [ 56.247899][ T4788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.425'. [ 56.257585][ T4790] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.275936][ T4788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.425'. [ 56.286215][ T4790] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.321771][ T4788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.425'. [ 56.330904][ T4788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.425'. [ 56.471003][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 56.494426][ T4806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.501956][ T4806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.537755][ T4806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.545300][ T4806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.659857][ T4810] loop3: detected capacity change from 0 to 512 [ 56.700650][ T4810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.783511][ T4810] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.838328][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 56.918001][ T4810] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.432: corrupted inode contents [ 56.930936][ T4810] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.432: mark_inode_dirty error [ 56.959715][ T4810] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.432: corrupted inode contents [ 56.975854][ T3671] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.006551][ T4810] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.432: mark_inode_dirty error [ 57.042366][ T4810] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.432: mark inode dirty (error -117) [ 57.087219][ T4810] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 57.141133][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.463622][ T4857] syz_tun: entered allmulticast mode [ 57.489896][ T4855] syz_tun: left allmulticast mode [ 57.663258][ T4888] loop5: detected capacity change from 0 to 512 [ 57.686623][ T4888] ext2: Unknown parameter 'fowner<00000000000000000000' [ 58.286588][ T4983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4983 comm=syz.5.464 [ 59.130918][ T5040] vlan2: entered allmulticast mode [ 59.466369][ T5051] all: renamed from bridge_slave_0 (while UP) [ 59.827373][ T5061] bridge0: entered allmulticast mode [ 59.872353][ T5061] bridge0: entered promiscuous mode [ 59.904556][ T36] IPVS: starting estimator thread 0... [ 59.992387][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.996386][ T5068] IPVS: using max 2256 ests per chain, 112800 per kthread [ 60.036491][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.070469][ T5074] tipc: Started in network mode [ 60.075515][ T5074] tipc: Node identity ac14140f, cluster identity 4711 [ 60.116732][ T5074] tipc: New replicast peer: 255.255.255.255 [ 60.122901][ T5074] tipc: Enabled bearer , priority 10 [ 60.183426][ T5076] loop5: detected capacity change from 0 to 512 [ 60.226364][ T5076] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.491: bg 0: block 35: padding at end of block bitmap is not set [ 60.307647][ T5076] EXT4-fs (loop5): Remounting filesystem read-only [ 60.325928][ T5076] EXT4-fs (loop5): 1 truncate cleaned up [ 60.343614][ T5076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.381694][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 60.381710][ T30] audit: type=1326 audit(1741619542.941:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.411665][ T30] audit: type=1326 audit(1741619542.941:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.415575][ T5076] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 60.435609][ T30] audit: type=1326 audit(1741619542.941:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.435676][ T30] audit: type=1326 audit(1741619542.941:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.490047][ T30] audit: type=1326 audit(1741619542.941:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.514113][ T30] audit: type=1326 audit(1741619542.941:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.537743][ T30] audit: type=1326 audit(1741619542.941:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.561945][ T30] audit: type=1326 audit(1741619542.941:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.570375][ T5076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.585638][ T30] audit: type=1326 audit(1741619542.941:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.585675][ T30] audit: type=1326 audit(1741619542.941:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7fc00000 [ 60.786576][ T29] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.789274][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.840215][ T5094] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 60.858087][ T29] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.907961][ T29] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.992840][ T29] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.109913][ T29] bridge_slave_1: left allmulticast mode [ 61.116560][ T29] bridge_slave_1: left promiscuous mode [ 61.122456][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.144432][ T29] bridge_slave_0: left allmulticast mode [ 61.150419][ T29] bridge_slave_0: left promiscuous mode [ 61.156164][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.163518][ T3379] tipc: Node number set to 2886997007 [ 61.271269][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.277824][ T5117] netlink: 'syz.5.502': attribute type 4 has an invalid length. [ 61.289719][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.300686][ T29] bond0 (unregistering): Released all slaves [ 61.361792][ T29] tipc: Left network mode [ 61.383232][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 61.420650][ T29] hsr_slave_0: left promiscuous mode [ 61.445059][ T29] hsr_slave_1: left promiscuous mode [ 61.490886][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.499776][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.557574][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.565229][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.596931][ T29] veth1_macvtap: left promiscuous mode [ 61.607260][ T29] veth0_macvtap: left promiscuous mode [ 61.616561][ T29] veth1_vlan: left promiscuous mode [ 61.621929][ T29] veth0_vlan: left promiscuous mode [ 61.772305][ T29] team0 (unregistering): Port device team_slave_1 removed [ 61.788340][ T29] team0 (unregistering): Port device team_slave_0 removed [ 61.852360][ T5142] vlan2: entered allmulticast mode [ 61.859474][ T5142] bond0: entered allmulticast mode [ 61.864828][ T5142] bond_slave_0: entered allmulticast mode [ 61.870847][ T5142] bond_slave_1: entered allmulticast mode [ 61.880431][ T5142] bond0: left allmulticast mode [ 61.885553][ T5142] bond_slave_0: left allmulticast mode [ 61.891813][ T5142] bond_slave_1: left allmulticast mode [ 61.935218][ T5155] pim6reg1: entered promiscuous mode [ 61.941127][ T5155] pim6reg1: entered allmulticast mode [ 62.058955][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.066218][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.122716][ T5096] bridge_slave_0: entered allmulticast mode [ 62.146949][ T5096] bridge_slave_0: entered promiscuous mode [ 62.154328][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.161749][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.212569][ T5096] bridge_slave_1: entered allmulticast mode [ 62.220466][ T5096] bridge_slave_1: entered promiscuous mode [ 62.253346][ T5184] __nla_validate_parse: 3 callbacks suppressed [ 62.253365][ T5184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'. [ 62.270584][ T5183] bridge0: entered allmulticast mode [ 62.278745][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.318553][ T5183] bridge0: entered promiscuous mode [ 62.326834][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.336183][ T5188] netlink: 96 bytes leftover after parsing attributes in process `syz.3.525'. [ 62.377524][ T5096] team0: Port device team_slave_0 added [ 62.394642][ T5096] team0: Port device team_slave_1 added [ 62.427764][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.435391][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.464128][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.509145][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.516155][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.542572][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.667204][ T5096] hsr_slave_0: entered promiscuous mode [ 62.682922][ T5096] hsr_slave_1: entered promiscuous mode [ 62.694020][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.711358][ T5216] infiniband syz!: set down [ 62.716111][ T5216] infiniband syz!: added team_slave_0 [ 62.722097][ T5096] Cannot create hsr debugfs directory [ 62.737173][ T5216] RDS/IB: syz!: added [ 62.741677][ T5216] smc: adding ib device syz! with port count 1 [ 62.748052][ T5216] smc: ib device syz! port 1 has pnetid [ 62.977311][ T5096] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 62.999340][ T5096] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 63.028935][ T5096] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 63.044402][ T5096] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 63.141714][ T5244] Cannot find del_set index 0 as target [ 63.215275][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.256364][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.288442][ T4980] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.295957][ T4980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.323868][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.331004][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.417379][ T5259] loop3: detected capacity change from 0 to 2048 [ 63.438828][ T5259] EXT4-fs: Ignoring removed bh option [ 63.498182][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.507192][ T5259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.553230][ T5259] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.581227][ T5259] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 19 with error 28 [ 63.594182][ T5259] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.594182][ T5259] [ 63.604324][ T5259] EXT4-fs (loop3): Total free blocks count 0 [ 63.610738][ T5259] EXT4-fs (loop3): Free/Dirty block details [ 63.616865][ T5259] EXT4-fs (loop3): free_blocks=2415919104 [ 63.622628][ T5259] EXT4-fs (loop3): dirty_blocks=32 [ 63.628003][ T5259] EXT4-fs (loop3): Block reservation details [ 63.634086][ T5259] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 63.678889][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.728884][ T5096] veth0_vlan: entered promiscuous mode [ 63.749869][ T5096] veth1_vlan: entered promiscuous mode [ 63.813513][ T5096] veth0_macvtap: entered promiscuous mode [ 63.817654][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 63.829358][ T5096] veth1_macvtap: entered promiscuous mode [ 63.867264][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.878120][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.906403][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.921182][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.931805][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.950749][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.959180][ T5096] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.968070][ T5096] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.976849][ T5096] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.985637][ T5096] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.170181][ T5337] smc: net device bond0 applied user defined pnetid SYZ0 [ 64.186515][ T5337] smc: net device bond0 erased user defined pnetid SYZ0 [ 64.304475][ T5358] vlan2: entered allmulticast mode [ 64.328437][ T5358] bond0: entered allmulticast mode [ 64.333884][ T5358] bond_slave_0: entered allmulticast mode [ 64.340236][ T5358] bond_slave_1: entered allmulticast mode [ 64.351835][ T5358] bond0: left allmulticast mode [ 64.357141][ T5358] bond_slave_0: left allmulticast mode [ 64.362959][ T5358] bond_slave_1: left allmulticast mode [ 64.513471][ T5377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 64.582952][ T5392] netlink: 24 bytes leftover after parsing attributes in process `syz.5.568'. [ 64.638151][ T5399] syz.0.570 uses obsolete (PF_INET,SOCK_PACKET) [ 64.775855][ T5422] loop3: detected capacity change from 0 to 128 [ 64.822067][ T5424] loop6: detected capacity change from 0 to 128 [ 64.829570][ T5424] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.847077][ T5424] FAT-fs (loop6): error, clusters badly computed (3 != 1) [ 64.854609][ T5424] FAT-fs (loop6): Filesystem has been set read-only [ 64.861968][ T5424] FAT-fs (loop6): error, clusters badly computed (4 != 2) [ 64.901011][ T5096] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.047567][ T5452] loop6: detected capacity change from 0 to 512 [ 65.082661][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.106662][ T5452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.130874][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.136476][ T5452] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.220445][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.595'. [ 65.248478][ T5476] 8021q: adding VLAN 0 to HW filter on device team1 [ 65.290392][ T5481] loop3: detected capacity change from 0 to 512 [ 65.314833][ T5481] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 65.363712][ T5478] smc: removing ib device syz! [ 65.731796][ T5510] SELinux: failed to load policy [ 65.751798][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 65.751817][ T30] audit: type=1400 audit(1741619548.311:1030): avc: denied { name_bind } for pid=5509 comm="syz.0.607" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 65.858447][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.881959][ T30] audit: type=1400 audit(1741619548.441:1031): avc: denied { cmd } for pid=5516 comm="syz.0.612" path="socket:[10735]" dev="sockfs" ino=10735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.919571][ T30] audit: type=1400 audit(1741619548.481:1032): avc: denied { read write } for pid=5513 comm="syz.1.609" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 65.943789][ T30] audit: type=1400 audit(1741619548.481:1033): avc: denied { open } for pid=5513 comm="syz.1.609" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.058286][ T5528] SELinux: failed to load policy [ 66.138495][ T5536] bond2: entered promiscuous mode [ 66.143694][ T5536] bond2: entered allmulticast mode [ 66.167797][ T5536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.180157][ T5536] bond2 (unregistering): Released all slaves [ 66.195601][ T5543] bridge: RTM_NEWNEIGH with invalid ether address [ 66.320879][ T30] audit: type=1326 audit(1741619548.881:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 66.345613][ T30] audit: type=1326 audit(1741619548.881:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 66.369116][ T30] audit: type=1326 audit(1741619548.911:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 66.435133][ T30] audit: type=1326 audit(1741619548.941:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 66.458549][ T30] audit: type=1326 audit(1741619548.941:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3791ebd169 code=0x7ffc0000 [ 66.482043][ T30] audit: type=1326 audit(1741619548.941:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3791eefa25 code=0x7ffc0000 [ 66.692671][ T5575] capability: warning: `syz.1.635' uses 32-bit capabilities (legacy support in use) [ 67.202391][ T5613] netlink: 96 bytes leftover after parsing attributes in process `syz.6.652'. [ 67.331537][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 67.361379][ T5618] bridge0: port 3(batadv1) entered blocking state [ 67.367928][ T5618] bridge0: port 3(batadv1) entered disabled state [ 67.382694][ T5618] batadv1: entered allmulticast mode [ 67.391135][ T5618] batadv1: entered promiscuous mode [ 67.397625][ T5618] bridge0: port 3(batadv1) entered blocking state [ 67.404173][ T5618] bridge0: port 3(batadv1) entered forwarding state [ 67.581400][ T5631] loop6: detected capacity change from 0 to 512 [ 67.614001][ T5631] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 67.650696][ T5635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.662'. [ 67.659868][ T5635] netem: unknown loss type 13 [ 67.664590][ T5635] netem: change failed [ 67.684839][ T5631] EXT4-fs (loop6): 1 truncate cleaned up [ 67.714675][ T5631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.767528][ T5631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.827292][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 67.837016][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 67.928033][ T5654] loop3: detected capacity change from 0 to 1024 [ 67.958483][ T5658] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.959496][ T5654] EXT4-fs: Ignoring removed bh option [ 67.991182][ T5654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.070796][ T5658] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.117899][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.150582][ T5658] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.214697][ T5674] loop3: detected capacity change from 0 to 1024 [ 68.228447][ T5658] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.260937][ T5674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.275946][ T5678] tmpfs: Unsupported parameter 'huge' [ 68.305510][ T5658] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.318209][ T5658] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.330843][ T5658] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.343043][ T5658] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.449040][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.486995][ T5686] loop3: detected capacity change from 0 to 164 [ 68.514029][ T5686] bio_check_eod: 7624 callbacks suppressed [ 68.514048][ T5686] syz.3.682: attempt to access beyond end of device [ 68.514048][ T5686] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 68.552366][ T5686] syz.3.682: attempt to access beyond end of device [ 68.552366][ T5686] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.929749][ T5710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=351 sclass=netlink_route_socket pid=5710 comm=syz.3.693 [ 69.079847][ T5723] netlink: 36 bytes leftover after parsing attributes in process `syz.1.698'. [ 70.448860][ T5765] syzkaller0: entered promiscuous mode [ 70.454494][ T5765] syzkaller0: entered allmulticast mode [ 70.519173][ T5775] netlink: 96 bytes leftover after parsing attributes in process `syz.5.720'. [ 70.604126][ T5781] Invalid ELF header magic: != ELF [ 70.621796][ T5784] CÃ: renamed from team_slave_0 [ 70.642553][ T5784] netlink: 'syz.1.724': attribute type 3 has an invalid length. [ 70.650405][ T5784] netlink: 152 bytes leftover after parsing attributes in process `syz.1.724'. [ 70.659425][ T5784] A link change request failed with some changes committed already. Interface Cà may have been left with an inconsistent configuration, please check. [ 70.996452][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 70.996504][ T30] audit: type=1400 audit(1741619553.551:1248): avc: denied { read } for pid=5805 comm="syz.3.731" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.025660][ T30] audit: type=1400 audit(1741619553.551:1249): avc: denied { open } for pid=5805 comm="syz.3.731" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.089333][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 71.124705][ T5817] loop6: detected capacity change from 0 to 128 [ 71.138424][ T30] audit: type=1400 audit(1741619553.691:1250): avc: denied { mount } for pid=5816 comm="syz.6.737" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 71.221301][ T5817] syz.6.737: attempt to access beyond end of device [ 71.221301][ T5817] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 71.247050][ T30] audit: type=1326 audit(1741619553.811:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 71.333927][ T5823] syz.6.737: attempt to access beyond end of device [ 71.333927][ T5823] loop6: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 71.361933][ T30] audit: type=1326 audit(1741619553.841:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 71.385093][ T5823] syz.6.737: attempt to access beyond end of device [ 71.385093][ T5823] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.385415][ T30] audit: type=1326 audit(1741619553.841:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 71.421567][ T30] audit: type=1326 audit(1741619553.841:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 71.445227][ T30] audit: type=1326 audit(1741619553.841:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 71.468683][ T30] audit: type=1326 audit(1741619553.841:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 71.483370][ T5823] syz.6.737: attempt to access beyond end of device [ 71.483370][ T5823] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.492642][ T30] audit: type=1326 audit(1741619553.841:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7bd2bd1a3 code=0x7ffc0000 [ 71.532085][ T5823] syz.6.737: attempt to access beyond end of device [ 71.532085][ T5823] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.576888][ T5823] syz.6.737: attempt to access beyond end of device [ 71.576888][ T5823] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.612895][ T5823] syz.6.737: attempt to access beyond end of device [ 71.612895][ T5823] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.639811][ T5823] syz.6.737: attempt to access beyond end of device [ 71.639811][ T5823] loop6: rw=0, sector=145, nr_sectors = 8 limit=128 [ 71.721740][ T5831] bond0: (slave vlan2): Opening slave failed [ 71.921738][ T5840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.989652][ T5840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.062372][ T5840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.144707][ T5840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.263244][ T5840] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.272331][ T5842] Set syz1 is full, maxelem 65536 reached [ 72.321417][ T5840] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.356808][ T5840] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.368420][ T5840] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.502807][ T5862] vlan1: entered allmulticast mode [ 72.508245][ T5862] bridge_slave_0: entered allmulticast mode [ 72.517950][ T5862] bridge_slave_0: left allmulticast mode [ 73.056047][ T5889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'. [ 73.394525][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 73.502964][ T5913] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.512025][ T5913] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.520576][ T5913] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.529099][ T5913] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.545977][ T5913] bridge0: left promiscuous mode [ 73.551082][ T5913] bridge0: left allmulticast mode [ 73.996245][ T5938] Set syz1 is full, maxelem 65536 reached [ 74.460732][ T5957] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 74.479385][ T5957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.524009][ T5957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.546859][ T5957] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 74.587342][ T5957] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 74.597452][ T5964] netlink: 'syz.6.794': attribute type 1 has an invalid length. [ 74.605191][ T5964] netlink: 16 bytes leftover after parsing attributes in process `syz.6.794'. [ 74.673486][ T5968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.796'. [ 74.896483][ T5979] Falling back ldisc for ttyS3. [ 75.025177][ T5985] loop6: detected capacity change from 0 to 1024 [ 75.048181][ T5985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.065930][ T5985] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 75.104420][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.155468][ T5997] netlink: 576 bytes leftover after parsing attributes in process `syz.6.810'. [ 75.207789][ T6001] netlink: 'syz.6.812': attribute type 1 has an invalid length. [ 75.241865][ T6001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.286423][ T6006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.293457][ T6006] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 75.340129][ T6006] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 75.830719][ T6020] loop6: detected capacity change from 0 to 1024 [ 75.864324][ T6020] EXT4-fs: Ignoring removed bh option [ 75.963738][ T6020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.047537][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.124268][ T6032] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.150502][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 76.150518][ T30] audit: type=1400 audit(1741619558.711:1266): avc: denied { remount } for pid=6033 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.200747][ T6032] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.234787][ T6032] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.289518][ T6045] netlink: 'syz.6.827': attribute type 4 has an invalid length. [ 76.302189][ T6032] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.369223][ T6032] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.384874][ T6032] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.399203][ T6032] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.425126][ T6032] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.133875][ T6047] syz.5.828 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 77.144595][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.5.828 Not tainted 6.14.0-rc6-syzkaller #0 [ 77.144623][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.144638][ T6047] Call Trace: [ 77.144645][ T6047] [ 77.144653][ T6047] dump_stack_lvl+0xf2/0x150 [ 77.144728][ T6047] dump_stack+0x15/0x1a [ 77.144749][ T6047] dump_header+0x83/0x2d0 [ 77.144770][ T6047] oom_kill_process+0x341/0x4c0 [ 77.144808][ T6047] out_of_memory+0x9af/0xbe0 [ 77.144882][ T6047] ? css_next_descendant_pre+0x11c/0x140 [ 77.144963][ T6047] mem_cgroup_out_of_memory+0x13e/0x190 [ 77.145003][ T6047] try_charge_memcg+0x508/0x7f0 [ 77.145034][ T6047] charge_memcg+0x50/0xc0 [ 77.145059][ T6047] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 77.145087][ T6047] __read_swap_cache_async+0x236/0x480 [ 77.145171][ T6047] swap_cluster_readahead+0x279/0x3f0 [ 77.145197][ T6047] swapin_readahead+0xe4/0x6f0 [ 77.145219][ T6047] ? __rcu_read_unlock+0x34/0x70 [ 77.145240][ T6047] ? swap_cache_get_folio+0x77/0x210 [ 77.145317][ T6047] do_swap_page+0x31b/0x2550 [ 77.145349][ T6047] ? __rcu_read_lock+0x36/0x50 [ 77.145367][ T6047] ? __pfx_default_wake_function+0x10/0x10 [ 77.145440][ T6047] handle_mm_fault+0x8e4/0x2ac0 [ 77.145465][ T6047] exc_page_fault+0x3b9/0x650 [ 77.145494][ T6047] asm_exc_page_fault+0x26/0x30 [ 77.145574][ T6047] RIP: 0033:0x7ff078a23bfe [ 77.145593][ T6047] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 00 e8 18 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 b6 3f 34 00 85 c0 0f 8e a3 fd ff ff 8d a6 fe ff 49 39 c4 73 a0 48 8d 1d 91 23 34 00 83 3d 96 3f 34 [ 77.145609][ T6047] RSP: 002b:00007fff2b70ab90 EFLAGS: 00010202 [ 77.145628][ T6047] RAX: 0000000000000001 RBX: 00007ff078d67ba0 RCX: 0000000000000000 [ 77.145643][ T6047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557cc48808 [ 77.145657][ T6047] RBP: 00007ff078d67ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 77.145694][ T6047] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000012d77 [ 77.145710][ T6047] R13: 00007ff078d66080 R14: ffffffffffffffff R15: 00007fff2b70aca0 [ 77.145725][ T6047] [ 77.145730][ T6047] memory: usage 307200kB, limit 307200kB, failcnt 182 [ 77.356151][ T6047] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 77.364080][ T6047] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 77.371390][ T6047] Memory cgroup stats for /syz5: [ 77.371644][ T6047] cache 0 [ 77.379613][ T6047] rss 0 [ 77.382402][ T6047] shmem 0 [ 77.385342][ T6047] mapped_file 0 [ 77.388859][ T6047] dirty 0 [ 77.391866][ T6047] writeback 0 [ 77.395189][ T6047] workingset_refault_anon 1409 [ 77.400045][ T6047] workingset_refault_file 0 [ 77.404626][ T6047] swap 274432 [ 77.407970][ T6047] swapcached 4096 [ 77.411669][ T6047] pgpgin 49219 [ 77.415073][ T6047] pgpgout 49218 [ 77.418573][ T6047] pgfault 40814 [ 77.422038][ T6047] pgmajfault 215 [ 77.425660][ T6047] inactive_anon 4096 [ 77.429569][ T6047] active_anon 0 [ 77.433051][ T6047] inactive_file 0 [ 77.436749][ T6047] active_file 0 [ 77.440273][ T6047] unevictable 0 [ 77.443718][ T6047] hierarchical_memory_limit 314572800 [ 77.449126][ T6047] hierarchical_memsw_limit 9223372036854771712 [ 77.455293][ T6047] total_cache 0 [ 77.458855][ T6047] total_rss 0 [ 77.462140][ T6047] total_shmem 0 [ 77.466115][ T6047] total_mapped_file 0 [ 77.470123][ T6047] total_dirty 0 [ 77.473585][ T6047] total_writeback 0 [ 77.477420][ T6047] total_workingset_refault_anon 1409 [ 77.482738][ T6047] total_workingset_refault_file 0 [ 77.487802][ T6047] total_swap 274432 [ 77.491658][ T6047] total_swapcached 4096 [ 77.495799][ T6047] total_pgpgin 49219 [ 77.499727][ T6047] total_pgpgout 49218 [ 77.503713][ T6047] total_pgfault 40814 [ 77.507852][ T6047] total_pgmajfault 215 [ 77.511952][ T6047] total_inactive_anon 4096 [ 77.516394][ T6047] total_active_anon 0 [ 77.520384][ T6047] total_inactive_file 0 [ 77.524525][ T6047] total_active_file 0 [ 77.528607][ T6047] total_unevictable 0 [ 77.532591][ T6047] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.828,pid=6047,uid=0 [ 77.547176][ T6047] Memory cgroup out of memory: Killed process 6047 (syz.5.828) total-vm:95760kB, anon-rss:916kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 77.779729][ T30] audit: type=1326 audit(1741619560.341:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.6.833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bc256d169 code=0x0 [ 77.803484][ T30] audit: type=1326 audit(1741619560.371:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 77.827003][ T30] audit: type=1326 audit(1741619560.371:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 77.863024][ T30] audit: type=1326 audit(1741619560.371:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 77.886338][ T30] audit: type=1326 audit(1741619560.371:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 77.909851][ T30] audit: type=1326 audit(1741619560.371:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 77.933467][ T30] audit: type=1326 audit(1741619560.371:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 77.956915][ T30] audit: type=1326 audit(1741619560.371:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 77.980314][ T30] audit: type=1326 audit(1741619560.371:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 78.015570][ T6069] loop3: detected capacity change from 0 to 512 [ 78.022392][ T6069] EXT4-fs: Ignoring removed oldalloc option [ 78.028711][ T6069] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.040348][ T6069] EXT4-fs (loop3): 1 truncate cleaned up [ 78.046495][ T6069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.136420][ T6069] loop3: detected capacity change from 512 to 64 [ 78.230509][ T3304] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -12) [ 78.242395][ T3304] ------------[ cut here ]------------ [ 78.248023][ T3304] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 78.248306][ T3304] WARNING: CPU: 0 PID: 3304 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0 [ 78.267817][ T3304] Modules linked in: [ 78.271730][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz-executor Not tainted 6.14.0-rc6-syzkaller #0 [ 78.280917][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.291039][ T3304] RIP: 0010:inode_set_cached_link+0xc4/0xd0 [ 78.297170][ T3304] Code: ff 48 c7 c7 9f f6 b2 86 e8 59 5f c4 ff c6 05 c1 60 0b 05 01 90 48 c7 c7 11 40 1b 86 4c 89 f6 89 ea 44 89 f9 e8 bd b3 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 78.316878][ T3304] RSP: 0018:ffffc900015bfac8 EFLAGS: 00010246 [ 78.323017][ T3304] RAX: 1bda85883c10aa00 RBX: ffff8881066997a8 RCX: ffff8881045b8000 [ 78.331057][ T3304] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 78.339116][ T3304] RBP: 0000000000000027 R08: ffffffff81344b17 R09: 0000000000000000 [ 78.347235][ T3304] R10: 0001ffffffffffff R11: ffff8881045b8000 R12: ffff8881066997a8 [ 78.355394][ T3304] R13: ffff8881066997d0 R14: ffff888106699680 R15: 000000000000001d [ 78.363431][ T3304] FS: 000055557a24d500(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 78.372498][ T3304] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.379144][ T3304] CR2: 00007ffc54a2dbe8 CR3: 0000000116b84000 CR4: 00000000003506f0 [ 78.387165][ T3304] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.395160][ T3304] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.403415][ T3304] Call Trace: [ 78.407073][ T3304] [ 78.410048][ T3304] ? __warn+0x141/0x350 [ 78.414287][ T3304] ? report_bug+0x315/0x420 [ 78.418855][ T3304] ? inode_set_cached_link+0xc4/0xd0 [ 78.424189][ T3304] ? handle_bug+0x60/0x90 [ 78.428680][ T3304] ? exc_invalid_op+0x1a/0x50 [ 78.433421][ T3304] ? asm_exc_invalid_op+0x1a/0x20 [ 78.438541][ T3304] ? __warn_printk+0x167/0x1b0 [ 78.443391][ T3304] ? inode_set_cached_link+0xc4/0xd0 [ 78.448771][ T3304] ? inode_set_cached_link+0xc3/0xd0 [ 78.454134][ T3304] __ext4_iget+0x1bb5/0x1e20 [ 78.458956][ T3304] ext4_lookup+0x15b/0x390 [ 78.463416][ T3304] __lookup_slow+0x18a/0x250 [ 78.468081][ T3304] lookup_slow+0x3c/0x60 [ 78.472376][ T3304] walk_component+0x1f5/0x230 [ 78.477127][ T3304] ? path_lookupat+0xfd/0x2b0 [ 78.481899][ T3304] path_lookupat+0x10a/0x2b0 [ 78.486544][ T3304] filename_lookup+0x150/0x340 [ 78.491412][ T3304] user_path_at+0x3c/0x120 [ 78.495958][ T3304] __x64_sys_umount+0x85/0xe0 [ 78.500771][ T3304] x64_sys_call+0x20cd/0x2dc0 [ 78.505509][ T3304] do_syscall_64+0xc9/0x1c0 [ 78.510156][ T3304] ? clear_bhb_loop+0x55/0xb0 [ 78.514908][ T3304] ? clear_bhb_loop+0x55/0xb0 [ 78.519778][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.525707][ T3304] RIP: 0033:0x7fd738f7e497 [ 78.530162][ T3304] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 78.550469][ T3304] RSP: 002b:00007ffc54a2e398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.559034][ T3304] RAX: ffffffffffffffda RBX: 00007fd738ffe08c RCX: 00007fd738f7e497 [ 78.567144][ T3304] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc54a2e450 [ 78.575194][ T3304] RBP: 00007ffc54a2e450 R08: 0000000000000000 R09: 0000000000000000 [ 78.583240][ T3304] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc54a2f540 [ 78.591266][ T3304] R13: 00007fd738ffe08c R14: 0000000000013181 R15: 00007ffc54a31700 [ 78.599360][ T3304] [ 78.602513][ T3304] ---[ end trace 0000000000000000 ]--- [ 78.619833][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.674471][ T6085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.838'. [ 78.704943][ T6085] bridge0: entered promiscuous mode [ 78.707331][ T6079] infiniband syz!: set down [ 78.712708][ T6085] bridge0: left promiscuous mode [ 78.714776][ T6079] infiniband syz!: added team_slave_0 [ 78.732210][ T6079] RDS/IB: syz!: added [ 78.736346][ T6079] smc: adding ib device syz! with port count 1 [ 78.742717][ T6079] smc: ib device syz! port 1 has pnetid [ 78.810986][ T6092] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 78.844737][ T6092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.879442][ T6097] program syz.6.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.898719][ T6092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.933106][ T6092] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 78.947008][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.847'. [ 78.967713][ T6092] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 79.570267][ T6094] syz.1.845 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 79.581219][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.1.845 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 79.581293][ T6094] Tainted: [W]=WARN [ 79.581300][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.581379][ T6094] Call Trace: [ 79.581387][ T6094] [ 79.581396][ T6094] dump_stack_lvl+0xf2/0x150 [ 79.581463][ T6094] dump_stack+0x15/0x1a [ 79.581486][ T6094] dump_header+0x83/0x2d0 [ 79.581511][ T6094] oom_kill_process+0x341/0x4c0 [ 79.581547][ T6094] out_of_memory+0x9af/0xbe0 [ 79.581611][ T6094] ? css_next_descendant_pre+0x11c/0x140 [ 79.581637][ T6094] mem_cgroup_out_of_memory+0x13e/0x190 [ 79.581671][ T6094] try_charge_memcg+0x508/0x7f0 [ 79.581733][ T6094] charge_memcg+0x50/0xc0 [ 79.581760][ T6094] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 79.581788][ T6094] __read_swap_cache_async+0x236/0x480 [ 79.581817][ T6094] swap_cluster_readahead+0x279/0x3f0 [ 79.581924][ T6094] swapin_readahead+0xe4/0x6f0 [ 79.582014][ T6094] ? __rcu_read_unlock+0x34/0x70 [ 79.582041][ T6094] ? swap_cache_get_folio+0x77/0x210 [ 79.582069][ T6094] do_swap_page+0x31b/0x2550 [ 79.582109][ T6094] ? __rcu_read_lock+0x36/0x50 [ 79.582130][ T6094] ? __pfx_default_wake_function+0x10/0x10 [ 79.582264][ T6094] handle_mm_fault+0x8e4/0x2ac0 [ 79.582293][ T6094] exc_page_fault+0x3b9/0x650 [ 79.582390][ T6094] asm_exc_page_fault+0x26/0x30 [ 79.582417][ T6094] RIP: 0033:0x7ff7bd193bfe [ 79.582432][ T6094] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 00 e8 18 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 b6 3f 34 00 85 c0 0f 8e a3 fd ff ff 8d a6 fe ff 49 39 c4 73 a0 48 8d 1d 91 23 34 00 83 3d 96 3f 34 [ 79.582449][ T6094] RSP: 002b:00007fffcacb54b0 EFLAGS: 00010202 [ 79.582466][ T6094] RAX: 0000000000000001 RBX: 00007ff7bd4d7ba0 RCX: 0000000000000000 [ 79.582478][ T6094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555cd2f808 [ 79.582624][ T6094] RBP: 00007ff7bd4d7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 79.582636][ T6094] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000013749 [ 79.582649][ T6094] R13: 00007ff7bd4d6080 R14: ffffffffffffffff R15: 00007fffcacb55c0 [ 79.582667][ T6094] [ 79.582674][ T6094] memory: usage 307200kB, limit 307200kB, failcnt 504 [ 79.809146][ T6094] memory+swap: usage 307488kB, limit 9007199254740988kB, failcnt 0 [ 79.817222][ T6094] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 79.827396][ T6094] Memory cgroup stats for /syz1: [ 79.828192][ T6094] cache 0 [ 79.836385][ T6094] rss 0 [ 79.839231][ T6094] shmem 0 [ 79.842222][ T6094] mapped_file 0 [ 79.845710][ T6094] dirty 0 [ 79.848884][ T6094] writeback 0 [ 79.852709][ T6094] workingset_refault_anon 71 [ 79.857685][ T6094] workingset_refault_file 118 [ 79.862500][ T6094] swap 294912 [ 79.865840][ T6094] swapcached 4096 [ 79.869537][ T6094] pgpgin 48760 [ 79.873304][ T6094] pgpgout 48759 [ 79.876937][ T6094] pgfault 40543 [ 79.880413][ T6094] pgmajfault 44 [ 79.883974][ T6094] inactive_anon 0 [ 79.887724][ T6094] active_anon 4096 [ 79.891611][ T6094] inactive_file 0 [ 79.895387][ T6094] active_file 0 [ 79.899025][ T6094] unevictable 0 [ 79.902530][ T6094] hierarchical_memory_limit 314572800 [ 79.907997][ T6094] hierarchical_memsw_limit 9223372036854771712 [ 79.914213][ T6094] total_cache 0 [ 79.917756][ T6094] total_rss 0 [ 79.921091][ T6094] total_shmem 0 [ 79.924597][ T6094] total_mapped_file 0 [ 79.928726][ T6094] total_dirty 0 [ 79.932538][ T6094] total_writeback 0 [ 79.936498][ T6094] total_workingset_refault_anon 71 [ 79.941805][ T6094] total_workingset_refault_file 118 [ 79.947111][ T6094] total_swap 294912 [ 79.950940][ T6094] total_swapcached 4096 [ 79.955099][ T6094] total_pgpgin 48760 [ 79.959041][ T6094] total_pgpgout 48759 [ 79.963057][ T6094] total_pgfault 40543 [ 79.967066][ T6094] total_pgmajfault 44 [ 79.971130][ T6094] total_inactive_anon 0 [ 79.975437][ T6094] total_active_anon 4096 [ 79.979753][ T6094] total_inactive_file 0 [ 79.984000][ T6094] total_active_file 0 [ 79.988040][ T6094] total_unevictable 0 [ 79.992032][ T6094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.845,pid=6094,uid=0 [ 80.006624][ T6094] Memory cgroup out of memory: Killed process 6094 (syz.1.845) total-vm:95760kB, anon-rss:924kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 80.144334][ T6103] netlink: '+}[@': attribute type 10 has an invalid length. [ 80.151766][ T6103] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 80.173881][ T6103] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.182277][ T6103] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.183070][ T6109] loop6: detected capacity change from 0 to 512 [ 80.190622][ T6103] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.190660][ T6103] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.212276][ T6103] team0: Port device geneve1 added [ 80.216673][ T6109] EXT4-fs: Ignoring removed oldalloc option [ 80.230236][ T6105] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 80.277136][ T6109] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.288095][ T6105] bridge0: port 3(batadv1) entered blocking state [ 80.294640][ T6105] bridge0: port 3(batadv1) entered disabled state [ 80.304918][ T6109] EXT4-fs (loop6): 1 truncate cleaned up [ 80.310976][ T6105] batadv1: entered allmulticast mode [ 80.334429][ T6109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.348701][ T6105] batadv1: entered promiscuous mode [ 80.369594][ T6116] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.442740][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 80.476477][ T6109] loop6: detected capacity change from 512 to 64 [ 80.518042][ T6131] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.598121][ T6131] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.617797][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 80.651079][ T5096] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -12) [ 80.671685][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.687857][ T6131] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.737888][ T6131] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.846919][ T4978] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 80.856322][ T4978] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 80.865849][ T6153] loop6: detected capacity change from 0 to 512 [ 80.878875][ T6153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.894869][ T6153] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.036188][ T6153] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.865: corrupted inode contents [ 81.050118][ T6153] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #19: comm syz.6.865: mark_inode_dirty error [ 81.062961][ T6153] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.865: corrupted inode contents [ 81.078339][ T6153] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #19: comm syz.6.865: mark_inode_dirty error [ 81.091578][ T6153] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #19: comm syz.6.865: mark inode dirty (error -117) [ 81.106730][ T6153] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 81.169681][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.183779][ T6159] tmpfs: Unsupported parameter 'huge' [ 81.405539][ T6164] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 81.471892][ T6168] pim6reg1: entered promiscuous mode [ 81.477391][ T6168] pim6reg1: entered allmulticast mode [ 81.637109][ T6179] netlink: 36 bytes leftover after parsing attributes in process `syz.5.876'. [ 81.899433][ T6195] Invalid ELF header magic: != ELF [ 81.929501][ T6197] tmpfs: Unsupported parameter 'huge' [ 82.049135][ T6131] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.074771][ T6131] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.088181][ T6131] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.101881][ T6131] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.224835][ T6207] SELinux: failed to load policy [ 82.586399][ T6228] Falling back ldisc for ttyS3. [ 82.992161][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.898'. [ 83.730984][ T6270] loop6: detected capacity change from 0 to 128 [ 83.793063][ T6270] EXT4-fs: Ignoring removed nobh option [ 83.823303][ T6270] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.899273][ T6270] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.114074][ T6242] Set syz1 is full, maxelem 65536 reached [ 84.291475][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.912'. [ 84.327600][ T5096] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.376934][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 84.376952][ T30] audit: type=1400 audit(1741619566.941:1311): avc: denied { read write } for pid=6284 comm="syz.0.915" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.407560][ T30] audit: type=1400 audit(1741619566.941:1312): avc: denied { open } for pid=6284 comm="syz.0.915" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.520486][ T6293] pim6reg1: entered promiscuous mode [ 84.526070][ T6293] pim6reg1: entered allmulticast mode [ 84.695870][ T6306] bridge: RTM_NEWNEIGH with invalid ether address [ 84.720074][ T30] audit: type=1326 audit(1741619567.281:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 84.757428][ T30] audit: type=1326 audit(1741619567.311:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 85.167101][ T6330] pim6reg1: entered promiscuous mode [ 85.172588][ T6330] pim6reg1: entered allmulticast mode [ 85.616410][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.6.937'. [ 85.918032][ T6341] Set syz1 is full, maxelem 65536 reached [ 87.366932][ T30] audit: type=1326 audit(1741619569.931:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 87.423075][ T30] audit: type=1326 audit(1741619569.961:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 87.448387][ T30] audit: type=1326 audit(1741619569.961:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 87.472571][ T30] audit: type=1326 audit(1741619569.961:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff078b7fa25 code=0x7ffc0000 [ 87.495957][ T30] audit: type=1326 audit(1741619569.961:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 87.519347][ T30] audit: type=1326 audit(1741619569.961:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 87.802448][ T6378] pim6reg1: entered promiscuous mode [ 87.808693][ T6378] pim6reg1: entered allmulticast mode [ 88.921162][ T6419] xt_CT: No such helper "pptp" [ 89.214618][ T6399] Cannot find del_set index 0 as target [ 89.302748][ T6431] all: renamed from bridge_slave_0 (while UP) [ 89.364162][ T6441] loop3: detected capacity change from 0 to 1024 [ 89.388031][ T30] kauditd_printk_skb: 169 callbacks suppressed [ 89.388117][ T30] audit: type=1326 audit(1741619571.951:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 89.433056][ T30] audit: type=1326 audit(1741619571.981:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 89.460341][ T30] audit: type=1326 audit(1741619571.981:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 89.485167][ T30] audit: type=1326 audit(1741619571.981:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 89.508862][ T30] audit: type=1326 audit(1741619571.981:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 89.532810][ T30] audit: type=1326 audit(1741619571.981:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 89.557479][ T30] audit: type=1326 audit(1741619571.981:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 89.581220][ T30] audit: type=1326 audit(1741619571.981:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 89.604999][ T30] audit: type=1326 audit(1741619571.981:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 89.629034][ T30] audit: type=1326 audit(1741619571.981:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 89.672932][ T6441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.825811][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.877877][ T6470] xt_CT: No such helper "pptp" [ 90.032610][ T6480] loop6: detected capacity change from 0 to 2048 [ 90.061349][ T6480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.922642][ T6503] Cannot find del_set index 0 as target [ 91.260179][ T6523] netlink: 'syz.3.1003': attribute type 4 has an invalid length. [ 91.490050][ T6527] sd 0:0:1:0: device reset [ 92.016008][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.244047][ T6559] loop3: detected capacity change from 0 to 2048 [ 92.268195][ T6559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.513750][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.639826][ T6593] veth0_vlan: entered allmulticast mode [ 93.761932][ T6623] Driver unsupported XDP return value 0 on prog (id 951) dev N/A, expect packet loss! [ 94.101241][ T6653] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.179385][ T6653] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.323706][ T6653] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.378089][ T6653] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.447580][ T6653] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.462655][ T6653] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.479195][ T6653] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.506977][ T6653] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.743366][ T6695] loop3: detected capacity change from 0 to 2048 [ 94.806841][ T6695] loop3: p1 < > p4 [ 94.811771][ T6695] loop3: p4 size 8388608 extends beyond EOD, truncated [ 94.888318][ T6702] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.964656][ T6702] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.022062][ T6702] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.069893][ T6702] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.220945][ T6717] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.317369][ T6717] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.380101][ T6717] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.418962][ T6717] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.493368][ T6717] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.505085][ T30] kauditd_printk_skb: 337 callbacks suppressed [ 95.505103][ T30] audit: type=1400 audit(1741619578.061:1837): avc: denied { read } for pid=6729 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.508060][ T6717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.546125][ T6717] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.578762][ T6717] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.621293][ T30] audit: type=1326 audit(1741619578.181:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 95.648404][ T30] audit: type=1326 audit(1741619578.181:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 95.677275][ T30] audit: type=1326 audit(1741619578.181:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 95.702806][ T30] audit: type=1326 audit(1741619578.181:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 95.730472][ T30] audit: type=1326 audit(1741619578.181:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 95.761372][ T30] audit: type=1326 audit(1741619578.181:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 95.790348][ T30] audit: type=1326 audit(1741619578.181:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 95.816814][ T30] audit: type=1326 audit(1741619578.221:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 95.842642][ T30] audit: type=1326 audit(1741619578.221:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 96.530243][ T6755] syzkaller0: entered promiscuous mode [ 96.536523][ T6755] syzkaller0: entered allmulticast mode [ 96.920799][ T6780] netlink: 'syz.1.1096': attribute type 7 has an invalid length. [ 98.005819][ T6828] bridge0: port 1(bond0) entered blocking state [ 98.012502][ T6828] bridge0: port 1(bond0) entered disabled state [ 98.019747][ T6828] bond0: entered allmulticast mode [ 98.025107][ T6828] bond_slave_1: entered allmulticast mode [ 98.033117][ T6828] bond0: entered promiscuous mode [ 98.038397][ T6828] bond_slave_1: entered promiscuous mode [ 98.056137][ T6828] bond0: left allmulticast mode [ 98.061489][ T6828] bond_slave_1: left allmulticast mode [ 98.067205][ T6828] bond0: left promiscuous mode [ 98.072081][ T6828] bond_slave_1: left promiscuous mode [ 98.077862][ T6828] bridge0: port 1(bond0) entered disabled state [ 98.127859][ T6830] lo speed is unknown, defaulting to 1000 [ 98.145181][ T6830] lo speed is unknown, defaulting to 1000 [ 98.154700][ T6830] lo speed is unknown, defaulting to 1000 [ 98.163853][ T6830] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.174635][ T6830] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.192254][ T6830] lo speed is unknown, defaulting to 1000 [ 98.199270][ T6830] lo speed is unknown, defaulting to 1000 [ 98.206064][ T6830] lo speed is unknown, defaulting to 1000 [ 98.212468][ T6830] lo speed is unknown, defaulting to 1000 [ 98.219321][ T6830] lo speed is unknown, defaulting to 1000 [ 98.561674][ T6856] loop3: detected capacity change from 0 to 1024 [ 98.578419][ T6856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.596180][ T6856] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 98.640125][ T6702] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.652347][ T6702] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.664670][ T6702] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.678762][ T6702] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.714712][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.063471][ T6874] team0: Device ipvlan0 failed to register rx_handler [ 99.498658][ T6894] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 99.507338][ T6894] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 99.515925][ T6894] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 99.524935][ T6894] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 99.533734][ T6894] geneve2: entered promiscuous mode [ 99.539358][ T6894] geneve2: entered allmulticast mode [ 99.615069][ T6900] veth0_vlan: entered allmulticast mode [ 99.703009][ T6900] lo speed is unknown, defaulting to 1000 [ 99.890723][ T6921] lo speed is unknown, defaulting to 1000 [ 100.133198][ T6961] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 100.144299][ T6961] netlink: 'syz.0.1154': attribute type 10 has an invalid length. [ 100.468963][ T6993] lo speed is unknown, defaulting to 1000 [ 100.524336][ T30] kauditd_printk_skb: 593 callbacks suppressed [ 100.524355][ T30] audit: type=1326 audit(1741619583.081:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 100.804767][ T6996] loop6: detected capacity change from 0 to 8192 [ 100.962141][ T30] audit: type=1326 audit(1741619583.081:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 100.985725][ T30] audit: type=1326 audit(1741619583.081:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 101.010434][ T30] audit: type=1326 audit(1741619583.081:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 101.035333][ T30] audit: type=1326 audit(1741619583.081:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 101.059024][ T30] audit: type=1326 audit(1741619583.081:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 101.082600][ T30] audit: type=1326 audit(1741619583.081:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 101.106463][ T30] audit: type=1326 audit(1741619583.081:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 101.130215][ T30] audit: type=1326 audit(1741619583.081:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 101.153644][ T30] audit: type=1326 audit(1741619583.081:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fd738f7d169 code=0x7ffc0000 [ 101.597239][ T7027] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1170'. [ 101.809399][ T7043] netlink: 'syz.0.1179': attribute type 4 has an invalid length. [ 101.852470][ T7039] loop3: detected capacity change from 0 to 512 [ 101.871277][ T7039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.915399][ T7039] EXT4-fs (loop3): 1 truncate cleaned up [ 101.933116][ T7039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.009326][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.036567][ T7054] loop6: detected capacity change from 0 to 1024 [ 102.050607][ T7054] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.061850][ T7054] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.098001][ T7054] JBD2: no valid journal superblock found [ 102.103987][ T7054] EXT4-fs (loop6): Could not load journal inode [ 102.123801][ T7054] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 102.153839][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 102.169139][ T7063] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.208717][ T7063] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.258973][ T7063] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.308746][ T7063] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.387127][ T7063] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.400327][ T7063] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.412960][ T7063] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.426056][ T7063] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.511202][ T7080] loop3: detected capacity change from 0 to 1024 [ 102.526961][ T7083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7083 comm=syz.0.1194 [ 102.541718][ T7085] xt_hashlimit: max too large, truncated to 1048576 [ 102.553416][ T7080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.595123][ T7080] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.1195: Allocating blocks 385-513 which overlap fs metadata [ 102.630629][ T7078] EXT4-fs (loop3): pa ffff8881065d15b0: logic 16, phys. 129, len 24 [ 102.639292][ T7078] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 102.710508][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.907520][ T7114] mmap: syz.0.1209 (7114) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.068743][ T7119] lo speed is unknown, defaulting to 1000 [ 103.161365][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 103.277246][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1223'. [ 103.299028][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.306656][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.367700][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.375215][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.664007][ T7187] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 103.756997][ T3379] IPVS: starting estimator thread 0... [ 103.788417][ T7199] netlink: 'syz.0.1247': attribute type 29 has an invalid length. [ 103.800164][ T7199] netlink: 'syz.0.1247': attribute type 29 has an invalid length. [ 103.849699][ T7203] loop3: detected capacity change from 0 to 2048 [ 103.867528][ T7197] IPVS: using max 2256 ests per chain, 112800 per kthread [ 103.897895][ T7203] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1249'. [ 103.914721][ T7203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.938899][ T7203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.969108][ T7203] bond0 (unregistering): Released all slaves [ 104.148176][ T7237] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.193251][ T7241] loop6: detected capacity change from 0 to 512 [ 104.209220][ T7241] EXT4-fs (loop6): orphan cleanup on readonly fs [ 104.216871][ T7241] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1266: bg 0: block 248: padding at end of block bitmap is not set [ 104.233122][ T7241] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1266: Failed to acquire dquot type 1 [ 104.248068][ T7241] EXT4-fs (loop6): 1 truncate cleaned up [ 104.254289][ T7241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.282573][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.156082][ T7269] loop6: detected capacity change from 0 to 1024 [ 105.163233][ T7269] EXT4-fs: Ignoring removed bh option [ 105.169385][ T7269] EXT4-fs: inline encryption not supported [ 105.175716][ T7269] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.197134][ T7269] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 105.218127][ T7269] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 2: comm syz.6.1277: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.233665][ T7269] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.1277: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.249748][ T7269] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1277: Failed to acquire dquot type 0 [ 105.261477][ T7269] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 105.273410][ T7269] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #11: comm syz.6.1277: mark_inode_dirty error [ 105.285033][ T7269] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 105.296824][ T7269] EXT4-fs (loop6): 1 orphan inode deleted [ 105.303325][ T7269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.316455][ T4980] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.345486][ T4980] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:9: Failed to release dquot type 0 [ 105.373320][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.382775][ T5096] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 105.401933][ T5096] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 105.419561][ T5096] EXT4-fs error (device loop6): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 105.452058][ T7284] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 105.487736][ T7284] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 105.525824][ T7288] loop6: detected capacity change from 0 to 1024 [ 105.558343][ T7288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.570613][ T7284] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 105.593507][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.613568][ T7292] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1285'. [ 105.624841][ T7284] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 105.728997][ T7284] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 105.749883][ T7284] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 105.762574][ T7284] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 105.775727][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 105.775744][ T30] audit: type=1326 audit(1741619588.341:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 105.805728][ T30] audit: type=1326 audit(1741619588.341:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 105.831601][ T7284] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 105.841172][ T30] audit: type=1326 audit(1741619588.411:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 105.864749][ T30] audit: type=1326 audit(1741619588.411:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 105.888377][ T30] audit: type=1326 audit(1741619588.411:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bd2bd169 code=0x7ffc0000 [ 106.024113][ T30] audit: type=1400 audit(1741619588.581:2563): avc: denied { accept } for pid=7342 comm="syz.5.1293" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 106.126499][ T30] audit: type=1326 audit(1741619588.691:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.5.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 106.152470][ T30] audit: type=1326 audit(1741619588.721:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.5.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 106.176436][ T30] audit: type=1326 audit(1741619588.721:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.5.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 106.200226][ T30] audit: type=1326 audit(1741619588.721:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.5.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 106.340384][ T7382] vlan0: entered allmulticast mode [ 106.512789][ T7411] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 106.539648][ T7411] netlink: 'syz.5.1304': attribute type 29 has an invalid length. [ 106.755792][ T7443] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 106.775565][ T7443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.792942][ T7443] macvlan0: entered promiscuous mode [ 106.798656][ T7443] macvlan0: entered allmulticast mode [ 106.813256][ T7443] bond2: (slave macvlan0): Enslaving as an active interface with a down link [ 106.866527][ T7446] loop3: detected capacity change from 0 to 1024 [ 106.883758][ T7446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.068189][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.426645][ T7465] pim6reg: entered allmulticast mode [ 107.432781][ T7465] pim6reg: left allmulticast mode [ 107.560473][ T7475] loop6: detected capacity change from 0 to 512 [ 107.569354][ T7475] EXT4-fs (loop6): failed to initialize system zone (-117) [ 107.578111][ T7475] EXT4-fs (loop6): mount failed [ 107.677325][ T7487] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1334'. [ 108.052690][ T7519] 9pnet: p9_errstr2errno: server reported unknown error [ 108.155134][ T7529] pim6reg1: entered promiscuous mode [ 108.155156][ T7529] pim6reg1: entered allmulticast mode [ 108.331930][ T7536] ip6gre1: entered allmulticast mode [ 108.370744][ T7536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.603748][ T7547] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 108.679884][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1361'. [ 108.679924][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1361'. [ 108.991812][ T7577] pim6reg1: entered promiscuous mode [ 108.991848][ T7577] pim6reg1: entered allmulticast mode [ 109.131175][ T7584] bridge_slave_0: left allmulticast mode [ 109.137082][ T7584] bridge_slave_0: left promiscuous mode [ 109.142860][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.158189][ T7584] bridge_slave_1: left allmulticast mode [ 109.164646][ T7584] bridge_slave_1: left promiscuous mode [ 109.170667][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.184899][ T7584] bond0: (slave bond_slave_0): Releasing backup interface [ 109.217496][ T7584] bond0: (slave bond_slave_1): Releasing backup interface [ 109.231342][ T7584] team0: Port device team_slave_0 removed [ 109.243493][ T7584] team0: Port device team_slave_1 removed [ 109.264707][ T7584] batadv1: left allmulticast mode [ 109.269872][ T7584] batadv1: left promiscuous mode [ 109.275137][ T7584] bridge0: port 3(batadv1) entered disabled state [ 109.293086][ T7591] @: renamed from vlan0 [ 109.436625][ T7609] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1386'. [ 109.506346][ T7612] xt_hashlimit: max too large, truncated to 1048576 [ 109.615296][ T7617] geneve0: entered allmulticast mode [ 109.864308][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1391'. [ 110.257165][ T7637] lo speed is unknown, defaulting to 1000 [ 110.266005][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 110.286650][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.297091][ T3377] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.317651][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.530091][ T7646] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 110.579052][ T7658] SELinux: Context  is not valid (left unmapped). [ 110.840670][ T7684] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1418'. [ 110.965288][ T30] kauditd_printk_skb: 195 callbacks suppressed [ 110.965308][ T30] audit: type=1326 audit(1741619593.521:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 110.997318][ T30] audit: type=1326 audit(1741619593.521:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 111.020899][ T30] audit: type=1326 audit(1741619593.521:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 111.044365][ T30] audit: type=1326 audit(1741619593.521:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 111.068043][ T30] audit: type=1326 audit(1741619593.521:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 111.091765][ T30] audit: type=1326 audit(1741619593.521:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 111.115463][ T30] audit: type=1326 audit(1741619593.521:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 111.139279][ T30] audit: type=1326 audit(1741619593.521:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 111.162993][ T30] audit: type=1326 audit(1741619593.521:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 111.186651][ T30] audit: type=1326 audit(1741619593.521:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff078b4d169 code=0x7ffc0000 [ 111.281830][ T3376] IPVS: starting estimator thread 0... [ 111.308741][ T7709] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1428'. [ 111.352010][ T7712] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.394948][ T7706] lo speed is unknown, defaulting to 1000 [ 111.401079][ T7707] IPVS: using max 1728 ests per chain, 86400 per kthread [ 111.517850][ T7723] macsec1: entered promiscuous mode [ 111.523164][ T7723] team0: entered promiscuous mode [ 111.528343][ T7723] team_slave_0: entered promiscuous mode [ 111.534206][ T7723] team_slave_1: entered promiscuous mode [ 111.540162][ T7723] macsec1: entered allmulticast mode [ 111.545492][ T7723] team0: entered allmulticast mode [ 111.550684][ T7723] team_slave_0: entered allmulticast mode [ 111.556514][ T7723] team_slave_1: entered allmulticast mode [ 111.562788][ T7723] team0: Device macsec1 is already an upper device of the team interface [ 111.571870][ T7723] team0: left allmulticast mode [ 111.576994][ T7723] team_slave_0: left allmulticast mode [ 111.582482][ T7723] team_slave_1: left allmulticast mode [ 111.588018][ T7723] team0: left promiscuous mode [ 111.592823][ T7723] team_slave_0: left promiscuous mode [ 111.598412][ T7723] team_slave_1: left promiscuous mode [ 111.939793][ T7732] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 111.997757][ T7732] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 112.049926][ T7732] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 112.098000][ T7732] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 112.164255][ T7732] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.176050][ T7732] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.188224][ T7732] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.201338][ T7732] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.322303][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.335128][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.356479][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.379887][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.393036][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.419524][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.434531][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.449985][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.462750][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.475635][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7747 comm=syz.1.1443 [ 112.514204][ T7755] geneve0: entered allmulticast mode [ 112.528394][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1449'. [ 112.572294][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1451'. [ 112.583138][ T7763] veth0_macvtap: left promiscuous mode [ 112.906474][ T7777] 8021q: VLANs not supported on ip6gre0 [ 112.970293][ T7798] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 113.029364][ T7804] loop6: detected capacity change from 0 to 1764 [ 113.036100][ T7804] iso9660: Unknown parameter '¼ÒÒæB\zJû yÁ}mŒû›íPÒE¹(…:vI½CœÔ“' [ 113.469087][ T7826] siw: device registration error -23 [ 113.617654][ T7836] loop6: detected capacity change from 0 to 512 [ 113.666399][ T7836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.704149][ T7836] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.762556][ T7843] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1483'. [ 113.817598][ T7836] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #20: comm syz.6.1481: corrupted inode contents [ 113.838551][ T7843] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1483'. [ 113.852757][ T7836] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #20: comm syz.6.1481: mark_inode_dirty error [ 113.872050][ T7841] lo speed is unknown, defaulting to 1000 [ 113.881284][ T7836] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #20: comm syz.6.1481: corrupted inode contents [ 113.911607][ T7836] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #20: comm syz.6.1481: mark_inode_dirty error [ 113.928122][ T7836] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #20: comm syz.6.1481: mark inode dirty (error -117) [ 113.972527][ T7836] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 114.047952][ T5096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.248056][ T7867] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 114.372002][ T7875] bond0: entered promiscuous mode [ 114.377202][ T7875] bond0: entered allmulticast mode [ 114.401032][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.445286][ T7875] bond0 (unregistering): Released all slaves [ 114.512307][ T7886] xt_hashlimit: max too large, truncated to 1048576 [ 114.537608][ T7874] lo speed is unknown, defaulting to 1000 [ 114.762414][ T7906] bond0: (slave bond_slave_1): Releasing backup interface [ 114.773347][ T7906] team0: Port device team_slave_0 removed [ 114.783276][ T7906] team0: Port device team_slave_1 removed [ 114.791288][ T7906] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.800541][ T7906] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.809100][ T7906] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.813298][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1514'. [ 114.817650][ T7906] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.836574][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1514'. [ 114.847959][ T7906] team0: Port device geneve1 removed [ 114.853137][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1514'. [ 115.064888][ T7929] loop6: detected capacity change from 0 to 8192 [ 115.180916][ T7937] ================================================================== [ 115.189424][ T7937] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 115.197582][ T7937] [ 115.199956][ T7937] write to 0xffff888106683728 of 4 bytes by task 7929 on cpu 0: [ 115.207930][ T7937] __mark_inode_dirty+0x24e/0x7e0 [ 115.213446][ T7937] mark_buffer_dirty+0x149/0x230 [ 115.218419][ T7937] block_write_end+0x123/0x210 [ 115.223396][ T7937] generic_write_end+0x5c/0x160 [ 115.228541][ T7937] fat_write_end+0x4e/0x160 [ 115.233070][ T7937] generic_perform_write+0x33c/0x4a0 [ 115.238605][ T7937] __generic_file_write_iter+0xa1/0x120 [ 115.244834][ T7937] generic_file_write_iter+0x8f/0x310 [ 115.250448][ T7937] iter_file_splice_write+0x5f1/0x980 [ 115.255858][ T7937] direct_splice_actor+0x160/0x2c0 [ 115.260987][ T7937] splice_direct_to_actor+0x302/0x670 [ 115.266396][ T7937] do_splice_direct+0xd7/0x150 [ 115.271179][ T7937] do_sendfile+0x398/0x660 [ 115.275728][ T7937] __x64_sys_sendfile64+0x110/0x150 [ 115.280983][ T7937] x64_sys_call+0xfbd/0x2dc0 [ 115.285775][ T7937] do_syscall_64+0xc9/0x1c0 [ 115.290324][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.296430][ T7937] [ 115.298851][ T7937] read to 0xffff888106683728 of 4 bytes by task 7937 on cpu 1: [ 115.306589][ T7937] __mark_inode_dirty+0x198/0x7e0 [ 115.312366][ T7937] fat_update_time+0x1e8/0x200 [ 115.317211][ T7937] touch_atime+0x14f/0x350 [ 115.321656][ T7937] filemap_splice_read+0x8a5/0x910 [ 115.326795][ T7937] splice_direct_to_actor+0x269/0x670 [ 115.332329][ T7937] do_splice_direct+0xd7/0x150 [ 115.337306][ T7937] do_sendfile+0x398/0x660 [ 115.341848][ T7937] __x64_sys_sendfile64+0x110/0x150 [ 115.347264][ T7937] x64_sys_call+0xfbd/0x2dc0 [ 115.351975][ T7937] do_syscall_64+0xc9/0x1c0 [ 115.356538][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.362550][ T7937] [ 115.365425][ T7937] value changed: 0x00000008 -> 0x00000038 [ 115.371144][ T7937] [ 115.373474][ T7937] Reported by Kernel Concurrency Sanitizer on: [ 115.380282][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.6.1518 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 115.390819][ T7937] Tainted: [W]=WARN [ 115.394979][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.405353][ T7937] ================================================================== [ 115.893254][ T7929] ================================================================== [ 115.901506][ T7929] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 115.910123][ T7929] [ 115.912688][ T7929] write to 0xffff888106683728 of 4 bytes by task 7937 on cpu 1: [ 115.920622][ T7929] writeback_single_inode+0x14f/0x3f0 [ 115.926011][ T7929] sync_inode_metadata+0x5c/0x90 [ 115.930992][ T7929] __generic_file_fsync+0xed/0x140 [ 115.936139][ T7929] fat_file_fsync+0x46/0x100 [ 115.941199][ T7929] vfs_fsync_range+0x116/0x130 [ 115.946263][ T7929] generic_file_write_iter+0x1c3/0x310 [ 115.951889][ T7929] iter_file_splice_write+0x5f1/0x980 [ 115.957281][ T7929] direct_splice_actor+0x160/0x2c0 [ 115.962416][ T7929] splice_direct_to_actor+0x302/0x670 [ 115.967805][ T7929] do_splice_direct+0xd7/0x150 [ 115.972592][ T7929] do_sendfile+0x398/0x660 [ 115.977013][ T7929] __x64_sys_sendfile64+0x110/0x150 [ 115.982241][ T7929] x64_sys_call+0xfbd/0x2dc0 [ 115.986853][ T7929] do_syscall_64+0xc9/0x1c0 [ 115.991398][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.997320][ T7929] [ 115.999737][ T7929] read to 0xffff888106683728 of 4 bytes by task 7929 on cpu 0: [ 116.007308][ T7929] vfs_fsync_range+0x9a/0x130 [ 116.012014][ T7929] generic_file_write_iter+0x1c3/0x310 [ 116.017494][ T7929] iter_file_splice_write+0x5f1/0x980 [ 116.022897][ T7929] direct_splice_actor+0x160/0x2c0 [ 116.028034][ T7929] splice_direct_to_actor+0x302/0x670 [ 116.033427][ T7929] do_splice_direct+0xd7/0x150 [ 116.038248][ T7929] do_sendfile+0x398/0x660 [ 116.042682][ T7929] __x64_sys_sendfile64+0x110/0x150 [ 116.048108][ T7929] x64_sys_call+0xfbd/0x2dc0 [ 116.052958][ T7929] do_syscall_64+0xc9/0x1c0 [ 116.057524][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.064053][ T7929] [ 116.066391][ T7929] value changed: 0x00000038 -> 0x00000022 [ 116.072378][ T7929] [ 116.074794][ T7929] Reported by Kernel Concurrency Sanitizer on: [ 116.081044][ T7929] CPU: 0 UID: 0 PID: 7929 Comm: syz.6.1518 Tainted: G W 6.14.0-rc6-syzkaller #0 [ 116.091582][ T7929] Tainted: [W]=WARN [ 116.095386][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.105996][ T7929] ==================================================================