last executing test programs: 1.402914382s ago: executing program 0 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 1.359424966s ago: executing program 1 (id=732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) llistxattr(&(0x7f0000000740)='./file1\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x8c) 1.328179169s ago: executing program 1 (id=723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 1.30907567s ago: executing program 0 (id=724): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='maps\x00') 1.222119879s ago: executing program 0 (id=727): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 1.018108399s ago: executing program 1 (id=739): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) 811.72564ms ago: executing program 1 (id=743): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 539.267927ms ago: executing program 3 (id=736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) 454.202136ms ago: executing program 3 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x400000ffc000) 396.171841ms ago: executing program 1 (id=741): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 368.924964ms ago: executing program 4 (id=742): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000180), 0x4) 359.515145ms ago: executing program 2 (id=744): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) 359.403595ms ago: executing program 3 (id=745): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c) pread64(r1, &(0x7f0000000940)=""/239, 0xef, 0x8) 354.517815ms ago: executing program 1 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x2007, &(0x7f0000000980)) 275.149073ms ago: executing program 0 (id=747): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r2 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400)=r2, 0x12) 274.961503ms ago: executing program 3 (id=748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 274.853743ms ago: executing program 4 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x4000000) 228.647488ms ago: executing program 2 (id=751): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) 219.647769ms ago: executing program 4 (id=752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) epoll_create(0x4) 203.09158ms ago: executing program 0 (id=753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 181.006212ms ago: executing program 2 (id=754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r2) 166.378124ms ago: executing program 4 (id=755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) bind$can_raw(r1, &(0x7f0000000080), 0x10) 161.668994ms ago: executing program 3 (id=756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x41, 0xfe8ee28a1d9fac77, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x24, 0x191828, 0xd, 0x2, 0x107, 0x7, 0x2, 0x0, 0x0, 0x3}) close(r1) 131.242477ms ago: executing program 4 (id=757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 112.643799ms ago: executing program 2 (id=758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x11a, 0x1, 0x1}}], 0x30}, 0x0) 112.019489ms ago: executing program 0 (id=759): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 84.375681ms ago: executing program 3 (id=760): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 83.971982ms ago: executing program 2 (id=761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r2) 632.53µs ago: executing program 4 (id=762): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) 0s ago: executing program 2 (id=772): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/239, 0xef}, 0x6}], 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 33.471441][ T29] audit: type=1400 audit(1761020183.259:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.494990][ T29] audit: type=1400 audit(1761020183.279:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.496024][ T3303] cgroup: Unknown subsys name 'net' [ 33.523252][ T29] audit: type=1400 audit(1761020183.309:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.659185][ T3303] cgroup: Unknown subsys name 'cpuset' [ 33.665561][ T3303] cgroup: Unknown subsys name 'rlimit' [ 33.796270][ T29] audit: type=1400 audit(1761020183.579:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.820029][ T29] audit: type=1400 audit(1761020183.579:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.840877][ T29] audit: type=1400 audit(1761020183.579:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.861362][ T29] audit: type=1400 audit(1761020183.579:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.881998][ T29] audit: type=1400 audit(1761020183.589:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.891022][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.906818][ T29] audit: type=1400 audit(1761020183.589:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.938893][ T29] audit: type=1400 audit(1761020183.709:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.998171][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.195289][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.240355][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.278992][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.304315][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.311545][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.318763][ T3315] bridge_slave_0: entered allmulticast mode [ 35.325351][ T3315] bridge_slave_0: entered promiscuous mode [ 35.334062][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.341305][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.348794][ T3315] bridge_slave_1: entered allmulticast mode [ 35.355267][ T3315] bridge_slave_1: entered promiscuous mode [ 35.393632][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.410210][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.434391][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.484411][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.491532][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.498933][ T3313] bridge_slave_0: entered allmulticast mode [ 35.505445][ T3313] bridge_slave_0: entered promiscuous mode [ 35.518245][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.525437][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.532798][ T3322] bridge_slave_0: entered allmulticast mode [ 35.539504][ T3322] bridge_slave_0: entered promiscuous mode [ 35.546105][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.555261][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.562471][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.569667][ T3313] bridge_slave_1: entered allmulticast mode [ 35.576136][ T3313] bridge_slave_1: entered promiscuous mode [ 35.583149][ T3315] team0: Port device team_slave_0 added [ 35.591645][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.598779][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.606067][ T3322] bridge_slave_1: entered allmulticast mode [ 35.612532][ T3322] bridge_slave_1: entered promiscuous mode [ 35.627512][ T3315] team0: Port device team_slave_1 added [ 35.671659][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.682099][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.704021][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.714240][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.728978][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.735974][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.762168][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.773116][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.780252][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.787456][ T3320] bridge_slave_0: entered allmulticast mode [ 35.794095][ T3320] bridge_slave_0: entered promiscuous mode [ 35.812667][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.819687][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.845735][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.859284][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.866353][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.873669][ T3320] bridge_slave_1: entered allmulticast mode [ 35.880186][ T3320] bridge_slave_1: entered promiscuous mode [ 35.897346][ T3322] team0: Port device team_slave_0 added [ 35.904683][ T3322] team0: Port device team_slave_1 added [ 35.921381][ T3313] team0: Port device team_slave_0 added [ 35.942621][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.949953][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.957160][ T3318] bridge_slave_0: entered allmulticast mode [ 35.963788][ T3318] bridge_slave_0: entered promiscuous mode [ 35.971030][ T3313] team0: Port device team_slave_1 added [ 35.976760][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.984151][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.991314][ T3318] bridge_slave_1: entered allmulticast mode [ 35.997870][ T3318] bridge_slave_1: entered promiscuous mode [ 36.016626][ T3315] hsr_slave_0: entered promiscuous mode [ 36.022753][ T3315] hsr_slave_1: entered promiscuous mode [ 36.030345][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.041037][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.060504][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.067710][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.093931][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.105400][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.112395][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.138525][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.178729][ T3320] team0: Port device team_slave_0 added [ 36.185010][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.191990][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.218219][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.236033][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.247060][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.257581][ T3320] team0: Port device team_slave_1 added [ 36.269050][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.276009][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.302054][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.336690][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.343776][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.370033][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.386472][ T3318] team0: Port device team_slave_0 added [ 36.395315][ T3318] team0: Port device team_slave_1 added [ 36.402281][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.409274][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.435342][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.463304][ T3322] hsr_slave_0: entered promiscuous mode [ 36.469542][ T3322] hsr_slave_1: entered promiscuous mode [ 36.475494][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 36.481274][ T3322] Cannot create hsr debugfs directory [ 36.507690][ T3313] hsr_slave_0: entered promiscuous mode [ 36.513914][ T3313] hsr_slave_1: entered promiscuous mode [ 36.520124][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 36.525931][ T3313] Cannot create hsr debugfs directory [ 36.534363][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.541670][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.568093][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.580093][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.587101][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.613252][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.661467][ T3320] hsr_slave_0: entered promiscuous mode [ 36.667521][ T3320] hsr_slave_1: entered promiscuous mode [ 36.673731][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 36.679591][ T3320] Cannot create hsr debugfs directory [ 36.743895][ T3318] hsr_slave_0: entered promiscuous mode [ 36.750157][ T3318] hsr_slave_1: entered promiscuous mode [ 36.756029][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 36.761998][ T3318] Cannot create hsr debugfs directory [ 36.868274][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.889383][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.905518][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.914507][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.942288][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.951982][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.970152][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.979673][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.004771][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.014853][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.024066][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.033293][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.073710][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.083016][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.099134][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.107938][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.139959][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.159218][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.168584][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.180920][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.191942][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.210215][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.225421][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.248178][ T1766] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.255413][ T1766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.265279][ T1766] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.272548][ T1766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.285500][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.309652][ T1766] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.317021][ T1766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.338173][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.345295][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.371345][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.384116][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.413884][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.428139][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.444867][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.452094][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.460861][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.468653][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.483010][ T1652] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.490127][ T1652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.511478][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.526558][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.537072][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.564541][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.578706][ T1766] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.585848][ T1766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.621759][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.654279][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.688503][ T1766] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.695612][ T1766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.719119][ T1766] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.726357][ T1766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.754438][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.775211][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.837533][ T3315] veth0_vlan: entered promiscuous mode [ 37.867298][ T3315] veth1_vlan: entered promiscuous mode [ 37.907958][ T3322] veth0_vlan: entered promiscuous mode [ 37.922041][ T3315] veth0_macvtap: entered promiscuous mode [ 37.941707][ T3315] veth1_macvtap: entered promiscuous mode [ 37.951099][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.959749][ T3322] veth1_vlan: entered promiscuous mode [ 37.982958][ T3320] veth0_vlan: entered promiscuous mode [ 37.991708][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.014605][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.023285][ T3320] veth1_vlan: entered promiscuous mode [ 38.031955][ T3313] veth0_vlan: entered promiscuous mode [ 38.050305][ T3313] veth1_vlan: entered promiscuous mode [ 38.060810][ T3322] veth0_macvtap: entered promiscuous mode [ 38.069761][ T3322] veth1_macvtap: entered promiscuous mode [ 38.076319][ T1766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.106092][ T3320] veth0_macvtap: entered promiscuous mode [ 38.117563][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.125561][ T1766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.136450][ T3313] veth0_macvtap: entered promiscuous mode [ 38.146877][ T1766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.157071][ T3320] veth1_macvtap: entered promiscuous mode [ 38.171012][ T1766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.181787][ T3313] veth1_macvtap: entered promiscuous mode [ 38.194222][ T3318] veth0_vlan: entered promiscuous mode [ 38.201441][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.212374][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.231378][ T1652] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.241356][ T3318] veth1_vlan: entered promiscuous mode [ 38.250831][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.259426][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.269264][ T1652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.278251][ T1652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.298986][ T1652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.316624][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.337169][ T1652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.349255][ T1652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.359167][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.375058][ T3318] veth0_macvtap: entered promiscuous mode [ 38.381609][ T1652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.398104][ T1652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.410389][ T1652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.424296][ T1652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.439943][ T3318] veth1_macvtap: entered promiscuous mode [ 38.457374][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.475537][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.486785][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 38.486803][ T29] audit: type=1400 audit(1761020188.269:100): avc: denied { write } for pid=3482 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.523915][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.540010][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.565159][ T1652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.598246][ T29] audit: type=1400 audit(1761020188.379:101): avc: denied { create } for pid=3494 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.618227][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.650003][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.661474][ T29] audit: type=1326 audit(1761020188.439:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 38.684897][ T29] audit: type=1326 audit(1761020188.439:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 38.711584][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.721375][ T29] audit: type=1326 audit(1761020188.459:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 38.744657][ T29] audit: type=1326 audit(1761020188.459:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 38.768387][ T29] audit: type=1326 audit(1761020188.459:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 38.791645][ T29] audit: type=1326 audit(1761020188.459:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 38.814714][ T29] audit: type=1326 audit(1761020188.459:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 38.838213][ T29] audit: type=1326 audit(1761020188.459:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 38.969760][ T3524] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 38.977539][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 39.014183][ T3524] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 39.019274][ T1766] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.021953][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 39.040734][ T3524] Zero length message leads to an empty skb [ 39.055392][ T1766] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.108512][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.134995][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.197917][ T3532] netlink: 'syz.4.14': attribute type 3 has an invalid length. [ 39.258167][ T3537] xt_hashlimit: max too large, truncated to 1048576 [ 39.376054][ T3549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19'. [ 39.714688][ T3585] process 'syz.1.28' launched './file0' with NULL argv: empty string added [ 40.547849][ T3640] 9pnet_fd: Insufficient options for proto=fd [ 40.855861][ T3673] sd 0:0:1:0: device reset [ 40.969335][ T3684] capability: warning: `syz.3.72' uses deprecated v2 capabilities in a way that may be insecure [ 40.991776][ T3683] loop0: detected capacity change from 0 to 512 [ 41.013365][ T3683] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 41.031964][ T3683] EXT4-fs (loop0): invalid journal inode [ 41.048930][ T3683] EXT4-fs (loop0): can't get journal size [ 41.065125][ T3683] EXT4-fs (loop0): 1 truncate cleaned up [ 41.077865][ T3683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.229940][ T3706] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 41.301068][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.380775][ T3719] loop3: detected capacity change from 0 to 512 [ 41.390045][ T3719] ======================================================= [ 41.390045][ T3719] WARNING: The mand mount option has been deprecated and [ 41.390045][ T3719] and is ignored by this kernel. Remove the mand [ 41.390045][ T3719] option from the mount to silence this warning. [ 41.390045][ T3719] ======================================================= [ 41.492184][ T3719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.511553][ T3719] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.538865][ T3719] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.83: corrupted inode contents [ 41.574072][ T3719] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.83: mark_inode_dirty error [ 41.586213][ T3738] loop0: detected capacity change from 0 to 2048 [ 41.595518][ T3719] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.83: corrupted inode contents [ 41.631975][ T3738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.666773][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.803090][ T3758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 41.913379][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.960831][ T3004] udevd[3004]: worker [3307] terminated by signal 33 (Unknown signal 33) [ 41.971754][ T3004] udevd[3004]: worker [3307] failed while handling '/devices/virtual/block/loop0' [ 42.015392][ T3773] atomic_op ffff8881034bf528 conn xmit_atomic 0000000000000000 [ 42.191523][ T3789] netlink: 272 bytes leftover after parsing attributes in process `syz.4.109'. [ 42.239788][ T3794] SELinux: Context Ü is not valid (left unmapped). [ 42.399991][ T3810] IPv6: NLM_F_CREATE should be specified when creating new route [ 42.596913][ T3825] ref_ctr_offset mismatch. inode: 0xb2 offset: 0x0 ref_ctr_offset(old): 0x4000000 ref_ctr_offset(new): 0x0 [ 42.893216][ T3852] netlink: 'syz.1.137': attribute type 21 has an invalid length. [ 42.901276][ T3852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.137'. [ 42.910457][ T3852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.137'. [ 42.954234][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 42.966980][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 43.179124][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 43.334591][ T3896] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 43.334591][ T3896] program syz.0.157 not setting count and/or reply_len properly [ 43.412152][ T3912] atomic_op ffff88811b75ed28 conn xmit_atomic 0000000000000000 [ 43.420058][ T3910] loop4: detected capacity change from 0 to 2048 [ 43.428780][ T3910] EXT4-fs: Ignoring removed nobh option [ 43.449705][ T3910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.488470][ T3910] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.516266][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 43.516282][ T29] audit: type=1326 audit(1761020193.299:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1e1e82efc9 code=0x7ffc0000 [ 43.563034][ T29] audit: type=1326 audit(1761020193.349:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1e1e7cb099 code=0x7ffc0000 [ 43.587100][ T29] audit: type=1326 audit(1761020193.349:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1e82efc9 code=0x7ffc0000 [ 43.611216][ T29] audit: type=1326 audit(1761020193.349:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3898 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1e82efc9 code=0x7ffc0000 [ 43.656451][ T3930] random: crng reseeded on system resumption [ 43.662962][ T29] audit: type=1400 audit(1761020193.439:380): avc: denied { write } for pid=3929 comm="syz.0.172" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 43.670380][ T3928] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.164: bg 0: block 345: padding at end of block bitmap is not set [ 43.686907][ T29] audit: type=1400 audit(1761020193.439:381): avc: denied { open } for pid=3929 comm="syz.0.172" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 43.725415][ T3928] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 702 with error 117 [ 43.738263][ T3928] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.738263][ T3928] [ 43.774255][ T29] audit: type=1326 audit(1761020193.559:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22dcefc9 code=0x7ffc0000 [ 43.797933][ T29] audit: type=1326 audit(1761020193.559:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22dcefc9 code=0x7ffc0000 [ 43.821513][ T29] audit: type=1326 audit(1761020193.559:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fcb22dcefc9 code=0x7ffc0000 [ 43.845125][ T29] audit: type=1326 audit(1761020193.559:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb22dcefc9 code=0x7ffc0000 [ 43.938510][ T3928] syz.4.164 (3928) used greatest stack depth: 10616 bytes left [ 43.946670][ T59] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 718 with max blocks 2 with error 28 [ 43.959151][ T59] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.959151][ T59] [ 43.968905][ T59] EXT4-fs (loop4): Total free blocks count 0 [ 43.974999][ T59] EXT4-fs (loop4): Free/Dirty block details [ 43.981095][ T59] EXT4-fs (loop4): free_blocks=0 [ 43.986178][ T59] EXT4-fs (loop4): dirty_blocks=16 [ 43.991363][ T59] EXT4-fs (loop4): Block reservation details [ 44.022082][ T3944] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.056067][ T3952] __nla_validate_parse: 9 callbacks suppressed [ 44.056086][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 44.071532][ T3952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 44.085734][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 44.092922][ T1652] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.094746][ T3952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 44.113152][ T1652] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.136844][ T1652] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.170245][ T1652] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.246217][ T3970] bridge0: entered promiscuous mode [ 44.252239][ T3970] macsec1: entered promiscuous mode [ 44.259450][ T3970] bridge0: port 3(macsec1) entered blocking state [ 44.266081][ T3970] bridge0: port 3(macsec1) entered disabled state [ 44.273519][ T3970] macsec1: entered allmulticast mode [ 44.278966][ T3970] bridge0: entered allmulticast mode [ 44.290683][ T3970] macsec1: left allmulticast mode [ 44.295882][ T3970] bridge0: left allmulticast mode [ 44.302691][ T3970] bridge0: left promiscuous mode [ 44.326589][ T3976] geneve2: entered promiscuous mode [ 44.333786][ T1652] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 34610 - 0 [ 44.345968][ T37] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 34610 - 0 [ 44.387481][ T37] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 34610 - 0 [ 44.415971][ T37] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 34610 - 0 [ 44.703578][ T4022] loop1: detected capacity change from 0 to 512 [ 44.743730][ T4026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.794440][ T4026] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 44.910883][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 44.939803][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 45.046941][ T4058] ALSA: seq fatal error: cannot create timer (-19) [ 45.108052][ T4070] FAT-fs (loop1): unable to read boot sector [ 45.155534][ T4076] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.184417][ T4079] gretap1: entered promiscuous mode [ 45.276035][ T4093] IPv6: Can't replace route, no match found [ 45.285548][ T4095] netlink: 64 bytes leftover after parsing attributes in process `syz.4.249'. [ 45.514909][ T4133] syz.4.267 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.919583][ T4172] netlink: 64 bytes leftover after parsing attributes in process `syz.0.286'. [ 46.185837][ T4207] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 46.185837][ T4207] program syz.0.302 not setting count and/or reply_len properly [ 46.219950][ T4209] netlink: 96 bytes leftover after parsing attributes in process `syz.0.303'. [ 46.838331][ T4236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 46.899989][ C1] hrtimer: interrupt took 38156 ns [ 46.909107][ T4242] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.119035][ T4255] 9pnet_fd: Insufficient options for proto=fd [ 47.160657][ T4240] bond1 (unregistering): Released all slaves [ 47.347832][ T4240] syz.3.317 (4240) used greatest stack depth: 10568 bytes left [ 47.847358][ T4310] loop1: detected capacity change from 0 to 1024 [ 47.854884][ T4310] EXT4-fs: Ignoring removed orlov option [ 47.930121][ T4310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.004532][ T4320] netlink: 'syz.4.352': attribute type 20 has an invalid length. [ 48.053018][ T4320] netlink: 'syz.4.352': attribute type 20 has an invalid length. [ 48.081665][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.134288][ T4324] rdma_op ffff88811b75f580 conn xmit_rdma 0000000000000000 [ 48.236132][ T4330] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.427476][ T4355] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 48.476412][ T4358] rdma_op ffff88811b75f580 conn xmit_rdma 0000000000000000 [ 48.569198][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 48.569212][ T29] audit: type=1326 audit(1761020198.359:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.599273][ T29] audit: type=1326 audit(1761020198.359:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.638529][ T29] audit: type=1326 audit(1761020198.359:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.662179][ T29] audit: type=1326 audit(1761020198.359:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.685735][ T29] audit: type=1326 audit(1761020198.359:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.709344][ T29] audit: type=1326 audit(1761020198.359:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.732912][ T29] audit: type=1326 audit(1761020198.359:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.756535][ T29] audit: type=1326 audit(1761020198.359:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.780066][ T29] audit: type=1326 audit(1761020198.359:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.803809][ T29] audit: type=1326 audit(1761020198.419:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.2.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 48.857614][ T4375] loop2: detected capacity change from 0 to 2048 [ 48.889673][ T4376] loop1: detected capacity change from 0 to 4096 [ 48.912695][ T4375] loop2: p2 < > p4 [ 48.917685][ T4375] loop2: p4 size 262144 extends beyond EOD, truncated [ 48.930539][ T4376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.047837][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 49.061012][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 49.091381][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.149353][ T3389] kernel read not supported for file /164/schedstat (pid: 3389 comm: kworker/0:3) [ 49.232897][ T4413] netlink: 'syz.3.398': attribute type 10 has an invalid length. [ 49.241247][ T4413] ipvlan0: entered allmulticast mode [ 49.246900][ T4413] veth0_vlan: entered allmulticast mode [ 49.254944][ T4413] team0: Device ipvlan0 failed to register rx_handler [ 49.289673][ T4417] __nla_validate_parse: 8 callbacks suppressed [ 49.289743][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.400'. [ 49.305148][ T4417] netlink: 348 bytes leftover after parsing attributes in process `syz.0.400'. [ 49.314332][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.400'. [ 49.323357][ T4417] netlink: 348 bytes leftover after parsing attributes in process `syz.0.400'. [ 49.332404][ T4417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.400'. [ 49.399223][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 49.570860][ T4450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 49.650886][ T4459] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 49.707208][ T4459] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 49.726655][ T4472] netlink: 168 bytes leftover after parsing attributes in process `syz.0.426'. [ 49.735818][ T4472] tipc: Started in network mode [ 49.741130][ T4472] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 49.751140][ T4472] tipc: Enabling of bearer rejected, failed to enable media [ 49.884430][ T4493] loop3: detected capacity change from 0 to 1024 [ 49.900378][ T4493] EXT4-fs: inline encryption not supported [ 49.906839][ T4493] EXT4-fs: Ignoring removed nobh option [ 49.912548][ T4493] EXT4-fs: Ignoring removed bh option [ 49.926356][ T4497] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 49.934161][ T4497] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.942303][ T4497] vhci_hcd: default hub control req: 230f v0004 i0000 l3 [ 49.952163][ T4493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.997212][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.016846][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 50.099560][ T4517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.445'. [ 50.115089][ T4514] loop4: detected capacity change from 0 to 1024 [ 50.137090][ T4514] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.148142][ T4514] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.191930][ T4514] JBD2: no valid journal superblock found [ 50.197757][ T4514] EXT4-fs (loop4): Could not load journal inode [ 50.216985][ T4514] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 50.253871][ T4539] SELinux: Context system_u:object_r:semanage_trans_lock_t:s0 is not valid (left unmapped). [ 50.323759][ T4547] sd 0:0:1:0: device reset [ 50.422010][ T4564] netlink: 'syz.1.461': attribute type 21 has an invalid length. [ 50.740654][ T4596] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 50.780920][ T4599] loop1: detected capacity change from 0 to 1024 [ 50.787812][ T4599] EXT4-fs: inline encryption not supported [ 50.794247][ T4599] EXT4-fs: Ignoring removed nobh option [ 50.799886][ T4599] EXT4-fs: Ignoring removed bh option [ 50.854263][ T4599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.957504][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.998775][ T4624] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 51.020175][ T4624] ipvlan0: entered allmulticast mode [ 51.025637][ T4624] veth0_vlan: entered allmulticast mode [ 51.044241][ T4624] team0: Device ipvlan0 failed to register rx_handler [ 51.098748][ T4634] netlink: 'syz.3.493': attribute type 13 has an invalid length. [ 51.208581][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.215948][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.246164][ T36] kernel read not supported for file /263/schedstat (pid: 36 comm: kworker/1:1) [ 51.309003][ T4655] netlink: 'syz.0.503': attribute type 21 has an invalid length. [ 51.363480][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.374568][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.432425][ T31] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.441438][ T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.450381][ T31] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 34610 - 0 [ 51.460894][ T31] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.469910][ T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.478964][ T31] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 34610 - 0 [ 51.488803][ T31] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.497757][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.506826][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 34610 - 0 [ 51.517974][ T31] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.527082][ T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.536133][ T31] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 34610 - 0 [ 51.585081][ T4670] netlink: 'syz.4.508': attribute type 10 has an invalid length. [ 51.593559][ T4670] ipvlan0: entered allmulticast mode [ 51.599075][ T4670] veth0_vlan: entered allmulticast mode [ 51.606958][ T4670] team0: Device ipvlan0 failed to register rx_handler [ 51.909617][ T4701] loop3: detected capacity change from 0 to 512 [ 51.925729][ T4701] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 51.939118][ T4701] EXT4-fs (loop3): invalid journal inode [ 51.944911][ T4701] EXT4-fs (loop3): can't get journal size [ 51.965333][ T4701] EXT4-fs (loop3): 1 truncate cleaned up [ 51.972117][ T4701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.064493][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.109223][ T4716] 9pnet_fd: Insufficient options for proto=fd [ 52.280063][ T4745] rdma_op ffff88811b7f2180 conn xmit_rdma 0000000000000000 [ 52.449263][ T4760] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.586678][ T23] kernel read not supported for file /248/schedstat (pid: 23 comm: kworker/1:0) [ 52.650686][ T4782] netlink: 'syz.3.560': attribute type 21 has an invalid length. [ 52.753946][ T4796] loop1: detected capacity change from 0 to 512 [ 52.780235][ T4796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.793697][ T4796] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.806662][ T4796] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.568: corrupted inode contents [ 52.819028][ T4796] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.568: mark_inode_dirty error [ 52.831159][ T4796] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.568: corrupted inode contents [ 52.866618][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.257862][ T4841] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 53.257862][ T4841] program syz.4.589 not setting count and/or reply_len properly [ 53.353569][ T4854] FAT-fs (loop3): unable to read boot sector [ 53.494195][ T4872] netlink: 'syz.1.605': attribute type 10 has an invalid length. [ 53.507400][ T4872] ipvlan0: entered allmulticast mode [ 53.513079][ T4872] veth0_vlan: entered allmulticast mode [ 53.529089][ T4872] team0: Device ipvlan0 failed to register rx_handler [ 53.730583][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 53.730601][ T29] audit: type=1326 audit(1761020203.519:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 53.778912][ T4895] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.786271][ T4895] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.801593][ T29] audit: type=1326 audit(1761020203.549:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 53.825194][ T29] audit: type=1326 audit(1761020203.549:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 53.848841][ T29] audit: type=1326 audit(1761020203.549:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.4.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6051efc9 code=0x7ffc0000 [ 53.902479][ T29] audit: type=1326 audit(1761020203.679:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 53.925980][ T29] audit: type=1326 audit(1761020203.679:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 53.949697][ T29] audit: type=1326 audit(1761020203.689:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 53.973275][ T29] audit: type=1326 audit(1761020203.689:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 53.996958][ T29] audit: type=1326 audit(1761020203.689:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 54.020699][ T29] audit: type=1326 audit(1761020203.689:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f90637befc9 code=0x7ffc0000 [ 54.054981][ T4908] loop2: detected capacity change from 0 to 512 [ 54.088340][ T4908] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.101620][ T4908] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.159782][ T4908] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.172628][ T4895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.202501][ T4908] EXT4-fs (loop2): 1 truncate cleaned up [ 54.208970][ T4908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.223387][ T4895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.293580][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.315513][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.324601][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.334000][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.361969][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.509831][ T4895] syz.1.616 (4895) used greatest stack depth: 10104 bytes left [ 54.850133][ T4968] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 54.858032][ T4968] __nla_validate_parse: 23 callbacks suppressed [ 54.858128][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 54.875706][ T4966] loop4: detected capacity change from 0 to 4096 [ 54.900525][ T4966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.915925][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.915969][ T4968] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 54.932864][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 54.947223][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.000928][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.010429][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.013356][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.068581][ T4980] loop2: detected capacity change from 0 to 8192 [ 55.145740][ T3320] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 55.153755][ T3320] FAT-fs (loop2): Filesystem has been set read-only [ 55.347708][ T5010] loop3: detected capacity change from 0 to 8192 [ 55.375275][ T3318] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 55.383382][ T3318] FAT-fs (loop3): Filesystem has been set read-only [ 55.476317][ T5023] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.496090][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 55.505133][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 55.519582][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 55.528711][ T5030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 55.552672][ T5026] loop2: detected capacity change from 0 to 1024 [ 55.587765][ T5026] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.598976][ T5026] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.622625][ T5026] JBD2: no valid journal superblock found [ 55.628451][ T5026] EXT4-fs (loop2): Could not load journal inode [ 55.644905][ T5026] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 55.730196][ T5050] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 55.737902][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 55.758716][ T1766] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.771846][ T1766] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.784571][ T5050] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 55.792489][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 55.802536][ T1766] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.811424][ T1766] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.821625][ T5048] loop4: detected capacity change from 0 to 8192 [ 55.906014][ T5066] geneve2: left promiscuous mode [ 55.913854][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 55.924927][ T37] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.928794][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 55.949359][ T3313] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 55.952956][ T37] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.957268][ T3313] FAT-fs (loop4): Filesystem has been set read-only [ 55.998469][ T37] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.036861][ T37] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.147280][ T5082] netlink: 'syz.2.696': attribute type 3 has an invalid length. [ 56.242081][ T5091] rdma_op ffff88811ab11180 conn xmit_rdma 0000000000000000 [ 56.409832][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.417296][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.492662][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.506046][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.660969][ T1766] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.673009][ T1766] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.685073][ T1766] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.718370][ T1766] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.843566][ T5118] atomic_op ffff88811ab13128 conn xmit_atomic 0000000000000000 [ 56.942596][ T5124] rdma_op ffff88811ae8e580 conn xmit_rdma 0000000000000000 [ 57.095808][ T5147] loop2: detected capacity change from 0 to 1024 [ 57.112518][ T5144] loop3: detected capacity change from 0 to 2048 [ 57.122142][ T5147] EXT4-fs: Ignoring removed orlov option [ 57.144322][ T5144] EXT4-fs: Ignoring removed nobh option [ 57.258808][ T5147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.275317][ T5144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.287719][ T5144] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.325475][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.390119][ T5160] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.725: bg 0: block 345: padding at end of block bitmap is not set [ 57.450700][ T5159] loop2: detected capacity change from 0 to 4096 [ 57.479514][ T5159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.508072][ T5160] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 196 with error 117 [ 57.520882][ T5160] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.520882][ T5160] [ 57.624083][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.664239][ T59] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 212 with max blocks 2 with error 117 [ 57.676962][ T59] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.676962][ T59] [ 57.694294][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.798248][ T5168] bond1 (unregistering): Released all slaves [ 58.670953][ T5229] ================================================================== [ 58.679104][ T5229] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 58.687752][ T5229] [ 58.690095][ T5229] write to 0xffff88811b829168 of 8 bytes by task 5220 on cpu 0: [ 58.697841][ T5229] shmem_file_splice_read+0x470/0x600 [ 58.703354][ T5229] splice_direct_to_actor+0x26f/0x680 [ 58.708782][ T5229] do_splice_direct+0xda/0x150 [ 58.713597][ T5229] do_sendfile+0x380/0x650 [ 58.718052][ T5229] __x64_sys_sendfile64+0x105/0x150 [ 58.723380][ T5229] x64_sys_call+0x2bb4/0x3000 [ 58.728112][ T5229] do_syscall_64+0xd2/0x200 [ 58.732640][ T5229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.738718][ T5229] [ 58.741040][ T5229] write to 0xffff88811b829168 of 8 bytes by task 5229 on cpu 1: [ 58.748676][ T5229] shmem_file_splice_read+0x470/0x600 [ 58.754266][ T5229] splice_direct_to_actor+0x26f/0x680 [ 58.759658][ T5229] do_splice_direct+0xda/0x150 [ 58.764616][ T5229] do_sendfile+0x380/0x650 [ 58.769070][ T5229] __x64_sys_sendfile64+0x105/0x150 [ 58.774306][ T5229] x64_sys_call+0x2bb4/0x3000 [ 58.779007][ T5229] do_syscall_64+0xd2/0x200 [ 58.783548][ T5229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.789450][ T5229] [ 58.791778][ T5229] value changed: 0x000000000003d7c5 -> 0x000000000003d7db [ 58.798896][ T5229] [ 58.801231][ T5229] Reported by Kernel Concurrency Sanitizer on: [ 58.807481][ T5229] CPU: 1 UID: 0 PID: 5229 Comm: syz.0.759 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.817124][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.827515][ T5229] ==================================================================