last executing test programs: 2.14267609s ago: executing program 2 (id=296): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) lseek(0xffffffffffffffff, 0xfffffffff7ffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r2, 0x0, r2, 0x0, 0xfffffffffffffffe, 0x0) 2.079728676s ago: executing program 2 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.970264306s ago: executing program 2 (id=301): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.873366336s ago: executing program 1 (id=304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) lsm_get_self_attr(0x69, 0x0, 0x0, 0x1) setuid(0xee00) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(0x0, 0x518282, 0x78e22799f4a46e8e) 1.617164919s ago: executing program 3 (id=307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1.556324945s ago: executing program 3 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) tkill(r2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 1.536019627s ago: executing program 4 (id=309): setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @timestamp, @window={0x3, 0xfffe}, @mss={0x2, 0x9}], 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) r0 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r0}, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getgroups(0x9, &(0x7f0000000080)=[0xee00, 0xee00, 0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0x0]) setregid(r1, r1) 1.438644036s ago: executing program 3 (id=310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749d, 0x4, 0x0, 0x0, 0x0) 1.251684733s ago: executing program 1 (id=311): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7050000080000008500000069000000"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x800000000005}, 0x18) syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x2200018, &(0x7f0000000d00)=ANY=[], 0x1, 0x364, &(0x7f0000000900)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, 0x8000, 0x0, 0x0, 0x300}}) 1.221497566s ago: executing program 4 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.215596107s ago: executing program 3 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.172421711s ago: executing program 1 (id=314): openat$vcs(0xffffffffffffff9c, 0x0, 0x402a00, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = inotify_init1(0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000021) close(r0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.07239248s ago: executing program 1 (id=316): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000001000)={0x2, 0x8009, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb5", 0x22}], 0x1}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @loopback={0xff00000000000000}, 0x400}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.024871875s ago: executing program 2 (id=317): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x11, 0x0, 0x7fff7ffe}]}) close_range(r4, 0xffffffffffffffff, 0x0) 997.968357ms ago: executing program 0 (id=318): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x30000}], 0x1}}], 0x51, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x80000) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 992.357078ms ago: executing program 1 (id=319): rmdir(0x0) r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) unshare(0x28020480) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x200000000000000, 0x0) 926.688814ms ago: executing program 2 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x4a103, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x4ca00200, 0x0, 0x0, 0x0, 0x0, 0x0) 905.031186ms ago: executing program 0 (id=321): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 714.363003ms ago: executing program 0 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') sched_setscheduler(0x0, 0x2, 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 676.597737ms ago: executing program 4 (id=323): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r3 = dup(r0) socket$kcm(0x1e, 0x4, 0x0) write$binfmt_elf64(r3, 0x0, 0x178) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 648.52334ms ago: executing program 4 (id=324): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x406, r1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) 583.222666ms ago: executing program 3 (id=325): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x40080) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001f40), 0x80800) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 484.966855ms ago: executing program 3 (id=326): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 456.218378ms ago: executing program 4 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20008040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=':', 0x1}], 0x1, 0x0, 0x118}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x4040010) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d00)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="0503162ed3fc1400203f4788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$key(0xf, 0x3, 0x2) 386.656344ms ago: executing program 4 (id=328): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 346.858948ms ago: executing program 0 (id=329): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 238.324708ms ago: executing program 0 (id=330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 98.952091ms ago: executing program 0 (id=331): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 98.780351ms ago: executing program 1 (id=332): syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000004c0), 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 2 (id=333): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 22.166209][ T29] audit: type=1400 audit(1767167098.777:62): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.188228][ T29] audit: type=1400 audit(1767167098.777:63): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.210814][ T29] audit: type=1400 audit(1767167098.777:64): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.233737][ T29] audit: type=1400 audit(1767167098.777:65): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.256917][ T29] audit: type=1400 audit(1767167098.787:66): avc: denied { read open } for pid=3198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 28.348912][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 28.348936][ T29] audit: type=1400 audit(1767167104.967:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.378099][ T29] audit: type=1400 audit(1767167104.997:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.380487][ T3301] cgroup: Unknown subsys name 'net' [ 28.405966][ T29] audit: type=1400 audit(1767167105.027:72): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.527601][ T3301] cgroup: Unknown subsys name 'cpuset' [ 28.534126][ T3301] cgroup: Unknown subsys name 'rlimit' [ 28.725649][ T29] audit: type=1400 audit(1767167105.337:73): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.759598][ T29] audit: type=1400 audit(1767167105.347:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.780223][ T29] audit: type=1400 audit(1767167105.347:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.800721][ T29] audit: type=1400 audit(1767167105.347:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.821119][ T29] audit: type=1400 audit(1767167105.367:77): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.838448][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.842239][ T29] audit: type=1400 audit(1767167105.367:78): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.875543][ T29] audit: type=1400 audit(1767167105.367:79): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.916528][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.086840][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.150789][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.181308][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 30.193362][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 30.221683][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.228872][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.236062][ T3316] bridge_slave_0: entered allmulticast mode [ 30.242772][ T3316] bridge_slave_0: entered promiscuous mode [ 30.263634][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.270800][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.278097][ T3316] bridge_slave_1: entered allmulticast mode [ 30.284516][ T3316] bridge_slave_1: entered promiscuous mode [ 30.332494][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.346655][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.353862][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.361144][ T3313] bridge_slave_0: entered allmulticast mode [ 30.367676][ T3313] bridge_slave_0: entered promiscuous mode [ 30.375272][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.402242][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.409362][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.416514][ T3313] bridge_slave_1: entered allmulticast mode [ 30.423215][ T3313] bridge_slave_1: entered promiscuous mode [ 30.462479][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.469850][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.477378][ T3324] bridge_slave_0: entered allmulticast mode [ 30.483939][ T3324] bridge_slave_0: entered promiscuous mode [ 30.490477][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.497705][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.504974][ T3320] bridge_slave_0: entered allmulticast mode [ 30.511460][ T3320] bridge_slave_0: entered promiscuous mode [ 30.523640][ T3316] team0: Port device team_slave_0 added [ 30.532384][ T3316] team0: Port device team_slave_1 added [ 30.538184][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.545377][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.552948][ T3324] bridge_slave_1: entered allmulticast mode [ 30.559586][ T3324] bridge_slave_1: entered promiscuous mode [ 30.566116][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.573295][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.580465][ T3320] bridge_slave_1: entered allmulticast mode [ 30.587105][ T3320] bridge_slave_1: entered promiscuous mode [ 30.594663][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.614006][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.634347][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.644022][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.651106][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.677878][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.706764][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.713741][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.739757][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.758895][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.769303][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.793204][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.803636][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.813839][ T3313] team0: Port device team_slave_0 added [ 30.820843][ T3313] team0: Port device team_slave_1 added [ 30.876139][ T3324] team0: Port device team_slave_0 added [ 30.882675][ T3320] team0: Port device team_slave_0 added [ 30.890600][ T3316] hsr_slave_0: entered promiscuous mode [ 30.896879][ T3316] hsr_slave_1: entered promiscuous mode [ 30.903334][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.910363][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.936483][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.952724][ T3324] team0: Port device team_slave_1 added [ 30.959271][ T3320] team0: Port device team_slave_1 added [ 30.965671][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.972760][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.998953][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.009882][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.017109][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.024561][ T3314] bridge_slave_0: entered allmulticast mode [ 31.031149][ T3314] bridge_slave_0: entered promiscuous mode [ 31.050537][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.057658][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.064970][ T3314] bridge_slave_1: entered allmulticast mode [ 31.071701][ T3314] bridge_slave_1: entered promiscuous mode [ 31.108837][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.115801][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.141762][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.152913][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.159940][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.185917][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.208318][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.215605][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.241596][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.253107][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.260219][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.286334][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.305614][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.328962][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.347021][ T3313] hsr_slave_0: entered promiscuous mode [ 31.353031][ T3313] hsr_slave_1: entered promiscuous mode [ 31.359055][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 31.364784][ T3313] Cannot create hsr debugfs directory [ 31.379234][ T3314] team0: Port device team_slave_0 added [ 31.386904][ T3314] team0: Port device team_slave_1 added [ 31.437704][ T3324] hsr_slave_0: entered promiscuous mode [ 31.443798][ T3324] hsr_slave_1: entered promiscuous mode [ 31.449854][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 31.455587][ T3324] Cannot create hsr debugfs directory [ 31.463338][ T3320] hsr_slave_0: entered promiscuous mode [ 31.469426][ T3320] hsr_slave_1: entered promiscuous mode [ 31.475388][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 31.481240][ T3320] Cannot create hsr debugfs directory [ 31.487040][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.494011][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.519937][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.542338][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.549345][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.575669][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.660085][ T3314] hsr_slave_0: entered promiscuous mode [ 31.666293][ T3314] hsr_slave_1: entered promiscuous mode [ 31.672445][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 31.678220][ T3314] Cannot create hsr debugfs directory [ 31.778633][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.792731][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.804338][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.820072][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.856245][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.875166][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.884378][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.894787][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.927703][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.937681][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.947412][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.960352][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.005843][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.017295][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.029229][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.038382][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.051249][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.083483][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.099315][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.109810][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.117056][ T581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.127691][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.139422][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.149242][ T2592] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.156318][ T2592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.164975][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.186813][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.213398][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.233860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.241096][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.253268][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.269494][ T2592] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.276594][ T2592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.313691][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.337893][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.344967][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.355909][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.369910][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.377037][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.411609][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.442848][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.456871][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.468612][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.475687][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.492358][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.499449][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.517836][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.527058][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.554094][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.561261][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.570356][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.577464][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.602639][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.613201][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.658632][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.707554][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.718678][ T3316] veth0_vlan: entered promiscuous mode [ 32.750742][ T3316] veth1_vlan: entered promiscuous mode [ 32.772801][ T3316] veth0_macvtap: entered promiscuous mode [ 32.806382][ T3313] veth0_vlan: entered promiscuous mode [ 32.816346][ T3316] veth1_macvtap: entered promiscuous mode [ 32.830515][ T3313] veth1_vlan: entered promiscuous mode [ 32.846747][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.857910][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.877760][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.903002][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.918377][ T3313] veth0_macvtap: entered promiscuous mode [ 32.927725][ T1646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.940073][ T3320] veth0_vlan: entered promiscuous mode [ 32.951224][ T1646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.960920][ T3313] veth1_macvtap: entered promiscuous mode [ 32.972436][ T3320] veth1_vlan: entered promiscuous mode [ 32.979796][ T1646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.992429][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.005037][ T1646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.019502][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.040953][ T3320] veth0_macvtap: entered promiscuous mode [ 33.053803][ T3320] veth1_macvtap: entered promiscuous mode [ 33.064938][ T581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.091308][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.108167][ T581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.128899][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.136176][ T581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.151654][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.165268][ T581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.198468][ T581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.215950][ T3314] veth0_vlan: entered promiscuous mode [ 33.225884][ T3478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.252133][ T581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.274837][ T581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.286565][ T3314] veth1_vlan: entered promiscuous mode [ 33.313455][ T581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.359088][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 33.359108][ T29] audit: type=1400 audit(1767167109.977:151): avc: denied { create } for pid=3494 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.385645][ T3314] veth0_macvtap: entered promiscuous mode [ 33.411422][ T3314] veth1_macvtap: entered promiscuous mode [ 33.422900][ T3497] loop1: detected capacity change from 0 to 512 [ 33.430617][ T29] audit: type=1400 audit(1767167109.977:152): avc: denied { connect } for pid=3494 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.448395][ T3497] ======================================================= [ 33.448395][ T3497] WARNING: The mand mount option has been deprecated and [ 33.448395][ T3497] and is ignored by this kernel. Remove the mand [ 33.448395][ T3497] option from the mount to silence this warning. [ 33.448395][ T3497] ======================================================= [ 33.450341][ T29] audit: type=1400 audit(1767167109.977:153): avc: denied { allowed } for pid=3494 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.504044][ T29] audit: type=1326 audit(1767167110.017:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 33.527269][ T29] audit: type=1326 audit(1767167110.017:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 33.550353][ T29] audit: type=1326 audit(1767167110.017:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 33.573472][ T29] audit: type=1326 audit(1767167110.017:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 33.596603][ T29] audit: type=1326 audit(1767167110.017:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 33.619819][ T29] audit: type=1326 audit(1767167110.017:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 33.620141][ T3324] veth0_vlan: entered promiscuous mode [ 33.643523][ T29] audit: type=1326 audit(1767167110.017:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6fac8f783 code=0x7ffc0000 [ 33.687219][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.701523][ T3324] veth1_vlan: entered promiscuous mode [ 33.712169][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.782256][ T827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.804311][ T827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.819825][ T3324] veth0_macvtap: entered promiscuous mode [ 33.841407][ T827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.857593][ T3324] veth1_macvtap: entered promiscuous mode [ 33.887273][ T827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.907276][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.958603][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.988013][ C0] hrtimer: interrupt took 28261 ns [ 34.006062][ T1646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.025068][ T3514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'. [ 34.054112][ T1646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.067297][ T3514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 34.076421][ T1646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.097819][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.149616][ T3522] netlink: 'syz.1.13': attribute type 30 has an invalid length. [ 34.218527][ T3522] Zero length message leads to an empty skb [ 34.284577][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.294580][ T3526] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.304340][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.313386][ T3526] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.317175][ T3529] tipc: Started in network mode [ 34.327747][ T3529] tipc: Node identity 92bc66841ca7, cluster identity 4711 [ 34.335350][ T3529] tipc: Enabled bearer , priority 0 [ 34.346359][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.449260][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.458866][ T3526] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.497922][ T3524] tipc: Resetting bearer [ 34.521737][ T3524] tipc: Disabling bearer [ 34.717792][ T3548] netlink: 'syz.3.22': attribute type 1 has an invalid length. [ 34.812411][ T3555] loop1: detected capacity change from 0 to 128 [ 35.144153][ T3569] loop3: detected capacity change from 0 to 512 [ 35.201461][ T3555] syz.1.24: attempt to access beyond end of device [ 35.201461][ T3555] loop1: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 35.318218][ T3555] syz.1.24: attempt to access beyond end of device [ 35.318218][ T3555] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 35.406951][ T3555] syz.1.24: attempt to access beyond end of device [ 35.406951][ T3555] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 35.425021][ T3575] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 35.462252][ T3555] syz.1.24: attempt to access beyond end of device [ 35.462252][ T3555] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 35.519405][ T3576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3576 comm=syz.0.30 [ 35.533154][ T3555] syz.1.24: attempt to access beyond end of device [ 35.533154][ T3555] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 35.606832][ T3555] syz.1.24: attempt to access beyond end of device [ 35.606832][ T3555] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 35.621436][ T3555] syz.1.24: attempt to access beyond end of device [ 35.621436][ T3555] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 35.813694][ T3555] syz.1.24: attempt to access beyond end of device [ 35.813694][ T3555] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 35.898155][ T3555] syz.1.24: attempt to access beyond end of device [ 35.898155][ T3555] loop1: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 35.919272][ T3539] loop4: detected capacity change from 0 to 1024 [ 35.984731][ T3555] syz.1.24: attempt to access beyond end of device [ 35.984731][ T3555] loop1: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 35.991391][ T3539] EXT4-fs: inline encryption not supported [ 36.013145][ T3539] ext4: Unknown parameter 'subj_user' [ 36.061255][ T3591] vlan2: entered allmulticast mode [ 36.204926][ T3596] loop2: detected capacity change from 0 to 164 [ 36.245489][ T3596] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.380454][ T3607] loop3: detected capacity change from 0 to 1024 [ 36.410307][ T3607] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 36.432609][ T3609] all: renamed from team_slave_0 (while UP) [ 36.525569][ T3616] loop3: detected capacity change from 0 to 512 [ 36.597179][ T3616] EXT4-fs: Ignoring removed i_version option [ 36.605581][ T3620] loop4: detected capacity change from 0 to 1024 [ 36.614467][ T3616] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.627631][ T3616] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.639035][ T3620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.657536][ T3616] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.672546][ T3616] EXT4-fs (loop3): 1 truncate cleaned up [ 36.678748][ T3616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.700807][ T3620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.729861][ T3624] SELinux: failed to load policy [ 36.773854][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.817672][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.045941][ T3642] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3642 comm=syz.3.56 [ 37.297750][ T3669] bond0: (slave bond_slave_1): Releasing backup interface [ 37.523426][ T3683] loop3: detected capacity change from 0 to 1024 [ 37.571538][ T3683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.592791][ T3683] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.639136][ T3693] $Hÿ: renamed from bond0 (while UP) [ 37.654660][ T3693] $Hÿ: entered promiscuous mode [ 37.659871][ T3693] bond_slave_0: entered promiscuous mode [ 37.665675][ T3693] bond_slave_1: entered promiscuous mode [ 37.735212][ T3683] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.70: Freeing blocks not in datazone - block = 0, count = 16 [ 38.033830][ T2592] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 38.083616][ T2592] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.095967][ T2592] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.095967][ T2592] [ 38.105707][ T2592] EXT4-fs (loop3): Total free blocks count 0 [ 38.111827][ T2592] EXT4-fs (loop3): Free/Dirty block details [ 38.118006][ T2592] EXT4-fs (loop3): free_blocks=16 [ 38.123238][ T2592] EXT4-fs (loop3): dirty_blocks=16 [ 38.128487][ T2592] EXT4-fs (loop3): Block reservation details [ 38.134532][ T2592] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 38.151950][ T3765] syz.0.80 (3765) used greatest stack depth: 10496 bytes left [ 38.244749][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.332638][ T3781] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 38.370725][ T3783] loop0: detected capacity change from 0 to 512 [ 38.383965][ T3783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.409374][ T3783] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.461788][ T3783] netlink: 'syz.0.86': attribute type 39 has an invalid length. [ 38.551460][ T3781] syz.3.81 (3781) used greatest stack depth: 9704 bytes left [ 38.585011][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 38.585029][ T29] audit: type=1400 audit(1767167115.197:415): avc: denied { bind } for pid=3788 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.615270][ T3789] __nla_validate_parse: 17 callbacks suppressed [ 38.615289][ T3789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 38.639668][ T29] audit: type=1400 audit(1767167115.227:416): avc: denied { setopt } for pid=3788 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.712581][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.730185][ T29] audit: type=1400 audit(1767167115.287:417): avc: denied { create } for pid=3790 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.750988][ T29] audit: type=1400 audit(1767167115.287:418): avc: denied { bpf } for pid=3790 comm="syz.2.88" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.771893][ T29] audit: type=1400 audit(1767167115.287:419): avc: denied { perfmon } for pid=3790 comm="syz.2.88" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.792794][ T29] audit: type=1400 audit(1767167115.297:420): avc: denied { ioctl } for pid=3790 comm="syz.2.88" path="socket:[4765]" dev="sockfs" ino=4765 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.817205][ T29] audit: type=1400 audit(1767167115.297:421): avc: denied { write } for pid=3790 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.837314][ T29] audit: type=1400 audit(1767167115.297:422): avc: denied { nlmsg_write } for pid=3790 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.947745][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 38.990769][ T29] audit: type=1400 audit(1767167115.607:423): avc: denied { read write } for pid=3801 comm="syz.0.89" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.014318][ T29] audit: type=1400 audit(1767167115.607:424): avc: denied { open } for pid=3801 comm="syz.0.89" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.043702][ T1039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.065640][ T1039] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.082240][ T3804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 39.093150][ T3802] loop0: detected capacity change from 0 to 2048 [ 39.109794][ T3807] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.120622][ T3802] EXT4-fs: dax option not supported [ 39.126317][ T3804] loop4: detected capacity change from 0 to 1024 [ 39.171099][ T3807] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.245672][ T3807] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.282723][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 39.292456][ T3822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.97'. [ 39.311292][ T3807] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.355425][ T385] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.368945][ T385] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.380778][ T385] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.397944][ T385] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.476026][ T3833] netlink: 28 bytes leftover after parsing attributes in process `syz.4.102'. [ 39.603922][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.623950][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.633610][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.642892][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.652386][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.662217][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.671692][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.681033][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.690286][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.700935][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.712425][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.721864][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.731459][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.740852][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.750120][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.759611][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.770912][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.780271][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.789477][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.798766][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.810119][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.819314][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.830033][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.839880][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.849340][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.858660][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.869414][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.878695][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.888504][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.897759][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.907341][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.918736][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.928035][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.939848][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.969950][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.986038][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 39.997256][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.007935][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.018298][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.028850][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.038839][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.049556][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.058906][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.068085][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.080398][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.096975][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.106640][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.125503][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.142073][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.151252][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.161739][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.171275][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.180542][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.189832][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.198970][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.211483][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.221276][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.230755][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.240016][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.307288][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.325353][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.345005][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.401150][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.410337][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.419804][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.429352][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.438473][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.447631][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.457009][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.466303][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.502692][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.549360][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.602569][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.664609][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.798333][ T3843] Set syz1 is full, maxelem 65536 reached [ 40.804753][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.827216][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.858470][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 40.945932][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 41.067639][ T3838] 9pnet_fd: p9_fd_create_tcp (3838): problem connecting socket to 127.0.0.1 [ 41.120651][ T3862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 41.171071][ T3864] loop4: detected capacity change from 0 to 512 [ 41.271591][ T3864] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.114: ea_inode file size=4 entry size=6 [ 41.289554][ T3864] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.114: corrupted inode contents [ 41.302161][ T3864] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.114: mark_inode_dirty error [ 41.323651][ T3864] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.114: corrupted inode contents [ 41.335804][ T3864] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.114: mark_inode_dirty error [ 41.348053][ T3864] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.114: mark inode dirty (error -117) [ 41.361044][ T3864] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 41.371320][ T3864] EXT4-fs (loop4): 1 orphan inode deleted [ 41.517528][ T3864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.665719][ T3875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 41.921150][ T3885] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.120'. [ 41.930337][ T3885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.120'. [ 41.985266][ T3864] Set syz1 is full, maxelem 65536 reached [ 42.037756][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.218027][ T3899] mmap: syz.4.124 (3899) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.675080][ T3901] loop3: detected capacity change from 0 to 128 [ 42.758628][ T3901] bio_check_eod: 97 callbacks suppressed [ 42.758657][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.758657][ T3901] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 42.778035][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.778035][ T3901] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 42.791274][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.791274][ T3901] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 42.805022][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.805022][ T3901] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 42.818854][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.818854][ T3901] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 42.840732][ T3908] loop1: detected capacity change from 0 to 1024 [ 42.851091][ T3908] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.862123][ T3908] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.862313][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.862313][ T3901] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 42.886328][ T3908] JBD2: no valid journal superblock found [ 42.892143][ T3908] EXT4-fs (loop1): Could not load journal inode [ 42.895228][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.895228][ T3901] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 42.913642][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.913642][ T3901] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 42.927290][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.927290][ T3901] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 42.940646][ T3901] wÞ£ÿ: attempt to access beyond end of device [ 42.940646][ T3901] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 43.636887][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 43.636910][ T29] audit: type=1326 audit(1767167120.257:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5bcfaf2005 code=0x7ffc0000 [ 43.714979][ T29] audit: type=1326 audit(1767167120.327:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5bcfaf2005 code=0x7ffc0000 [ 43.738356][ T29] audit: type=1326 audit(1767167120.327:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5bcfaf2005 code=0x7ffc0000 [ 43.761715][ T29] audit: type=1326 audit(1767167120.327:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5bcfaf2005 code=0x7ffc0000 [ 43.785139][ T29] audit: type=1326 audit(1767167120.327:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5bcfaf2005 code=0x7ffc0000 [ 43.808480][ T29] audit: type=1326 audit(1767167120.327:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5bcfaf2005 code=0x7ffc0000 [ 43.831787][ T29] audit: type=1326 audit(1767167120.327:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5bcfaf2005 code=0x7ffc0000 [ 43.855031][ T29] audit: type=1326 audit(1767167120.327:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5bcfab65e7 code=0x7ffc0000 [ 43.878404][ T29] audit: type=1326 audit(1767167120.327:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5bcfa5b829 code=0x7ffc0000 [ 43.901976][ T29] audit: type=1326 audit(1767167120.327:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f5bcfabf749 code=0x7ffc0000 [ 43.987928][ T3939] SELinux: failed to load policy [ 44.239045][ T3919] Set syz1 is full, maxelem 65536 reached [ 44.327530][ T3948] __nla_validate_parse: 3 callbacks suppressed [ 44.327545][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 44.484446][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 44.698217][ T3968] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 44.720177][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 45.299793][ T3976] syz.2.153 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 45.313911][ T3976] CPU: 0 UID: 0 PID: 3976 Comm: syz.2.153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.313990][ T3976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.314006][ T3976] Call Trace: [ 45.314021][ T3976] [ 45.314032][ T3976] __dump_stack+0x1d/0x30 [ 45.314080][ T3976] dump_stack_lvl+0x95/0xd0 [ 45.314151][ T3976] dump_stack+0x15/0x1b [ 45.314175][ T3976] dump_header+0x81/0x240 [ 45.314204][ T3976] oom_kill_process+0x295/0x350 [ 45.314235][ T3976] out_of_memory+0x97b/0xb80 [ 45.314304][ T3976] try_charge_memcg+0x610/0xa10 [ 45.314357][ T3976] obj_cgroup_charge_pages+0xa6/0x150 [ 45.314396][ T3976] __memcg_kmem_charge_page+0x9f/0x170 [ 45.314475][ T3976] __alloc_frozen_pages_noprof+0x18f/0x360 [ 45.314572][ T3976] alloc_pages_mpol+0xb3/0x260 [ 45.314629][ T3976] alloc_pages_noprof+0x90/0x130 [ 45.314682][ T3976] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 45.314734][ T3976] __kvmalloc_node_noprof+0x492/0x6b0 [ 45.314761][ T3976] ? ip_set_alloc+0x24/0x30 [ 45.314790][ T3976] ? ip_set_alloc+0x24/0x30 [ 45.314904][ T3976] ip_set_alloc+0x24/0x30 [ 45.314935][ T3976] hash_netiface_create+0x282/0x740 [ 45.315005][ T3976] ? __pfx_hash_netiface_create+0x10/0x10 [ 45.315042][ T3976] ip_set_create+0x3cc/0x970 [ 45.315101][ T3976] ? __nla_parse+0x40/0x60 [ 45.315137][ T3976] nfnetlink_rcv_msg+0x4c6/0x590 [ 45.315195][ T3976] netlink_rcv_skb+0x123/0x220 [ 45.315227][ T3976] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 45.315270][ T3976] nfnetlink_rcv+0x167/0x16c0 [ 45.315302][ T3976] ? kmem_cache_free+0xe3/0x3a0 [ 45.315390][ T3976] ? __kfree_skb+0x109/0x150 [ 45.315422][ T3976] ? nlmon_xmit+0x4f/0x60 [ 45.315447][ T3976] ? consume_skb+0x49/0x150 [ 45.315473][ T3976] ? nlmon_xmit+0x4f/0x60 [ 45.315495][ T3976] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 45.315550][ T3976] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 45.315579][ T3976] ? __dev_queue_xmit+0x148/0x1ee0 [ 45.315663][ T3976] ? ref_tracker_free+0x37d/0x3e0 [ 45.315707][ T3976] ? __netlink_deliver_tap+0x4dc/0x500 [ 45.315754][ T3976] netlink_unicast+0x5c0/0x690 [ 45.315873][ T3976] netlink_sendmsg+0x58b/0x6b0 [ 45.315960][ T3976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.316015][ T3976] __sock_sendmsg+0x145/0x180 [ 45.316036][ T3976] ____sys_sendmsg+0x31e/0x4a0 [ 45.316146][ T3976] ___sys_sendmsg+0x17b/0x1d0 [ 45.316202][ T3976] __x64_sys_sendmsg+0xd4/0x160 [ 45.316288][ T3976] x64_sys_call+0x17ba/0x3000 [ 45.316314][ T3976] do_syscall_64+0xca/0x2b0 [ 45.316354][ T3976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.316376][ T3976] RIP: 0033:0x7f96098bf749 [ 45.316392][ T3976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.316445][ T3976] RSP: 002b:00007f9608327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.316470][ T3976] RAX: ffffffffffffffda RBX: 00007f9609b15fa0 RCX: 00007f96098bf749 [ 45.316501][ T3976] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 45.316515][ T3976] RBP: 00007f9609943f91 R08: 0000000000000000 R09: 0000000000000000 [ 45.316531][ T3976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.316542][ T3976] R13: 00007f9609b16038 R14: 00007f9609b15fa0 R15: 00007ffd66ef6a28 [ 45.316627][ T3976] [ 45.316633][ T3976] memory: usage 307200kB, limit 307200kB, failcnt 200 [ 45.649306][ T3976] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 45.657255][ T3976] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 45.664564][ T3976] Memory cgroup stats for /syz2: [ 45.665440][ T3976] cache 0 [ 45.673461][ T3976] rss 0 [ 45.676325][ T3976] shmem 0 [ 45.679329][ T3976] mapped_file 0 [ 45.682826][ T3976] dirty 0 [ 45.685791][ T3976] writeback 0 [ 45.689156][ T3976] workingset_refault_anon 6 [ 45.693676][ T3976] workingset_refault_file 0 [ 45.698232][ T3976] swap 180224 [ 45.701544][ T3976] swapcached 16384 [ 45.705328][ T3976] pgpgin 26970 [ 45.708786][ T3976] pgpgout 26966 [ 45.712378][ T3976] pgfault 32040 [ 45.715858][ T3976] pgmajfault 6 [ 45.719283][ T3976] inactive_anon 16384 [ 45.723292][ T3976] active_anon 0 [ 45.726866][ T3976] inactive_file 0 [ 45.730607][ T3976] active_file 0 [ 45.734195][ T3976] unevictable 0 [ 45.737814][ T3976] hierarchical_memory_limit 314572800 [ 45.743292][ T3976] hierarchical_memsw_limit 9223372036854771712 [ 45.749501][ T3976] total_cache 0 [ 45.753056][ T3976] total_rss 0 [ 45.756372][ T3976] total_shmem 0 [ 45.759904][ T3976] total_mapped_file 0 [ 45.763904][ T3976] total_dirty 0 [ 45.767444][ T3976] total_writeback 0 [ 45.771275][ T3976] total_workingset_refault_anon 6 [ 45.776391][ T3976] total_workingset_refault_file 0 [ 45.781530][ T3976] total_swap 180224 [ 45.785357][ T3976] total_swapcached 16384 [ 45.789712][ T3976] total_pgpgin 26970 [ 45.793959][ T3976] total_pgpgout 26966 [ 45.798155][ T3976] total_pgfault 32040 [ 45.802158][ T3976] total_pgmajfault 6 [ 45.806099][ T3976] total_inactive_anon 16384 [ 45.810657][ T3976] total_active_anon 0 [ 45.814658][ T3976] total_inactive_file 0 [ 45.818969][ T3976] total_active_file 0 [ 45.823213][ T3976] total_unevictable 0 [ 45.827278][ T3976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.153,pid=3975,uid=0 [ 45.841860][ T3976] Memory cgroup out of memory: Killed process 3975 (syz.2.153) total-vm:96016kB, anon-rss:1136kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 45.930485][ T3992] set match dimension is over the limit! [ 46.015536][ T3998] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.036278][ T3976] syz.2.153 (3976) used greatest stack depth: 7096 bytes left [ 46.096651][ T3998] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.164182][ T3998] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.252165][ T3998] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.327249][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.339605][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.356260][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.371658][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.655324][ T4015] netlink: 76 bytes leftover after parsing attributes in process `syz.0.165'. [ 46.765241][ T4019] loop0: detected capacity change from 0 to 128 [ 47.119156][ T4013] loop1: detected capacity change from 0 to 128 [ 47.161943][ T4004] syz.2.162 (4004) used greatest stack depth: 6968 bytes left [ 47.221121][ T4036] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 47.274893][ T4013] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 47.287053][ T4036] SET target dimension over the limit! [ 47.301983][ T4013] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.630179][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.781202][ T4051] pimreg: entered allmulticast mode [ 47.921767][ T4054] pimreg: left allmulticast mode [ 48.246338][ T4072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 48.273344][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.280842][ T4072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.303751][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.311338][ T4072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.465665][ T4074] netlink: 'syz.0.187': attribute type 7 has an invalid length. [ 48.498934][ T4078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 48.508610][ T4078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 48.523633][ T4076] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 48.594876][ T4083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 48.647672][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 48.647687][ T29] audit: type=1326 audit(1767167125.267:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 48.682635][ T4083] netlink: 'syz.2.191': attribute type 5 has an invalid length. [ 48.690541][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 48.696837][ T29] audit: type=1326 audit(1767167125.297:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 48.722666][ T29] audit: type=1326 audit(1767167125.297:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 48.775211][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 48.831857][ T4091] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.889657][ T4095] veth2: entered promiscuous mode [ 48.894840][ T4095] veth2: entered allmulticast mode [ 48.925022][ T29] audit: type=1400 audit(1767167125.537:1221): avc: denied { create } for pid=4096 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 48.987436][ T4091] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.065819][ T4091] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.109848][ T29] audit: type=1326 audit(1767167125.727:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90438df749 code=0x7ffc0000 [ 49.153924][ T29] audit: type=1326 audit(1767167125.747:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f90438df749 code=0x7ffc0000 [ 49.177229][ T29] audit: type=1326 audit(1767167125.747:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90438df749 code=0x7ffc0000 [ 49.225146][ T4091] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.238398][ T4113] netlink: 'syz.1.201': attribute type 7 has an invalid length. [ 49.300902][ T4119] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 49.310518][ T385] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.336887][ T385] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.352044][ T4123] __nla_validate_parse: 1 callbacks suppressed [ 49.352060][ T4123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 49.396287][ T4119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.404623][ T4127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4127 comm=syz.2.205 [ 49.418678][ T4127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 49.429812][ T385] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.453686][ T385] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.482287][ T4123] bond1 (unregistering): Released all slaves [ 49.549240][ T4133] loop3: detected capacity change from 0 to 512 [ 49.589642][ T29] audit: type=1326 audit(1767167126.197:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49736bf749 code=0x7ffc0000 [ 49.613099][ T29] audit: type=1326 audit(1767167126.197:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49736bf749 code=0x7ffc0000 [ 49.636517][ T29] audit: type=1326 audit(1767167126.197:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4135 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49736bf749 code=0x7ffc0000 [ 49.733011][ T4145] syz.3.211 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.857599][ T4153] tipc: Started in network mode [ 49.862583][ T4153] tipc: Node identity 1a14675ce5e8, cluster identity 4711 [ 49.869872][ T4153] tipc: Enabled bearer , priority 0 [ 49.885229][ T4152] tipc: Resetting bearer [ 49.932750][ T4152] tipc: Disabling bearer [ 50.004831][ T4170] vlan2: entered allmulticast mode [ 50.020837][ T4170] dummy0: entered allmulticast mode [ 50.049953][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 50.361319][ T4178] loop2: detected capacity change from 0 to 128 [ 50.379678][ T4194] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.424714][ T4178] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.442121][ T4178] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.455761][ T4194] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.508493][ T4194] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.528272][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.550247][ T4194] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.626814][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.644004][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.658261][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.671065][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.738669][ T4207] loop1: detected capacity change from 0 to 1024 [ 50.747637][ T4207] EXT4-fs: Ignoring removed orlov option [ 50.763110][ T4207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.825097][ T4207] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 50.831683][ T4207] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.839400][ T4207] vhci_hcd vhci_hcd.0: Device attached [ 50.848267][ T4211] vhci_hcd: connection closed [ 50.848876][ T3735] vhci_hcd vhci_hcd.1: stop threads [ 50.858909][ T3735] vhci_hcd vhci_hcd.1: release socket [ 50.864390][ T3735] vhci_hcd vhci_hcd.1: disconnect device [ 51.028314][ T4225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.240'. [ 51.065442][ T4227] sch_fq: defrate 0 ignored. [ 51.097207][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 51.130303][ T4231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 51.425524][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.540613][ T4252] netlink: 'syz.3.251': attribute type 10 has an invalid length. [ 51.578540][ T4252] team0: Port device dummy0 added [ 51.591165][ T4254] netlink: 'syz.3.251': attribute type 10 has an invalid length. [ 51.625436][ T4254] team0: Port device dummy0 removed [ 51.644441][ T4254] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 51.780760][ T4256] tipc: Started in network mode [ 51.786185][ T4256] tipc: Node identity ac14142f, cluster identity 4711 [ 51.794185][ T4256] tipc: New replicast peer: 0.0.0.0 [ 51.799683][ T4256] tipc: Enabled bearer , priority 10 [ 51.936423][ T4238] syz.4.246 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 51.950742][ T4238] CPU: 0 UID: 0 PID: 4238 Comm: syz.4.246 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.950780][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.950796][ T4238] Call Trace: [ 51.950805][ T4238] [ 51.950815][ T4238] __dump_stack+0x1d/0x30 [ 51.950848][ T4238] dump_stack_lvl+0x95/0xd0 [ 51.950877][ T4238] dump_stack+0x15/0x1b [ 51.950905][ T4238] dump_header+0x81/0x240 [ 51.950992][ T4238] oom_kill_process+0x295/0x350 [ 51.951021][ T4238] out_of_memory+0x97b/0xb80 [ 51.951052][ T4238] try_charge_memcg+0x610/0xa10 [ 51.951158][ T4238] obj_cgroup_charge_pages+0xa6/0x150 [ 51.951221][ T4238] __memcg_kmem_charge_page+0x9f/0x170 [ 51.951265][ T4238] __alloc_frozen_pages_noprof+0x18f/0x360 [ 51.951361][ T4238] alloc_pages_mpol+0xb3/0x260 [ 51.951459][ T4238] alloc_pages_noprof+0x90/0x130 [ 51.951490][ T4238] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 51.951611][ T4238] __kvmalloc_node_noprof+0x492/0x6b0 [ 51.951638][ T4238] ? ip_set_alloc+0x24/0x30 [ 51.951668][ T4238] ? ip_set_alloc+0x24/0x30 [ 51.951778][ T4238] ? __kmalloc_cache_noprof+0x3e5/0x4c0 [ 51.951814][ T4238] ip_set_alloc+0x24/0x30 [ 51.951853][ T4238] hash_netiface_create+0x282/0x740 [ 51.951907][ T4238] ? __pfx_hash_netiface_create+0x10/0x10 [ 51.951980][ T4238] ip_set_create+0x3cc/0x970 [ 51.952084][ T4238] ? __nla_parse+0x40/0x60 [ 51.952195][ T4238] nfnetlink_rcv_msg+0x4c6/0x590 [ 51.952254][ T4238] netlink_rcv_skb+0x123/0x220 [ 51.952290][ T4238] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 51.952356][ T4238] nfnetlink_rcv+0x167/0x16c0 [ 51.952391][ T4238] ? kmem_cache_free+0xe3/0x3a0 [ 51.952425][ T4238] ? __kfree_skb+0x109/0x150 [ 51.952460][ T4238] ? nlmon_xmit+0x4f/0x60 [ 51.952535][ T4238] ? consume_skb+0x49/0x150 [ 51.952566][ T4238] ? nlmon_xmit+0x4f/0x60 [ 51.952588][ T4238] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 51.952618][ T4238] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 51.952680][ T4238] ? __dev_queue_xmit+0x148/0x1ee0 [ 51.952769][ T4238] ? ref_tracker_free+0x37d/0x3e0 [ 51.952847][ T4238] ? __netlink_deliver_tap+0x4dc/0x500 [ 51.952894][ T4238] netlink_unicast+0x5c0/0x690 [ 51.952934][ T4238] netlink_sendmsg+0x58b/0x6b0 [ 51.952985][ T4238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.953091][ T4238] __sock_sendmsg+0x145/0x180 [ 51.953120][ T4238] ____sys_sendmsg+0x31e/0x4a0 [ 51.953187][ T4238] ___sys_sendmsg+0x17b/0x1d0 [ 51.953238][ T4238] __x64_sys_sendmsg+0xd4/0x160 [ 51.953338][ T4238] x64_sys_call+0x17ba/0x3000 [ 51.953403][ T4238] do_syscall_64+0xca/0x2b0 [ 51.953442][ T4238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.953507][ T4238] RIP: 0033:0x7f49736bf749 [ 51.953528][ T4238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.953610][ T4238] RSP: 002b:00007f497211f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.953635][ T4238] RAX: ffffffffffffffda RBX: 00007f4973915fa0 RCX: 00007f49736bf749 [ 51.953651][ T4238] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 51.953667][ T4238] RBP: 00007f4973743f91 R08: 0000000000000000 R09: 0000000000000000 [ 51.953683][ T4238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.953697][ T4238] R13: 00007f4973916038 R14: 00007f4973915fa0 R15: 00007ffde4d004b8 [ 51.953722][ T4238] [ 51.953780][ T4238] memory: usage 307196kB, limit 307200kB, failcnt 272 [ 51.979069][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 51.980183][ T4238] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 51.980203][ T4238] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 51.987287][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 51.989246][ T4238] Memory cgroup stats for [ 52.010982][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.012346][ T4238] /syz4 [ 52.334776][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 52.347830][ T4238] : [ 52.350387][ T4238] cache 8192 [ 52.356121][ T4238] rss 0 [ 52.358961][ T4238] shmem 0 [ 52.361918][ T4238] mapped_file 0 [ 52.365415][ T4238] dirty 0 [ 52.368451][ T4238] writeback 4096 [ 52.372040][ T4238] workingset_refault_anon 15 [ 52.376659][ T4238] workingset_refault_file 7 [ 52.381280][ T4238] swap 184320 [ 52.384599][ T4238] swapcached 4096 [ 52.388332][ T4238] pgpgin 16513 [ 52.391745][ T4238] pgpgout 16509 [ 52.395277][ T4238] pgfault 20848 [ 52.398796][ T4238] pgmajfault 8 [ 52.399129][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.402192][ T4238] inactive_anon 0 [ 52.402203][ T4238] active_anon 0 [ 52.418131][ T4238] inactive_file 0 [ 52.421846][ T4238] active_file 12288 [ 52.425692][ T4238] unevictable 0 [ 52.429240][ T4238] hierarchical_memory_limit 314572800 [ 52.434633][ T4238] hierarchical_memsw_limit 9223372036854771712 [ 52.440843][ T4238] total_cache 8192 [ 52.444596][ T4238] total_rss 0 [ 52.447935][ T4238] total_shmem 0 [ 52.451463][ T4238] total_mapped_file 0 [ 52.455474][ T4238] total_dirty 0 [ 52.459027][ T4238] total_writeback 4096 [ 52.463110][ T4238] total_workingset_refault_anon 15 [ 52.466486][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.468317][ T4238] total_workingset_refault_file 7 [ 52.468330][ T4238] total_swap 184320 [ 52.468339][ T4238] total_swapcached 4096 [ 52.490150][ T4238] total_pgpgin 16513 [ 52.494085][ T4238] total_pgpgout 16509 [ 52.498120][ T4238] total_pgfault 20848 [ 52.502162][ T4238] total_pgmajfault 8 [ 52.506152][ T4238] total_inactive_anon 0 [ 52.510884][ T4238] total_active_anon 0 [ 52.514891][ T4238] total_inactive_file 0 [ 52.519175][ T4238] total_active_file 12288 [ 52.523542][ T4238] total_unevictable 0 [ 52.527580][ T4238] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.246,pid=4237,uid=0 [ 52.542217][ T4238] Memory cgroup out of memory: Killed process 4237 (syz.4.246) total-vm:95884kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 52.545282][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.599644][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.608920][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.618762][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.628105][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.640624][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.649948][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.659432][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.668894][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.678693][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.688282][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.709992][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.737127][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.768249][ T4266] 9pnet_fd: p9_fd_create_tcp (4266): problem connecting socket to 127.0.0.1 [ 52.909235][ T3496] tipc: Node number set to 2886997039 [ 53.266409][ T4301] loop2: detected capacity change from 0 to 512 [ 53.299873][ T4301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.326639][ T4301] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.341834][ T4301] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.270: corrupted inode contents [ 53.366599][ T4301] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.270: mark_inode_dirty error [ 53.382627][ T4301] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.270: corrupted inode contents [ 53.396951][ T4301] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.270: mark_inode_dirty error [ 53.436316][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.579027][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 53.589401][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 53.731117][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 53.731136][ T29] audit: type=1326 audit(1767167130.327:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6facc2005 code=0x7ffc0000 [ 53.789435][ T29] audit: type=1400 audit(1767167130.387:1721): avc: denied { read } for pid=4319 comm="syz.2.275" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.812149][ T29] audit: type=1400 audit(1767167130.387:1722): avc: denied { open } for pid=4319 comm="syz.2.275" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.847843][ T29] audit: type=1326 audit(1767167130.427:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6facc2005 code=0x7ffc0000 [ 53.993494][ T29] audit: type=1326 audit(1767167130.527:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc6fac8f749 code=0x7ffc0000 [ 54.020650][ T4328] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.111688][ T4325] loop0: detected capacity change from 0 to 8192 [ 54.202967][ T4299] Set syz1 is full, maxelem 65536 reached [ 54.352658][ T4344] loop1: detected capacity change from 0 to 1024 [ 54.359926][ T4344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.387508][ T4344] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.409326][ T4344] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 54.417987][ T4344] System zones: 0-1, 3-36 [ 54.423901][ T4344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.451519][ T29] audit: type=1400 audit(1767167131.067:1725): avc: denied { mounton } for pid=4343 comm="syz.1.282" path="/58/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.476743][ T29] audit: type=1400 audit(1767167131.097:1726): avc: denied { override_creds } for pid=4343 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 54.526553][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.591125][ T29] audit: type=1400 audit(1767167131.207:1727): avc: denied { setopt } for pid=4350 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.715319][ T29] audit: type=1400 audit(1767167131.327:1728): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.836287][ T4369] loop0: detected capacity change from 0 to 512 [ 54.851813][ T4374] netlink: 660 bytes leftover after parsing attributes in process `syz.3.292'. [ 54.867217][ T4369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.909935][ T4369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.954576][ T4369] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.084674][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.108576][ T4399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 55.144422][ T4399] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 55.170728][ T4405] loop3: detected capacity change from 0 to 1024 [ 55.201345][ T29] audit: type=1326 audit(1767167131.807:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96098bf749 code=0x7ffc0000 [ 55.227183][ T4405] EXT4-fs: inline encryption not supported [ 55.233175][ T4405] EXT4-fs: Ignoring removed i_version option [ 55.266085][ T4405] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.279995][ T4409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 55.298013][ T4405] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.300: lblock 2 mapped to illegal pblock 2 (length 1) [ 55.316941][ T4405] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.300: lblock 0 mapped to illegal pblock 48 (length 1) [ 55.331761][ T4405] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.300: Failed to acquire dquot type 0 [ 55.349178][ T4405] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 55.359080][ T4405] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.300: mark_inode_dirty error [ 55.370660][ T4405] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 55.381179][ T4405] EXT4-fs (loop3): 1 orphan inode deleted [ 55.387713][ T4405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.400051][ T385] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.417310][ T385] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 55.429844][ T4405] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.474541][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.555427][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 55.565315][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 55.634213][ T4426] loop4: detected capacity change from 0 to 512 [ 55.647401][ T4426] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.657775][ T4424] Cannot find add_set index 0 as target [ 55.669878][ T4426] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.309: Allocating blocks 41-42 which overlap fs metadata [ 55.684547][ T4426] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.309: Allocating blocks 41-42 which overlap fs metadata [ 55.699099][ T4426] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.309: Failed to acquire dquot type 1 [ 55.719607][ T4426] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 55.736480][ T4426] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.309: corrupted inode contents [ 55.750910][ T4426] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.309: mark_inode_dirty error [ 55.763068][ T4426] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.309: corrupted inode contents [ 55.781587][ T4426] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.309: mark_inode_dirty error [ 55.799565][ T4426] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.309: corrupted inode contents [ 55.817294][ T4426] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 55.837161][ T4426] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.309: corrupted inode contents [ 55.849597][ T4426] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.309: mark_inode_dirty error [ 55.862684][ T4426] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 55.872391][ T4426] EXT4-fs (loop4): 1 truncate cleaned up [ 55.878773][ T4426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.918089][ T4434] loop1: detected capacity change from 0 to 128 [ 55.950550][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.014516][ T4438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.312'. [ 56.131439][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 56.317666][ T4454] Driver unsupported XDP return value 0 on prog (id 256) dev N/A, expect packet loss! [ 56.458749][ T4436] Set syz1 is full, maxelem 65536 reached [ 57.066516][ T4485] loop1: detected capacity change from 0 to 1024 [ 57.077258][ T4485] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.332: bad orphan inode 134217728 [ 57.090083][ T4485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.169283][ T4485] ================================================================== [ 57.177430][ T4485] BUG: KCSAN: data-race in filemap_read / filemap_read [ 57.184338][ T4485] [ 57.186694][ T4485] write to 0xffff888104c918e8 of 8 bytes by task 4491 on cpu 1: [ 57.194355][ T4485] filemap_read+0x974/0xa00 [ 57.198925][ T4485] generic_file_read_iter+0x79/0x330 [ 57.204258][ T4485] ext4_file_read_iter+0x1cc/0x290 [ 57.209429][ T4485] copy_splice_read+0x442/0x660 [ 57.214322][ T4485] splice_direct_to_actor+0x290/0x680 [ 57.219734][ T4485] do_splice_direct+0xda/0x150 [ 57.224548][ T4485] do_sendfile+0x380/0x650 [ 57.229013][ T4485] __x64_sys_sendfile64+0x105/0x150 [ 57.234515][ T4485] x64_sys_call+0x2db1/0x3000 [ 57.239231][ T4485] do_syscall_64+0xca/0x2b0 [ 57.243795][ T4485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.249731][ T4485] [ 57.252088][ T4485] read to 0xffff888104c918e8 of 8 bytes by task 4485 on cpu 0: [ 57.259756][ T4485] filemap_read+0x6f/0xa00 [ 57.264220][ T4485] generic_file_read_iter+0x79/0x330 [ 57.269568][ T4485] ext4_file_read_iter+0x1cc/0x290 [ 57.274740][ T4485] copy_splice_read+0x442/0x660 [ 57.279639][ T4485] splice_direct_to_actor+0x290/0x680 [ 57.285060][ T4485] do_splice_direct+0xda/0x150 [ 57.289865][ T4485] do_sendfile+0x380/0x650 [ 57.294446][ T4485] __x64_sys_sendfile64+0x105/0x150 [ 57.299700][ T4485] x64_sys_call+0x2db1/0x3000 [ 57.304417][ T4485] do_syscall_64+0xca/0x2b0 [ 57.308995][ T4485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.314947][ T4485] [ 57.317311][ T4485] value changed: 0x00000000000000ef -> 0x00000000000000f0 [ 57.324534][ T4485] [ 57.326905][ T4485] Reported by Kernel Concurrency Sanitizer on: [ 57.333089][ T4485] CPU: 0 UID: 0 PID: 4485 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.342762][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.352878][ T4485] ================================================================== [ 57.641315][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.