last executing test programs: 1m6.514531441s ago: executing program 1 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m6.398413294s ago: executing program 1 (id=2497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000004c0)='kfree\x00', r1}, 0x23) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1m6.378991114s ago: executing program 1 (id=2498): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) 1m6.361298944s ago: executing program 1 (id=2499): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m6.344638774s ago: executing program 1 (id=2500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x2201, 0x800}}, 0x20}}, 0x40040) 1m6.285042625s ago: executing program 1 (id=2501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) 1m6.284870015s ago: executing program 32 (id=2501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) 1m3.172761721s ago: executing program 0 (id=2581): sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="0578e628a965644c94432d536b6ade", 0xf, 0x0, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000270001000000000006000000ac1e01", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m2.316326825s ago: executing program 0 (id=2604): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000052cf8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 1m2.191173066s ago: executing program 0 (id=2609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) close_range(r3, 0xffffffffffffffff, 0x0) 1m2.161603337s ago: executing program 0 (id=2611): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 1m2.135462957s ago: executing program 0 (id=2613): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m2.084482588s ago: executing program 0 (id=2616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x19c91, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0)={0x0, 0x989680}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1m2.067196718s ago: executing program 33 (id=2616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x19c91, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0)={0x0, 0x989680}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 30.278775795s ago: executing program 6 (id=3264): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$selinux_user(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x7c, r2, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1400000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc46}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 30.165313107s ago: executing program 6 (id=3271): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440)=0xcf7f, 0x4) lstat(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 29.879871502s ago: executing program 6 (id=3273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x10000, 0x0) unshare(0x2a020400) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) 29.673910284s ago: executing program 6 (id=3276): r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x553, &(0x7f0000000a40)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0) ioperm(0x3, 0x7, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0}) 29.602735095s ago: executing program 6 (id=3277): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f00000000c0)={[{@grpquota}, {@lazytime}]}, 0x1, 0x52b, &(0x7f00000006c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x800) chmod(&(0x7f0000000380)='./file0\x00', 0x100) 27.424965328s ago: executing program 6 (id=3312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x51ce8, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 27.413537298s ago: executing program 34 (id=3312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x51ce8, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.076493228s ago: executing program 3 (id=3788): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fchown(r0, 0x0, 0xee01) 1.865093452s ago: executing program 3 (id=3791): openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcff1", 0x28) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 1.633924735s ago: executing program 5 (id=3796): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x4701, 0x0, 0x8, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffd, 0x1}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c00000600048036"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) connect$netlink(0xffffffffffffffff, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) 1.604318366s ago: executing program 5 (id=3797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x100, {0x0, 0xa}, {0x3}, @const={0x0, {0x1, 0x8, 0x4, 0xa}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 989.789935ms ago: executing program 3 (id=3816): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a000000000085b5ca8d7c10277582b9", 0x20) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x54481) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prctl$PR_SET_MM(0x41555856, 0x4eee7b633b603c4a, &(0x7f0000ffe000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}, 0x18) setpgid(0x0, 0x0) 943.266806ms ago: executing program 3 (id=3818): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x1a1301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x4b5a9da54893e123, 0x17, 0x40, 0x2}, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 942.604215ms ago: executing program 7 (id=3829): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20002, 0x1}) 745.637918ms ago: executing program 5 (id=3821): socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x4000003, 0x294}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2400, &(0x7f0000000240)={0x0, 0x0, 0x10000, 0x2, 0x2be, 0x0, r0}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 744.473149ms ago: executing program 4 (id=3822): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) mlockall(0x3) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 690.910479ms ago: executing program 5 (id=3823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) remap_file_pages(&(0x7f0000422000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x20000) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40) inotify_rm_watch(r0, r1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) 526.157202ms ago: executing program 7 (id=3825): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 372.849064ms ago: executing program 7 (id=3826): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r1, r2) 337.513624ms ago: executing program 2 (id=3827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x200) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 308.504105ms ago: executing program 7 (id=3828): setuid(0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2e}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 300.744765ms ago: executing program 2 (id=3830): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r2, r4, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 270.804556ms ago: executing program 7 (id=3831): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000"], 0x28}}, 0x0) 225.455206ms ago: executing program 2 (id=3832): syz_open_dev$tty1(0xc, 0x4, 0x4) pipe(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f00000002c0)={0xa, 0x4e20, 0x401, @empty}, 0x1c, 0x0}, 0x40000) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 203.242697ms ago: executing program 7 (id=3833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x100, {0x0, 0xa}, {0x3}, @const={0x0, {0x1, 0x8, 0x4, 0xa}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 187.065237ms ago: executing program 2 (id=3834): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 186.928097ms ago: executing program 4 (id=3835): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 166.211107ms ago: executing program 5 (id=3836): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 160.583817ms ago: executing program 4 (id=3837): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 128.416948ms ago: executing program 5 (id=3838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000110000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r4, &(0x7f0000000180)=0x18a0000, 0x6399) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410e9) sendfile(r4, r3, 0x0, 0x100000000) 121.499188ms ago: executing program 4 (id=3839): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18df066960ba60b27a4a33fe21f9fb144b71ece5b7c8bc9eb9", 0xe7}, {&(0x7f0000001700)="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", 0xbf2}, {&(0x7f0000000600)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297ec7e9c", 0x46}, {&(0x7f0000002340)="574378aa32dce5029bb1eb28e82b175d0064314b84ca16d51695e4b59ecf60bdc6c7651186b73de87fdd7b0caaa9ea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a060355991726c13d9c4702d568b2c7d75dd1f442b61609d11f5eda57d90549a5158a2d52ef5938dcd3f288c293f980714fe87051f2410e9103d0217", 0x8d}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 96.407228ms ago: executing program 2 (id=3840): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 76.131689ms ago: executing program 3 (id=3841): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_0\x00'}) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 75.434269ms ago: executing program 2 (id=3842): unshare(0xa000200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000)=0x400, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x29c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080), &(0x7f0000000240)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x2) 22.28747ms ago: executing program 4 (id=3843): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r2, r4, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 21.71754ms ago: executing program 3 (id=3844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f00003ba000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000371000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000094f000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000273000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3845): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) kernel console output (not intermixed with test programs): red allmulticast mode [ 144.585369][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 144.759522][ T9907] loop5: detected capacity change from 0 to 512 [ 144.781881][ T9907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.794712][ T9907] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.831130][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.900031][ T9918] veth1_macvtap: left promiscuous mode [ 144.905644][ T9918] macsec0: entered promiscuous mode [ 144.910964][ T9918] macsec0: entered allmulticast mode [ 144.921126][ T9918] veth1_macvtap: entered promiscuous mode [ 144.926907][ T9918] veth1_macvtap: entered allmulticast mode [ 144.933284][ T9918] macsec0: left promiscuous mode [ 144.938457][ T9918] macsec0: left allmulticast mode [ 144.943569][ T9918] veth1_macvtap: left allmulticast mode [ 145.046723][ T9935] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 145.405966][ T9949] chnl_net:caif_netlink_parms(): no params data found [ 145.449280][ T9949] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.456487][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.464633][ T9949] bridge_slave_0: entered allmulticast mode [ 145.471382][ T9949] bridge_slave_0: entered promiscuous mode [ 145.478498][ T9949] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.485717][ T9949] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.493148][ T9949] bridge_slave_1: entered allmulticast mode [ 145.500005][ T9949] bridge_slave_1: entered promiscuous mode [ 145.518480][ T9949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.529516][ T9949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.550801][ T9949] team0: Port device team_slave_0 added [ 145.557704][ T9949] team0: Port device team_slave_1 added [ 145.575844][ T9949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.582909][ T9949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.608975][ T9949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.621739][ T9949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.628728][ T9949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.654866][ T9949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.685422][ T9949] hsr_slave_0: entered promiscuous mode [ 145.691815][ T9949] hsr_slave_1: entered promiscuous mode [ 145.698003][ T9949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.705685][ T9949] Cannot create hsr debugfs directory [ 145.722911][ T9966] loop5: detected capacity change from 0 to 164 [ 145.741127][ T9966] ISOFS: unable to read i-node block [ 145.746503][ T9966] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 145.757221][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 145.757237][ T29] audit: type=1400 audit(1750573378.502:3393): avc: denied { mount } for pid=9965 comm="syz.5.2619" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 145.807475][ T29] audit: type=1400 audit(1750573378.552:3394): avc: denied { unmount } for pid=9647 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 145.850230][ T9971] loop5: detected capacity change from 0 to 512 [ 145.860972][ T9971] EXT4-fs: Ignoring removed oldalloc option [ 145.878714][ T9971] EXT4-fs (loop5): 1 truncate cleaned up [ 145.885119][ T9971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.919457][ T29] audit: type=1400 audit(1750573378.662:3395): avc: denied { setattr } for pid=9970 comm="syz.5.2620" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.943803][ T9949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 145.971551][ T9949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 145.981475][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.000788][ T9949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 146.013966][ T9949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 146.027060][ T29] audit: type=1326 audit(1750573378.762:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.5.2622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d896de929 code=0x0 [ 146.050108][ T29] audit: type=1400 audit(1750573378.772:3397): avc: denied { read } for pid=9975 comm="syz.4.2623" path="socket:[27259]" dev="sockfs" ino=27259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.073566][ T29] audit: type=1326 audit(1750573378.772:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.4.2623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a311be929 code=0x0 [ 146.145701][ T9949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.160820][ T9949] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.171217][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.178328][ T1804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.199884][ T9949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.210377][ T9949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.224999][ T1804] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.232266][ T1804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.319366][ T9949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.458979][ T9949] veth0_vlan: entered promiscuous mode [ 146.470772][ T9949] veth1_vlan: entered promiscuous mode [ 146.530257][ T29] audit: type=1400 audit(1750573379.282:3399): avc: denied { wake_alarm } for pid=10007 comm="syz.3.2625" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.531983][ T9949] veth0_macvtap: entered promiscuous mode [ 146.578242][ T9949] veth1_macvtap: entered promiscuous mode [ 146.598027][ T9949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.612007][ T9949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.622468][ T9949] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.631375][ T9949] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.640275][ T9949] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.649172][ T9949] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.763565][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2630'. [ 146.796018][ T29] audit: type=1326 audit(1750573379.542:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 146.819859][ T29] audit: type=1326 audit(1750573379.542:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 146.863790][ T29] audit: type=1326 audit(1750573379.602:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 146.899284][T10024] loop6: detected capacity change from 0 to 8192 [ 146.915914][T10028] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 147.117983][T10034] wireguard1: entered promiscuous mode [ 147.124834][T10034] wireguard1: entered allmulticast mode [ 147.477479][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2648'. [ 147.802921][T10103] ip6gre1: entered allmulticast mode [ 148.023133][T10123] netlink: 'syz.4.2666': attribute type 4 has an invalid length. [ 148.038203][T10123] netlink: 'syz.4.2666': attribute type 4 has an invalid length. [ 148.095665][T10132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2670'. [ 148.939203][T10171] netlink: 'syz.5.2685': attribute type 4 has an invalid length. [ 149.005636][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'. [ 149.016388][T10171] netlink: 'syz.5.2685': attribute type 4 has an invalid length. [ 149.361106][T10196] loop5: detected capacity change from 0 to 8192 [ 149.404179][T10204] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2700'. [ 149.441284][T10203] syzkaller0: entered promiscuous mode [ 149.446997][T10203] syzkaller0: entered allmulticast mode [ 149.465419][T10209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2702'. [ 149.487974][T10207] loop5: detected capacity change from 0 to 512 [ 149.542616][T10207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.580100][T10207] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.654444][T10223] loop6: detected capacity change from 0 to 2048 [ 149.675642][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.800593][T10239] veth1_to_bond: entered allmulticast mode [ 149.823242][T10239] veth1_to_bond: entered promiscuous mode [ 149.838854][T10239] veth1_to_bond: left promiscuous mode [ 149.844526][T10239] veth1_to_bond: left allmulticast mode [ 150.031670][T10264] netlink: 'syz.6.2722': attribute type 1 has an invalid length. [ 150.031956][T10262] pim6reg1: entered promiscuous mode [ 150.044949][T10262] pim6reg1: entered allmulticast mode [ 150.077944][T10267] netlink: 'syz.4.2724': attribute type 10 has an invalid length. [ 150.086003][T10267] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2724'. [ 150.096997][T10264] veth1_macvtap: entered allmulticast mode [ 150.173906][T10267] team0: Port device geneve1 added [ 150.503772][T10292] atomic_op ffff888103477128 conn xmit_atomic 0000000000000000 [ 150.530552][T10294] loop5: detected capacity change from 0 to 256 [ 150.553942][T10294] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.615787][T10294] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.629867][T10296] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2737'. [ 150.659892][T10294] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.687693][T10294] FAT-fs (loop5): Directory bread(block 1285) failed [ 150.833843][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 150.833864][ T29] audit: type=1400 audit(1750573383.582:3581): avc: denied { shutdown } for pid=10303 comm="syz.2.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.902153][T10312] IPv4: Oversized IP packet from 127.202.26.0 [ 150.902306][T10308] loop5: detected capacity change from 0 to 512 [ 150.936017][T10308] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2742: invalid block [ 150.942452][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2748'. [ 150.949095][T10308] EXT4-fs (loop5): Remounting filesystem read-only [ 150.965581][T10308] EXT4-fs (loop5): 2 truncates cleaned up [ 150.971840][T10308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.003305][T10324] netlink: 'syz.3.2750': attribute type 1 has an invalid length. [ 151.011482][T10324] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2750'. [ 151.032095][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 151.057844][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.068026][T10328] netlink: 'syz.2.2752': attribute type 4 has an invalid length. [ 151.076042][ T29] audit: type=1400 audit(1750573383.812:3582): avc: denied { setopt } for pid=10323 comm="syz.3.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.124546][T10328] netlink: 'syz.2.2752': attribute type 4 has an invalid length. [ 151.140014][ T29] audit: type=1400 audit(1750573383.892:3583): avc: denied { write } for pid=10333 comm="syz.3.2755" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.175220][T10338] batman_adv: batadv0: Adding interface: dummy0 [ 151.181694][T10338] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.207169][ T29] audit: type=1400 audit(1750573383.892:3584): avc: denied { open } for pid=10333 comm="syz.3.2755" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.231890][T10338] batman_adv: batadv0: Interface activated: dummy0 [ 151.529679][T10363] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2762'. [ 151.813590][ T29] audit: type=1400 audit(1750573384.562:3585): avc: denied { mount } for pid=10372 comm="syz.5.2768" name="/" dev="ramfs" ino=28905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 151.883748][T10377] loop5: detected capacity change from 0 to 164 [ 151.902721][T10377] syz.5.2780: attempt to access beyond end of device [ 151.902721][T10377] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 151.923792][T10377] syz.5.2780: attempt to access beyond end of device [ 151.923792][T10377] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 151.941942][T10383] batman_adv: batadv0: Adding interface: dummy0 [ 151.948245][T10383] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.989386][T10383] batman_adv: batadv0: Interface activated: dummy0 [ 152.052984][ T29] audit: type=1326 audit(1750573384.802:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.6.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 152.076664][ T29] audit: type=1326 audit(1750573384.802:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.6.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 152.100563][ T29] audit: type=1326 audit(1750573384.802:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.6.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 152.124264][ T29] audit: type=1326 audit(1750573384.802:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.6.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 152.148029][ T29] audit: type=1326 audit(1750573384.802:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.6.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 152.224128][T10390] loop6: detected capacity change from 0 to 8192 [ 152.231690][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2775'. [ 152.314281][T10400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2781'. [ 152.327630][T10404] loop5: detected capacity change from 0 to 256 [ 152.336053][T10404] FAT-fs (loop5): bogus number of FAT sectors [ 152.342369][T10404] FAT-fs (loop5): Can't find a valid FAT filesystem [ 152.402039][T10411] SELinux: ebitmap: truncated map [ 152.407592][T10411] SELinux: failed to load policy [ 152.602761][T10430] vlan2: entered allmulticast mode [ 152.625974][T10430] dummy0: entered allmulticast mode [ 152.896173][T10448] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2800'. [ 153.027532][T10459] netlink: 'syz.5.2806': attribute type 10 has an invalid length. [ 153.036437][T10459] batman_adv: batadv0: Interface deactivated: dummy0 [ 153.045791][T10459] batman_adv: batadv0: Removing interface: dummy0 [ 153.057412][T10459] team0: Port device dummy0 added [ 153.068562][T10459] netlink: 'syz.5.2806': attribute type 10 has an invalid length. [ 153.077221][T10459] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 153.089287][T10459] team0: Failed to send options change via netlink (err -105) [ 153.096829][T10459] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 153.123978][T10459] team0: Port device dummy0 removed [ 153.134152][T10459] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.368683][T10478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10478 comm=syz.5.2813 [ 153.381633][T10478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10478 comm=syz.5.2813 [ 153.671700][T10493] loop4: detected capacity change from 0 to 512 [ 153.712807][T10493] EXT4-fs (loop4): 1 orphan inode deleted [ 153.719126][T10493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.732063][ T9101] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 153.762276][T10493] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.877195][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.942062][T10517] loop6: detected capacity change from 0 to 164 [ 153.952205][T10517] syz.6.2826: attempt to access beyond end of device [ 153.952205][T10517] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 153.966770][T10517] syz.6.2826: attempt to access beyond end of device [ 153.966770][T10517] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 154.105282][T10535] ip6gre1: entered allmulticast mode [ 154.116241][T10536] netlink: 'syz.2.2834': attribute type 10 has an invalid length. [ 154.147106][T10536] bridge0: port 1(dummy0) entered disabled state [ 154.165430][T10536] dummy0: left allmulticast mode [ 154.175696][T10536] dummy0: left promiscuous mode [ 154.181000][T10536] bridge0: port 1(dummy0) entered disabled state [ 154.197811][T10548] netlink: 'syz.2.2834': attribute type 10 has an invalid length. [ 154.208536][T10536] team0: Port device dummy0 added [ 154.216486][T10548] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 154.226678][T10548] team0: Failed to send options change via netlink (err -105) [ 154.235526][T10548] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 154.246387][T10548] team0: Port device dummy0 removed [ 154.260113][T10554] loop5: detected capacity change from 0 to 1024 [ 154.275695][T10554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.284980][T10554] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.313711][T10554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 154.322151][T10554] System zones: 0-1, 3-12 [ 154.328586][T10554] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.2841: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.343761][T10554] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2841: Failed to acquire dquot type 0 [ 154.345032][T10560] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 154.372931][T10554] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.2841: Freeing blocks not in datazone - block = 0, count = 4096 [ 154.397443][T10554] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2841: Invalid inode bitmap blk 0 in block_group 0 [ 154.410688][ T9099] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.427556][T10554] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 154.469335][T10554] EXT4-fs (loop5): 1 orphan inode deleted [ 154.477162][ T9099] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 154.496020][T10554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.536925][T10568] bond1: (slave bridge1): Releasing backup interface [ 154.930866][T10599] ref_ctr_offset mismatch. inode: 0xc71 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 155.044299][ T3403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3403 comm=kworker/0:4 [ 155.058954][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.069116][T10603] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 155.088232][T10605] SELinux: Context Ü is not valid (left unmapped). [ 155.627704][T10630] macsec0: entered promiscuous mode [ 155.712493][T10634] loop6: detected capacity change from 0 to 512 [ 155.724835][T10634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.761815][T10634] EXT4-fs error (device loop6): ext4_quota_enable:7120: comm syz.6.2877: Bad quota inum: 29696, type: 1 [ 155.783407][T10634] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 155.800042][T10634] EXT4-fs (loop6): mount failed [ 155.911643][T10645] loop5: detected capacity change from 0 to 2048 [ 155.941513][T10645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.014244][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 156.014261][ T29] audit: type=1400 audit(1750573388.762:3718): avc: denied { read } for pid=10653 comm="syz.6.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.015802][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2884'. [ 156.058176][T10652] tipc: Enabling of bearer rejected, already enabled [ 156.224876][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.346460][T10681] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 156.363374][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2897'. [ 156.554580][T10696] pim6reg1: entered promiscuous mode [ 156.560450][T10696] pim6reg1: entered allmulticast mode [ 156.593504][T10702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=10702 comm=syz.4.2903 [ 156.677446][ T29] audit: type=1326 audit(1750573389.422:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9226d9e929 code=0x0 [ 156.736692][ T29] audit: type=1326 audit(1750573389.482:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 156.760322][ T29] audit: type=1326 audit(1750573389.482:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 156.821600][ T29] audit: type=1326 audit(1750573389.542:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 156.845195][ T29] audit: type=1326 audit(1750573389.542:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 156.868807][ T29] audit: type=1326 audit(1750573389.542:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 156.903338][T10709] loop6: detected capacity change from 0 to 1024 [ 156.910687][ T29] audit: type=1326 audit(1750573389.642:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9226d9e929 code=0x7ffc0000 [ 156.930111][T10709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.934491][ T29] audit: type=1326 audit(1750573389.642:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9226d9e963 code=0x7ffc0000 [ 156.952979][T10709] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.966283][ T29] audit: type=1326 audit(1750573389.652:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9226d9d3df code=0x7ffc0000 [ 157.009924][T10709] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 157.018249][T10709] System zones: 0-1, 3-12 [ 157.032668][T10709] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #3: block 1: comm syz.6.2906: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.052568][T10709] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2906: Failed to acquire dquot type 0 [ 157.141646][T10709] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.2906: Freeing blocks not in datazone - block = 0, count = 4096 [ 157.174670][T10709] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2906: Invalid inode bitmap blk 0 in block_group 0 [ 157.202518][T10709] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 157.222479][T10709] EXT4-fs (loop6): 1 orphan inode deleted [ 157.235609][T10709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.321292][ T1578] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.346710][ T1578] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 157.435856][T10727] tipc: Started in network mode [ 157.440896][T10727] tipc: Node identity ac14140f, cluster identity 4711 [ 157.457393][T10727] tipc: New replicast peer: 0.0.255.255 [ 157.463254][T10727] tipc: Enabled bearer , priority 10 [ 157.549850][T10731] vhci_hcd: invalid port number 96 [ 157.555087][T10731] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 157.595435][ T9949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.620574][T10741] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 157.634568][T10740] IPVS: stopping master sync thread 10741 ... [ 157.716089][T10744] loop5: detected capacity change from 0 to 8192 [ 157.724989][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2921'. [ 158.041811][T10780] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2934'. [ 158.054265][T10778] loop4: detected capacity change from 0 to 1024 [ 158.077782][T10778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.090089][T10778] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.122385][T10778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 158.150155][T10778] System zones: 0-1, 3-12 [ 158.160375][T10778] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.2932: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.187685][T10778] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2932: Failed to acquire dquot type 0 [ 158.200205][T10778] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.2932: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.216127][T10778] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2932: Invalid inode bitmap blk 0 in block_group 0 [ 158.229151][ T9099] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.229323][T10778] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 158.253298][T10778] EXT4-fs (loop4): 1 orphan inode deleted [ 158.263029][T10778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.275687][ T9099] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 158.452716][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 158.488958][ T3403] tipc: Node number set to 2886997007 [ 158.588596][T10809] loop5: detected capacity change from 0 to 1024 [ 158.605786][T10809] EXT4-fs: Ignoring removed nobh option [ 158.611515][T10809] EXT4-fs: Ignoring removed nobh option [ 158.641640][T10809] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 158.669535][T10809] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: comm syz.5.2945: inode #4294967295: comm syz.5.2945: iget: illegal inode # [ 158.720113][T10809] EXT4-fs (loop5): no journal found [ 158.725416][T10809] EXT4-fs (loop5): can't get journal size [ 158.763812][T10809] EXT4-fs (loop5): failed to initialize system zone (-22) [ 158.787176][T10809] EXT4-fs (loop5): mount failed [ 158.825664][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.908787][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 158.924856][T10827] loop4: detected capacity change from 0 to 2048 [ 158.963030][T10827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.000237][T10827] random: crng reseeded on system resumption [ 159.151930][T10838] loop6: detected capacity change from 0 to 512 [ 159.192832][T10838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.258430][T10838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.333705][T10847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2961'. [ 159.343886][T10838] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.494029][T10838] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 159.539739][T10838] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 159.630931][T10838] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.659442][ T9099] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.669312][ T9099] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.694931][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.734955][T10856] netlink: 'syz.6.2968': attribute type 1 has an invalid length. [ 159.743044][T10856] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2968'. [ 159.775761][ T9099] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.785687][ T9099] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.825241][T10864] Cannot find add_set index 0 as target [ 159.870506][ T9099] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.880526][ T9099] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.994001][ T9099] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.003989][ T9099] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.110139][ T9099] bond1: left allmulticast mode [ 160.115092][ T9099] bond1: left promiscuous mode [ 160.120134][ T9099] bridge0: port 1(bond1) entered disabled state [ 160.259873][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2979'. [ 160.291100][ T9099] bond0 (unregistering): Released all slaves [ 160.301937][ T9099] bond1 (unregistering): Released all slaves [ 160.311798][ T9099] bond2 (unregistering): Released all slaves [ 160.320797][ T9099] bond3 (unregistering): Released all slaves [ 160.378076][T10857] chnl_net:caif_netlink_parms(): no params data found [ 160.397744][ T9099] tipc: Disabling bearer [ 160.403295][ T9099] tipc: Left network mode [ 160.543553][ T9099] hsr_slave_0: left promiscuous mode [ 160.566224][ T9099] hsr_slave_1: left promiscuous mode [ 160.589912][ T9099] veth1_vlan: left promiscuous mode [ 160.600354][ T9099] veth0_vlan: left promiscuous mode [ 160.608122][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2980'. [ 160.708042][T10857] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.715902][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.724591][T10857] bridge_slave_0: entered allmulticast mode [ 160.733173][T10857] bridge_slave_0: entered promiscuous mode [ 160.741409][T10857] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.749170][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.757930][T10857] bridge_slave_1: entered allmulticast mode [ 160.764992][T10857] bridge_slave_1: entered promiscuous mode [ 160.810817][T10857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.850633][T10857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.884863][T10905] loop5: detected capacity change from 0 to 8192 [ 160.899607][T10857] team0: Port device team_slave_0 added [ 160.906417][T10857] team0: Port device team_slave_1 added [ 160.924637][T10905] hub 9-0:1.0: USB hub found [ 160.934316][T10905] hub 9-0:1.0: 8 ports detected [ 160.950300][T10857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.957315][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.983539][T10857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.017905][T10913] loop4: detected capacity change from 0 to 1024 [ 161.042234][T10857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.049303][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.075487][T10857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.089065][T10913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.111983][T10907] sch_fq: defrate 2048 ignored. [ 161.121807][T10857] hsr_slave_0: entered promiscuous mode [ 161.128841][T10857] hsr_slave_1: entered promiscuous mode [ 161.135052][T10857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.143308][T10857] Cannot create hsr debugfs directory [ 161.144631][T10913] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2984: Allocating blocks 385-513 which overlap fs metadata [ 161.240389][T10913] EXT4-fs (loop4): pa ffff88810061f850: logic 16, phys. 129, len 24 [ 161.248657][T10913] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 161.282113][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.346389][T10929] netlink: 'syz.5.2989': attribute type 4 has an invalid length. [ 161.377160][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 161.377175][ T29] audit: type=1326 audit(1750573394.123:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.409692][ T29] audit: type=1326 audit(1750573394.163:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.433931][ T29] audit: type=1326 audit(1750573394.163:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.458005][ T29] audit: type=1326 audit(1750573394.163:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.495505][ T29] audit: type=1326 audit(1750573394.233:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.518940][ T29] audit: type=1326 audit(1750573394.233:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.542804][ T29] audit: type=1326 audit(1750573394.233:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.566516][ T29] audit: type=1326 audit(1750573394.243:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.590537][ T29] audit: type=1326 audit(1750573394.243:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.615399][ T29] audit: type=1326 audit(1750573394.243:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.5.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 161.619587][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2993'. [ 161.647895][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2993'. [ 161.703026][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2993'. [ 161.773389][T10857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 161.784143][T10857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 161.801111][T10857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 161.821632][T10857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 161.831565][T10952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.850181][T10952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.904727][T10963] netlink: 'syz.5.3002': attribute type 4 has an invalid length. [ 161.940804][T10857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.972168][T10857] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.985857][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.995281][ T1804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.023270][T10857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.038016][T10857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.055620][ T1804] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.065458][ T1804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.215645][T10857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.363420][T10857] veth0_vlan: entered promiscuous mode [ 162.395081][T10857] veth1_vlan: entered promiscuous mode [ 162.431890][T10857] veth0_macvtap: entered promiscuous mode [ 162.449601][T10857] veth1_macvtap: entered promiscuous mode [ 162.485614][T10857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.501774][T10857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.516005][T10857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.530453][T10857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.540005][T10857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.550324][T10857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.648447][T10987] netlink: 'syz.3.2965': attribute type 10 has an invalid length. [ 162.677622][T10987] team0: Port device dummy0 added [ 162.709830][T10987] netlink: 'syz.3.2965': attribute type 10 has an invalid length. [ 162.729453][T10987] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 162.759849][T10987] team0: Failed to send options change via netlink (err -105) [ 162.801775][T10987] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 162.850119][T10987] team0: Port device dummy0 removed [ 162.876704][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3009'. [ 162.880675][T10987] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 164.508037][T11046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3027'. [ 164.518252][T11046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3027'. [ 165.023093][T11064] tipc: Started in network mode [ 165.028304][T11064] tipc: Node identity 7ea604660288, cluster identity 4711 [ 165.035748][T11064] tipc: Enabled bearer , priority 0 [ 165.045492][T11063] tipc: Resetting bearer [ 165.076434][T11063] tipc: Disabling bearer [ 165.195708][T11074] xt_hashlimit: max too large, truncated to 1048576 [ 165.268913][T11080] netlink: 'syz.6.3042': attribute type 1 has an invalid length. [ 165.284916][T11080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.354217][T11080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.379558][T11080] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 165.411626][T11089] netlink: 'syz.4.3044': attribute type 7 has an invalid length. [ 165.419700][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3044'. [ 165.431382][T11080] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 165.455494][T11086] ip6erspan0: entered promiscuous mode [ 165.478483][T11086] bond1: (slave ip6erspan0): making interface the new active one [ 165.516034][T11086] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 165.763472][T11104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3050'. [ 165.772723][T11104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3050'. [ 165.839628][T11091] SELinux: failed to load policy [ 165.877394][T11109] loop4: detected capacity change from 0 to 512 [ 165.900436][T11109] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.975585][T11109] EXT4-fs (loop4): 1 truncate cleaned up [ 166.006054][T11109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.251215][T11186] xt_hashlimit: max too large, truncated to 1048576 [ 166.273910][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.462678][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3070'. [ 166.499951][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.519090][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.174682][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 167.174711][ T29] audit: type=1400 audit(1750573655.920:3925): avc: denied { relabelfrom } for pid=11225 comm="syz.3.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 167.201026][ T29] audit: type=1400 audit(1750573655.920:3926): avc: denied { relabelto } for pid=11225 comm="syz.3.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 167.223188][T11226] netlink: 'syz.3.3079': attribute type 13 has an invalid length. [ 167.270051][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.277369][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.349251][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.371469][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.408377][T11226] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.417564][T11226] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.426484][T11226] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.435590][T11226] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.635647][ T29] audit: type=1400 audit(1750573656.380:3927): avc: denied { ioctl } for pid=11243 comm="syz.4.3086" path="socket:[31344]" dev="sockfs" ino=31344 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.637083][T11244] pim6reg: entered allmulticast mode [ 167.693452][ T29] audit: type=1326 audit(1750573656.410:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.4.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a311be929 code=0x7ffc0000 [ 167.717228][ T29] audit: type=1326 audit(1750573656.410:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.4.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a311be929 code=0x7ffc0000 [ 167.729803][T11252] pim6reg: left allmulticast mode [ 167.740875][ T29] audit: type=1326 audit(1750573656.410:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.4.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a311be929 code=0x7ffc0000 [ 167.769509][ T29] audit: type=1326 audit(1750573656.410:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.4.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a311be929 code=0x7ffc0000 [ 167.793121][ T29] audit: type=1326 audit(1750573656.410:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.4.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a311be929 code=0x7ffc0000 [ 167.816731][ T29] audit: type=1326 audit(1750573656.410:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.4.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2a311be929 code=0x7ffc0000 [ 167.840408][ T29] audit: type=1326 audit(1750573656.410:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.4.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a311be929 code=0x7ffc0000 [ 167.929030][T11251] netlink: 'syz.3.3090': attribute type 3 has an invalid length. [ 168.094124][T11257] loop5: detected capacity change from 0 to 256 [ 168.111171][T11257] FAT-fs (loop5): bogus number of FAT sectors [ 168.117350][T11257] FAT-fs (loop5): Can't find a valid FAT filesystem [ 168.184545][T11259] loop5: detected capacity change from 0 to 512 [ 168.359505][T11259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.377461][T11259] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.581380][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.672508][T11282] loop5: detected capacity change from 0 to 512 [ 168.681636][T11282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.710923][T11282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.742390][T11282] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.761032][T11282] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 168.823962][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.968078][T11294] netlink: 'syz.3.3105': attribute type 4 has an invalid length. [ 169.017331][T11294] netlink: 'syz.3.3105': attribute type 4 has an invalid length. [ 169.301587][T11316] netlink: 'syz.3.3115': attribute type 10 has an invalid length. [ 169.339737][T11316] bond0: (slave dummy0): Releasing backup interface [ 169.367505][T11316] team0: Failed to send options change via netlink (err -105) [ 169.375184][T11316] team0: Port device dummy0 added [ 169.403136][T11322] netlink: 'syz.3.3115': attribute type 10 has an invalid length. [ 169.411544][T11322] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 169.412278][T11324] netlink: 'syz.4.3118': attribute type 1 has an invalid length. [ 169.451631][T11322] team0: Failed to send options change via netlink (err -105) [ 169.468749][T11322] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 169.477849][T11322] team0: Port device dummy0 removed [ 169.510644][T11322] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.545597][T11324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.564833][T11325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.590704][T11325] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 169.652642][T11325] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 169.711277][T11326] ip6erspan0: entered promiscuous mode [ 169.730340][T11326] bond0: (slave ip6erspan0): making interface the new active one [ 169.764497][T11326] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 170.132705][T11354] loop5: detected capacity change from 0 to 512 [ 170.147505][T11354] EXT4-fs: Ignoring removed nobh option [ 170.173959][T11354] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 170.189315][T11354] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3130: attempt to clear invalid blocks 2 len 1 [ 170.210026][T11354] EXT4-fs (loop5): Remounting filesystem read-only [ 170.237320][T11354] EXT4-fs (loop5): 1 truncate cleaned up [ 170.249350][T11354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.277493][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.512369][T11374] tipc: Started in network mode [ 170.517371][T11374] tipc: Node identity d2a3e5c757bb, cluster identity 4711 [ 170.524707][T11374] tipc: Enabled bearer , priority 0 [ 170.538296][T11375] loop6: detected capacity change from 0 to 2048 [ 170.547766][T11366] tipc: Resetting bearer [ 170.587007][T11366] tipc: Disabling bearer [ 170.601596][T11375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.634109][T11375] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.684667][T11375] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3139: bg 0: block 345: padding at end of block bitmap is not set [ 170.771120][ T9949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.795978][T11391] tipc: Enabled bearer , priority 0 [ 170.824322][T11386] tipc: Resetting bearer [ 170.890178][T11386] tipc: Disabling bearer [ 171.014821][T11404] loop6: detected capacity change from 0 to 512 [ 171.030523][T11404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.049479][T11404] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 171.073878][T11404] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.3149: invalid block [ 171.138651][T11404] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3149: invalid indirect mapped block 4294967295 (level 1) [ 171.154059][T11404] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3149: invalid indirect mapped block 4294967295 (level 1) [ 171.168946][T11404] EXT4-fs (loop6): 2 truncates cleaned up [ 171.177394][T11404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.217040][ T9949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.309816][T11416] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.3153'. [ 171.555893][T11426] loop4: detected capacity change from 0 to 1024 [ 171.597073][T11426] EXT4-fs: Ignoring removed nobh option [ 171.603416][T11426] EXT4-fs: Ignoring removed nobh option [ 171.683577][T11426] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 171.742117][T11426] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.3154: inode #4294967295: comm syz.4.3154: iget: illegal inode # [ 171.852053][T11426] EXT4-fs (loop4): no journal found [ 171.857344][T11426] EXT4-fs (loop4): can't get journal size [ 171.952889][T11426] EXT4-fs (loop4): failed to initialize system zone (-22) [ 172.022917][T11426] EXT4-fs (loop4): mount failed [ 172.073775][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3169'. [ 172.082792][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3169'. [ 172.161725][T11458] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.170723][T11458] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.179522][T11458] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.188299][T11458] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.219350][T11458] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.228305][T11458] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.237245][T11458] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.246242][T11458] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.488829][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 172.488849][ T29] audit: type=1400 audit(1750573661.230:4039): avc: denied { setattr } for pid=11462 comm="syz.6.3171" name="/" dev="configfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 172.839887][T11472] tipc: Enabled bearer , priority 0 [ 172.870676][T11471] tipc: Resetting bearer [ 172.896351][T11471] tipc: Disabling bearer [ 172.999260][T11474] loop5: detected capacity change from 0 to 2048 [ 173.021740][T11474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.062713][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.326841][T11488] 9pnet: p9_errstr2errno: server reported unknown error [ 173.413890][T11498] netlink: 'syz.6.3184': attribute type 27 has an invalid length. [ 173.464722][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.472062][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.485667][T11498] batman_adv: batadv0: Interface deactivated: dummy0 [ 173.542321][T11498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.555957][T11498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.610154][T11498] veth1_macvtap: left promiscuous mode [ 173.615722][T11498] veth1_macvtap: left allmulticast mode [ 173.640814][T11498] macsec0: left promiscuous mode [ 173.651355][T11498] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.660374][T11498] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.670075][T11498] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.679167][T11498] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.756547][T11498] ip6erspan0: left promiscuous mode [ 173.794411][T11503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.830397][T11503] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.843632][T11503] batman_adv: batadv0: Interface activated: dummy0 [ 173.868080][T11503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.025022][ T29] audit: type=1326 audit(1750573662.770:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.3.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 174.060583][ T29] audit: type=1326 audit(1750573662.770:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.3.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 174.084261][ T29] audit: type=1326 audit(1750573662.770:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.3.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 174.107989][ T29] audit: type=1326 audit(1750573662.770:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.3.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 174.131557][ T29] audit: type=1326 audit(1750573662.770:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.3.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 174.155280][ T29] audit: type=1326 audit(1750573662.770:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.3.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 174.178834][ T29] audit: type=1326 audit(1750573662.770:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.3.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 174.202566][ T29] audit: type=1326 audit(1750573662.770:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.3.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 174.226148][ T29] audit: type=1326 audit(1750573662.770:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.3.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 174.293424][T11547] loop6: detected capacity change from 0 to 512 [ 174.310335][T11547] EXT4-fs (loop6): orphan cleanup on readonly fs [ 174.321892][T11547] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3205: bg 0: block 248: padding at end of block bitmap is not set [ 174.337752][T11547] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3205: Failed to acquire dquot type 1 [ 174.350739][T11547] EXT4-fs (loop6): 1 truncate cleaned up [ 174.359525][T11547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.396256][T11547] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 174.429934][T11547] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 174.460972][ T9949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.698400][T11594] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.705770][T11594] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.771181][T11594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.789664][T11594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.878075][T11594] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.887158][T11594] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.892514][T11606] SELinux: failed to load policy [ 174.896234][T11594] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.910110][T11594] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.958608][T11594] ip6gre1: left allmulticast mode [ 174.971545][T11604] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3228'. [ 175.033922][ T8536] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 175.041548][ T8536] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 175.049154][ T8536] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 175.061911][ T8536] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 175.109165][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3234'. [ 175.331612][T11632] loop4: detected capacity change from 0 to 1024 [ 175.410593][T11634] loop6: detected capacity change from 0 to 1024 [ 175.425706][T11634] EXT4-fs: Ignoring removed nobh option [ 175.431456][T11634] EXT4-fs: Ignoring removed nobh option [ 175.443918][T11632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.460161][T11634] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 175.480320][T11634] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: comm syz.6.3235: inode #4294967295: comm syz.6.3235: iget: illegal inode # [ 175.497834][T11632] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3238: Allocating blocks 449-513 which overlap fs metadata [ 175.508258][T11634] EXT4-fs (loop6): no journal found [ 175.517040][T11634] EXT4-fs (loop6): can't get journal size [ 175.543808][T11634] EXT4-fs (loop6): failed to initialize system zone (-22) [ 175.547393][T11631] EXT4-fs (loop4): pa ffff88810061f850: logic 48, phys. 177, len 21 [ 175.558740][T11634] EXT4-fs (loop6): mount failed [ 175.559148][T11631] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 175.644302][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.831221][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3241'. [ 175.842849][T11644] ipvlan2: entered promiscuous mode [ 175.917199][T11623] syz.6.3235 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 175.931446][T11623] CPU: 0 UID: 0 PID: 11623 Comm: syz.6.3235 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 175.931473][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.931531][T11623] Call Trace: [ 175.931540][T11623] [ 175.931550][T11623] __dump_stack+0x1d/0x30 [ 175.931628][T11623] dump_stack_lvl+0xe8/0x140 [ 175.931687][T11623] dump_stack+0x15/0x1b [ 175.931703][T11623] dump_header+0x81/0x220 [ 175.931789][T11623] oom_kill_process+0x334/0x3f0 [ 175.931822][T11623] out_of_memory+0x979/0xb80 [ 175.931922][T11623] try_charge_memcg+0x5e6/0x9e0 [ 175.931951][T11623] obj_cgroup_charge_pages+0xa6/0x150 [ 175.932007][T11623] __memcg_kmem_charge_page+0x9f/0x170 [ 175.932094][T11623] __alloc_frozen_pages_noprof+0x188/0x360 [ 175.932132][T11623] alloc_pages_mpol+0xb3/0x250 [ 175.932163][T11623] alloc_pages_noprof+0x90/0x130 [ 175.932204][T11623] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 175.932276][T11623] __kvmalloc_node_noprof+0x30f/0x4e0 [ 175.932304][T11623] ? ip_set_alloc+0x1f/0x30 [ 175.932350][T11623] ? ip_set_alloc+0x1f/0x30 [ 175.932455][T11623] ? __kmalloc_cache_noprof+0x189/0x320 [ 175.932482][T11623] ip_set_alloc+0x1f/0x30 [ 175.932539][T11623] hash_netiface_create+0x282/0x740 [ 175.932576][T11623] ? __pfx_hash_netiface_create+0x10/0x10 [ 175.932643][T11623] ip_set_create+0x3c9/0x960 [ 175.932685][T11623] ? __nla_parse+0x40/0x60 [ 175.932704][T11623] nfnetlink_rcv_msg+0x4c3/0x590 [ 175.932750][T11623] ? selinux_capable+0x1f9/0x270 [ 175.932814][T11623] netlink_rcv_skb+0x120/0x220 [ 175.932858][T11623] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 175.932890][T11623] nfnetlink_rcv+0x16b/0x1690 [ 175.932972][T11623] ? __kfree_skb+0x109/0x150 [ 175.933001][T11623] ? nlmon_xmit+0x4f/0x60 [ 175.933019][T11623] ? consume_skb+0x49/0x150 [ 175.933118][T11623] ? nlmon_xmit+0x4f/0x60 [ 175.933137][T11623] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 175.933199][T11623] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 175.933234][T11623] ? __dev_queue_xmit+0x182/0x1fb0 [ 175.933267][T11623] ? xas_load+0x413/0x430 [ 175.933311][T11623] ? ref_tracker_free+0x37d/0x3e0 [ 175.933424][T11623] ? __netlink_deliver_tap+0x4dc/0x500 [ 175.933460][T11623] netlink_unicast+0x59e/0x670 [ 175.933570][T11623] netlink_sendmsg+0x58b/0x6b0 [ 175.933592][T11623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.933610][T11623] __sock_sendmsg+0x142/0x180 [ 175.933633][T11623] ____sys_sendmsg+0x31e/0x4e0 [ 175.933667][T11623] ___sys_sendmsg+0x17b/0x1d0 [ 175.933730][T11623] __x64_sys_sendmsg+0xd4/0x160 [ 175.933768][T11623] x64_sys_call+0x2999/0x2fb0 [ 175.933788][T11623] do_syscall_64+0xd2/0x200 [ 175.933842][T11623] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.933866][T11623] ? clear_bhb_loop+0x40/0x90 [ 175.933887][T11623] ? clear_bhb_loop+0x40/0x90 [ 175.933917][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.933969][T11623] RIP: 0033:0x7f9226d9e929 [ 175.933984][T11623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.934001][T11623] RSP: 002b:00007f9225407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.934036][T11623] RAX: ffffffffffffffda RBX: 00007f9226fc5fa0 RCX: 00007f9226d9e929 [ 175.934047][T11623] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 175.934058][T11623] RBP: 00007f9226e20b39 R08: 0000000000000000 R09: 0000000000000000 [ 175.934069][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.934080][T11623] R13: 0000000000000000 R14: 00007f9226fc5fa0 R15: 00007fffb178b7b8 [ 175.934122][T11623] [ 175.934128][T11623] memory: usage 307200kB, limit 307200kB, failcnt 78 [ 176.294977][T11623] memory+swap: usage 307548kB, limit 9007199254740988kB, failcnt 0 [ 176.302911][T11623] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 176.310215][T11623] Memory cgroup stats for /syz6: [ 176.310820][T11623] cache 0 [ 176.318810][T11623] rss 4096 [ 176.321862][T11623] shmem 0 [ 176.324830][T11623] mapped_file 0 [ 176.328305][T11623] dirty 0 [ 176.331372][T11623] writeback 0 [ 176.334792][T11623] workingset_refault_anon 1438 [ 176.339605][T11623] workingset_refault_file 0 [ 176.344176][T11623] swap 356352 [ 176.347500][T11623] swapcached 32768 [ 176.351312][T11623] pgpgin 51260 [ 176.354709][T11623] pgpgout 51252 [ 176.358453][T11623] pgfault 57755 [ 176.362235][T11623] pgmajfault 255 [ 176.365805][T11623] inactive_anon 32768 [ 176.369962][T11623] active_anon 0 [ 176.373452][T11623] inactive_file 0 [ 176.377117][T11623] active_file 0 [ 176.380639][T11623] unevictable 0 [ 176.384127][T11623] hierarchical_memory_limit 314572800 [ 176.389645][T11623] hierarchical_memsw_limit 9223372036854771712 [ 176.395844][T11623] total_cache 0 [ 176.399468][T11623] total_rss 4096 [ 176.403064][T11623] total_shmem 0 [ 176.406603][T11623] total_mapped_file 0 [ 176.410666][T11623] total_dirty 0 [ 176.414177][T11623] total_writeback 0 [ 176.418007][T11623] total_workingset_refault_anon 1438 [ 176.423541][T11623] total_workingset_refault_file 0 [ 176.428785][T11623] total_swap 356352 [ 176.432838][T11623] total_swapcached 32768 [ 176.437240][T11623] total_pgpgin 51260 [ 176.439808][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3246'. [ 176.441177][T11623] total_pgpgout 51252 [ 176.441186][T11623] total_pgfault 57755 [ 176.441247][T11623] total_pgmajfault 255 [ 176.461769][T11653] netlink: 'syz.2.3245': attribute type 2 has an invalid length. [ 176.462247][T11623] total_inactive_anon 32768 [ 176.469989][T11653] netlink: 'syz.2.3245': attribute type 1 has an invalid length. [ 176.474466][T11623] total_active_anon 0 [ 176.474478][T11623] total_inactive_file 0 [ 176.474530][T11623] total_active_file 0 [ 176.482342][T11653] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3245'. [ 176.486340][T11623] total_unevictable 0 [ 176.486351][T11623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6 [ 176.492067][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3246'. [ 176.494613][T11623] ,task=syz.6.3235,pid=11622,uid=0 [ 176.534241][T11623] Memory cgroup out of memory: Killed process 11622 (syz.6.3235) total-vm:95932kB, anon-rss:936kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 176.620443][T11660] loop5: detected capacity change from 0 to 164 [ 176.649759][T11660] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.674403][T11660] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.699255][T11660] Symlink component flag not implemented [ 176.704967][T11660] Symlink component flag not implemented [ 176.738774][T11660] Symlink component flag not implemented (7) [ 176.744889][T11660] Symlink component flag not implemented (116) [ 176.841610][T11672] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3254'. [ 176.877950][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'. [ 176.985792][T11690] tipc: Started in network mode [ 176.990973][T11690] tipc: Node identity 2, cluster identity 3142 [ 176.997233][T11690] tipc: Node number set to 2 [ 177.018168][T11690] tipc: Cannot configure node identity twice [ 177.407862][T11738] serio: Serial port ptm0 [ 177.594968][T11766] loop6: detected capacity change from 0 to 1024 [ 177.612960][T11766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.650561][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 177.650579][ T29] audit: type=1400 audit(1750573666.400:4096): avc: denied { rmdir } for pid=9949 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.700540][ T29] audit: type=1400 audit(1750573666.400:4097): avc: denied { unlink } for pid=9949 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 177.725452][T10380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.981619][ T29] audit: type=1326 audit(1750573666.730:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11819 comm="syz.5.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 178.005258][ T29] audit: type=1326 audit(1750573666.730:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11819 comm="syz.5.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 178.028923][ T29] audit: type=1326 audit(1750573666.730:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11819 comm="syz.5.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 178.052628][ T29] audit: type=1326 audit(1750573666.730:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11819 comm="syz.5.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 178.076460][ T29] audit: type=1326 audit(1750573666.730:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11819 comm="syz.5.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 178.101282][ T29] audit: type=1326 audit(1750573666.730:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11819 comm="syz.5.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 178.129518][ T29] audit: type=1326 audit(1750573666.840:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11819 comm="syz.5.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 178.156620][ T29] audit: type=1326 audit(1750573666.840:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11819 comm="syz.5.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 178.539777][T11854] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 178.551597][T11853] IPVS: stopping master sync thread 11854 ... [ 178.762589][T11870] tipc: New replicast peer: 0.0.255.255 [ 178.769065][T11870] tipc: Enabled bearer , priority 10 [ 178.788223][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3299'. [ 178.999183][T11889] syzkaller1: entered promiscuous mode [ 179.005700][T11889] syzkaller1: entered allmulticast mode [ 179.963904][T11914] loop5: detected capacity change from 0 to 512 [ 179.972159][T11914] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 179.989870][T11914] EXT4-fs (loop5): 1 truncate cleaned up [ 180.000076][T11914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.069503][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.099105][ T31] bridge_slave_1: left allmulticast mode [ 180.104911][ T31] bridge_slave_1: left promiscuous mode [ 180.111592][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.151909][ T31] bridge_slave_0: left allmulticast mode [ 180.157860][ T31] bridge_slave_0: left promiscuous mode [ 180.163768][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.194413][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3321'. [ 180.236824][ T31] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 180.430816][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.440684][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.449929][ T31] bond0 (unregistering): Released all slaves [ 180.458166][ T31] bond1 (unregistering): Released all slaves [ 180.488060][T11947] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 180.536030][ T31] tipc: Left network mode [ 180.604034][T11958] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.612442][T11958] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.620970][T11958] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.629638][T11958] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.642037][T11958] geneve2: entered promiscuous mode [ 180.647325][T11958] geneve2: entered allmulticast mode [ 180.662388][ T31] hsr_slave_0: left promiscuous mode [ 180.668307][ T31] hsr_slave_1: left promiscuous mode [ 180.674761][ T31] batman_adv: batadv0: Interface deactivated: dummy0 [ 180.681821][ T31] batman_adv: batadv0: Removing interface: dummy0 [ 180.688950][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.696824][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.741955][ T31] team0 (unregistering): Port device team_slave_1 removed [ 180.755564][ T31] team0 (unregistering): Port device team_slave_0 removed [ 180.875912][T11911] chnl_net:caif_netlink_parms(): no params data found [ 180.957950][T11911] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.965204][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.975881][T11911] bridge_slave_0: entered allmulticast mode [ 180.982892][T11911] bridge_slave_0: entered promiscuous mode [ 181.007699][T11911] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.015015][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.023866][T11911] bridge_slave_1: entered allmulticast mode [ 181.030632][T11911] bridge_slave_1: entered promiscuous mode [ 181.085629][T11911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.111842][T11911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.176474][T11911] team0: Port device team_slave_0 added [ 181.195833][T11911] team0: Port device team_slave_1 added [ 181.243540][T11911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.251157][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.280647][T11911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.293636][T11911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.301201][T11911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.328453][T11911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.345434][T11992] loop4: detected capacity change from 0 to 2048 [ 181.363776][T11992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.381294][T11911] hsr_slave_0: entered promiscuous mode [ 181.391572][T11911] hsr_slave_1: entered promiscuous mode [ 181.398458][T11911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.403288][T11992] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.3339: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 181.407183][T11911] Cannot create hsr debugfs directory [ 181.456155][T11996] xt_CT: No such helper "pptp" [ 181.472562][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.535892][T11911] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 181.546212][T11911] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 181.556150][T11911] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 181.566249][T11911] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 181.586697][T12007] $Hÿ: left promiscuous mode [ 181.591827][T12007] bond_slave_0: left promiscuous mode [ 181.597784][T12007] bond_slave_1: left promiscuous mode [ 181.604987][T12007] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 181.616352][T12007] dummy0: left promiscuous mode [ 181.623857][T12007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.695164][T11911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.720944][T11911] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.742192][T11149] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.750922][T11149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.773400][T11149] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.781433][T11149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.808206][T12021] loop4: detected capacity change from 0 to 512 [ 181.841194][T12021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 181.865966][T12021] ext4 filesystem being mounted at /695/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.916114][T12021] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #12: comm syz.4.3347: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 181.926252][T11911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.960161][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 182.083946][T12039] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 182.233859][T11911] veth0_vlan: entered promiscuous mode [ 182.260801][T11911] veth1_vlan: entered promiscuous mode [ 182.271959][T12057] loop4: detected capacity change from 0 to 1024 [ 182.293278][T11911] veth0_macvtap: entered promiscuous mode [ 182.295435][T12057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.312918][T11911] veth1_macvtap: entered promiscuous mode [ 182.338862][T12057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.339881][T11911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.389256][T11911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.405919][T11911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.414823][T11911] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.423736][T11911] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.432915][T11911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.457574][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.578609][T12072] xt_hashlimit: max too large, truncated to 1048576 [ 182.806906][ T9099] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.825052][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 182.825070][ T29] audit: type=1326 audit(1750573671.570:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 182.855766][ T29] audit: type=1326 audit(1750573671.570:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 182.926138][ T29] audit: type=1326 audit(1750573671.630:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 182.927261][ T9099] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.949918][ T29] audit: type=1326 audit(1750573671.630:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 182.949982][ T29] audit: type=1326 audit(1750573671.630:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.7.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 182.960454][T12101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.026270][T12101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.101346][ T9099] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.128647][ T29] audit: type=1326 audit(1750573671.870:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 183.158657][ T29] audit: type=1326 audit(1750573671.880:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 183.183170][ T29] audit: type=1326 audit(1750573671.880:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 183.209169][ T29] audit: type=1326 audit(1750573671.880:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 183.233157][ T29] audit: type=1326 audit(1750573671.880:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 183.290752][ T9099] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.326070][T12133] rdma_op ffff88811986ed80 conn xmit_rdma 0000000000000000 [ 183.351910][T12135] wg2: left promiscuous mode [ 183.356648][T12135] wg2: left allmulticast mode [ 183.370035][T12135] wg2: entered promiscuous mode [ 183.375010][T12135] wg2: entered allmulticast mode [ 183.391254][ T9099] dummy0: left allmulticast mode [ 183.396453][ T9099] bridge0: port 3(dummy0) entered disabled state [ 183.404070][ T9099] team0: left allmulticast mode [ 183.410201][ T9099] geneve1: left allmulticast mode [ 183.416645][ T9099] bridge0: port 2(team0) entered disabled state [ 183.425770][ T9099] bond3: left allmulticast mode [ 183.433931][ T9099] bond3: left promiscuous mode [ 183.440122][ T9099] bridge0: port 1(bond3) entered disabled state [ 183.515528][ T9099] geneve1 (unregistering): left promiscuous mode [ 183.523293][ T9099] team0: Port device geneve1 removed [ 183.720680][ T9099] bond0 (unregistering): Released all slaves [ 183.730326][ T9099] bond1 (unregistering): Released all slaves [ 183.744056][ T9099] bond2 (unregistering): Released all slaves [ 183.755685][ T9099] bond3 (unregistering): Released all slaves [ 183.838164][ T9099] veth1_macvtap: left promiscuous mode [ 183.845761][ T9099] veth0_macvtap: left promiscuous mode [ 183.856750][ T9099] veth1_vlan: left promiscuous mode [ 183.862781][ T9099] veth0_vlan: left promiscuous mode [ 184.028015][T12160] loop7: detected capacity change from 0 to 512 [ 184.050383][T12160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.099860][T12160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.118925][T12160] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.149041][T12160] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 184.227509][T11911] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.295142][ T9099] IPVS: stop unused estimator thread 0... [ 184.344340][T12184] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 184.463727][T12177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.480438][T12177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.727551][T12198] 9pnet_fd: Insufficient options for proto=fd [ 184.834821][T12203] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3415'. [ 185.323493][T12214] xt_hashlimit: size too large, truncated to 1048576 [ 185.595164][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3420'. [ 185.914754][T12231] loop7: detected capacity change from 0 to 164 [ 185.931797][T12231] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.001531][T12237] netlink: 'syz.7.3427': attribute type 10 has an invalid length. [ 186.051499][T12237] team0: Port device dummy0 added [ 186.083669][T12237] netlink: 'syz.7.3427': attribute type 10 has an invalid length. [ 186.109521][T12237] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 186.151000][T12237] team0: Failed to send options change via netlink (err -105) [ 186.169783][T12237] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 186.196700][T12237] team0: Port device dummy0 removed [ 186.216424][T12237] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.228947][T12243] batadv_slave_0: entered promiscuous mode [ 186.274722][T12251] loop4: detected capacity change from 0 to 1024 [ 186.283616][T12251] EXT4-fs: Ignoring removed orlov option [ 186.291723][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3429'. [ 186.305077][T12243] batadv_slave_0 (unregistering): left promiscuous mode [ 186.320971][T12243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.462142][T12251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.274235][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.421854][T12274] loop4: detected capacity change from 0 to 164 [ 187.449868][T12274] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 188.093004][T12301] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.150722][T12301] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.210533][T12301] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.267677][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 188.267696][ T29] audit: type=1326 audit(1750573677.010:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.314907][ T29] audit: type=1326 audit(1750573677.060:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.340856][ T29] audit: type=1326 audit(1750573677.060:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.369966][ T29] audit: type=1326 audit(1750573677.060:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.397604][ T29] audit: type=1326 audit(1750573677.060:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.428188][ T29] audit: type=1326 audit(1750573677.060:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.454938][ T29] audit: type=1326 audit(1750573677.060:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.480892][ T29] audit: type=1326 audit(1750573677.060:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.508266][ T29] audit: type=1326 audit(1750573677.060:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.536342][ T29] audit: type=1326 audit(1750573677.060:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.2.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a295e929 code=0x7ffc0000 [ 188.565948][T12301] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.627304][T12301] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.643403][T12301] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.673912][T12301] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.705208][T12301] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.769399][T12319] loop5: detected capacity change from 0 to 512 [ 188.792884][T12319] EXT4-fs (loop5): orphan cleanup on readonly fs [ 188.805355][T12322] netlink: 'syz.3.3458': attribute type 10 has an invalid length. [ 188.815823][T12319] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3457: bg 0: block 248: padding at end of block bitmap is not set [ 188.833682][T12319] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3457: Failed to acquire dquot type 1 [ 188.848209][T12322] bond0: (slave dummy0): Releasing backup interface [ 188.848736][T12319] EXT4-fs (loop5): 1 truncate cleaned up [ 188.860772][T12324] netlink: 'syz.3.3458': attribute type 10 has an invalid length. [ 188.879561][T12322] team0: Port device dummy0 added [ 188.887409][T12319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.903439][T12324] team0: Port device dummy0 removed [ 188.917646][T12319] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 188.927881][T12324] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.950609][T12319] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 188.999204][T12331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3460'. [ 189.015839][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.071764][T12334] loop5: detected capacity change from 0 to 1024 [ 189.149997][T12334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.214537][T12334] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3473: Allocating blocks 449-513 which overlap fs metadata [ 189.267735][T12333] EXT4-fs (loop5): pa ffff88810061f8c0: logic 48, phys. 177, len 21 [ 189.277681][T12333] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 189.332403][ T9647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.376683][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3468'. [ 189.406123][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3468'. [ 189.433028][T12353] loop5: detected capacity change from 0 to 2048 [ 189.465535][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3470'. [ 189.483903][T12357] netlink: 2564 bytes leftover after parsing attributes in process `syz.7.3471'. [ 189.490858][T12355] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.519178][T12353] loop5: p1 < > p4 [ 189.525353][T12353] loop5: p4 size 8388608 extends beyond EOD, truncated [ 189.530136][T12355] vlan2: entered allmulticast mode [ 189.540041][T12355] bond5: entered allmulticast mode [ 189.734011][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3480'. [ 189.745289][T12381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3480'. [ 190.340949][T12413] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3493'. [ 190.480108][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 190.491495][T12420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3495'. [ 190.504483][T12420] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.513858][T12420] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.525327][T12420] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.536323][T12420] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.547566][T12420] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.558110][T12420] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.569275][T12420] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.581812][T12420] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.616747][T12423] netlink: 'syz.5.3496': attribute type 10 has an invalid length. [ 190.628249][T12423] bond0: (slave dummy0): Releasing backup interface [ 190.638934][T12423] team0: Failed to send options change via netlink (err -105) [ 190.648032][T12423] team0: Port device dummy0 added [ 190.654672][T12424] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3507'. [ 190.672545][T12423] netlink: 'syz.5.3496': attribute type 10 has an invalid length. [ 190.683788][T12423] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.702592][T12423] team0: Failed to send options change via netlink (err -105) [ 190.712773][T12423] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 190.726764][T12423] team0: Port device dummy0 removed [ 190.737808][T12428] netlink: 'syz.2.3498': attribute type 10 has an invalid length. [ 190.743894][T12423] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.769803][T12426] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.788761][T12428] team0: Port device dummy0 added [ 190.794762][T12430] netlink: 'syz.4.3499': attribute type 29 has an invalid length. [ 190.798314][T12428] netlink: 'syz.2.3498': attribute type 10 has an invalid length. [ 190.815431][T12430] netlink: 'syz.4.3499': attribute type 29 has an invalid length. [ 190.830152][T12428] team0: Port device dummy0 removed [ 190.857419][T12426] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.903938][T12426] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.018602][T12426] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.109875][T12426] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.128046][T12426] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.139142][T12447] loop4: detected capacity change from 0 to 1024 [ 191.169612][T12426] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.200734][T12426] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.226037][T12447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.298225][T12447] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 191.320945][T12447] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 191.336680][T12447] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.336680][T12447] [ 191.351137][T12447] EXT4-fs (loop4): Total free blocks count 0 [ 191.361508][T12447] EXT4-fs (loop4): Free/Dirty block details [ 191.369080][T12447] EXT4-fs (loop4): free_blocks=68451041280 [ 191.377152][T12447] EXT4-fs (loop4): dirty_blocks=32 [ 191.384690][T12447] EXT4-fs (loop4): Block reservation details [ 191.393186][T12447] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 191.415910][T11134] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 191.460088][T12474] validate_nla: 4 callbacks suppressed [ 191.460104][T12474] netlink: 'syz.2.3516': attribute type 29 has an invalid length. [ 191.479928][T12474] netlink: 'syz.2.3516': attribute type 29 has an invalid length. [ 191.482825][T12476] netlink: 'syz.4.3517': attribute type 10 has an invalid length. [ 191.494004][T12474] netlink: 'syz.2.3516': attribute type 29 has an invalid length. [ 191.532591][T12476] team0: Port device dummy0 added [ 191.545528][T12474] netlink: 'syz.2.3516': attribute type 29 has an invalid length. [ 191.559679][T12476] netlink: 'syz.4.3517': attribute type 10 has an invalid length. [ 191.570293][T12476] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 191.589767][T12476] team0: Failed to send options change via netlink (err -105) [ 191.598251][T12476] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 191.608544][T12476] team0: Port device dummy0 removed [ 191.617064][T12476] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 191.783527][T12491] loop4: detected capacity change from 0 to 2048 [ 191.830150][T12491] loop4: p1 < > p4 [ 191.841023][T12491] loop4: p4 size 8388608 extends beyond EOD, truncated [ 191.958658][T12504] loop4: detected capacity change from 0 to 4096 [ 191.971115][T12504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.175077][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.009274][T12520] netlink: 'syz.2.3532': attribute type 10 has an invalid length. [ 193.020263][T12520] team0: Port device dummy0 added [ 193.042917][T12520] netlink: 'syz.2.3532': attribute type 10 has an invalid length. [ 193.052784][T12522] xt_hashlimit: size too large, truncated to 1048576 [ 193.089255][T12520] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.146896][T12520] team0: Failed to send options change via netlink (err -105) [ 193.208910][T12520] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.235575][T12520] team0: Port device dummy0 removed [ 193.244493][T12531] loop7: detected capacity change from 0 to 2048 [ 193.363186][T12531] loop7: p1 < > p4 [ 193.370643][T12531] loop7: p4 size 8388608 extends beyond EOD, truncated [ 193.528622][T12544] team1: entered promiscuous mode [ 193.549671][T12544] team1: entered allmulticast mode [ 193.614035][T12548] loop7: detected capacity change from 0 to 512 [ 193.634836][T12548] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 193.673824][T12548] EXT4-fs (loop7): 1 truncate cleaned up [ 193.690161][T12548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.790970][T12561] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.802563][T12561] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.916305][T12561] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.929821][T12561] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.003821][T12561] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.015636][T12561] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.091999][T12561] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.104398][T12561] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.186188][T12561] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.196496][T12561] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.227834][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 194.227850][ T29] audit: type=1400 audit(1750573682.970:4575): avc: denied { audit_write } for pid=12591 comm="syz.5.3559" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 194.261061][ T29] audit: type=1107 audit(1750573682.970:4576): pid=12591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 194.262368][T12561] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.287076][T12561] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.315577][T12597] xt_hashlimit: size too large, truncated to 1048576 [ 194.337502][T12561] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.350408][T12561] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.423190][T12561] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.435067][T12561] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.614816][T11911] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.627612][ T29] audit: type=1326 audit(1750573683.380:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.5.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 194.654935][T12612] __nla_validate_parse: 6 callbacks suppressed [ 194.654956][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3568'. [ 194.678853][ T29] audit: type=1326 audit(1750573683.420:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.5.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 194.710929][ T29] audit: type=1326 audit(1750573683.420:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.5.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 194.738616][ T29] audit: type=1326 audit(1750573683.420:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.5.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 194.773249][ T29] audit: type=1326 audit(1750573683.420:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.5.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 194.819189][ T29] audit: type=1326 audit(1750573683.570:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.5.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 194.851656][ T29] audit: type=1326 audit(1750573683.570:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.5.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 194.888635][ T29] audit: type=1326 audit(1750573683.610:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.5.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d896de929 code=0x7ffc0000 [ 194.964058][T12627] bridge: RTM_NEWNEIGH with invalid ether address [ 195.236933][T12642] loop4: detected capacity change from 0 to 512 [ 195.256130][T12642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.290007][T12642] EXT4-fs (loop4): 1 truncate cleaned up [ 195.300863][T12642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.336346][T12650] loop7: detected capacity change from 0 to 2048 [ 195.344482][T12648] xt_hashlimit: size too large, truncated to 1048576 [ 195.438102][T12650] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.540748][T12656] netlink: 'syz.3.3582': attribute type 27 has an invalid length. [ 195.573784][T11911] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.603497][T12656] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.615531][T12656] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.624653][T12656] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.634683][T12656] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.650971][T12656] geneve2: left promiscuous mode [ 195.657569][T12656] geneve2: left allmulticast mode [ 195.731421][T12657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.741452][T12657] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.753827][T12657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.943486][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3586'. [ 196.410729][T12694] netlink: 'syz.5.3599': attribute type 27 has an invalid length. [ 196.452364][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.508194][T12694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.546446][T12694] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.566188][T12694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.825228][T12715] loop4: detected capacity change from 0 to 512 [ 196.855905][T12715] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.923909][ T3307] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 197.024500][T12736] loop4: detected capacity change from 0 to 512 [ 197.032738][T12736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.054402][T12736] EXT4-fs (loop4): 1 truncate cleaned up [ 197.062329][T12736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.105506][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.145941][T12742] netlink: 'syz.5.3620': attribute type 10 has an invalid length. [ 197.163814][T12742] bond0: (slave dummy0): Releasing backup interface [ 197.180473][T12742] team0: Failed to send options change via netlink (err -105) [ 197.188533][T12742] team0: Port device dummy0 added [ 197.208892][T12745] netlink: 'syz.5.3620': attribute type 10 has an invalid length. [ 197.261062][T12745] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 197.274654][T12745] team0: Failed to send options change via netlink (err -105) [ 197.324814][T12745] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 197.334691][T12745] team0: Port device dummy0 removed [ 197.344626][T12745] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 197.369977][T12747] batadv_slave_0: entered promiscuous mode [ 197.481602][T12752] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.491815][T12752] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.501161][T12752] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.512175][T12752] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.526717][T12752] geneve2: entered promiscuous mode [ 197.533003][T12752] geneve2: entered allmulticast mode [ 197.831663][T12767] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3630'. [ 198.190834][T12797] loop4: detected capacity change from 0 to 128 [ 198.200118][T12797] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3639'. [ 199.058299][T12827] wg2: left promiscuous mode [ 199.063256][T12827] wg2: left allmulticast mode [ 199.071197][T12827] ipvlan0: left allmulticast mode [ 199.077870][T12827] veth0_vlan: left allmulticast mode [ 199.086067][T12827] wireguard0: left promiscuous mode [ 199.094000][T12827] wireguard0: left allmulticast mode [ 199.101644][T12827] ip6gre1: left allmulticast mode [ 199.195365][T12836] pim6reg1: entered promiscuous mode [ 199.201011][T12836] pim6reg1: entered allmulticast mode [ 199.272879][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 199.272898][ T29] audit: type=1326 audit(1750573688.020:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.7.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 199.312631][ T29] audit: type=1326 audit(1750573688.060:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.7.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 199.337945][ T29] audit: type=1326 audit(1750573688.060:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.7.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 199.363917][ T29] audit: type=1326 audit(1750573688.060:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.7.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 199.391642][ T29] audit: type=1326 audit(1750573688.060:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12842 comm="syz.7.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 199.715613][T12868] SELinux: failed to load policy [ 199.950212][T12894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3671'. [ 200.068524][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3680'. [ 200.078205][T12900] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3680'. [ 200.151637][T12907] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 200.160386][ T29] audit: type=1326 audit(1750573688.910:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.7.3683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x0 [ 200.505476][T12916] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.3686'. [ 200.515975][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3686'. [ 201.076936][ T29] audit: type=1326 audit(1750573689.820:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12935 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 201.108796][ T29] audit: type=1326 audit(1750573689.820:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12935 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 201.142462][ T29] audit: type=1326 audit(1750573689.820:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12935 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 201.231753][ T29] audit: type=1326 audit(1750573689.820:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12935 comm="syz.7.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fac58e929 code=0x7ffc0000 [ 201.313279][T12947] gtp0: entered promiscuous mode [ 201.533001][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.543479][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.558594][T12967] loop8: detected capacity change from 0 to 79 [ 201.619011][T12967] loop8: detected capacity change from 79 to 78 [ 201.681549][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3711'. [ 201.978824][T12989] syzkaller0: entered promiscuous mode [ 201.984572][T12989] syzkaller0: entered allmulticast mode [ 202.313284][T13002] batadv_slave_0: left promiscuous mode [ 202.333013][T13002] gtp0: left promiscuous mode [ 203.211029][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3748'. [ 203.241898][T13073] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 203.252189][T13070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.270923][T13077] vlan2: entered allmulticast mode [ 203.277230][T13077] bond1: entered allmulticast mode [ 203.924299][T13106] lo speed is unknown, defaulting to 1000 [ 203.934789][T13106] lo speed is unknown, defaulting to 1000 [ 203.946115][T13106] lo speed is unknown, defaulting to 1000 [ 203.967512][T13109] netlink: 'syz.4.3764': attribute type 1 has an invalid length. [ 203.976826][T13106] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 203.986172][T13109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.024125][T13109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.033171][T13109] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 204.046092][T13109] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 204.066740][T13106] lo speed is unknown, defaulting to 1000 [ 204.076496][T13106] lo speed is unknown, defaulting to 1000 [ 204.086949][T13106] lo speed is unknown, defaulting to 1000 [ 204.096601][T13106] lo speed is unknown, defaulting to 1000 [ 204.110144][T13106] lo speed is unknown, defaulting to 1000 [ 204.176383][T13116] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3766'. [ 204.631491][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 204.631511][ T29] audit: type=1400 audit(1750573693.380:4704): avc: denied { read } for pid=13132 comm="syz.7.3774" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.707191][ T29] audit: type=1400 audit(1750573693.380:4705): avc: denied { open } for pid=13132 comm="syz.7.3774" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.768731][ T29] audit: type=1326 audit(1750573693.490:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.2.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a295e929 code=0x7fc00000 [ 204.771424][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3776'. [ 204.853871][T13137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.881557][ T29] audit: type=1400 audit(1750573693.620:4707): avc: denied { read } for pid=13142 comm="syz.7.3779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.041760][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.073067][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.122143][T13158] ip6gre1: entered allmulticast mode [ 205.139446][T13141] lo speed is unknown, defaulting to 1000 [ 205.187420][ T29] audit: type=1326 audit(1750573693.930:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.3.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 205.214762][ T29] audit: type=1326 audit(1750573693.930:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.3.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 205.243421][ T29] audit: type=1326 audit(1750573693.930:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.3.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 205.270466][ T29] audit: type=1326 audit(1750573693.930:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.3.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 205.295526][ T29] audit: type=1326 audit(1750573693.930:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.3.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 205.324550][ T29] audit: type=1326 audit(1750573693.930:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13161 comm="syz.3.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170f08e929 code=0x7ffc0000 [ 205.519666][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3794'. [ 205.536460][T13175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.554640][T13175] vlan1: entered allmulticast mode [ 205.560535][T13175] bond3: entered allmulticast mode [ 205.665458][T13188] wg2: entered promiscuous mode [ 205.670938][T13188] wg2: entered allmulticast mode [ 205.711695][T13194] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.3797'. [ 205.723050][T13194] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3797'. [ 205.798640][T13200] netlink: 'syz.4.3803': attribute type 10 has an invalid length. [ 205.806633][T13200] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3803'. [ 205.816070][T13200] dummy0: entered promiscuous mode [ 205.823073][T13200] $Hÿ: (slave dummy0): Releasing backup interface [ 205.832340][T13200] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 206.035970][T13210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13210 comm=syz.2.3808 [ 206.092141][T13214] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.103103][T13214] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.160994][T13214] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.171092][T13214] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.221013][T13214] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.231208][T13214] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.270494][T13214] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.280471][T13214] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.333292][T13214] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.341622][T13214] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.354503][T13214] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.362889][T13214] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.391018][T13214] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.399394][T13214] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.413162][T13214] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.421838][T13214] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.995172][T13262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13262 comm=syz.7.3831 [ 207.107327][T13275] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.3833'. [ 207.116661][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3833'. [ 207.185960][T13284] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 207.199887][T13287] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3841'. [ 207.234795][T13286] ================================================================== [ 207.242963][T13286] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 207.251604][T13286] [ 207.253986][T13286] write to 0xffff8881195fe768 of 8 bytes by task 13290 on cpu 0: [ 207.261737][T13286] shmem_file_splice_read+0x470/0x600 [ 207.267141][T13286] splice_direct_to_actor+0x26f/0x680 [ 207.272553][T13286] do_splice_direct+0xda/0x150 [ 207.277364][T13286] do_sendfile+0x380/0x650 [ 207.281817][T13286] __x64_sys_sendfile64+0x105/0x150 [ 207.287041][T13286] x64_sys_call+0xb39/0x2fb0 [ 207.291672][T13286] do_syscall_64+0xd2/0x200 [ 207.296209][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.302134][T13286] [ 207.304567][T13286] write to 0xffff8881195fe768 of 8 bytes by task 13286 on cpu 1: [ 207.312301][T13286] shmem_file_splice_read+0x470/0x600 [ 207.317716][T13286] splice_direct_to_actor+0x26f/0x680 [ 207.323124][T13286] do_splice_direct+0xda/0x150 [ 207.327926][T13286] do_sendfile+0x380/0x650 [ 207.332364][T13286] __x64_sys_sendfile64+0x105/0x150 [ 207.337583][T13286] x64_sys_call+0xb39/0x2fb0 [ 207.342205][T13286] do_syscall_64+0xd2/0x200 [ 207.346743][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.352669][T13286] [ 207.355006][T13286] value changed: 0x0000000000019000 -> 0x000000000001f000 [ 207.362126][T13286] [ 207.364462][T13286] Reported by Kernel Concurrency Sanitizer on: [ 207.370637][T13286] CPU: 1 UID: 0 PID: 13286 Comm: syz.5.3838 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 207.383160][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.393367][T13286] ================================================================== [ 207.474841][T13295] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3845'. [ 207.484047][T13295] unsupported nla_type 65024