last executing test programs: 1m39.042544336s ago: executing program 2 (id=303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) socket(0x10, 0x3, 0x7) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000140)={[{@map_off}, {@map_acorn, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@session={'session', 0x3d, 0x27}}, {@session={'session', 0x3d, 0x62}}, {@norock, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nojoliet}, {@mode={'mode', 0x3d, 0x7fffffff}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x6a5, &(0x7f0000000840)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1m38.969652943s ago: executing program 2 (id=305): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000440)="5cdd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x311, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m38.663326243s ago: executing program 2 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) 1m38.193732559s ago: executing program 2 (id=311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "010100", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r0, &(0x7f0000001780)=[{&(0x7f00000006c0)="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"/3586, 0xffffff99}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x6) 1m37.824878105s ago: executing program 2 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m37.625550855s ago: executing program 2 (id=318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = io_uring_setup(0x7d98, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x1, 0x8105}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 1m22.583222355s ago: executing program 32 (id=318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = io_uring_setup(0x7d98, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x1, 0x8105}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 53.101415221s ago: executing program 4 (id=1171): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x6d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 53.061414155s ago: executing program 4 (id=1173): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f0000000640)='./bus\x00', 0x1a8) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000180)="2cd889f0253e14", 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 52.962115154s ago: executing program 4 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r1) 52.961550585s ago: executing program 4 (id=1175): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x249, &(0x7f0000000800)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lstat(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, 0x0, 0x0) 52.657649964s ago: executing program 4 (id=1179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 52.206965088s ago: executing program 33 (id=1196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 48.580506064s ago: executing program 3 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffdf000000002abd700004350000020001002000000080000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 48.497242232s ago: executing program 3 (id=1257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x9, 0x3, 0x0, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x0) 48.473165074s ago: executing program 3 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 48.250316806s ago: executing program 3 (id=1260): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x249, &(0x7f0000000800)="$eJzs3T9oJFUcB/DvzO56JrfIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyURIgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyO4nEZDWaXXfizecDk5nJvDe/N+x8324zuwEa60KSS0laSWaSdJIUhxvcXS0X9ndXpzavJb3eEz8Vg3bVfuWg3/kkK0keSrJRFnmpnSytP7Pzy9Zj97252Ln3/fWnpyZ6kft2d7Yf33vvyhsfXX5w6YuvfrhS5FK6f7qu8SuG/K9dJLf8F8XOiKJd9wj4J66+9uHX/dzfmuSeQf47KVO9eG8t3LDRyQPv/lXft3/88vZJjhUYv16v038PXOkBjVMm6aYoZ5NU22U5O1t9hv+mNV2+PL/w6syL84tzL9Q9UwHj0k22H/3k3Mfnj+T/+1aVf+B/YPp03fr5f/Lq2rf97b3WmMcEnE13VKt+/meeW74/8g+NI//QXPIPzSX/0FzyD80l/9Bc8g/Xsc7fH5Z/aC75h+aSf2iuw/kHAJqld67uJ5CButQ9/wAAAAAAAAAAAAAAAAAAAMetTm1eO1gmVfOzd5LdR5K0h9VvDX6POLlx8Hf656Lf7A9F1W0kz9414glG9EHNT1/f9F299T+/s976y3PJyutJLrbbx++/Yv/+O72bTzjeeX7EAv9ScWT/4acmW/+o39bqrX95K/m0P/9cHDb/lLltsB4+/3RP/orlE73y64gnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGJ+DwAA//8NTG1W") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lstat(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, 0x0, 0x0) 47.9005552s ago: executing program 3 (id=1264): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x5, 0x800, 0x0, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0xea13dac1233fa6b2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 47.703477919s ago: executing program 3 (id=1274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000840)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 47.641908935s ago: executing program 34 (id=1274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000840)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 1.552781568s ago: executing program 5 (id=2165): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\a\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) 1.517283712s ago: executing program 5 (id=2167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) 1.440064979s ago: executing program 6 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) r5 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.406534152s ago: executing program 1 (id=2175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0"]) 1.354345608s ago: executing program 5 (id=2176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1", 0x6c}], 0x1}, 0x20000090) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 1.354035798s ago: executing program 6 (id=2177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000002600)=ANY=[]) 1.33283515s ago: executing program 6 (id=2179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @local}, 0x10001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) 1.278144845s ago: executing program 6 (id=2181): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='B', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 1.277909034s ago: executing program 6 (id=2182): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x7) 1.267709756s ago: executing program 1 (id=2183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/uts\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) 1.142280118s ago: executing program 1 (id=2185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x9100, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 953.198867ms ago: executing program 1 (id=2189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4, r3}, 0x10) 909.149551ms ago: executing program 1 (id=2190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 846.354897ms ago: executing program 0 (id=2191): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 846.046307ms ago: executing program 0 (id=2192): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000bc0)=""/4096, 0x1000, 0x0, &(0x7f0000000480)=""/119, 0x77}}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) 839.280438ms ago: executing program 0 (id=2193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffe, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x6, 0x100000, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x149) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 781.931083ms ago: executing program 1 (id=2194): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'xfrm0\x00'}}, 0x1e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r3, 0x0) 650.313846ms ago: executing program 0 (id=2195): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 631.910278ms ago: executing program 0 (id=2196): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) symlinkat(0x0, 0xffffffffffffff9c, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 587.492472ms ago: executing program 7 (id=2197): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0x849b, 0x10100, 0xfffffffc, 0x234, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0xf503, 0x40, 0x0, 0x10}, &(0x7f0000000700)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 494.367972ms ago: executing program 5 (id=2198): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 490.229592ms ago: executing program 5 (id=2199): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 415.712969ms ago: executing program 5 (id=2200): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9b00000}, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='mm_page_alloc\x00', r4}, 0x10) 397.925191ms ago: executing program 6 (id=2201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ab4c000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x10, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 397.396001ms ago: executing program 7 (id=2202): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7}) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 331.883918ms ago: executing program 7 (id=2203): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 279.605883ms ago: executing program 7 (id=2204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002d00)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_U32_LINK={0x8, 0x3, 0x5}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0x0) 177.788063ms ago: executing program 7 (id=2205): bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="000000000000000048000096ec5be1eee47fc2fc658f000a", @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0xffffff00, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 92.088491ms ago: executing program 7 (id=2206): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x840e}, 0x4000, 0x0, 0x0, 0x1, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 0s ago: executing program 0 (id=2207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) kernel console output (not intermixed with test programs): acity change from 0 to 8192 [ 85.070489][ T3698] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.096860][ T3698] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.140256][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz.5.980'. [ 85.150531][ T6263] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 85.201309][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 85.201338][ T29] audit: type=1400 audit(1761449214.990:1988): avc: denied { write } for pid=6264 comm="syz.5.981" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.208270][ T6266] random: crng reseeded on system resumption [ 85.231366][ T29] audit: type=1400 audit(1761449214.990:1989): avc: denied { open } for pid=6264 comm="syz.5.981" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.554148][ T29] audit: type=1400 audit(1761449215.340:1990): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.593213][ T29] audit: type=1400 audit(1761449215.340:1991): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.617422][ T29] audit: type=1400 audit(1761449215.340:1992): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.643270][ T29] audit: type=1400 audit(1761449215.380:1993): avc: denied { prog_load } for pid=6279 comm="syz.3.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.662553][ T29] audit: type=1400 audit(1761449215.380:1994): avc: denied { bpf } for pid=6279 comm="syz.3.987" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.683306][ T29] audit: type=1400 audit(1761449215.380:1995): avc: denied { perfmon } for pid=6279 comm="syz.3.987" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.704276][ T29] audit: type=1400 audit(1761449215.380:1996): avc: denied { prog_run } for pid=6279 comm="syz.3.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.723723][ T29] audit: type=1400 audit(1761449215.470:1997): avc: denied { create } for pid=6283 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.989574][ T6295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.992'. [ 85.999628][ T6295] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 86.166606][ T6311] ip6gre1: entered allmulticast mode [ 86.413012][ T6323] syzkaller0: entered allmulticast mode [ 86.425319][ T6323] syzkaller0: entered promiscuous mode [ 86.441747][ T6323] syzkaller0 (unregistering): left allmulticast mode [ 86.448534][ T6323] syzkaller0 (unregistering): left promiscuous mode [ 86.619193][ T6331] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1007'. [ 86.730185][ T6339] SELinux: failed to load policy [ 87.056231][ T6358] tipc: Started in network mode [ 87.061204][ T6358] tipc: Node identity ea9b5f9d09d1, cluster identity 4711 [ 87.068622][ T6358] tipc: Enabled bearer , priority 0 [ 87.093895][ T3650] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.106983][ T6361] tipc: Disabling bearer [ 87.114118][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 87.140321][ T3650] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.190730][ T3650] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.206107][ T3650] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.412295][ T6367] loop0: detected capacity change from 0 to 8192 [ 87.556603][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1029'. [ 87.695315][ T6384] loop3: detected capacity change from 0 to 512 [ 87.736514][ T6386] tipc: Started in network mode [ 87.741434][ T6386] tipc: Node identity ac14140f, cluster identity 4711 [ 87.750452][ T6386] tipc: New replicast peer: 255.255.255.255 [ 87.756679][ T6386] tipc: Enabled bearer , priority 10 [ 87.778980][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.788183][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.851783][ T6394] syzkaller0: entered promiscuous mode [ 87.857790][ T6394] syzkaller0: entered allmulticast mode [ 87.885393][ T6397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6397 comm=syz.3.1039 [ 88.255654][ T6414] SELinux: failed to load policy [ 88.320938][ T6419] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1049'. [ 88.875949][ T10] tipc: Node number set to 2886997007 [ 89.040790][ T6424] loop0: detected capacity change from 0 to 2048 [ 89.058662][ T6424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.082314][ T6424] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1060: bg 0: block 234: padding at end of block bitmap is not set [ 89.116805][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.590852][ T6471] loop5: detected capacity change from 0 to 512 [ 89.598254][ T6471] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.611356][ T6471] EXT4-fs (loop5): 1 truncate cleaned up [ 89.617667][ T6471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.644278][ T5126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.169442][ T6515] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.279201][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 90.279218][ T29] audit: type=1326 audit(1761449220.070:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.315960][ T29] audit: type=1326 audit(1761449220.070:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.339553][ T29] audit: type=1326 audit(1761449220.070:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.363083][ T29] audit: type=1326 audit(1761449220.080:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.386532][ T29] audit: type=1326 audit(1761449220.080:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.423372][ T29] audit: type=1326 audit(1761449220.130:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.447069][ T29] audit: type=1326 audit(1761449220.130:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.470512][ T29] audit: type=1326 audit(1761449220.210:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.494291][ T29] audit: type=1326 audit(1761449220.210:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.517836][ T29] audit: type=1326 audit(1761449220.210:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385450efc9 code=0x7ffc0000 [ 90.562743][ T6524] pimreg: entered allmulticast mode [ 90.568693][ T6524] pimreg: left allmulticast mode [ 90.661332][ T6539] syzkaller0: entered allmulticast mode [ 90.668426][ T6539] syzkaller0 (unregistering): left allmulticast mode [ 90.886723][ T6551] macsec1: entered promiscuous mode [ 91.131277][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1101'. [ 91.172207][ T6565] syzkaller0: entered promiscuous mode [ 91.178088][ T6565] syzkaller0: entered allmulticast mode [ 91.203091][ T6569] tipc: Started in network mode [ 91.208098][ T6569] tipc: Node identity 2e0cf43cf3b5, cluster identity 4711 [ 91.215285][ T6569] tipc: Enabled bearer , priority 0 [ 91.240649][ T6575] loop5: detected capacity change from 0 to 128 [ 91.253825][ T6575] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 91.261815][ T6575] FAT-fs (loop5): Filesystem has been set read-only [ 91.268911][ T6575] bio_check_eod: 32 callbacks suppressed [ 91.268928][ T6575] syz.5.1108: attempt to access beyond end of device [ 91.268928][ T6575] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 91.288825][ T6575] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 91.296717][ T6575] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 91.305525][ T6577] syz.5.1108: attempt to access beyond end of device [ 91.305525][ T6577] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.319260][ T6577] syz.5.1108: attempt to access beyond end of device [ 91.319260][ T6577] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.332770][ T6575] syz.5.1108: attempt to access beyond end of device [ 91.332770][ T6575] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.346418][ T6577] syz.5.1108: attempt to access beyond end of device [ 91.346418][ T6577] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.347518][ T6569] tipc: Disabling bearer [ 91.360975][ T6577] syz.5.1108: attempt to access beyond end of device [ 91.360975][ T6577] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.379230][ T6577] syz.5.1108: attempt to access beyond end of device [ 91.379230][ T6577] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.393453][ T6575] syz.5.1108: attempt to access beyond end of device [ 91.393453][ T6575] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.407170][ T6577] syz.5.1108: attempt to access beyond end of device [ 91.407170][ T6577] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.424742][ T6575] syz.5.1108: attempt to access beyond end of device [ 91.424742][ T6575] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.658466][ T6605] loop3: detected capacity change from 0 to 128 [ 91.747492][ T6605] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.776219][ T6605] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.823594][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.833429][ T6615] 9pnet_fd: Insufficient options for proto=fd [ 92.024034][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 92.192506][ T6634] bond0: (slave dummy0): Releasing backup interface [ 92.214489][ T6634] bridge_slave_0: left allmulticast mode [ 92.221160][ T6634] bridge_slave_0: left promiscuous mode [ 92.229310][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'. [ 92.249148][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.277504][ T6634] bridge_slave_1: left allmulticast mode [ 92.284466][ T6634] bridge_slave_1: left promiscuous mode [ 92.294117][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.345389][ T6634] bond0: (slave bond_slave_0): Releasing backup interface [ 92.409828][ T6634] bond0: (slave bond_slave_1): Releasing backup interface [ 92.420759][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 92.449420][ T6634] team0: Port device team_slave_0 removed [ 92.470157][ T6634] team0: Port device team_slave_1 removed [ 92.479699][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.493918][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.513685][ T6634] batadv1: left allmulticast mode [ 92.519514][ T6634] batadv1: left promiscuous mode [ 92.527108][ T6634] bridge0: port 3(batadv1) entered disabled state [ 92.568147][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 92.749234][ T6674] loop1: detected capacity change from 0 to 1024 [ 92.756609][ T6674] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.771726][ T6674] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.797448][ T6674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.020979][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.255567][ T6698] delete_channel: no stack [ 93.337999][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 93.576633][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 93.591884][ T6729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1170'. [ 93.711960][ T6739] loop4: detected capacity change from 0 to 128 [ 93.719919][ T6739] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.732824][ T6739] ext4 filesystem being mounted at /278/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.826020][ T6739] loop4: detected capacity change from 128 to 0 [ 93.832733][ C1] I/O error, dev loop4, sector 38 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 93.842370][ T6741] EXT4-fs error (device loop4): ext4_read_inode_bitmap:203: comm syz.4.1175: Cannot read inode bitmap - block_group = 0, inode_bitmap = 19 [ 93.856971][ T6741] buffer_io_error: 18 callbacks suppressed [ 93.856988][ T6741] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 93.871590][ T6741] EXT4-fs (loop4): I/O error while writing superblock [ 93.888357][ T6739] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.4.1175: error -5 reading directory block [ 93.902645][ T6739] EXT4-fs error (device loop4): ext4_get_inode_loc:4970: inode #2: block 35: comm syz.4.1175: unable to read itable block [ 93.921645][ T6739] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 93.930321][ T6739] EXT4-fs (loop4): I/O error while writing superblock [ 93.937188][ T6739] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: IO failure [ 93.946148][ T6739] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 93.954573][ T6739] EXT4-fs (loop4): I/O error while writing superblock [ 93.961522][ T6739] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1175: mark_inode_dirty error [ 93.973273][ T6739] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 93.981766][ T6739] EXT4-fs (loop4): I/O error while writing superblock [ 94.000311][ T3319] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 94.064101][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 94.118682][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1185'. [ 94.189707][ T6763] netlink: 'syz.5.1187': attribute type 7 has an invalid length. [ 94.298134][ T3661] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4955: inode #12: block 36: comm kworker/u8:28: unable to read itable block [ 94.323301][ T3661] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 94.335865][ T3661] EXT4-fs (loop4): I/O error while writing superblock [ 94.352969][ T3661] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4955: inode #2: block 35: comm kworker/u8:28: unable to read itable block [ 94.379913][ T3661] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 94.388710][ T3661] EXT4-fs (loop4): I/O error while writing superblock [ 94.397207][ T3894] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.415317][ T3894] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 94.423881][ T3894] EXT4-fs (loop4): I/O error while writing superblock [ 94.555123][ T6790] netlink: 'syz.0.1198': attribute type 4 has an invalid length. [ 94.607344][ T6790] netlink: 'syz.0.1198': attribute type 4 has an invalid length. [ 94.685137][ T6804] loop3: detected capacity change from 0 to 2048 [ 94.724185][ T6809] loop5: detected capacity change from 0 to 1024 [ 94.738161][ T6809] EXT4-fs: Ignoring removed orlov option [ 94.744078][ T6809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.797080][ T6804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.830746][ T6809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.883425][ T3661] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 94.896565][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 94.918365][ T5126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.928157][ T3661] bridge1 (unregistering): left promiscuous mode [ 94.935201][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 94.951346][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.077660][ T3661] bond0 (unregistering): Released all slaves [ 95.086774][ T3661] bond1 (unregistering): Released all slaves [ 95.096629][ T3661] bond2 (unregistering): (slave batadv1): Releasing active interface [ 95.105759][ T3661] bond2 (unregistering): Released all slaves [ 95.154708][ T3661] tipc: Left network mode [ 95.159362][ T6787] chnl_net:caif_netlink_parms(): no params data found [ 95.175765][ T3661] hsr_slave_0: left promiscuous mode [ 95.181754][ T3661] hsr_slave_1: left promiscuous mode [ 95.302712][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.309911][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.317448][ T6787] bridge_slave_0: entered allmulticast mode [ 95.323960][ T6787] bridge_slave_0: entered promiscuous mode [ 95.331637][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.338803][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.346746][ T6787] bridge_slave_1: entered allmulticast mode [ 95.353330][ T6787] bridge_slave_1: entered promiscuous mode [ 95.363394][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 95.363410][ T29] audit: type=1400 audit(1761449225.150:2383): avc: denied { read write } for pid=6842 comm="syz.0.1214" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.393851][ T29] audit: type=1400 audit(1761449225.150:2384): avc: denied { open } for pid=6842 comm="syz.0.1214" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.427475][ T29] audit: type=1400 audit(1761449225.160:2385): avc: denied { ioctl } for pid=6842 comm="syz.0.1214" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.452985][ T29] audit: type=1326 audit(1761449225.210:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.1.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 95.476389][ T29] audit: type=1326 audit(1761449225.220:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.1.1213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x0 [ 95.508510][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.523345][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.549438][ T6787] team0: Port device team_slave_0 added [ 95.558658][ T6787] team0: Port device team_slave_1 added [ 95.580160][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.587170][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.613242][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.625173][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.632378][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.658473][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.684966][ T6787] hsr_slave_0: entered promiscuous mode [ 95.691496][ T6787] hsr_slave_1: entered promiscuous mode [ 95.697393][ T6787] debugfs: 'hsr0' already exists in 'hsr' [ 95.703123][ T6787] Cannot create hsr debugfs directory [ 95.772325][ T6787] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 95.781290][ T6787] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 95.789995][ T6787] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.816072][ T6787] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.835606][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.842771][ T6787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.850196][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.857295][ T6787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.891639][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.903789][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.912084][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.925655][ T6787] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.938317][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.945427][ T3644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.956009][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.963151][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.983925][ T6787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.994511][ T6787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.066564][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.209139][ T29] audit: type=1400 audit(1761449225.980:2388): avc: denied { relabelfrom } for pid=6876 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.229167][ T29] audit: type=1400 audit(1761449225.980:2389): avc: denied { relabelto } for pid=6876 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.286363][ T6787] veth0_vlan: entered promiscuous mode [ 96.294637][ T6787] veth1_vlan: entered promiscuous mode [ 96.319122][ T6787] veth0_macvtap: entered promiscuous mode [ 96.330470][ T6787] veth1_macvtap: entered promiscuous mode [ 96.344355][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.352244][ T29] audit: type=1400 audit(1761449226.140:2390): avc: denied { write } for pid=6885 comm="syz.1.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.374653][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.386194][ T3698] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.397992][ T3698] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.408186][ T29] audit: type=1326 audit(1761449226.160:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11721defc9 code=0x7ffc0000 [ 96.431699][ T29] audit: type=1326 audit(1761449226.160:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.0.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11721defc9 code=0x7ffc0000 [ 96.460209][ T3698] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.474476][ T3698] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.534732][ T6899] __nla_validate_parse: 6 callbacks suppressed [ 96.534845][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1227'. [ 96.594750][ T6905] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.649010][ T6905] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.709108][ T6905] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.749353][ T6905] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.805004][ T3690] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.817931][ T3690] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.843236][ T3690] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.862234][ T3690] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.512844][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 97.562019][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1245'. [ 97.851054][ T6962] netlink: 'syz.5.1250': attribute type 1 has an invalid length. [ 97.889091][ T6962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.913899][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1250'. [ 97.925231][ T6962] bond1 (unregistering): Released all slaves [ 98.135888][ T6976] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1256'. [ 98.295839][ T6982] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.350939][ T6982] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.417758][ T6982] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.467877][ T6982] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.492786][ T6985] loop3: detected capacity change from 0 to 128 [ 98.506362][ T6985] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.525023][ T6985] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.557074][ T3644] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.565756][ T3644] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.574108][ T3644] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.582484][ T3644] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.615861][ T6985] loop3: detected capacity change from 128 to 0 [ 98.622646][ T6990] EXT4-fs error (device loop3): ext4_read_inode_bitmap:203: comm syz.3.1260: Cannot read inode bitmap - block_group = 0, inode_bitmap = 19 [ 98.642504][ T6990] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 98.650928][ T6990] EXT4-fs (loop3): I/O error while writing superblock [ 98.660195][ T6985] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.3.1260: error -5 reading directory block [ 98.674746][ T6985] EXT4-fs error (device loop3): ext4_get_inode_loc:4970: inode #2: block 35: comm syz.3.1260: unable to read itable block [ 98.688026][ T6985] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 98.696825][ T6985] EXT4-fs (loop3): I/O error while writing superblock [ 98.703634][ T6985] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: IO failure [ 98.714190][ T6985] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 98.723579][ T6985] EXT4-fs (loop3): I/O error while writing superblock [ 98.726108][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 98.730522][ T6985] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.1260: mark_inode_dirty error [ 98.751156][ T6985] EXT4-fs (loop3): I/O error while writing superblock [ 98.752686][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 98.775985][ T3312] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 98.799473][ T3682] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4955: inode #12: block 36: comm kworker/u8:49: unable to read itable block [ 98.814894][ T3682] EXT4-fs (loop3): I/O error while writing superblock [ 98.825286][ T3682] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4955: inode #2: block 35: comm kworker/u8:49: unable to read itable block [ 98.839428][ T3682] EXT4-fs (loop3): I/O error while writing superblock [ 98.847020][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.857544][ T3312] EXT4-fs (loop3): I/O error while writing superblock [ 98.967841][ T3690] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.038002][ T3690] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.109570][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1279'. [ 99.127143][ T3690] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.207001][ T3690] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.226027][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1279'. [ 99.269846][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1280'. [ 99.294333][ T7038] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 99.299439][ T7040] netlink: 'syz.6.1290': attribute type 1 has an invalid length. [ 99.558405][ T7077] loop1: detected capacity change from 0 to 512 [ 99.565041][ T7077] EXT4-fs: Ignoring removed orlov option [ 99.572251][ T7077] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1296: inode has both inline data and extents flags [ 99.585798][ T7077] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1296: couldn't read orphan inode 15 (err -117) [ 99.599061][ T7077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.630607][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.683646][ T3690] bond0 (unregistering): Released all slaves [ 99.692850][ T3690] bond1 (unregistering): Released all slaves [ 99.701929][ T3690] bond2 (unregistering): Released all slaves [ 99.712894][ T7024] chnl_net:caif_netlink_parms(): no params data found [ 99.727825][ T7075] team1: entered promiscuous mode [ 99.732946][ T7075] team1: entered allmulticast mode [ 99.738854][ T7075] 8021q: adding VLAN 0 to HW filter on device team1 [ 99.754114][ T3690] tipc: Left network mode [ 99.768667][ T7081] loop1: detected capacity change from 0 to 512 [ 99.796410][ T7081] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1297: inode has both inline data and extents flags [ 99.816586][ T7081] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1297: couldn't read orphan inode 15 (err -117) [ 99.830641][ T7081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.873744][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.880935][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.888411][ T7024] bridge_slave_0: entered allmulticast mode [ 99.894809][ T7024] bridge_slave_0: entered promiscuous mode [ 99.902974][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.910147][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.917657][ T7024] bridge_slave_1: entered allmulticast mode [ 99.924135][ T7024] bridge_slave_1: entered promiscuous mode [ 99.946304][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.957244][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.994482][ T7024] team0: Port device team_slave_0 added [ 100.001347][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.001954][ T7024] team0: Port device team_slave_1 added [ 100.028774][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.035772][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.061843][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.073329][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.080387][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.106382][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.144675][ T7024] hsr_slave_0: entered promiscuous mode [ 100.152199][ T7024] hsr_slave_1: entered promiscuous mode [ 100.158172][ T7024] debugfs: 'hsr0' already exists in 'hsr' [ 100.163928][ T7024] Cannot create hsr debugfs directory [ 100.214673][ T3690] ------------[ cut here ]------------ [ 100.220263][ T3690] WARNING: CPU: 1 PID: 3690 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 100.230039][ T3690] Modules linked in: [ 100.234015][ T3690] CPU: 1 UID: 0 PID: 3690 Comm: kworker/u8:57 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.244083][ T3690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.254220][ T3690] Workqueue: netns cleanup_net [ 100.259168][ T3690] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 100.264849][ T3690] Code: 48 8d bb 70 0e 00 00 e8 e5 4b b7 fc 48 8b bb 70 0e 00 00 e8 99 f8 c3 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 98 f2 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 8a f2 9b fc 90 0f 0b 90 4c 89 f7 e8 ae [ 100.284526][ T3690] RSP: 0018:ffffc90000ec3c60 EFLAGS: 00010293 [ 100.290720][ T3690] RAX: ffffffff84bb5588 RBX: ffff88810c8c3000 RCX: ffff88811eef3180 [ 100.298850][ T3690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810c8c3e40 [ 100.307097][ T3690] RBP: ffffffff86c90e80 R08: 0001ffff8684802f R09: 0000000000000000 [ 100.315170][ T3690] R10: ffffc90000ec3be8 R11: 0001c90000ec3be8 R12: ffffffff86c90ea0 [ 100.323218][ T3690] R13: ffff88810c8c3028 R14: ffff88810c8c3e40 R15: ffff88810c8c3000 [ 100.331326][ T3690] FS: 0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 100.340336][ T3690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.346980][ T3690] CR2: 0000001b2d320ff8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 100.355186][ T3690] Call Trace: [ 100.358571][ T3690] [ 100.361663][ T3690] xfrm_net_exit+0x2d/0x60 [ 100.366245][ T3690] ops_undo_list+0x27b/0x410 [ 100.370960][ T3690] cleanup_net+0x2f4/0x4f0 [ 100.375492][ T3690] process_scheduled_works+0x4ce/0x9d0 [ 100.381154][ T3690] worker_thread+0x582/0x770 [ 100.385774][ T3690] kthread+0x489/0x510 [ 100.389939][ T3690] ? finish_task_switch+0xad/0x2b0 [ 100.395183][ T3690] ? __pfx_worker_thread+0x10/0x10 [ 100.400365][ T3690] ? __pfx_kthread+0x10/0x10 [ 100.405062][ T3690] ret_from_fork+0x122/0x1b0 [ 100.409813][ T3690] ? __pfx_kthread+0x10/0x10 [ 100.414444][ T3690] ret_from_fork_asm+0x1a/0x30 [ 100.419318][ T3690] [ 100.422396][ T3690] ---[ end trace 0000000000000000 ]--- [ 100.428759][ T3690] ------------[ cut here ]------------ [ 100.434233][ T3690] WARNING: CPU: 1 PID: 3690 at net/xfrm/xfrm_state.c:3313 xfrm_state_fini+0x1b9/0x1f0 [ 100.443995][ T3690] Modules linked in: [ 100.447977][ T3690] CPU: 1 UID: 0 PID: 3690 Comm: kworker/u8:57 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.459742][ T3690] Tainted: [W]=WARN [ 100.463603][ T3690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.473844][ T3690] Workqueue: netns cleanup_net [ 100.478688][ T3690] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 100.484441][ T3690] Code: 4b b7 fc 4d 8b 3e e9 06 ff ff ff e8 71 f2 9b fc 90 0f 0b 90 4c 89 f7 e8 95 4b b7 fc 4d 8b 3e e9 24 ff ff ff e8 58 f2 9b fc 90 <0f> 0b 90 4c 89 f7 e8 7c 4b b7 fc 4d 8b 3e e9 42 ff ff ff e8 3f f2 [ 100.504181][ T3690] RSP: 0018:ffffc90000ec3c60 EFLAGS: 00010293 [ 100.510310][ T3690] RAX: ffffffff84bb55c8 RBX: ffff88810c8c3000 RCX: ffff88811eef3180 [ 100.518335][ T3690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881189a48c0 [ 100.526400][ T3690] RBP: 0000000000000040 R08: 000188810c8c3e5f R09: 0000000000000000 [ 100.534407][ T3690] R10: ffff8881189a4940 R11: 00018881189a493f R12: ffffffff86c90ea0 [ 100.542516][ T3690] R13: ffff88810c8c3028 R14: ffff88810c8c3e58 R15: ffff8881189a48c0 [ 100.550753][ T3690] FS: 0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 100.559820][ T3690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.566509][ T3690] CR2: 0000001b2d320ff8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 100.574523][ T3690] Call Trace: [ 100.577878][ T3690] [ 100.580847][ T3690] xfrm_net_exit+0x2d/0x60 [ 100.585351][ T3690] ops_undo_list+0x27b/0x410 [ 100.590238][ T3690] cleanup_net+0x2f4/0x4f0 [ 100.594840][ T3690] process_scheduled_works+0x4ce/0x9d0 [ 100.600516][ T3690] worker_thread+0x582/0x770 [ 100.605237][ T3690] kthread+0x489/0x510 [ 100.609398][ T3690] ? finish_task_switch+0xad/0x2b0 [ 100.614560][ T3690] ? __pfx_worker_thread+0x10/0x10 [ 100.619735][ T3690] ? __pfx_kthread+0x10/0x10 [ 100.624491][ T3690] ret_from_fork+0x122/0x1b0 [ 100.629155][ T3690] ? __pfx_kthread+0x10/0x10 [ 100.633791][ T3690] ret_from_fork_asm+0x1a/0x30 [ 100.638696][ T3690] [ 100.641748][ T3690] ---[ end trace 0000000000000000 ]--- [ 100.648297][ T3690] ------------[ cut here ]------------ [ 100.653798][ T3690] WARNING: CPU: 1 PID: 3690 at net/xfrm/xfrm_state.c:3315 xfrm_state_fini+0x1d2/0x1f0 [ 100.663448][ T3690] Modules linked in: [ 100.667458][ T3690] CPU: 1 UID: 0 PID: 3690 Comm: kworker/u8:57 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.679109][ T3690] Tainted: [W]=WARN [ 100.683103][ T3690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.693280][ T3690] Workqueue: netns cleanup_net [ 100.698185][ T3690] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 100.703855][ T3690] Code: 4b b7 fc 4d 8b 3e e9 24 ff ff ff e8 58 f2 9b fc 90 0f 0b 90 4c 89 f7 e8 7c 4b b7 fc 4d 8b 3e e9 42 ff ff ff e8 3f f2 9b fc 90 <0f> 0b 90 4c 89 f7 e8 63 4b b7 fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 100.723625][ T3690] RSP: 0018:ffffc90000ec3c60 EFLAGS: 00010293 [ 100.729761][ T3690] RAX: ffffffff84bb55e1 RBX: ffff88810c8c3000 RCX: ffff88811eef3180 [ 100.737798][ T3690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881189a4880 [ 100.745907][ T3690] RBP: 0000000000000040 R08: 000188810c8c3e57 R09: 0000000000000000 [ 100.754002][ T3690] R10: ffff8881189a4900 R11: 00018881189a48ff R12: ffffffff86c90ea0 [ 100.762231][ T3690] R13: ffff88810c8c3028 R14: ffff88810c8c3e50 R15: ffff8881189a4880 [ 100.770265][ T3690] FS: 0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 100.779291][ T3690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.786153][ T3690] CR2: 0000001b2d320ff8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 100.794223][ T3690] Call Trace: [ 100.797642][ T3690] [ 100.800673][ T3690] xfrm_net_exit+0x2d/0x60 [ 100.805137][ T3690] ops_undo_list+0x27b/0x410 [ 100.809836][ T3690] cleanup_net+0x2f4/0x4f0 [ 100.814301][ T3690] process_scheduled_works+0x4ce/0x9d0 [ 100.819920][ T3690] worker_thread+0x582/0x770 [ 100.824550][ T3690] kthread+0x489/0x510 [ 100.828765][ T3690] ? finish_task_switch+0xad/0x2b0 [ 100.833971][ T3690] ? __pfx_worker_thread+0x10/0x10 [ 100.839243][ T3690] ? __pfx_kthread+0x10/0x10 [ 100.843892][ T3690] ret_from_fork+0x122/0x1b0 [ 100.848576][ T3690] ? __pfx_kthread+0x10/0x10 [ 100.853206][ T3690] ret_from_fork_asm+0x1a/0x30 [ 100.858115][ T3690] [ 100.861178][ T3690] ---[ end trace 0000000000000000 ]--- [ 100.900911][ T7116] loop5: detected capacity change from 0 to 512 [ 100.971296][ T7024] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 100.990523][ T7024] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 101.009986][ T7024] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 101.049574][ T7024] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 101.080193][ T7126] bridge: RTM_NEWNEIGH with invalid ether address [ 101.144051][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.160139][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.170100][ T7141] loop5: detected capacity change from 0 to 1764 [ 101.191402][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.198518][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.213453][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 101.213464][ T29] audit: type=1400 audit(1761449231.000:2511): avc: denied { mount } for pid=7140 comm="syz.5.1317" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 101.249621][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.256747][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.303365][ T29] audit: type=1400 audit(1761449231.080:2512): avc: denied { unmount } for pid=5126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 101.346462][ T7148] team0: Port device team_slave_0 removed [ 101.444751][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.505851][ T29] audit: type=1400 audit(1761449231.290:2513): avc: denied { audit_write } for pid=7165 comm="syz.6.1325" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.527353][ T29] audit: type=1107 audit(1761449231.290:2514): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ä' [ 101.713945][ T7024] veth0_vlan: entered promiscuous mode [ 101.722636][ T7024] veth1_vlan: entered promiscuous mode [ 101.741062][ T7024] veth0_macvtap: entered promiscuous mode [ 101.749410][ T7024] veth1_macvtap: entered promiscuous mode [ 101.806695][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.819141][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.831166][ T3644] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.842920][ T3644] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.868520][ T3644] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.879721][ T3661] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.948053][ T7191] loop7: detected capacity change from 0 to 512 [ 101.965932][ T7191] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 102.061489][ T29] audit: type=1326 audit(1761449231.850:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 102.084982][ T29] audit: type=1326 audit(1761449231.850:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 102.110184][ T29] audit: type=1326 audit(1761449231.900:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 102.133218][ T29] audit: type=1326 audit(1761449231.900:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 102.156203][ T29] audit: type=1326 audit(1761449231.900:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 102.179273][ T29] audit: type=1326 audit(1761449231.900:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 102.369825][ T7219] wireguard0: entered promiscuous mode [ 102.375361][ T7219] wireguard0: entered allmulticast mode [ 102.547200][ T7228] bridge0: Device is already in use. [ 102.754878][ T7242] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 102.768300][ T7242] bond2: entered promiscuous mode [ 102.773409][ T7242] bond2: entered allmulticast mode [ 102.778829][ T7242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.798064][ T7242] bond2: (slave gretap1): making interface the new active one [ 102.805609][ T7242] gretap1: entered promiscuous mode [ 102.811123][ T7242] gretap1: entered allmulticast mode [ 102.817411][ T7242] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 102.833904][ T7242] vlan2: entered allmulticast mode [ 102.844514][ T7242] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 102.952679][ T7249] netlink: 'syz.7.1353': attribute type 7 has an invalid length. [ 102.960568][ T7249] __nla_validate_parse: 2 callbacks suppressed [ 102.960587][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1353'. [ 103.028102][ T7253] loop7: detected capacity change from 0 to 128 [ 103.038687][ T7253] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 103.061478][ T3661] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 103.141446][ T7263] wg2: entered promiscuous mode [ 103.146442][ T7263] wg2: entered allmulticast mode [ 103.219104][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1360'. [ 103.228997][ T7268] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 103.527887][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 103.580519][ T7303] loop7: detected capacity change from 0 to 2048 [ 103.600706][ T7303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.806674][ T7326] loop5: detected capacity change from 0 to 2048 [ 103.832497][ T7326] loop5: p2 p3 p7 [ 103.842467][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.962893][ T7331] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.060683][ T7345] veth4: entered promiscuous mode [ 104.065869][ T7345] veth4: entered allmulticast mode [ 104.287928][ T7361] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.325222][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 104.378637][ T7361] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.443611][ T7361] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.507899][ T7361] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.608511][ T3661] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.620862][ T3661] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.632431][ T3661] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.648870][ T3661] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.705790][ T7383] netlink: 'syz.6.1406': attribute type 10 has an invalid length. [ 105.043118][ T7401] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.120227][ T7401] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.431376][ T7401] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.499610][ T7401] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.564851][ T3644] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.584827][ T3644] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.625940][ T3644] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.644073][ T3644] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.745602][ T7426] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1424'. [ 105.771683][ T7331] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.783847][ T7426] netlink: 'syz.6.1424': attribute type 10 has an invalid length. [ 105.803312][ T7426] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.815736][ T7331] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.853219][ T7432] x_tables: ip_tables: udp match: only valid for protocol 17 [ 105.874381][ T7331] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.961502][ T3690] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.991720][ T3644] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.003739][ T7443] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 106.017916][ T3644] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.039376][ T3644] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.826750][ T7483] xt_hashlimit: max too large, truncated to 1048576 [ 106.843399][ T7483] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 106.946747][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 106.946761][ T29] audit: type=1400 audit(1761449236.740:2841): avc: denied { unmount } for pid=5126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.057487][ T29] audit: type=1400 audit(1761449236.850:2842): avc: denied { bind } for pid=7489 comm="syz.7.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.132451][ T29] audit: type=1400 audit(1761449236.900:2843): avc: denied { listen } for pid=7489 comm="syz.7.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.306616][ T7502] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.356723][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1458'. [ 107.378273][ T7502] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.505770][ T7502] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.524809][ T29] audit: type=1400 audit(1761449237.310:2844): avc: denied { read write } for pid=7507 comm="syz.7.1460" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.548439][ T29] audit: type=1400 audit(1761449237.310:2845): avc: denied { open } for pid=7507 comm="syz.7.1460" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.608825][ T7502] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.688687][ T7509] loop7: detected capacity change from 0 to 512 [ 107.695321][ T7509] EXT4-fs: Ignoring removed oldalloc option [ 107.721444][ T7477] syz.0.1444 (7477) used greatest stack depth: 7048 bytes left [ 107.762270][ T3661] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.806128][ T3661] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.833694][ T29] audit: type=1400 audit(1761449237.610:2846): avc: denied { read write } for pid=7513 comm="syz.6.1463" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.857360][ T29] audit: type=1400 audit(1761449237.620:2847): avc: denied { open } for pid=7513 comm="syz.6.1463" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.885541][ T3698] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.898069][ T7515] netlink: 'syz.0.1461': attribute type 7 has an invalid length. [ 107.905947][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 107.918862][ T7509] EXT4-fs (loop7): 1 truncate cleaned up [ 107.931955][ T7509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.955582][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1464'. [ 107.991687][ T3690] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.098330][ T29] audit: type=1400 audit(1761449237.890:2848): avc: denied { name_connect } for pid=7521 comm="syz.0.1465" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 108.140776][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.524854][ T7545] veth2: entered promiscuous mode [ 108.530197][ T7545] veth2: entered allmulticast mode [ 108.732454][ T7546] program syz.7.1474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.757774][ T7546] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 108.835618][ T29] audit: type=1326 audit(1761449238.620:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.6.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 108.880735][ T29] audit: type=1326 audit(1761449238.620:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7553 comm="syz.6.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 108.930019][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1480'. [ 109.214368][ T7564] -1: renamed from syzkaller0 [ 109.269858][ T7567] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.328274][ T7567] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.434777][ T7575] SELinux: failed to load policy [ 109.441141][ T7567] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.506337][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1492'. [ 109.516634][ T7567] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.594378][ T3698] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.615345][ T3698] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.635296][ T3698] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.652684][ T3698] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.755042][ T7599] loop1: detected capacity change from 0 to 128 [ 109.767388][ T7599] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.771305][ T7595] syzkaller0: entered allmulticast mode [ 109.785382][ T7599] ext4 filesystem being mounted at /325/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.831865][ T7602] syzkaller0: entered promiscuous mode [ 109.867668][ T7595] syzkaller0 (unregistering): left allmulticast mode [ 109.874453][ T7595] syzkaller0 (unregistering): left promiscuous mode [ 109.951349][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.987195][ T7608] bridge0: port 3(gretap0) entered blocking state [ 109.993867][ T7608] bridge0: port 3(gretap0) entered disabled state [ 110.016146][ T7608] gretap0: entered allmulticast mode [ 110.022235][ T7608] gretap0: entered promiscuous mode [ 110.028111][ T7608] bridge0: port 3(gretap0) entered blocking state [ 110.034600][ T7608] bridge0: port 3(gretap0) entered forwarding state [ 110.054693][ T7612] gretap0: left allmulticast mode [ 110.059852][ T7612] gretap0: left promiscuous mode [ 110.064955][ T7612] bridge0: port 3(gretap0) entered disabled state [ 110.185588][ T7619] loop6: detected capacity change from 0 to 128 [ 110.261129][ T7623] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 110.364715][ T7625] syzkaller0: entered promiscuous mode [ 110.370259][ T7625] syzkaller0: entered allmulticast mode [ 110.404255][ T7627] tipc: Started in network mode [ 110.409213][ T7627] tipc: Node identity 9e2413557472, cluster identity 4711 [ 110.416486][ T7627] tipc: Enabled bearer , priority 0 [ 110.441903][ T7624] tipc: Resetting bearer [ 110.479085][ T7624] tipc: Disabling bearer [ 110.834540][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1513'. [ 110.843609][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1513'. [ 111.021059][ T7649] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 111.021059][ T7649] program syz.0.1519 not setting count and/or reply_len properly [ 111.059646][ T7653] kernel profiling enabled (shift: 63) [ 111.065164][ T7653] profiling shift: 63 too large [ 111.136196][ T9] hid_parser_main: 8 callbacks suppressed [ 111.136218][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 111.149494][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.156943][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.164442][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.172046][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.179721][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.187917][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 111.195457][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.203027][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.210549][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.230441][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 111.270800][ T7664] loop1: detected capacity change from 0 to 1024 [ 111.279611][ T7664] EXT4-fs: Ignoring removed orlov option [ 111.296385][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 111.317117][ T7664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.472613][ T7672] bridge0: port 3(gretap0) entered blocking state [ 111.479177][ T7672] bridge0: port 3(gretap0) entered disabled state [ 111.486069][ T7672] gretap0: entered allmulticast mode [ 111.492059][ T7672] gretap0: entered promiscuous mode [ 111.497626][ T7672] bridge0: port 3(gretap0) entered blocking state [ 111.504100][ T7672] bridge0: port 3(gretap0) entered forwarding state [ 111.514593][ T7672] gretap0: left allmulticast mode [ 111.519745][ T7672] gretap0: left promiscuous mode [ 111.524875][ T7672] bridge0: port 3(gretap0) entered disabled state [ 111.641970][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.830223][ T7688] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 111.841048][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1531'. [ 111.921784][ T7688] bond3: entered promiscuous mode [ 111.926977][ T7688] bond3: entered allmulticast mode [ 111.983400][ T7694] geneve2: entered allmulticast mode [ 111.989874][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1534'. [ 112.001054][ T7694] bond3: (slave geneve2): making interface the new active one [ 112.008627][ T7694] geneve2: entered promiscuous mode [ 112.014812][ T7694] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 112.014956][ T7697] program syz.6.1535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.024096][ T7688] bond3: left promiscuous mode [ 112.037593][ T7688] geneve2: left promiscuous mode [ 112.042656][ T7688] bond3: left allmulticast mode [ 112.052009][ T7688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.095172][ T7697] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 112.099097][ T7700] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1538'. [ 112.180626][ T7700] vlan2: entered allmulticast mode [ 112.185887][ T7700] gretap0: entered allmulticast mode [ 112.685865][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 112.685884][ T29] audit: type=1400 audit(1761449242.440:3158): avc: denied { read } for pid=7709 comm="syz.1.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 113.097805][ T29] audit: type=1326 audit(1761449242.890:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 113.121464][ T29] audit: type=1326 audit(1761449242.890:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 113.145015][ T29] audit: type=1326 audit(1761449242.890:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 113.238943][ T7724] syzkaller0: entered promiscuous mode [ 113.244599][ T7724] syzkaller0: entered allmulticast mode [ 113.266460][ T7730] tipc: Started in network mode [ 113.271468][ T7730] tipc: Node identity 020cb2b73fec, cluster identity 4711 [ 113.278878][ T7730] tipc: Enabled bearer , priority 0 [ 113.304763][ T29] audit: type=1326 audit(1761449242.890:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 113.328352][ T29] audit: type=1326 audit(1761449242.890:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 113.352027][ T29] audit: type=1326 audit(1761449242.970:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 113.375584][ T29] audit: type=1326 audit(1761449242.970:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 113.399046][ T29] audit: type=1326 audit(1761449242.970:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 113.422546][ T29] audit: type=1326 audit(1761449242.970:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 113.475970][ T7723] tipc: Resetting bearer [ 113.492773][ T7723] tipc: Disabling bearer [ 113.568765][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1550'. [ 113.577805][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1550'. [ 113.731042][ T7744] wg2: entered promiscuous mode [ 113.736034][ T7744] wg2: entered allmulticast mode [ 113.828635][ T7748] netlink: 'wÞ£ÿ': attribute type 7 has an invalid length. [ 113.938336][ T7753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7753 comm=syz.7.1559 [ 114.185560][ T7785] __nla_validate_parse: 4 callbacks suppressed [ 114.185575][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 114.257434][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 114.300619][ T7795] loop7: detected capacity change from 0 to 512 [ 114.314798][ T7795] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.329384][ T7795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.369594][ T7802] $Hÿ: renamed from bond0 (while UP) [ 114.378165][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.399273][ T7802] $Hÿ: entered promiscuous mode [ 114.404353][ T7802] bond_slave_0: entered promiscuous mode [ 114.410370][ T7802] bond_slave_1: entered promiscuous mode [ 114.421368][ T7802] dummy0: entered promiscuous mode [ 114.428622][ T7806] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 114.435185][ T7806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.442773][ T7806] vhci_hcd vhci_hcd.0: Device attached [ 114.458497][ T7806] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 114.465146][ T7806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.472777][ T7806] vhci_hcd vhci_hcd.0: Device attached [ 114.505975][ T7809] vhci_hcd: connection closed [ 114.506197][ T3682] vhci_hcd: stop threads [ 114.515198][ T3682] vhci_hcd: release socket [ 114.519751][ T3682] vhci_hcd: disconnect device [ 114.526166][ T7807] vhci_hcd: connection closed [ 114.526550][ T3682] vhci_hcd: stop threads [ 114.535554][ T3682] vhci_hcd: release socket [ 114.540090][ T3682] vhci_hcd: disconnect device [ 114.615408][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1585'. [ 115.784576][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 115.793538][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 115.885315][ T7866] netlink: 'syz.6.1602': attribute type 4 has an invalid length. [ 115.942537][ T7873] loop6: detected capacity change from 0 to 2048 [ 115.968562][ T7873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.020044][ T6787] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.032223][ T7882] netlink: 'syz.0.1607': attribute type 7 has an invalid length. [ 116.040109][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 116.069088][ T7884] loop1: detected capacity change from 0 to 2048 [ 116.094074][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1608'. [ 116.112419][ T7884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.143766][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.235876][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 116.612237][ T7912] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 116.635100][ T7912] SELinux: failed to load policy [ 117.063635][ T7922] loop6: detected capacity change from 0 to 2048 [ 117.146495][ T7922] Alternate GPT is invalid, using primary GPT. [ 117.152775][ T7922] loop6: p1 p2 p3 [ 117.191958][ T7930] loop7: detected capacity change from 0 to 1024 [ 117.199398][ T7930] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.216762][ T7930] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1626: Invalid block bitmap block 0 in block_group 0 [ 117.294374][ T7930] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1626: Failed to acquire dquot type 0 [ 117.317010][ T7930] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.1626: Freeing blocks not in datazone - block = 0, count = 4096 [ 117.343933][ T7930] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.1626: Invalid inode bitmap blk 0 in block_group 0 [ 117.358672][ T3690] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:57: Failed to release dquot type 0 [ 117.380837][ T7930] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 117.398698][ T7944] loop1: detected capacity change from 0 to 512 [ 117.405310][ T7930] EXT4-fs (loop7): 1 orphan inode deleted [ 117.416314][ T7930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.437947][ T7944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.454304][ T7930] netlink: 23 bytes leftover after parsing attributes in process `syz.7.1626'. [ 117.462319][ T7944] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.486654][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.534761][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.706460][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 117.706476][ T29] audit: type=1326 audit(1761449247.500:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 117.736242][ T29] audit: type=1326 audit(1761449247.500:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 117.759787][ T29] audit: type=1326 audit(1761449247.500:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 117.918254][ T29] audit: type=1326 audit(1761449247.570:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 117.941786][ T29] audit: type=1326 audit(1761449247.570:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 117.965218][ T29] audit: type=1326 audit(1761449247.570:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.6.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 118.164838][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'. [ 118.226874][ T7974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7974 comm=syz.5.1640 [ 118.280531][ T29] audit: type=1400 audit(1761449248.070:3524): avc: denied { getopt } for pid=7977 comm="syz.5.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.420293][ T29] audit: type=1400 audit(1761449248.210:3525): avc: denied { accept } for pid=7987 comm="syz.7.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 118.695970][ T7998] netlink: 'syz.6.1649': attribute type 7 has an invalid length. [ 118.721118][ T8000] IPVS: Unknown mcast interface: [ 118.741173][ T7998] bridge3: port 1(bond0) entered blocking state [ 118.747707][ T7998] bridge3: port 1(bond0) entered disabled state [ 118.767158][ T7998] bond0: entered allmulticast mode [ 118.837904][ T29] audit: type=1326 audit(1761449248.630:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.6.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 118.861416][ T29] audit: type=1326 audit(1761449248.630:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.6.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf0c1efc9 code=0x7ffc0000 [ 118.991755][ T8020] lo speed is unknown, defaulting to 1000 [ 119.011228][ T8020] lo speed is unknown, defaulting to 1000 [ 119.030039][ T8020] lo speed is unknown, defaulting to 1000 [ 119.043463][ T8020] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.062421][ T8020] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.108235][ T8020] lo speed is unknown, defaulting to 1000 [ 119.121016][ T8020] lo speed is unknown, defaulting to 1000 [ 119.133824][ T8020] lo speed is unknown, defaulting to 1000 [ 119.147036][ T8020] lo speed is unknown, defaulting to 1000 [ 119.178963][ T8020] lo speed is unknown, defaulting to 1000 [ 119.226419][ T8034] __nla_validate_parse: 4 callbacks suppressed [ 119.226439][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1663'. [ 119.241715][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1663'. [ 119.258409][ T3682] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.266889][ T3682] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.275173][ T3682] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.311023][ T3682] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.340111][ T8039] netlink: 'syz.5.1665': attribute type 7 has an invalid length. [ 119.347927][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1665'. [ 119.408697][ T8046] loop1: detected capacity change from 0 to 128 [ 119.443208][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.450514][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.479646][ T8049] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1669'. [ 119.525521][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.536926][ T8045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.618162][ T8043] bridge3: port 1(bond1) entered blocking state [ 119.624559][ T8043] bridge3: port 1(bond1) entered disabled state [ 119.631156][ T8043] bond1: entered allmulticast mode [ 119.665464][ T3644] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.674067][ T3644] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.682732][ T3682] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.702135][ T3682] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.852362][ T8099] netlink: 'syz.0.1687': attribute type 7 has an invalid length. [ 120.860208][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 120.863726][ T8093] loop7: detected capacity change from 0 to 2048 [ 120.880334][ T8097] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.899261][ T8093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.926194][ T8099] bridge5: port 1(bond4) entered blocking state [ 120.932564][ T8099] bridge5: port 1(bond4) entered disabled state [ 120.939492][ T8099] bond4: entered allmulticast mode [ 120.947898][ T8097] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.004602][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.035362][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.042669][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.098295][ T8113] xt_hashlimit: max too large, truncated to 1048576 [ 121.134230][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1692'. [ 121.139748][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.153855][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.203325][ T3644] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.211901][ T3644] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.221756][ T8097] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.233525][ T3644] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.243142][ T3644] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.277934][ T8097] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.336578][ T3650] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.349173][ T3690] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.361872][ T3690] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.376466][ T3650] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.394271][ T8128] team1: left promiscuous mode [ 121.399190][ T8128] team1: left allmulticast mode [ 121.404512][ T8128] veth2: left promiscuous mode [ 121.409347][ T8128] veth2: left allmulticast mode [ 121.414480][ T8128] ip6gre1: left allmulticast mode [ 121.419611][ T8128] macsec1: left promiscuous mode [ 121.424728][ T8128] bond2: left promiscuous mode [ 121.429554][ T8128] gretap1: left promiscuous mode [ 121.434959][ T8128] veth4: left promiscuous mode [ 121.439848][ T8128] veth4: left allmulticast mode [ 121.445273][ T8128] geneve2: left allmulticast mode [ 121.450476][ T8128] vlan2: left allmulticast mode [ 121.455329][ T8128] gretap0: left allmulticast mode [ 121.519751][ T8134] loop5: detected capacity change from 0 to 136 [ 121.742885][ T8146] loop5: detected capacity change from 0 to 512 [ 121.759187][ T8146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.772128][ T8146] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.828994][ T5126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.857042][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1706'. [ 121.973175][ T8162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1707'. [ 122.023450][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1711'. [ 122.253922][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 122.289956][ T8180] bridge: RTM_NEWNEIGH with invalid ether address [ 122.351187][ T8185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.406115][ T8185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.423683][ T8185] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.434917][ T8185] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 122.464155][ T8188] macvlan2: entered promiscuous mode [ 122.469626][ T8188] macvlan2: entered allmulticast mode [ 122.475418][ T8188] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 122.494633][ T8190] loop7: detected capacity change from 0 to 1024 [ 122.501790][ T8190] EXT4-fs: inline encryption not supported [ 122.517718][ T8190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.548301][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.727301][ T8205] 8021q: adding VLAN 0 to HW filter on device bond5 [ 122.802021][ T8205] bond5 (unregistering): Released all slaves [ 122.891803][ T3420] IPVS: starting estimator thread 0... [ 122.985872][ T8217] IPVS: using max 2400 ests per chain, 120000 per kthread [ 123.013947][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 123.014012][ T29] audit: type=1400 audit(1761449252.800:3664): avc: denied { write } for pid=8221 comm="syz.0.1732" name="vlan0" dev="proc" ino=4026533256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.106448][ T8196] Set syz1 is full, maxelem 65536 reached [ 123.320391][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.327811][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.336687][ T29] audit: type=1326 audit(1761449253.110:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 123.360511][ T29] audit: type=1326 audit(1761449253.110:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 123.384218][ T29] audit: type=1326 audit(1761449253.110:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 123.407733][ T29] audit: type=1326 audit(1761449253.110:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 123.431286][ T29] audit: type=1326 audit(1761449253.110:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 123.454944][ T29] audit: type=1326 audit(1761449253.110:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 123.478363][ T29] audit: type=1326 audit(1761449253.110:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 123.501818][ T29] audit: type=1326 audit(1761449253.110:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 123.525487][ T29] audit: type=1326 audit(1761449253.110:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.1.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 123.582324][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.610787][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.663675][ T8237] bond1: left allmulticast mode [ 123.668931][ T8237] bond1: left promiscuous mode [ 123.719703][ T3690] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.730774][ T3690] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.750495][ T3690] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.772780][ T3690] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.828763][ T8258] loop6: detected capacity change from 0 to 128 [ 123.846397][ T8258] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.862731][ T8258] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.939697][ T6787] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.749792][ T8296] netlink: 'syz.6.1762': attribute type 1 has an invalid length. [ 124.768702][ T8296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.785427][ T8299] loop7: detected capacity change from 0 to 512 [ 124.789153][ T8296] __nla_validate_parse: 9 callbacks suppressed [ 124.789172][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1762'. [ 124.810237][ T8296] bond1 (unregistering): Released all slaves [ 124.821268][ T8299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.834218][ T8299] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.913296][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.957400][ T8315] xt_connbytes: Forcing CT accounting to be enabled [ 124.958623][ T8313] tipc: Started in network mode [ 124.968964][ T8313] tipc: Node identity a2140e3b12c6, cluster identity 4711 [ 124.976300][ T8313] tipc: Enabled bearer , priority 0 [ 124.986791][ T8312] tipc: Resetting bearer [ 125.011343][ T8312] tipc: Disabling bearer [ 125.139866][ T8326] loop6: detected capacity change from 0 to 512 [ 125.157331][ T8326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.170030][ T8326] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.183117][ T8326] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1774: corrupted inode contents [ 125.195434][ T8326] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1774: mark_inode_dirty error [ 125.207124][ T8326] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1774: corrupted inode contents [ 125.219310][ T8326] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1774: mark_inode_dirty error [ 125.239333][ T8326] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1774: corrupted inode contents [ 125.251518][ T8326] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1774: mark_inode_dirty error [ 125.263262][ T8326] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1774: corrupted inode contents [ 125.277193][ T8326] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1774: corrupted inode contents [ 125.289332][ T8326] EXT4-fs error (device loop6): ext4_setent:3648: inode #2: comm syz.6.1774: mark_inode_dirty error [ 125.300382][ T8326] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1774: corrupted inode contents [ 125.805729][ T8331] syz_tun: entered allmulticast mode [ 125.811835][ T8331] syz_tun: left allmulticast mode [ 125.834999][ T6787] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.681147][ T3421] IPVS: starting estimator thread 0... [ 126.720169][ T8385] hub 6-0:1.0: USB hub found [ 126.725073][ T8385] hub 6-0:1.0: 8 ports detected [ 126.776015][ T8386] IPVS: using max 2352 ests per chain, 117600 per kthread [ 126.829921][ T8400] loop1: detected capacity change from 0 to 164 [ 126.839142][ T8400] bio_check_eod: 12627 callbacks suppressed [ 126.839167][ T8400] +}[@: attempt to access beyond end of device [ 126.839167][ T8400] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 126.858998][ T8400] +}[@: attempt to access beyond end of device [ 126.858998][ T8400] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 127.055243][ T8415] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1805'. [ 127.222352][ T3698] Bluetooth: hci0: Frame reassembly failed (-84) [ 127.232072][ T8426] loop7: detected capacity change from 0 to 512 [ 127.256509][ T8432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.267544][ T8426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.274874][ T8426] EXT4-fs: Ignoring removed oldalloc option [ 127.323194][ T8426] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.1816: Parent and EA inode have the same ino 15 [ 127.361749][ T8426] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.1816: Parent and EA inode have the same ino 15 [ 127.417573][ T8426] EXT4-fs (loop7): 1 orphan inode deleted [ 127.433365][ T8426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.514012][ T8443] loop6: detected capacity change from 0 to 512 [ 127.522288][ T8443] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 127.533857][ T8443] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 127.544059][ T8443] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1820: Corrupt directory, running e2fsck is recommended [ 127.557905][ T8443] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 127.566571][ T8443] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.1820: corrupted in-inode xattr: invalid ea_ino [ 127.580561][ T8443] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1820: couldn't read orphan inode 15 (err -117) [ 127.594004][ T8443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.610853][ T8443] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 127.631359][ T6787] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.655457][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.023184][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 128.023201][ T29] audit: type=1326 audit(1761449257.810:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.053753][ T29] audit: type=1326 audit(1761449257.840:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.077778][ T29] audit: type=1326 audit(1761449257.870:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.087546][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1829'. [ 128.101809][ T29] audit: type=1326 audit(1761449257.890:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.159813][ T29] audit: type=1326 audit(1761449257.930:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.183342][ T29] audit: type=1326 audit(1761449257.930:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.206958][ T29] audit: type=1326 audit(1761449257.940:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.230930][ T29] audit: type=1326 audit(1761449257.970:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.254491][ T29] audit: type=1326 audit(1761449257.970:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.278101][ T29] audit: type=1326 audit(1761449257.970:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8460 comm="syz.7.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 128.336450][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 128.466770][ T8478] loop1: detected capacity change from 0 to 512 [ 128.478448][ T8478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.492020][ T8478] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.663820][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.017520][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'. [ 129.054487][ T8511] pim6reg1: entered promiscuous mode [ 129.059947][ T8511] pim6reg1: entered allmulticast mode [ 129.155266][ T8513] loop1: detected capacity change from 0 to 512 [ 129.167722][ T8513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.180851][ T8513] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.195109][ T8513] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1846: corrupted inode contents [ 129.207255][ T8513] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.1846: mark_inode_dirty error [ 129.219236][ T8513] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1846: corrupted inode contents [ 129.231635][ T8513] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1846: mark_inode_dirty error [ 129.251973][ T8513] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1846: corrupted inode contents [ 129.264099][ T8513] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.1846: mark_inode_dirty error [ 129.265856][ T4070] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.275721][ T3565] Bluetooth: hci0: command 0x1003 tx timeout [ 129.286211][ T8513] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1846: corrupted inode contents [ 129.301645][ T8513] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1846: corrupted inode contents [ 129.314198][ T8513] EXT4-fs error (device loop1): ext4_setent:3648: inode #2: comm syz.1.1846: mark_inode_dirty error [ 129.343134][ T8513] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1846: corrupted inode contents [ 129.649533][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1850'. [ 129.726801][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1850'. [ 129.869251][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1853'. [ 129.891498][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.917594][ T8534] syzkaller0: entered promiscuous mode [ 129.923178][ T8534] syzkaller0: entered allmulticast mode [ 130.069840][ T8545] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1858'. [ 130.125753][ T8547] loop1: detected capacity change from 0 to 2048 [ 130.173925][ T8547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.246835][ T8556] syzkaller0: entered allmulticast mode [ 130.256287][ T8556] syzkaller0: entered promiscuous mode [ 130.314635][ T8556] syzkaller0 (unregistering): left allmulticast mode [ 130.321446][ T8556] syzkaller0 (unregistering): left promiscuous mode [ 130.403693][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.509351][ T8572] lo speed is unknown, defaulting to 1000 [ 130.778624][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1878'. [ 130.914038][ T8596] team0: Port device team_slave_1 removed [ 131.280781][ T8615] loop6: detected capacity change from 0 to 1024 [ 131.287695][ T3421] IPVS: starting estimator thread 0... [ 131.308509][ T8615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.338853][ T8615] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.397046][ T6787] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.406165][ T8616] IPVS: using max 2400 ests per chain, 120000 per kthread [ 131.419294][ T8628] loop1: detected capacity change from 0 to 1024 [ 131.437635][ T8628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.456767][ T8628] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1890: Allocating blocks 385-513 which overlap fs metadata [ 131.472141][ T8628] EXT4-fs (loop1): pa ffff888106e3a380: logic 16, phys. 129, len 24 [ 131.480334][ T8628] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 131.506523][ T3314] Trying to write to read-only block-device loop1 [ 131.524165][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.657508][ T8684] loop6: detected capacity change from 0 to 8192 [ 132.770434][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1914'. [ 132.856232][ T8700] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 132.917403][ T8702] loop5: detected capacity change from 0 to 2048 [ 132.932657][ T8702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.989276][ T8709] bridge: RTM_NEWNEIGH with invalid ether address [ 133.066355][ T5126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.107827][ T8713] ip6gre2: entered allmulticast mode [ 133.221134][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 133.221151][ T29] audit: type=1400 audit(1761449263.010:4016): avc: denied { read } for pid=8724 comm="syz.5.1926" path="socket:[26537]" dev="sockfs" ino=26537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 133.366584][ T8732] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1930'. [ 133.449313][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 133.459128][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 133.500623][ T29] audit: type=1326 audit(1761449263.290:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 133.524376][ T29] audit: type=1326 audit(1761449263.290:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 133.547944][ T29] audit: type=1326 audit(1761449263.290:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 133.571373][ T29] audit: type=1326 audit(1761449263.290:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 133.594995][ T29] audit: type=1326 audit(1761449263.290:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 133.618483][ T29] audit: type=1326 audit(1761449263.290:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 133.641916][ T29] audit: type=1326 audit(1761449263.290:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 133.665625][ T29] audit: type=1326 audit(1761449263.290:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.1.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 133.689127][ T29] audit: type=1326 audit(1761449263.290:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f655efc9 code=0x7ffc0000 [ 133.911669][ T8772] lo speed is unknown, defaulting to 1000 [ 134.701918][ T8829] veth0_vlan: entered allmulticast mode [ 134.754512][ T8832] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 134.786456][ T8832] batman_adv: batadv0: Adding interface: gretap1 [ 134.792919][ T8832] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.829303][ T8832] batman_adv: batadv0: Interface activated: gretap1 [ 134.925973][ T8843] loop6: detected capacity change from 0 to 764 [ 134.949307][ T8843] rock: directory entry would overflow storage [ 134.955523][ T8843] rock: sig=0x4f50, size=4, remaining=3 [ 134.961234][ T8843] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 135.216728][ T3697] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.238428][ T8853] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1973'. [ 135.483198][ T8864] loop6: detected capacity change from 0 to 1024 [ 135.548019][ T8864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.662367][ T8864] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.1979: Allocating blocks 449-513 which overlap fs metadata [ 135.689061][ T8878] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1982'. [ 135.705361][ T8863] EXT4-fs (loop6): pa ffff888106e3a3f0: logic 48, phys. 177, len 21 [ 135.713439][ T8863] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 135.769068][ T6787] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.491717][ T8914] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 136.947087][ T8929] tipc: Enabled bearer , priority 0 [ 136.955078][ T8928] tipc: Resetting bearer [ 136.984676][ T8928] tipc: Disabling bearer [ 137.072667][ T8937] $Hÿ: (slave dummy0): Releasing backup interface [ 137.079993][ T8937] dummy0: left promiscuous mode [ 137.091127][ T8937] bridge_slave_0: left allmulticast mode [ 137.096957][ T8937] bridge_slave_0: left promiscuous mode [ 137.102746][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.112399][ T8937] bridge_slave_1: left allmulticast mode [ 137.118129][ T8937] bridge_slave_1: left promiscuous mode [ 137.123819][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.133526][ T8942] netlink: 'syz.6.2008': attribute type 10 has an invalid length. [ 137.141449][ T8942] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2008'. [ 137.151145][ T8937] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 137.159225][ T8937] bond_slave_0: left promiscuous mode [ 137.167036][ T8937] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 137.174901][ T8937] bond_slave_1: left promiscuous mode [ 137.181986][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.189474][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.203174][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.210756][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.221137][ T8937] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.238236][ T36] lo speed is unknown, defaulting to 1000 [ 137.245511][ T8942] batman_adv: batadv0: Adding interface: veth1_vlan [ 137.252195][ T8942] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.265980][ T3565] Bluetooth: hci0: command 0x1003 tx timeout [ 137.283918][ T4070] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.374671][ T8942] batman_adv: batadv0: Interface activated: veth1_vlan [ 137.464049][ T8960] netlink: '+}[@': attribute type 13 has an invalid length. [ 137.471538][ T8960] netlink: '+}[@': attribute type 17 has an invalid length. [ 137.503254][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2017'. [ 137.514585][ T8960] erspan0: refused to change device tx_queue_len [ 137.521916][ T8960] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 137.544693][ T8962] team1: entered promiscuous mode [ 137.549810][ T8962] team1: entered allmulticast mode [ 137.555582][ T8962] 8021q: adding VLAN 0 to HW filter on device team1 [ 137.607487][ T8965] lo speed is unknown, defaulting to 1000 [ 137.664166][ T8969] netlink: 'syz.7.2020': attribute type 5 has an invalid length. [ 137.694555][ T8971] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 137.820554][ T8976] syz_tun: entered allmulticast mode [ 138.011980][ T8984] syzkaller0: entered allmulticast mode [ 138.025721][ T8989] loop5: detected capacity change from 0 to 128 [ 138.026540][ T8984] syzkaller0 (unregistering): left allmulticast mode [ 138.057613][ T8989] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.071514][ T8991] loop6: detected capacity change from 0 to 128 [ 138.090525][ T8989] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.180452][ T8997] capability: warning: `syz.7.2031' uses deprecated v2 capabilities in a way that may be insecure [ 138.235123][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 138.244204][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 138.253687][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 138.286440][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 138.295371][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 138.342819][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 138.375203][ T5126] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.436113][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 138.436129][ T29] audit: type=1326 audit(1761449268.230:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.512767][ T29] audit: type=1326 audit(1761449268.230:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.536285][ T29] audit: type=1326 audit(1761449268.230:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.538738][ T9025] loop7: detected capacity change from 0 to 2048 [ 138.559753][ T29] audit: type=1326 audit(1761449268.230:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.589609][ T29] audit: type=1326 audit(1761449268.250:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.613120][ T29] audit: type=1326 audit(1761449268.250:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.636555][ T29] audit: type=1326 audit(1761449268.250:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.660121][ T29] audit: type=1326 audit(1761449268.250:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.683639][ T29] audit: type=1326 audit(1761449268.250:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.707460][ T29] audit: type=1326 audit(1761449268.250:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.7.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 138.780620][ T9025] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.844820][ T9025] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 138.896596][ T7024] Trying to write to read-only block-device loop7 [ 138.903719][ T7024] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.958202][ T9048] netlink: 'syz.7.2050': attribute type 11 has an invalid length. [ 139.226873][ T6892] syz_tun (unregistering): left allmulticast mode [ 139.426068][ T9069] lo speed is unknown, defaulting to 1000 [ 139.528653][ T9069] chnl_net:caif_netlink_parms(): no params data found [ 139.548984][ T3694] bridge_slave_1: left allmulticast mode [ 139.554731][ T3694] bridge_slave_1: left promiscuous mode [ 139.560927][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.569677][ T3694] bridge_slave_0: left allmulticast mode [ 139.575359][ T3694] bridge_slave_0: left promiscuous mode [ 139.581145][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.592101][ T3694] bond4: left allmulticast mode [ 139.597108][ T3694] bridge5: port 1(bond4) entered disabled state [ 139.898121][ T3694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.926213][ T3694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.956448][ T3694] bond0 (unregistering): Released all slaves [ 139.978639][ T3694] bond1 (unregistering): Released all slaves [ 139.997632][ T3694] bond2 (unregistering): Released all slaves [ 140.026633][ T3694] bond3 (unregistering): (slave batadv1): Releasing active interface [ 140.044149][ T3694] bond3 (unregistering): Released all slaves [ 140.060986][ T3694] bond4 (unregistering): Released all slaves [ 140.125472][ T3694] tipc: Disabling bearer [ 140.130880][ T3694] tipc: Left network mode [ 140.178866][ T3694] hsr_slave_0: left promiscuous mode [ 140.186301][ T3694] hsr_slave_1: left promiscuous mode [ 140.195188][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.220763][ T3694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.317355][ T3694] team0 (unregistering): Port device vlan2 removed [ 140.426027][ T3694] team0 (unregistering): Port device team_slave_0 removed [ 140.518805][ T9117] loop7: detected capacity change from 0 to 128 [ 140.542285][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.549475][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.580662][ T9069] bridge_slave_0: entered allmulticast mode [ 140.593908][ T9069] bridge_slave_0: entered promiscuous mode [ 140.600917][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.608236][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.615503][ T9069] bridge_slave_1: entered allmulticast mode [ 140.622594][ T9069] bridge_slave_1: entered promiscuous mode [ 140.673925][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.696634][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.715381][ T9134] loop6: detected capacity change from 0 to 256 [ 140.740032][ T9069] team0: Port device team_slave_0 added [ 140.749062][ T9069] team0: Port device team_slave_1 added [ 140.784774][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.791810][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.817846][ T9069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.840556][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.847578][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.873557][ T9069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.888367][ T3694] IPVS: stop unused estimator thread 0... [ 140.898234][ T9144] netlink: 'syz.7.2081': attribute type 30 has an invalid length. [ 140.933040][ T9069] hsr_slave_0: entered promiscuous mode [ 140.942998][ T9069] hsr_slave_1: entered promiscuous mode [ 140.969171][ T9148] loop7: detected capacity change from 0 to 512 [ 141.073624][ T9152] bridge_slave_0: left allmulticast mode [ 141.079361][ T9152] bridge_slave_0: left promiscuous mode [ 141.085229][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.227766][ T9152] bridge_slave_1: left allmulticast mode [ 141.233486][ T9152] bridge_slave_1: left promiscuous mode [ 141.239246][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.257597][ T9152] bond0: (slave bond_slave_0): Releasing backup interface [ 141.269395][ T9152] bond0: (slave bond_slave_1): Releasing backup interface [ 141.278111][ T9152] team0: Port device team_slave_0 removed [ 141.284722][ T9152] team0: Port device team_slave_1 removed [ 141.293015][ T9152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.306613][ T9152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.330428][ T9152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 141.475917][ T9157] __nla_validate_parse: 3 callbacks suppressed [ 141.475935][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2086'. [ 141.532815][ T9069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.583945][ T9069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.605509][ T9069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.628693][ T9069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.704177][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.717509][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.728204][ T9175] loop6: detected capacity change from 0 to 1024 [ 141.737611][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.744695][ T3697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.753315][ T9175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.768405][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.775512][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.811761][ T6787] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.068558][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.546474][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2102'. [ 142.583537][ T9205] tipc: Enabled bearer , priority 0 [ 142.591733][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2102'. [ 142.606947][ T9204] tipc: Resetting bearer [ 142.630016][ T9204] tipc: Disabling bearer [ 142.648612][ T9069] veth0_vlan: entered promiscuous mode [ 142.658609][ T9069] veth1_vlan: entered promiscuous mode [ 142.715350][ T9218] tipc: Started in network mode [ 142.720371][ T9218] tipc: Node identity c6e17ebc9049, cluster identity 4711 [ 142.727665][ T9218] tipc: Enabled bearer , priority 0 [ 142.738718][ T9069] veth0_macvtap: entered promiscuous mode [ 142.776159][ T9217] tipc: Resetting bearer [ 142.801711][ T9217] tipc: Disabling bearer [ 142.810563][ T9069] veth1_macvtap: entered promiscuous mode [ 142.823061][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.834044][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.837384][ T9225] loop6: detected capacity change from 0 to 164 [ 142.853615][ T3676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.886544][ T3676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.912152][ T3676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.939662][ T3676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.053511][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 144.053525][ T29] audit: type=1400 audit(1761449273.840:4773): avc: denied { connect } for pid=9297 comm="syz.6.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.164679][ T29] audit: type=1326 audit(1761449273.950:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 144.188234][ T29] audit: type=1326 audit(1761449273.950:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 144.360990][ T9317] netlink: 'syz.1.2144': attribute type 12 has an invalid length. [ 144.369048][ T29] audit: type=1326 audit(1761449274.020:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 144.392518][ T29] audit: type=1326 audit(1761449274.020:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 144.415975][ T29] audit: type=1326 audit(1761449274.020:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 144.439482][ T29] audit: type=1326 audit(1761449274.030:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 144.462952][ T29] audit: type=1326 audit(1761449274.030:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 144.486421][ T29] audit: type=1326 audit(1761449274.030:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 144.509992][ T29] audit: type=1326 audit(1761449274.030:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.7.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f859efc9 code=0x7ffc0000 [ 144.607217][ T9328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=9328 comm=syz.6.2145 [ 144.908155][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2159'. [ 145.004083][ T9349] lo speed is unknown, defaulting to 1000 [ 145.034447][ T9356] tipc: Enabled bearer , priority 0 [ 145.048545][ T9356] tipc: Disabling bearer [ 145.075538][ T9358] lo speed is unknown, defaulting to 1000 [ 145.154705][ T9363] lo speed is unknown, defaulting to 1000 [ 145.653806][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2187'. [ 146.125362][ T9435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.397176][ T9435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.459001][ T9435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.524907][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2205'. [ 146.539023][ T9435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.603600][ T3688] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.624438][ T3688] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.646080][ T3688] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.655586][ T3688] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.865945][ T9430] ================================================================== [ 146.874132][ T9430] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 146.883986][ T9430] [ 146.886333][ T9430] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 146.894424][ T9430] tick_do_update_jiffies64+0x113/0x1c0 [ 146.900013][ T9430] tick_nohz_handler+0x7f/0x2d0 [ 146.904927][ T9430] __hrtimer_run_queues+0x20f/0x5a0 [ 146.910165][ T9430] hrtimer_interrupt+0x21a/0x460 [ 146.915139][ T9430] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 146.921081][ T9430] sysvec_apic_timer_interrupt+0x6f/0x80 [ 146.926758][ T9430] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 146.932774][ T9430] kcsan_setup_watchpoint+0x415/0x430 [ 146.938278][ T9430] css_rstat_updated+0x90/0x240 [ 146.943162][ T9430] mod_memcg_lruvec_state+0xfa/0x2c0 [ 146.948479][ T9430] __lruvec_stat_mod_folio+0xcd/0x120 [ 146.954012][ T9430] folio_add_new_anon_rmap+0x18e/0x260 [ 146.959517][ T9430] do_wp_page+0x1545/0x2510 [ 146.964077][ T9430] handle_mm_fault+0x77d/0x2be0 [ 146.968968][ T9430] do_user_addr_fault+0x3fe/0x1080 [ 146.974105][ T9430] exc_page_fault+0x62/0xa0 [ 146.978649][ T9430] asm_exc_page_fault+0x26/0x30 [ 146.983532][ T9430] rep_movs_alternative+0x4a/0x90 [ 146.988592][ T9430] _copy_to_iter+0x141/0xe70 [ 146.993216][ T9430] __skb_datagram_iter+0xc6/0x690 [ 146.998292][ T9430] skb_copy_datagram_iter+0x3d/0x110 [ 147.003615][ T9430] tipc_recvstream+0x4d7/0x780 [ 147.008425][ T9430] sock_recvmsg+0x139/0x170 [ 147.012959][ T9430] ____sys_recvmsg+0xf5/0x280 [ 147.017673][ T9430] ___sys_recvmsg+0x11f/0x370 [ 147.022378][ T9430] __x64_sys_recvmsg+0xd1/0x160 [ 147.027262][ T9430] x64_sys_call+0x2b46/0x3000 [ 147.031975][ T9430] do_syscall_64+0xd2/0x200 [ 147.036507][ T9430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.042423][ T9430] [ 147.044767][ T9430] read to 0xffffffff868099c0 of 8 bytes by task 9430 on cpu 1: [ 147.052334][ T9430] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 147.058617][ T9430] count_shadow_nodes+0x6a/0x230 [ 147.063592][ T9430] do_shrink_slab+0x63/0x680 [ 147.068221][ T9430] shrink_slab+0x448/0x760 [ 147.072693][ T9430] shrink_node+0x6c3/0x2120 [ 147.077325][ T9430] do_try_to_free_pages+0x3f6/0xcd0 [ 147.082575][ T9430] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 147.088509][ T9430] try_charge_memcg+0x383/0xa10 [ 147.093400][ T9430] obj_cgroup_charge_pages+0xa6/0x150 [ 147.098830][ T9430] __memcg_kmem_charge_page+0x9f/0x170 [ 147.104322][ T9430] __alloc_frozen_pages_noprof+0x188/0x360 [ 147.110381][ T9430] alloc_pages_mpol+0xb3/0x260 [ 147.115165][ T9430] alloc_pages_noprof+0x90/0x130 [ 147.120137][ T9430] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 147.125987][ T9430] __kvmalloc_node_noprof+0x483/0x670 [ 147.131395][ T9430] ip_set_alloc+0x24/0x30 [ 147.135761][ T9430] hash_netiface_create+0x282/0x740 [ 147.140996][ T9430] ip_set_create+0x3cc/0x970 [ 147.145597][ T9430] nfnetlink_rcv_msg+0x4c6/0x590 [ 147.150563][ T9430] netlink_rcv_skb+0x123/0x220 [ 147.155437][ T9430] nfnetlink_rcv+0x167/0x16c0 [ 147.160132][ T9430] netlink_unicast+0x5c0/0x690 [ 147.164913][ T9430] netlink_sendmsg+0x58b/0x6b0 [ 147.169693][ T9430] __sock_sendmsg+0x145/0x180 [ 147.174385][ T9430] ____sys_sendmsg+0x31e/0x4e0 [ 147.179169][ T9430] ___sys_sendmsg+0x17b/0x1d0 [ 147.183899][ T9430] __x64_sys_sendmsg+0xd4/0x160 [ 147.188779][ T9430] x64_sys_call+0x191e/0x3000 [ 147.193471][ T9430] do_syscall_64+0xd2/0x200 [ 147.197981][ T9430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.203892][ T9430] [ 147.206222][ T9430] value changed: 0x00000000ffffc3ef -> 0x00000000ffffc3f0 [ 147.213416][ T9430] [ 147.215745][ T9430] Reported by Kernel Concurrency Sanitizer on: [ 147.222075][ T9430] CPU: 1 UID: 0 PID: 9430 Comm: syz.1.2194 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.233461][ T9430] Tainted: [W]=WARN [ 147.237269][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.247333][ T9430] ================================================================== [ 147.282879][ T9430] syz.1.2194 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 147.297282][ T9430] CPU: 1 UID: 0 PID: 9430 Comm: syz.1.2194 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.297375][ T9430] Tainted: [W]=WARN [ 147.297384][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.297400][ T9430] Call Trace: [ 147.297407][ T9430] [ 147.297418][ T9430] __dump_stack+0x1d/0x30 [ 147.297442][ T9430] dump_stack_lvl+0xe8/0x140 [ 147.297468][ T9430] dump_stack+0x15/0x1b [ 147.297548][ T9430] dump_header+0x81/0x220 [ 147.297573][ T9430] oom_kill_process+0x342/0x400 [ 147.297607][ T9430] out_of_memory+0x979/0xb80 [ 147.297689][ T9430] try_charge_memcg+0x610/0xa10 [ 147.297726][ T9430] obj_cgroup_charge_pages+0xa6/0x150 [ 147.297839][ T9430] __memcg_kmem_charge_page+0x9f/0x170 [ 147.297861][ T9430] __alloc_frozen_pages_noprof+0x188/0x360 [ 147.297912][ T9430] alloc_pages_mpol+0xb3/0x260 [ 147.297949][ T9430] alloc_pages_noprof+0x90/0x130 [ 147.298084][ T9430] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 147.298140][ T9430] __kvmalloc_node_noprof+0x483/0x670 [ 147.298174][ T9430] ? ip_set_alloc+0x24/0x30 [ 147.298204][ T9430] ? ip_set_alloc+0x24/0x30 [ 147.298319][ T9430] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 147.298416][ T9430] ip_set_alloc+0x24/0x30 [ 147.298453][ T9430] hash_netiface_create+0x282/0x740 [ 147.298487][ T9430] ? __pfx_hash_netiface_create+0x10/0x10 [ 147.298624][ T9430] ip_set_create+0x3cc/0x970 [ 147.298661][ T9430] ? __nla_parse+0x40/0x60 [ 147.298692][ T9430] nfnetlink_rcv_msg+0x4c6/0x590 [ 147.298821][ T9430] netlink_rcv_skb+0x123/0x220 [ 147.298863][ T9430] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.298940][ T9430] nfnetlink_rcv+0x167/0x16c0 [ 147.299008][ T9430] ? __bpf_strtoull+0x160/0x2e0 [ 147.299065][ T9430] ? css_rstat_updated+0xb7/0x240 [ 147.299091][ T9430] ? __rcu_read_unlock+0x4f/0x70 [ 147.299123][ T9430] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 147.299181][ T9430] ? perf_cgroup_switch+0x10c/0x480 [ 147.299220][ T9430] ? update_load_avg+0x1da/0x820 [ 147.299292][ T9430] ? __list_add_valid_or_report+0x38/0xe0 [ 147.299327][ T9430] ? _raw_spin_unlock+0x26/0x50 [ 147.299358][ T9430] ? finish_task_switch+0xad/0x2b0 [ 147.299399][ T9430] ? __schedule+0x6b9/0xb30 [ 147.299421][ T9430] ? should_fail_ex+0x30/0x280 [ 147.299439][ T9430] ? selinux_nlmsg_lookup+0x99/0x890 [ 147.299472][ T9430] ? __rcu_read_unlock+0x34/0x70 [ 147.299572][ T9430] ? __netlink_lookup+0x266/0x2a0 [ 147.299597][ T9430] netlink_unicast+0x5c0/0x690 [ 147.299692][ T9430] netlink_sendmsg+0x58b/0x6b0 [ 147.299718][ T9430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.299744][ T9430] __sock_sendmsg+0x145/0x180 [ 147.299777][ T9430] ____sys_sendmsg+0x31e/0x4e0 [ 147.299892][ T9430] ___sys_sendmsg+0x17b/0x1d0 [ 147.299993][ T9430] __x64_sys_sendmsg+0xd4/0x160 [ 147.300043][ T9430] x64_sys_call+0x191e/0x3000 [ 147.300121][ T9430] do_syscall_64+0xd2/0x200 [ 147.300166][ T9430] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.300209][ T9430] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.300306][ T9430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.300331][ T9430] RIP: 0033:0x7fb2f655efc9 [ 147.300352][ T9430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.300376][ T9430] RSP: 002b:00007fb2f4fbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.300400][ T9430] RAX: ffffffffffffffda RBX: 00007fb2f67b5fa0 RCX: 00007fb2f655efc9 [ 147.300415][ T9430] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 147.300427][ T9430] RBP: 00007fb2f65e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.300510][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.300530][ T9430] R13: 00007fb2f67b6038 R14: 00007fb2f67b5fa0 R15: 00007fff74748b98 [ 147.300555][ T9430] [ 147.300564][ T9430] memory: usage 307200kB, limit 307200kB, failcnt 793 [ 147.676420][ T9430] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 147.684307][ T9430] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 147.691674][ T9430] Memory cgroup stats for /syz1: [ 147.691871][ T9430] cache 0 [ 147.699792][ T9430] rss 0 [ 147.702548][ T9430] shmem 0 [ 147.705497][ T9430] mapped_file 0 [ 147.708972][ T9430] dirty 0 [ 147.712053][ T9430] writeback 0 [ 147.715333][ T9430] workingset_refault_anon 100 [ 147.720090][ T9430] workingset_refault_file 969 [ 147.724804][ T9430] swap 196608 [ 147.728279][ T9430] swapcached 8192 [ 147.732008][ T9430] pgpgin 214623 [ 147.735475][ T9430] pgpgout 214617 [ 147.739122][ T9430] pgfault 208088 [ 147.742840][ T9430] pgmajfault 56 [ 147.746344][ T9430] inactive_anon 8192 [ 147.750244][ T9430] active_anon 0 [ 147.753727][ T9430] inactive_file 16384 [ 147.757769][ T9430] active_file 0 [ 147.761268][ T9430] unevictable 0 [ 147.764823][ T9430] hierarchical_memory_limit 314572800 [ 147.770282][ T9430] hierarchical_memsw_limit 9223372036854771712 [ 147.776477][ T9430] total_cache 0 [ 147.780020][ T9430] total_rss 0 [ 147.783296][ T9430] total_shmem 0 [ 147.786770][ T9430] total_mapped_file 0 [ 147.790771][ T9430] total_dirty 0 [ 147.794232][ T9430] total_writeback 0 [ 147.798060][ T9430] total_workingset_refault_anon 100 [ 147.803270][ T9430] total_workingset_refault_file 969 [ 147.808504][ T9430] total_swap 196608 [ 147.812378][ T9430] total_swapcached 8192 [ 147.816626][ T9430] total_pgpgin 214623 [ 147.820670][ T9430] total_pgpgout 214617 [ 147.824750][ T9430] total_pgfault 208094 [ 147.828926][ T9430] total_pgmajfault 56 [ 147.832962][ T9430] total_inactive_anon 8192 [ 147.837408][ T9430] total_active_anon 0 [ 147.841403][ T9430] total_inactive_file 16384 [ 147.845926][ T9430] total_active_file 0 [ 147.849929][ T9430] total_unevictable 0 [ 147.853906][ T9430] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2194,pid=9428,uid=0 [ 147.868627][ T9430] Memory cgroup out of memory: Killed process 9428 (syz.1.2194) total-vm:96004kB, anon-rss:1136kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000