last executing test programs: 2m6.245162101s ago: executing program 4 (id=834): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2m6.202000506s ago: executing program 4 (id=836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="6d4790fdc54771bf000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 2m6.125861303s ago: executing program 4 (id=838): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2m6.078952988s ago: executing program 4 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 2m5.993568266s ago: executing program 4 (id=842): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m5.889177217s ago: executing program 4 (id=848): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d9, 0x2, 0x6], [0x2, 0x2, 0x1, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x7, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0xe, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x80, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x1, 0x1, 0x7fffffff, 0x4, 0x40000000008000, 0x6, 0x7, 0x6, 0xa, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x6, 0x0, 0x9, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0xb, 0x7, 0x9, 0x1ea9dea2, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x3, 0x4, 0x7, 0x400000000403, 0x3, 0x8, 0x8, 0x0, 0x3, 0x40, 0x8000000000000000, 0x7, 0xe, 0x9]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m5.859447389s ago: executing program 32 (id=848): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d9, 0x2, 0x6], [0x2, 0x2, 0x1, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x7, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0xe, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x80, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x1, 0x1, 0x7fffffff, 0x4, 0x40000000008000, 0x6, 0x7, 0x6, 0xa, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x6, 0x0, 0x9, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0xb, 0x7, 0x9, 0x1ea9dea2, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x3, 0x4, 0x7, 0x400000000403, 0x3, 0x8, 0x8, 0x0, 0x3, 0x40, 0x8000000000000000, 0x7, 0xe, 0x9]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m36.653746811s ago: executing program 0 (id=1869): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_MCE_KILL_GET(0x22) 1m36.577494579s ago: executing program 0 (id=1874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x8, &(0x7f00000001c0)={@mcast1}, 0x14) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988", 0x6}], 0x1}}], 0x1, 0x95) 1m35.738050212s ago: executing program 0 (id=1904): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) kexec_load(0x3e00, 0x0, 0x0, 0x0) 1m35.672838838s ago: executing program 0 (id=1906): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x47) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x80, 0x121) move_mount(r1, &(0x7f0000000300)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x100) 1m35.672678028s ago: executing program 0 (id=1907): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) 1m35.427441282s ago: executing program 0 (id=1912): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x400c004) 1m35.427226193s ago: executing program 33 (id=1912): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x400c004) 43.485664215s ago: executing program 6 (id=3627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 43.397746813s ago: executing program 6 (id=3630): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c1}, 0x8004) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4011}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 43.357492558s ago: executing program 6 (id=3635): unshare(0x2a060400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x9, 0xc) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 42.449817688s ago: executing program 6 (id=3653): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 41.811000961s ago: executing program 6 (id=3656): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 41.542129177s ago: executing program 6 (id=3659): socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 41.477673474s ago: executing program 34 (id=3659): socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 3.449428039s ago: executing program 5 (id=5172): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/nbt/\xd3pv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 3.390212205s ago: executing program 5 (id=5177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 3.3351995s ago: executing program 5 (id=5180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)=""/4112, 0x1010) 3.298905354s ago: executing program 5 (id=5181): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3.221886811s ago: executing program 5 (id=5183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r2}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 2.712512372s ago: executing program 5 (id=5204): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 2.671315186s ago: executing program 35 (id=5204): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 727.414948ms ago: executing program 1 (id=5276): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x0, r2}, 0x5) 672.950324ms ago: executing program 1 (id=5278): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 655.929566ms ago: executing program 8 (id=5207): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3, @ANYRESDEC=r3], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 635.067918ms ago: executing program 3 (id=5280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 592.301592ms ago: executing program 8 (id=5281): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 591.889512ms ago: executing program 3 (id=5282): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 587.438522ms ago: executing program 1 (id=5283): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 556.014906ms ago: executing program 1 (id=5285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 555.686936ms ago: executing program 8 (id=5286): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 503.35002ms ago: executing program 1 (id=5289): unshare(0x20000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) sendfile(r1, r0, 0x0, 0x578410e9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 482.135553ms ago: executing program 1 (id=5290): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x150, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1}) semctl$GETVAL(r0, 0x1, 0xc, 0x0) 413.327709ms ago: executing program 8 (id=5293): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r2) 373.340674ms ago: executing program 8 (id=5294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) syz_emit_ethernet(0x20c, &(0x7f00000004c0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x10, 0x4, 0x3, 0x13, 0x1fe, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0x13, 0x1f, [@multicast1, @empty, @loopback, @empty]}, @noop, @rr={0x7, 0x13, 0x46, [@local, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @local]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x40, 0x1, [0x11, 0x0], "79f785b9e019f88f5674896690986bcd6bcd3c39c8972b8cb5b87d25d7be1136ff7dfb63daebfaa955942a104b6fbc2e4b17ac640ee733359038190538713b62"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x234, 0x8, 0x8], "3257ecfdf60cf8f70919367d8d5c9576ebe241f07db61427a3dbd95b8bd1f3d1d1550da8d67487afb981be772c544bdd0b1ee94a01b33fb23186ba57e754b2ad9c95d5f642ec3003f3"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x43c, 0x100], "ecfbe199fa6edacc9e22150c77cc1910a6ea16c3c4e1a1975892047c63a38e6b0b85403a88b8a28f4b5193b4b70bc86052eafe8dd356a7bf2abd3aca2b9c13f203a78b36a05784dcebd37d79352d90ba8846aed4d0de01b74ff90dcf76a79d6c1b1cc3b6526ea28ae6692fd4458e5c"}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0xff, 0x3, 0x0, 0x3, 0x3, 0xe}, 0x1, {0xc78c}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0xf7, 0x1, 0x1, 0x0, 0x1, 0x81}, 0x2, {0x1, 0x888, 0x1, 0x7, 0x0, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "7796afdffface25a68d6c4fbfa6282125d8795058c9cb21cc8a27b6b18a818222bd2c7bbac1d9562c2da39aa0c5bed1b4921aa76a77caa2df23b2f147b68277f63281c52f03848c31336003c987f5271930f583006b7bc2b32ea4c4cb9a2994d9b5e1c939b0a33094d5143843b68dbf2a9945437"}}}}}}, &(0x7f0000000000)={0x0, 0x1, [0xa76, 0x33f, 0xc33, 0xc97]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {0xfff3}, {0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 327.255018ms ago: executing program 3 (id=5297): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 278.970433ms ago: executing program 3 (id=5299): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) 225.258028ms ago: executing program 3 (id=5301): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00\xe2\xe6s\xd8\x00\x00\x00\x00\x01\x00\x00\x00\xce?@\xfb\x06B\x7f\xaa\x17\xe3\xd0F\xe3d;\xd2Kgd\xa2\fP\x80\xa1d\x80\xd0\x06\xf5\b?\x02\x14\xc4\x14:\x9fg.\xfeI\xfb\x9e\xe1S\x93\x842\x95\xf8\xe7\x8a\xfb\xc0\x05\t\x92T\x9f\xf5L\xd9L\b\x80'}}]}}) 208.04081ms ago: executing program 2 (id=5303): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000040)='./file0\x00') openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 188.803102ms ago: executing program 2 (id=5304): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r1, &(0x7f0000000040)=""/190, 0xbe) 172.498104ms ago: executing program 2 (id=5305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r2) 143.049916ms ago: executing program 7 (id=5307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 142.171226ms ago: executing program 2 (id=5308): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 108.04392ms ago: executing program 2 (id=5309): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$eJzs3U9vHGcZAPBn1rvBTpzaBQ5QiVJoIYkgu3FNW4tDKRKCUyWg3IuxN5aVtdfyrtvYqrAjPgASQoDECS5ckPgASKgSF44IqRKcQYBACFI4cIBONbuztmPvvzRrr2v/ftJ43nnnnXmed5OZndkZzQRwYT0VES9FxDtpmt6IiJm8vpAPsdcesnZv339jKRuSSNNX/plEktd11pXk4yv5YpMR8fWvRHwrOR63sb1zZ7FWq27m05Xm2kalsb1zc3VtcaW6Ul2fn597fuGFhecWbvXIvPBQ/bwaES9+6a8/+O7Pvvzirz77+p9e/fv1b2dpTefzD/fjIRX7zWx3vdT6LA4vsPkeg51FxVYPc1PdWkwcq7l3wjkBANBddhT9wYj4ZETciJmY6H84CwAAALwPpV+Yjv8lEWl3l3rUAwAAAO8jhdY9sEmhnN8LMB2FQrncvof3w3G5UKs3mp+5Xd9aX27fKzsbpcLt1Vr1Vn6v8GyUkmx6rlU+mH72yPR8RDweEd+fmWpNl5fqteVx//gBAAAAF8SVI+f//5lpn/937I4zOQAAAGB0ZsedAAAAAHDihj3/v3zCeQAAAAAnx/V/AAAAONe++vLL2ZB23n+9/Nr21p36azeXq4075bWtpfJSfXOjvFKvr7Se2bc2aH21en3jc7G+dbfSrDaalcb2ZKzVt9abr64+8ApsAAAA4BQ9/vE3/5BExN7np1pD5tJwiw7ZDDirivulJB932az/+Fh7/JdTSgo4FRPjTgAYm+K4EwDGpjTuBICxSwbM73nzzm/z8SdGmw8AADB61z7a+/p/oe+Se/1nA2eejRguLtf/4eJqXf8f9k5eBwtwrpQGHQH03eZ3R5wNMA6PfP1/oDR9qIQAAICRm24NSaFc7EwXCuVyxNXWawFKye3VWvVWRDwWEb+fKX0gm55rtUwGnjMAAAAAAAAAAAAAAAAAAAAAAAAAAG1pmkQKAAAAnGsRhb8lv24/y//azDPTR38fuJT8dybyV4S+/uNXfnh3sdncnMvq/7Vf3/xRXv/sOH7BAAAAgAthwAv8H9Q5T++cxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKL19/42lznCacf/xxYiY7Ra/GJOt8WSUIuLyv5MoHlouiYiJEcSfyv58pFv8JEtrP2S3+FMjiL93r2/82Ms/hW7xr4wgPlxkb2b7n5e6bX+FeKo17r79FSMemH6veu//Yn//N9Fj+7/66cZQMZ546xeVnvHvRTxRPBZ/N4vQiZ/0iP/0kH385jd2dnrNS38Sca3r90/SaZLtIaPSXNuoNLZ3bq6uLa5UV6rr8/Nzzy+8sPDcwq3K7dVaNf/bNcb3PvbLd/r1/3KP+LMD+v/MsbVd6hrj/2/dvf+hdrHULf71p7vE/81P8xbH4xfy775P5eVs/rVOea9dPuzJn//uyX79X+7R/0H//td7rfSIG1/7zp+HbAoAnILG9s6dxVqtunluC9lZ+pCNs6OzM5HzOAqd/xFnJZ/TKOw++nomDmrSNE2zT/ARVpjEWfhYWoWx7pYAAIATcHDQP+5MAAAAAAAAAAAAAAAAAAAA4OI6jceJHQk5eVBMRvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAkXg3AAD//wuK1X0=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 107.60043ms ago: executing program 7 (id=5310): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x4, 0x3, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x10, 0x7, 0x3a3, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c000701030000000000000001"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 64.553854ms ago: executing program 2 (id=5311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 64.230194ms ago: executing program 7 (id=5312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 63.768194ms ago: executing program 3 (id=5313): socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 21.118879ms ago: executing program 7 (id=5314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xfa}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 20.721708ms ago: executing program 7 (id=5315): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 0s ago: executing program 7 (id=5316): r0 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0x297a, 0x40, 0x80003, 0x6}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480), 0x66) kernel console output (not intermixed with test programs): 2 family 0 port 20004 - 0 [ 110.822545][ T7516] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.830962][ T7499] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 110.864796][T10198] syz.2.2650 (10198) used greatest stack depth: 8896 bytes left [ 110.976041][T10234] vhci_hcd: invalid port number 96 [ 110.981219][T10234] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 111.122414][T10250] loop5: detected capacity change from 0 to 1024 [ 111.152777][T10250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.181077][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.439079][T10282] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 111.439079][T10282] program syz.6.2686 not setting count and/or reply_len properly [ 111.503906][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 111.503924][ T29] audit: type=1326 audit(1760787687.974:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.567542][ T29] audit: type=1326 audit(1760787688.014:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.591181][ T29] audit: type=1326 audit(1760787688.014:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.614862][ T29] audit: type=1326 audit(1760787688.014:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.638483][ T29] audit: type=1326 audit(1760787688.014:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.662236][ T29] audit: type=1326 audit(1760787688.014:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.663161][T10291] tipc: Started in network mode [ 111.685850][ T29] audit: type=1326 audit(1760787688.014:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.690702][T10291] tipc: Node identity ac14140f, cluster identity 4711 [ 111.714236][ T29] audit: type=1326 audit(1760787688.014:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.732187][T10291] tipc: New replicast peer: 255.255.255.83 [ 111.744639][ T29] audit: type=1326 audit(1760787688.014:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.744682][ T29] audit: type=1326 audit(1760787688.014:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.6.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 111.797766][T10291] tipc: Enabled bearer , priority 10 [ 111.971243][T10307] gtp0: entered promiscuous mode [ 112.185003][T10317] loop3: detected capacity change from 0 to 512 [ 112.194604][T10317] EXT4-fs: Ignoring removed oldalloc option [ 112.194623][T10319] __nla_validate_parse: 7 callbacks suppressed [ 112.194638][T10319] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2703'. [ 112.216289][T10317] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 112.272636][T10324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10324 comm=syz.2.2706 [ 112.774548][T10388] loop5: detected capacity change from 0 to 1024 [ 112.825529][T10388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.852657][T10388] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.2734: Allocating blocks 449-513 which overlap fs metadata [ 112.875465][T10387] EXT4-fs (loop5): pa ffff888106e27690: logic 48, phys. 177, len 21 [ 112.883553][T10387] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 112.912359][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.921510][ T4672] tipc: Node number set to 2886997007 [ 113.175787][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 113.185153][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 113.394051][T10463] loop5: detected capacity change from 0 to 1024 [ 113.402922][T10463] EXT4-fs: Ignoring removed orlov option [ 113.428461][T10463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.468979][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.553804][T10477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10477 comm=syz.3.2770 [ 113.599634][T10483] pim6reg: entered allmulticast mode [ 113.605802][T10483] pim6reg: left allmulticast mode [ 113.828925][T10514] pim6reg: entered allmulticast mode [ 113.835231][T10514] pim6reg: left allmulticast mode [ 113.886560][T10520] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 113.980421][T10531] all: renamed from lo (while UP) [ 114.041645][T10540] sch_fq: defrate 0 ignored. [ 114.170464][T10554] loop6: detected capacity change from 0 to 128 [ 114.237527][T10555] bio_check_eod: 32 callbacks suppressed [ 114.237549][T10555] syz.6.2807: attempt to access beyond end of device [ 114.237549][T10555] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 114.287991][T10555] syz.6.2807: attempt to access beyond end of device [ 114.287991][T10555] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 114.303162][T10555] syz.6.2807: attempt to access beyond end of device [ 114.303162][T10555] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 114.316924][T10555] syz.6.2807: attempt to access beyond end of device [ 114.316924][T10555] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 114.337467][T10555] syz.6.2807: attempt to access beyond end of device [ 114.337467][T10555] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 114.362040][T10555] syz.6.2807: attempt to access beyond end of device [ 114.362040][T10555] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 114.395724][T10555] syz.6.2807: attempt to access beyond end of device [ 114.395724][T10555] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 114.424450][T10555] syz.6.2807: attempt to access beyond end of device [ 114.424450][T10555] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 114.438071][T10555] syz.6.2807: attempt to access beyond end of device [ 114.438071][T10555] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 114.452073][T10555] syz.6.2807: attempt to access beyond end of device [ 114.452073][T10555] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 115.444404][T10625] loop9: detected capacity change from 0 to 7 [ 115.455284][T10625] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.485854][T10625] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.493746][T10625] loop9: unable to read partition table [ 115.516363][T10625] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 115.516363][T10625] ) failed (rc=-5) [ 115.541498][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.555876][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.565127][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.573155][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.582090][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.659980][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'. [ 115.770103][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2839'. [ 116.013885][T10639] loop3: detected capacity change from 0 to 1024 [ 116.026445][T10639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.058524][T10639] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2841: Allocating blocks 449-513 which overlap fs metadata [ 116.088587][T10638] EXT4-fs (loop3): pa ffff888106e27620: logic 48, phys. 177, len 21 [ 116.096886][T10638] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 116.130071][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.194039][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2847'. [ 116.363888][T10680] loop3: detected capacity change from 0 to 1024 [ 116.370984][T10680] EXT4-fs: Ignoring removed bh option [ 116.392433][T10680] EXT4-fs: inline encryption not supported [ 116.420005][T10680] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.448322][T10680] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 116.457445][T10690] netlink: 'syz.5.2864': attribute type 1 has an invalid length. [ 116.465438][T10690] netlink: 'syz.5.2864': attribute type 4 has an invalid length. [ 116.465888][T10680] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2860: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.473188][T10690] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2864'. [ 116.487403][T10680] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2860: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.510651][T10680] __quota_error: 142 callbacks suppressed [ 116.510683][T10680] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 116.525353][T10680] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2860: Failed to acquire dquot type 0 [ 116.552757][T10680] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 116.562591][T10680] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2860: mark_inode_dirty error [ 116.574149][T10680] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 116.584788][T10680] EXT4-fs (loop3): 1 orphan inode deleted [ 116.591038][T10680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.607395][ T7499] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.633829][ T7499] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 116.642380][ T7499] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:43: Failed to release dquot type 0 [ 116.685397][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.706792][ T3310] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.719947][ T3310] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 116.730672][ T29] audit: type=1326 audit(1760787693.204:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 116.753505][ T3310] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 116.776209][ T29] audit: type=1326 audit(1760787693.234:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 116.799830][ T29] audit: type=1326 audit(1760787693.234:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 116.823503][ T29] audit: type=1326 audit(1760787693.234:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 116.847146][ T29] audit: type=1326 audit(1760787693.234:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 116.871052][ T29] audit: type=1326 audit(1760787693.244:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 116.908260][T10706] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.942751][ T29] audit: type=1326 audit(1760787693.414:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 116.966351][ T29] audit: type=1326 audit(1760787693.414:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264596efc9 code=0x7ffc0000 [ 117.077776][T10718] netlink: 'syz.5.2875': attribute type 3 has an invalid length. [ 117.616736][T10773] netlink: 'syz.3.2896': attribute type 4 has an invalid length. [ 117.633939][T10775] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2897'. [ 117.641483][T10773] netlink: 'syz.3.2896': attribute type 4 has an invalid length. [ 117.903792][T10797] loop5: detected capacity change from 0 to 512 [ 117.944309][T10797] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2905: bg 0: block 248: padding at end of block bitmap is not set [ 117.978862][T10797] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2905: Failed to acquire dquot type 1 [ 118.009324][T10797] EXT4-fs (loop5): 1 truncate cleaned up [ 118.020024][T10797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.033009][T10797] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.059670][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.069076][ T7507] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:48: Failed to release dquot type 1 [ 118.163167][ T7507] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.173015][ T7507] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 118.196391][ T7507] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.206269][ T7507] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 118.241792][T10821] netlink: 'syz.5.2915': attribute type 10 has an invalid length. [ 118.265339][T10821] team0: Port device dummy0 added [ 118.286120][ T7507] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.293900][T10821] netlink: 'syz.5.2915': attribute type 10 has an invalid length. [ 118.296032][ T7507] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 118.318966][T10823] Q6\bY4: renamed from lo (while UP) [ 118.347832][T10821] team0: Port device dummy0 removed [ 118.356295][T10821] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.372836][ T7507] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.382768][ T7507] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 118.439976][T10838] loop5: detected capacity change from 0 to 1024 [ 118.448479][T10838] EXT4-fs: Ignoring removed bh option [ 118.454844][T10838] EXT4-fs: inline encryption not supported [ 118.470070][T10838] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.481313][T10838] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 118.508642][T10838] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2920: lblock 2 mapped to illegal pblock 2 (length 1) [ 118.524280][T10838] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2920: lblock 0 mapped to illegal pblock 48 (length 1) [ 118.539220][T10838] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2920: Failed to acquire dquot type 0 [ 118.541601][ T7507] bridge_slave_1: left allmulticast mode [ 118.556308][T10838] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 118.556323][ T7507] bridge_slave_1: left promiscuous mode [ 118.556460][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.583261][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 118.593010][T10838] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2920: mark_inode_dirty error [ 118.604664][T10838] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 118.615426][ T7507] bridge_slave_0: left allmulticast mode [ 118.615448][T10838] EXT4-fs (loop5): 1 orphan inode deleted [ 118.621141][ T7507] bridge_slave_0: left promiscuous mode [ 118.627390][T10838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.632723][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.653059][ T12] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.668081][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 118.708545][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.719142][ T5612] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 118.738058][ T5612] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 118.748312][ T7507] bond1 (unregistering): (slave geneve2): Releasing active interface [ 118.757768][ T5612] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 118.866351][ T7507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.876632][ T7507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.886588][ T7507] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 118.895860][ T7507] bond0 (unregistering): Released all slaves [ 118.904727][ T7507] bond1 (unregistering): Released all slaves [ 118.911446][T10865] netlink: 'syz.2.2929': attribute type 4 has an invalid length. [ 118.913641][ T7507] bond2 (unregistering): Released all slaves [ 118.947657][T10858] netlink: 'syz.1.2927': attribute type 12 has an invalid length. [ 118.964202][T10866] netlink: 'syz.2.2929': attribute type 4 has an invalid length. [ 119.038659][ T7507] hsr_slave_0: left promiscuous mode [ 119.044525][ T7507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.052036][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.060955][ T7507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.068517][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.079015][ T7507] veth1_macvtap: left promiscuous mode [ 119.085053][ T7507] veth0_macvtap: left promiscuous mode [ 119.090986][ T7507] veth1_vlan: left promiscuous mode [ 119.095878][T10876] ip6t_rpfilter: unknown options [ 119.099540][ T7507] veth0_vlan: left promiscuous mode [ 119.169296][ T7507] team0 (unregistering): Port device team_slave_1 removed [ 119.180360][ T7507] team0 (unregistering): Port device team_slave_0 removed [ 119.220316][T10824] chnl_net:caif_netlink_parms(): no params data found [ 119.278126][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.285344][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.292653][T10824] bridge_slave_0: entered allmulticast mode [ 119.299349][T10824] bridge_slave_0: entered promiscuous mode [ 119.310232][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.317397][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.324753][T10824] bridge_slave_1: entered allmulticast mode [ 119.331239][T10824] bridge_slave_1: entered promiscuous mode [ 119.355063][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.365566][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.387610][T10824] team0: Port device team_slave_0 added [ 119.394673][T10824] team0: Port device team_slave_1 added [ 119.416970][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.424151][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.450220][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.462130][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.469150][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.495235][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.524131][T10824] hsr_slave_0: entered promiscuous mode [ 119.530352][T10824] hsr_slave_1: entered promiscuous mode [ 119.536354][T10824] debugfs: 'hsr0' already exists in 'hsr' [ 119.542085][T10824] Cannot create hsr debugfs directory [ 119.791340][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'. [ 119.891525][T10824] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 119.915685][T10824] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 119.934954][T10824] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 119.948027][T10824] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.047746][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.077095][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.108936][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.116172][ T7507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.139565][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.146766][ T7507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.257709][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.287937][T10959] pimreg: entered allmulticast mode [ 120.316029][T10959] pimreg: left allmulticast mode [ 120.551086][T10824] veth0_vlan: entered promiscuous mode [ 120.565820][T10824] veth1_vlan: entered promiscuous mode [ 120.595563][T10824] veth0_macvtap: entered promiscuous mode [ 120.648751][ T7499] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.664821][T10824] veth1_macvtap: entered promiscuous mode [ 120.698118][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.710253][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.722844][ T7507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.757725][ T7507] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.771535][ T7507] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.786945][T11008] loop3: detected capacity change from 0 to 128 [ 120.793380][ T7500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.831765][T11008] bio_check_eod: 101 callbacks suppressed [ 120.831783][T11008] syz.3.2980: attempt to access beyond end of device [ 120.831783][T11008] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 120.853215][T11008] syz.3.2980: attempt to access beyond end of device [ 120.853215][T11008] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 120.866839][T11008] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 120.894685][T11008] syz.3.2980: attempt to access beyond end of device [ 120.894685][T11008] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 120.908201][T11008] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 120.972536][T11007] syz.3.2980: attempt to access beyond end of device [ 120.972536][T11007] loop3: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 121.002090][T11007] syz.3.2980: attempt to access beyond end of device [ 121.002090][T11007] loop3: rw=2049, sector=138, nr_sectors = 12 limit=128 [ 121.193139][ T4671] kernel read not supported for file inotify (pid: 4671 comm: kworker/1:17) [ 121.384763][ T7503] Bluetooth: hci1: Frame reassembly failed (-84) [ 121.517628][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 121.517647][ T29] audit: type=1326 audit(1760787697.994:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 121.591907][ T29] audit: type=1326 audit(1760787698.034:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 121.615574][ T29] audit: type=1326 audit(1760787698.034:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 121.639078][ T29] audit: type=1326 audit(1760787698.054:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 121.662668][ T29] audit: type=1326 audit(1760787698.054:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 121.686228][ T29] audit: type=1326 audit(1760787698.054:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 121.809750][ T29] audit: type=1326 audit(1760787698.194:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 121.833384][ T29] audit: type=1326 audit(1760787698.194:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.2.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 121.857111][ T29] audit: type=1326 audit(1760787698.284:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 121.880916][ T29] audit: type=1326 audit(1760787698.284:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.3.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 122.354705][T11099] loop3: detected capacity change from 0 to 128 [ 122.425164][T11102] syz.3.3017: attempt to access beyond end of device [ 122.425164][T11102] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 122.442789][T11102] syz.3.3017: attempt to access beyond end of device [ 122.442789][T11102] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 122.458409][T11102] syz.3.3017: attempt to access beyond end of device [ 122.458409][T11102] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 122.479968][T11102] syz.3.3017: attempt to access beyond end of device [ 122.479968][T11102] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 122.493863][T11102] syz.3.3017: attempt to access beyond end of device [ 122.493863][T11102] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 122.598046][T11116] netlink: 'syz.6.3025': attribute type 3 has an invalid length. [ 122.636888][T11118] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 122.652634][T11118] SELinux: failed to load policy [ 122.694394][T11069] Bluetooth: hci0: command 0x1003 tx timeout [ 122.694702][ T3816] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.843968][T11136] loop6: detected capacity change from 0 to 128 [ 122.865608][T11136] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.895719][T11136] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.949838][T10824] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.084325][T11154] netlink: 'syz.3.3042': attribute type 10 has an invalid length. [ 123.093260][T11154] netlink: 'syz.3.3042': attribute type 10 has an invalid length. [ 123.110687][T11154] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 123.344831][T11181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11181 comm=syz.3.3054 [ 123.357551][T11181] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11181 comm=syz.3.3054 [ 123.414132][ T3816] Bluetooth: hci1: command 0x1003 tx timeout [ 123.416363][ T3905] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 124.220174][T11259] netlink: 'syz.1.3086': attribute type 10 has an invalid length. [ 124.230339][T11259] netlink: 'syz.1.3086': attribute type 10 has an invalid length. [ 124.240505][T11259] bond0: (slave ): Enslaving as an active interface with an up link [ 124.308520][T11270] wireguard0: entered promiscuous mode [ 124.314034][T11270] wireguard0: entered allmulticast mode [ 124.322750][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3092'. [ 124.331814][T11273] netlink: 'syz.6.3092': attribute type 14 has an invalid length. [ 124.344338][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3092'. [ 124.344579][ T7507] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.353430][T11273] netlink: 'syz.6.3092': attribute type 14 has an invalid length. [ 124.370130][ T7507] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.387113][ T7507] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.395980][ T7507] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.809079][T11307] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 124.968778][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3114'. [ 125.010679][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3114'. [ 125.067917][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3116'. [ 125.077198][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3116'. [ 125.274825][T11355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3127'. [ 125.283850][T11355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3127'. [ 125.309435][T11355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3127'. [ 125.318506][T11355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3127'. [ 125.373928][T11362] loop3: detected capacity change from 0 to 764 [ 126.221239][ T4671] IPVS: starting estimator thread 0... [ 126.324261][T11404] IPVS: using max 1920 ests per chain, 96000 per kthread [ 126.970752][T11490] netlink: 'syz.2.3184': attribute type 29 has an invalid length. [ 126.998282][T11490] netlink: 'syz.2.3184': attribute type 29 has an invalid length. [ 127.044167][T11490] unsupported nla_type 58 [ 127.188057][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 127.188131][ T29] audit: type=1326 audit(1760787703.664:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 127.278911][ T29] audit: type=1326 audit(1760787703.664:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 127.302567][ T29] audit: type=1326 audit(1760787703.664:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 127.326098][ T29] audit: type=1326 audit(1760787703.664:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 127.349633][ T29] audit: type=1326 audit(1760787703.664:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 127.373208][ T29] audit: type=1326 audit(1760787703.664:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 127.396746][ T29] audit: type=1326 audit(1760787703.694:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 127.421463][ T29] audit: type=1400 audit(1760787703.874:4533): avc: denied { map } for pid=11514 comm="syz.3.3195" path="socket:[31024]" dev="sockfs" ino=31024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 127.445520][T11510] atomic_op ffff8881023d3528 conn xmit_atomic 0000000000000000 [ 127.464286][T11518] netlink: 'syz.5.3194': attribute type 1 has an invalid length. [ 127.490840][T11518] gretap2: entered allmulticast mode [ 127.514257][T11518] bond1: (slave gretap2): making interface the new active one [ 127.542477][T11518] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 127.606930][T11539] netlink: 'syz.2.3206': attribute type 83 has an invalid length. [ 127.879531][T11579] SELinux: failed to load policy [ 128.031989][ T29] audit: type=1326 audit(1760787704.504:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.1.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 128.055718][ T29] audit: type=1326 audit(1760787704.504:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.1.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 128.465420][T11634] --map-set only usable from mangle table [ 129.041924][T11688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.051448][T11688] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 129.185598][T11702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.194784][T11702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.676805][T11752] sd 0:0:1:0: device reset [ 129.990833][T11761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11761 comm=syz.2.3306 [ 130.091084][T11769] sch_tbf: burst 19360 is lower than device lo mtu (11337746) ! [ 130.316518][T11786] netlink: 'syz.2.3318': attribute type 1 has an invalid length. [ 130.337205][T11786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 130.354033][T11786] bond4: (slave gretap2): making interface the new active one [ 130.362825][T11786] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 130.407255][T11789] loop6: detected capacity change from 0 to 1024 [ 130.425246][T11789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.441078][T11789] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 130.473143][T11789] System zones: 0-1, 3-36 [ 130.491101][T11789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.545304][T10824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.682733][T11823] loop9: detected capacity change from 0 to 7 [ 130.714895][T11823] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.735961][T11823] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.743913][T11823] loop9: unable to read partition table [ 130.752436][T11832] __nla_validate_parse: 19 callbacks suppressed [ 130.752453][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3338'. [ 130.768061][T11823] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 130.768061][T11823] ) failed (rc=-5) [ 130.818354][T11840] loop5: detected capacity change from 0 to 1024 [ 130.865683][T11840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.883131][T11852] netlink: 'syz.2.3348': attribute type 10 has an invalid length. [ 130.912324][T11852] team0: Port device dummy0 added [ 130.915178][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.922562][T11852] netlink: 'syz.2.3348': attribute type 10 has an invalid length. [ 130.938102][T11852] team0: Port device dummy0 removed [ 130.956112][T11852] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.966502][T11861] loop6: detected capacity change from 0 to 2048 [ 131.005039][T11861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.056604][T10824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.106082][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3358'. [ 131.128068][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3358'. [ 131.137025][T11877] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3358'. [ 131.652212][T11931] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3382'. [ 131.910910][T11960] macsec1: entered promiscuous mode [ 131.916363][T11960] bridge0: entered promiscuous mode [ 131.928485][T11960] bridge0: port 4(macsec1) entered blocking state [ 131.935107][T11960] bridge0: port 4(macsec1) entered disabled state [ 131.942139][T11960] macsec1: entered allmulticast mode [ 131.947608][T11960] bridge0: entered allmulticast mode [ 131.954233][T11960] macsec1: left allmulticast mode [ 131.959362][T11960] bridge0: left allmulticast mode [ 131.965244][T11960] bridge0: left promiscuous mode [ 132.296197][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'. [ 132.414411][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 132.414431][ T29] audit: type=1400 audit(1760787708.874:4621): avc: denied { bind } for pid=12015 comm="syz.5.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.454226][ T29] audit: type=1400 audit(1760787708.914:4622): avc: denied { listen } for pid=12015 comm="syz.5.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.503848][ T29] audit: type=1326 audit(1760787708.974:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12022 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff369025e67 code=0x7ffc0000 [ 132.527423][ T29] audit: type=1326 audit(1760787708.974:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12022 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff368fcb099 code=0x7ffc0000 [ 132.550891][ T29] audit: type=1326 audit(1760787708.974:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12022 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff369025e67 code=0x7ffc0000 [ 132.574323][ T29] audit: type=1326 audit(1760787708.974:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12022 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff368fcb099 code=0x7ffc0000 [ 132.597834][ T29] audit: type=1326 audit(1760787708.974:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12022 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 132.621620][ T29] audit: type=1326 audit(1760787708.974:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12022 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 132.699673][ T29] audit: type=1326 audit(1760787708.974:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12022 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 132.723194][ T29] audit: type=1326 audit(1760787708.974:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12022 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 132.766198][ T4672] hid_parser_main: 30 callbacks suppressed [ 132.766220][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.779705][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.787239][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.794854][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.802362][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.809893][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.817338][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.824846][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.832366][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.839954][ T4672] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.850107][ T4672] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 132.926871][T12045] loop3: detected capacity change from 0 to 512 [ 132.935626][T12046] xt_hashlimit: max too large, truncated to 1048576 [ 132.946202][T12045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.958951][T12045] ext4 filesystem being mounted at /725/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.970310][T12045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.004850][T12052] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3436'. [ 133.133765][T12062] SELinux: failed to load policy [ 133.204914][T12071] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3445'. [ 133.863617][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.883296][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.111726][T12134] netlink: 'syz.1.3470': attribute type 10 has an invalid length. [ 134.140222][T12134] bond0: (slave ): Releasing backup interface [ 134.155742][T12134] netlink: 'syz.1.3470': attribute type 10 has an invalid length. [ 134.170983][T12134] bond0: (slave ): Enslaving as an active interface with an up link [ 134.409528][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3478'. [ 134.904364][T12155] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 134.917656][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'. [ 134.940833][ T7479] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.957715][ T7479] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.974266][ T7479] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.986245][ T7479] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.025314][T12170] loop6: detected capacity change from 0 to 256 [ 135.184224][T12192] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 135.202237][T12195] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 135.218039][T12192] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 135.419065][T12220] wireguard0: entered promiscuous mode [ 135.424703][T12220] wireguard0: entered allmulticast mode [ 136.318644][T12283] __nla_validate_parse: 8 callbacks suppressed [ 136.318665][T12283] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3532'. [ 136.410033][T12289] loop5: detected capacity change from 0 to 128 [ 136.611346][ T4644] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 136.633697][T12311] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3549'. [ 137.013487][T12332] syzkaller1: entered promiscuous mode [ 137.019110][T12332] syzkaller1: entered allmulticast mode [ 137.139556][T12338] loop5: detected capacity change from 0 to 1024 [ 137.172152][T12338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.211263][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.307927][T12350] atomic_op ffff888124195528 conn xmit_atomic 0000000000000000 [ 137.317936][T12355] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3563'. [ 137.471222][ T4671] IPVS: starting estimator thread 0... [ 137.564148][T12367] IPVS: using max 2352 ests per chain, 117600 per kthread [ 137.588347][T12372] SELinux: failed to load policy [ 137.862072][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 137.862123][ T29] audit: type=1326 audit(1760787714.334:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.1.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 137.913368][ T29] audit: type=1326 audit(1760787714.374:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.1.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 137.937005][ T29] audit: type=1326 audit(1760787714.374:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.1.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 137.960639][ T29] audit: type=1326 audit(1760787714.374:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.1.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 137.984352][ T29] audit: type=1326 audit(1760787714.374:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.1.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 138.008289][ T29] audit: type=1326 audit(1760787714.384:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 138.031978][ T29] audit: type=1326 audit(1760787714.384:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 138.055535][ T29] audit: type=1326 audit(1760787714.384:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 138.079148][ T29] audit: type=1326 audit(1760787714.384:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 138.103284][ T29] audit: type=1326 audit(1760787714.384:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.1.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4993efc9 code=0x7ffc0000 [ 138.163916][T12402] loop3: detected capacity change from 0 to 256 [ 138.260545][T12421] xt_hashlimit: max too large, truncated to 1048576 [ 138.402726][T12436] netlink: 'syz.5.3598': attribute type 3 has an invalid length. [ 138.436681][T12438] loop5: detected capacity change from 0 to 256 [ 138.582779][T12449] netlink: 96 bytes leftover after parsing attributes in process `GPL'. [ 139.093901][T12464] netlink: 'syz.1.3613': attribute type 3 has an invalid length. [ 139.305920][T12484] xt_hashlimit: max too large, truncated to 1048576 [ 139.466617][T12496] netlink: 'syz.6.3627': attribute type 3 has an invalid length. [ 139.498456][T12500] hub 9-0:1.0: USB hub found [ 139.504348][T12500] hub 9-0:1.0: 8 ports detected [ 140.502850][T12532] loop6: detected capacity change from 0 to 512 [ 140.525302][T12532] EXT4-fs: Ignoring removed oldalloc option [ 140.545177][T12536] netlink: 'syz.2.3643': attribute type 3 has an invalid length. [ 140.552031][T12532] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 140.592696][T12532] EXT4-fs (loop6): 1 truncate cleaned up [ 140.608696][T12532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.730840][T12532] loop6: detected capacity change from 512 to 64 [ 140.748174][T12548] bio_check_eod: 106 callbacks suppressed [ 140.748202][T12548] syz.6.3653: attempt to access beyond end of device [ 140.748202][T12548] loop6: rw=2049, sector=74, nr_sectors = 4 limit=64 [ 140.767304][T12548] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 37) [ 140.778498][T12548] Buffer I/O error on device loop6, logical block 37 [ 140.785292][T12548] Buffer I/O error on device loop6, logical block 38 [ 140.857935][T12548] syz.6.3653: attempt to access beyond end of device [ 140.857935][T12548] loop6: rw=2049, sector=86, nr_sectors = 8 limit=64 [ 140.871274][T12548] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 43) [ 140.882462][T12548] Buffer I/O error on device loop6, logical block 43 [ 140.889155][T12548] Buffer I/O error on device loop6, logical block 44 [ 140.895967][T12548] Buffer I/O error on device loop6, logical block 45 [ 140.902657][T12548] Buffer I/O error on device loop6, logical block 46 [ 141.010131][T12548] syz.6.3653: attempt to access beyond end of device [ 141.010131][T12548] loop6: rw=2049, sector=102, nr_sectors = 8 limit=64 [ 141.023588][T12548] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 51) [ 141.034880][T12548] Buffer I/O error on device loop6, logical block 51 [ 141.041577][T12548] Buffer I/O error on device loop6, logical block 52 [ 141.048337][T12548] Buffer I/O error on device loop6, logical block 53 [ 141.055079][T12548] Buffer I/O error on device loop6, logical block 54 [ 141.134411][T10824] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -12) [ 141.157107][T10824] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 141.174717][T10824] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 141.375803][T10824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.578084][ T7516] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.588485][ T7516] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.686623][ T7516] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.697073][ T7516] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.841449][ T7516] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.851871][ T7516] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.003867][ T7516] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.014728][ T7516] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.028467][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3671'. [ 142.155933][T12607] : renamed from vlan1 (while UP) [ 142.259324][ T7516] bridge_slave_1: left allmulticast mode [ 142.265071][ T7516] bridge_slave_1: left promiscuous mode [ 142.270787][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.290022][T12615] loop5: detected capacity change from 0 to 1024 [ 142.297710][T12615] EXT4-fs: Ignoring removed orlov option [ 142.303604][ T7516] bridge_slave_0: left allmulticast mode [ 142.309361][ T7516] bridge_slave_0: left promiscuous mode [ 142.315313][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.364907][T12615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.405080][T12615] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3676: bg 0: block 232: padding at end of block bitmap is not set [ 142.430477][T12615] EXT4-fs (loop5): Remounting filesystem read-only [ 142.450496][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.467238][ T7516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.478229][ T7516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.488313][ T7516] bond0 (unregistering): Released all slaves [ 142.499525][T12613] veth1_macvtap: left promiscuous mode [ 142.505353][T12613] macsec0: entered promiscuous mode [ 142.514940][T12626] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 142.570736][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3684'. [ 142.586799][ T4671] hid_parser_main: 72 callbacks suppressed [ 142.586824][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.600195][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.607646][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.615572][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.623092][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.630698][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.638148][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.645588][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.653036][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.660588][ T4671] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 142.668642][ T4671] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 142.669113][ T7516] hsr_slave_0: left promiscuous mode [ 142.687317][ T7516] hsr_slave_1: left promiscuous mode [ 142.699947][ T7516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.707477][ T7516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.716523][ T7516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.723982][ T7516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.739483][ T7516] veth1_macvtap: left promiscuous mode [ 142.749399][ T7516] veth0_macvtap: left promiscuous mode [ 142.759523][ T7516] veth1_vlan: left promiscuous mode [ 142.764892][ T7516] veth0_vlan: left promiscuous mode [ 142.775254][T12655] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3690'. [ 142.784606][T12655] xt_policy: neither incoming nor outgoing policy selected [ 142.876856][ T7516] team0 (unregistering): Port device team_slave_1 removed [ 142.907173][ T7516] team0 (unregistering): Port device team_slave_0 removed [ 142.965742][T12664] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 142.979407][T12581] chnl_net:caif_netlink_parms(): no params data found [ 143.059934][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.067199][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.074483][T12581] bridge_slave_0: entered allmulticast mode [ 143.080942][T12581] bridge_slave_0: entered promiscuous mode [ 143.089427][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.096560][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.106367][T12581] bridge_slave_1: entered allmulticast mode [ 143.115164][T12581] bridge_slave_1: entered promiscuous mode [ 143.134495][T12581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.145292][T12581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.172603][ T4644] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz0 [ 143.195482][T12581] team0: Port device team_slave_0 added [ 143.213680][T12581] team0: Port device team_slave_1 added [ 143.256877][T12581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.263896][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.289968][T12581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.302933][T12581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.309957][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.336021][T12581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.348366][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3705'. [ 143.447622][T12581] hsr_slave_0: entered promiscuous mode [ 143.456364][T12581] hsr_slave_1: entered promiscuous mode [ 143.462387][T12581] debugfs: 'hsr0' already exists in 'hsr' [ 143.468264][T12581] Cannot create hsr debugfs directory [ 143.539383][T12581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 143.548111][T12581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 143.557020][T12581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 143.565691][T12581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 143.590756][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 143.590773][ T29] audit: type=1326 audit(1760787720.064:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.629195][T12715] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3712'. [ 143.641124][ T29] audit: type=1326 audit(1760787720.104:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.654210][T12715] xt_policy: neither incoming nor outgoing policy selected [ 143.664761][ T29] audit: type=1326 audit(1760787720.104:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.664801][ T29] audit: type=1326 audit(1760787720.104:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.664836][ T29] audit: type=1326 audit(1760787720.104:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.742647][ T29] audit: type=1326 audit(1760787720.104:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.745439][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.766229][ T29] audit: type=1326 audit(1760787720.104:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.766293][ T29] audit: type=1326 audit(1760787720.114:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.819996][ T29] audit: type=1326 audit(1760787720.114:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.843612][ T29] audit: type=1326 audit(1760787720.114:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.5.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 143.880832][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.897375][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.904526][ T7516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.913373][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.920517][ T7516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.946815][T12718] : renamed from vlan1 (while UP) [ 144.073799][T12581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.289705][T12581] veth0_vlan: entered promiscuous mode [ 144.296211][T12779] loop5: detected capacity change from 0 to 1024 [ 144.311948][T12581] veth1_vlan: entered promiscuous mode [ 144.433806][T12581] veth0_macvtap: entered promiscuous mode [ 144.458839][T12581] veth1_macvtap: entered promiscuous mode [ 144.473711][T12795] macsec0: entered promiscuous mode [ 144.483493][T12581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.503163][T12797] loop3: detected capacity change from 0 to 1024 [ 144.513338][T12581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.543085][ T7516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.573929][ T7516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.597671][ T7516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.611546][ T7516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.979411][T12831] macsec0: entered promiscuous mode [ 145.002241][T12833] loop7: detected capacity change from 0 to 1024 [ 145.046998][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'. [ 145.082434][T12840] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 145.082434][T12840] program syz.1.3759 not setting count and/or reply_len properly [ 145.215889][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'. [ 145.225021][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'. [ 145.233916][T12858] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3766'. [ 145.243541][T12856] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 145.460349][T12881] loop3: detected capacity change from 0 to 512 [ 145.467614][T12881] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.495325][T12881] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 145.503339][T12881] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 145.511521][T12881] System zones: 0-1, 15-15, 18-18, 34-34 [ 145.517620][T12881] EXT4-fs (loop3): orphan cleanup on readonly fs [ 145.524244][T12881] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 145.538981][T12881] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 145.546288][T12881] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3772: bg 0: block 40: padding at end of block bitmap is not set [ 145.561111][T12881] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 145.570259][T12881] EXT4-fs (loop3): 1 truncate cleaned up [ 145.577778][T12881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.643275][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3781'. [ 145.652433][T12895] netlink: 'syz.1.3781': attribute type 14 has an invalid length. [ 145.685471][T12895] netlink: 'syz.1.3781': attribute type 14 has an invalid length. [ 145.818552][T12910] bridge0: entered promiscuous mode [ 145.826665][T12910] macsec1: entered promiscuous mode [ 145.832582][T12910] bridge0: port 4(macsec1) entered blocking state [ 145.839157][T12910] bridge0: port 4(macsec1) entered disabled state [ 145.846519][T12910] macsec1: entered allmulticast mode [ 145.851966][T12910] bridge0: entered allmulticast mode [ 145.858241][T12910] macsec1: left allmulticast mode [ 145.863310][T12910] bridge0: left allmulticast mode [ 145.875710][T12910] bridge0: left promiscuous mode [ 145.955679][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.999439][T12931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12931 comm=syz.1.3799 [ 146.188291][T12952] bridge0: entered promiscuous mode [ 146.193704][T12952] macsec1: entered promiscuous mode [ 146.200452][T12952] bridge0: port 3(macsec1) entered blocking state [ 146.207032][T12952] bridge0: port 3(macsec1) entered disabled state [ 146.213827][T12952] macsec1: entered allmulticast mode [ 146.219226][T12952] bridge0: entered allmulticast mode [ 146.225971][T12952] macsec1: left allmulticast mode [ 146.231092][T12952] bridge0: left allmulticast mode [ 146.258215][T12952] bridge0: left promiscuous mode [ 146.393565][T12973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.400862][T12973] IPv6: NLM_F_CREATE should be set when creating new route [ 146.408106][T12973] IPv6: NLM_F_CREATE should be set when creating new route [ 146.434409][T12975] pim6reg: entered allmulticast mode [ 146.440423][T12975] pim6reg: left allmulticast mode [ 146.832680][T13013] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.886039][T13013] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.988527][T13013] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.002714][T13018] loop5: detected capacity change from 0 to 512 [ 147.010046][T13018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.026552][T13013] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.036970][T13018] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 147.045041][T13018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 147.053800][T13018] System zones: 0-1, 15-15, 18-18, 34-34 [ 147.060154][T13018] EXT4-fs (loop5): orphan cleanup on readonly fs [ 147.066765][T13018] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.081455][T13018] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 147.090731][T13018] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3845: bg 0: block 40: padding at end of block bitmap is not set [ 147.116431][T13018] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 147.118653][ T7479] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.134667][T13018] EXT4-fs (loop5): 1 truncate cleaned up [ 147.140041][ T7479] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.149086][T13018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.166719][T13026] loop7: detected capacity change from 0 to 1024 [ 147.176839][ T7479] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.204002][ T7479] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.222406][T13026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.250431][T12581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.416119][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.550769][T13056] __nla_validate_parse: 1 callbacks suppressed [ 147.550823][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 147.567347][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3848'. [ 147.684659][T13067] netlink: 'syz.2.3854': attribute type 10 has an invalid length. [ 147.695769][T13067] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.704530][T13067] bond0: (slave team0): Enslaving as an active interface with an up link [ 148.322496][T13076] ip6erspan0: entered promiscuous mode [ 148.384328][T13086] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.3865'. [ 148.520401][T13106] loop7: detected capacity change from 0 to 512 [ 148.529916][T13106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.541795][T13108] loop3: detected capacity change from 0 to 256 [ 148.567062][T13106] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 148.575225][T13106] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 148.591600][T13106] System zones: 0-1, 15-15, 18-18, 34-34 [ 148.599305][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'. [ 148.603807][T13106] EXT4-fs (loop7): orphan cleanup on readonly fs [ 148.615634][T13106] __quota_error: 86 callbacks suppressed [ 148.615652][T13106] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 148.631536][T13106] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 148.646247][T13106] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 148.659984][T13106] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3857: bg 0: block 40: padding at end of block bitmap is not set [ 148.690318][ T29] audit: type=1400 audit(1760787725.164:4872): avc: denied { setattr } for pid=13121 comm="+}[@" name="file0" dev="tmpfs" ino=4295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.712938][T13106] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 148.722097][T13106] EXT4-fs (loop7): 1 truncate cleaned up [ 148.728506][T13106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.745432][T13126] batadv_slave_1: entered promiscuous mode [ 148.768057][T13129] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 148.776560][T13126] batadv_slave_1: left promiscuous mode [ 148.797244][ T29] audit: type=1326 audit(1760787725.274:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13131 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 148.828688][ T29] audit: type=1326 audit(1760787725.274:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13131 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 148.852314][ T29] audit: type=1326 audit(1760787725.274:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13131 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 148.876085][ T29] audit: type=1326 audit(1760787725.304:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13131 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 148.903924][ T29] audit: type=1326 audit(1760787725.354:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb47d1f1885 code=0x7ffc0000 [ 148.943594][T13136] bridge0: entered promiscuous mode [ 148.949040][T13136] macsec1: entered promiscuous mode [ 148.974847][T13136] bridge0: port 3(macsec1) entered blocking state [ 148.981356][T13136] bridge0: port 3(macsec1) entered disabled state [ 148.988433][T13136] macsec1: entered allmulticast mode [ 148.993780][T13136] bridge0: entered allmulticast mode [ 148.999963][T13136] macsec1: left allmulticast mode [ 149.005266][T13136] bridge0: left allmulticast mode [ 149.018325][T13136] bridge0: left promiscuous mode [ 149.026410][ T29] audit: type=1326 audit(1760787725.504:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 149.050156][ T29] audit: type=1326 audit(1760787725.504:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13131 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 149.074234][ T29] audit: type=1326 audit(1760787725.504:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13131 comm="syz.2.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 149.103073][T13141] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.140835][T13144] loop5: detected capacity change from 0 to 256 [ 149.154324][T12581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.174309][T13141] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.215678][T13141] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.268081][T13141] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.342813][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.360150][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.371520][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.380432][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.487120][T13189] netlink: 'syz.7.3913': attribute type 10 has an invalid length. [ 149.512382][T13189] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.521161][T13193] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 149.521161][T13193] program syz.5.3915 not setting count and/or reply_len properly [ 149.525597][T13189] bond0: (slave team0): Enslaving as an active interface with an up link [ 149.836336][T13233] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 149.981420][T13243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3947'. [ 149.990490][T13243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3947'. [ 150.071333][T13251] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 150.071333][T13251] program syz.7.3941 not setting count and/or reply_len properly [ 150.153148][ T7500] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.273738][T13272] pim6reg: entered allmulticast mode [ 150.281126][T13272] pim6reg: left allmulticast mode [ 150.660564][T13341] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 150.985199][T13368] loop3: detected capacity change from 0 to 1024 [ 150.996752][T13368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.026510][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.292419][T13397] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 151.308475][T13399] pimreg: entered allmulticast mode [ 151.318759][T13399] pimreg: left allmulticast mode [ 151.389143][T13404] loop5: detected capacity change from 0 to 1024 [ 151.427045][T13404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.457305][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.719100][T13436] sg_write: process 1452 (syz.5.4024) changed security contexts after opening file descriptor, this is not allowed. [ 151.995340][T13456] vlan1: entered allmulticast mode [ 152.121221][T13461] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 152.214137][ T3816] Bluetooth: hci0: command 0x1003 tx timeout [ 152.217992][ T3905] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.390479][T13492] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4048'. [ 152.550631][T13512] pim6reg: entered allmulticast mode [ 152.562306][T13512] pim6reg: left allmulticast mode [ 152.667787][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4065'. [ 152.686287][T13529] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4065'. [ 152.695520][T13529] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4065'. [ 152.704827][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4065'. [ 152.797350][T13547] pimreg: entered allmulticast mode [ 152.820200][T13547] pimreg: left allmulticast mode [ 152.842505][T13554] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 152.874295][T13556] netlink: 'syz.5.4078': attribute type 1 has an invalid length. [ 152.882124][T13556] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.4078'. [ 153.041696][T13583] atomic_op ffff888109f0a928 conn xmit_atomic 0000000000000000 [ 153.145074][T13598] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 153.145074][T13598] program syz.7.4095 not setting count and/or reply_len properly [ 153.275870][T13608] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4100'. [ 153.438760][T13623] pimreg: entered allmulticast mode [ 153.462054][T13627] netlink: 'syz.2.4108': attribute type 3 has an invalid length. [ 153.481603][T13623] pimreg: left allmulticast mode [ 153.500289][T13633] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 153.500289][T13633] program syz.5.4111 not setting count and/or reply_len properly [ 153.531984][T13635] vlan1: entered allmulticast mode [ 153.878753][T13662] netlink: 'syz.2.4125': attribute type 1 has an invalid length. [ 153.886585][T13662] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4125'. [ 154.376938][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4139'. [ 154.458600][T13711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4147'. [ 154.534954][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 154.534974][ T29] audit: type=1326 audit(154.521:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.564099][ T29] audit: type=1326 audit(154.521:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.589621][ T29] audit: type=1326 audit(154.581:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.612746][ T29] audit: type=1326 audit(154.581:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.635769][ T29] audit: type=1326 audit(154.581:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.658999][ T29] audit: type=1326 audit(154.581:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.683717][ T29] audit: type=1326 audit(154.581:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.706829][ T29] audit: type=1326 audit(154.581:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.729845][ T29] audit: type=1326 audit(154.611:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.752864][ T29] audit: type=1326 audit(154.611:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13725 comm="syz.5.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1c8efc9 code=0x7ffc0000 [ 154.760171][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4158'. [ 155.055669][T13765] binfmt_misc: register: failed to install interpreter file ./file2 [ 155.188572][T13778] loop7: detected capacity change from 0 to 1024 [ 155.218143][T13778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.237244][T13778] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 155.252546][T13778] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 155.264958][T13778] EXT4-fs (loop7): This should not happen!! Data will be lost [ 155.264958][T13778] [ 155.274675][T13778] EXT4-fs (loop7): Total free blocks count 0 [ 155.280684][T13778] EXT4-fs (loop7): Free/Dirty block details [ 155.286624][T13778] EXT4-fs (loop7): free_blocks=68451041280 [ 155.292530][T13778] EXT4-fs (loop7): dirty_blocks=80 [ 155.297722][T13778] EXT4-fs (loop7): Block reservation details [ 155.303720][T13778] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 155.354757][ T7507] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 155.478551][T13800] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 155.540788][T13822] loop7: detected capacity change from 0 to 512 [ 155.558280][T13822] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 155.570390][T13825] rdma_op ffff88812d42dd80 conn xmit_rdma 0000000000000000 [ 155.591202][T13822] EXT4-fs (loop7): 1 truncate cleaned up [ 155.604391][T13822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.631302][T13822] EXT4-fs (loop7): shut down requested (2) [ 155.651219][T12581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.823832][T13860] loop5: detected capacity change from 0 to 2048 [ 155.857317][T13860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.994993][T13888] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 156.002786][T13879] rdma_op ffff88812d42c580 conn xmit_rdma 0000000000000000 [ 156.128590][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.203963][T13907] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13907 comm=syz.3.4229 [ 156.339573][T13933] loop7: detected capacity change from 0 to 2048 [ 156.369998][T13937] netlink: 'syz.2.4240': attribute type 1 has an invalid length. [ 156.396351][T13933] Alternate GPT is invalid, using primary GPT. [ 156.402736][T13933] loop7: p2 p3 p7 [ 156.512608][T13942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13942 comm=syz.7.4243 [ 156.676661][T13972] tipc: Failed to remove unknown binding: 66,1,1/0:975143869/975143871 [ 156.685180][T13972] tipc: Failed to remove unknown binding: 66,1,1/0:975143869/975143871 [ 156.696359][T13974] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 156.905572][T14005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14005 comm=syz.1.4273 [ 156.930161][T14010] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 157.012642][T13910] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0 [ 157.110198][T14029] SELinux: failed to load policy [ 157.266778][T14055] loop7: detected capacity change from 0 to 1024 [ 157.289687][T14055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.293084][T14061] ip6tnl2: entered promiscuous mode [ 157.338688][T14063] loop3: detected capacity change from 0 to 512 [ 157.348309][T14063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.350459][T12581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.370764][T14065] bridge0: entered promiscuous mode [ 157.377562][T14065] bridge0: port 3(macsec1) entered blocking state [ 157.384032][T14065] bridge0: port 3(macsec1) entered disabled state [ 157.390808][T14065] macsec1: entered allmulticast mode [ 157.391817][T14063] EXT4-fs (loop3): 1 truncate cleaned up [ 157.396149][T14065] bridge0: entered allmulticast mode [ 157.407666][T14065] macsec1: left allmulticast mode [ 157.412734][T14065] bridge0: left allmulticast mode [ 157.423574][T14063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.448490][T14065] bridge0: left promiscuous mode [ 157.464094][T14071] tipc: Started in network mode [ 157.467049][T14063] EXT4-fs (loop3): shut down requested (2) [ 157.469098][T14071] tipc: Node identity ac141413, cluster identity 4711 [ 157.482397][T14071] tipc: New replicast peer: 10.1.1.2 [ 157.487847][T14071] tipc: Enabled bearer , priority 10 [ 157.494979][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.703096][T14100] tipc: Started in network mode [ 157.708056][T14100] tipc: Node identity ac141413, cluster identity 4711 [ 157.727702][T14098] SELinux: failed to load policy [ 157.749260][T14100] tipc: New replicast peer: 10.1.1.2 [ 157.754731][T14100] tipc: Enabled bearer , priority 10 [ 158.367419][T14149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.380358][T14149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.489980][ T4669] tipc: Node number set to 2886997011 [ 158.522024][T14167] __nla_validate_parse: 4 callbacks suppressed [ 158.522054][T14167] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4344'. [ 158.557106][T14167] hsr_slave_0: left promiscuous mode [ 158.563185][T14167] hsr_slave_1: left promiscuous mode [ 158.588802][T14175] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 158.639943][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4357'. [ 158.648959][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4357'. [ 158.837737][T14204] bridge0: entered promiscuous mode [ 158.846027][T14204] bridge0: port 3(macsec1) entered blocking state [ 158.852534][T14204] bridge0: port 3(macsec1) entered disabled state [ 158.860374][T14204] macsec1: entered allmulticast mode [ 158.865763][T14204] bridge0: entered allmulticast mode [ 158.872128][T14204] macsec1: left allmulticast mode [ 158.874136][ T4644] tipc: Node number set to 2886997011 [ 158.877237][T14204] bridge0: left allmulticast mode [ 158.889049][T14204] bridge0: left promiscuous mode [ 158.899960][T14206] ip6tnl1: entered promiscuous mode [ 158.998672][T14216] loop5: detected capacity change from 0 to 1024 [ 159.035858][T14216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.125622][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.163170][T14231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4372'. [ 159.189468][T14231] geneve3: entered promiscuous mode [ 159.195943][ T7479] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.204404][ T7479] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.213359][ T7479] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.224904][T14240] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4376'. [ 159.258603][T14244] loop9: detected capacity change from 0 to 7 [ 159.265029][T14244] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.279765][ T7479] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.283183][T14244] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.296190][T14244] loop9: unable to read partition table [ 159.319547][T14244] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 159.319547][T14244] ) failed (rc=-5) [ 159.523187][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4388'. [ 159.564245][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 159.564353][ T29] audit: type=1326 audit(159.551:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 159.595611][ T29] audit: type=1326 audit(159.551:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 159.628188][ T29] audit: type=1326 audit(159.611:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 159.651393][ T29] audit: type=1326 audit(159.611:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 159.674436][ T29] audit: type=1326 audit(159.611:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 159.702115][ T29] audit: type=1326 audit(159.611:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 159.725704][ T29] audit: type=1326 audit(159.711:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 159.770696][ T29] audit: type=1326 audit(159.731:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 159.793755][ T29] audit: type=1326 audit(159.751:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 159.816825][ T29] audit: type=1326 audit(159.751:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 160.037030][T14301] loop7: detected capacity change from 0 to 512 [ 160.066049][T14301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.127394][T14306] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4405'. [ 160.175626][T14306] hsr_slave_0: left promiscuous mode [ 160.557712][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4423'. [ 160.567502][T12581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.889936][T14388] IPv6: Can't replace route, no match found [ 161.005549][T14404] loop3: detected capacity change from 0 to 2048 [ 161.038732][T14404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.147271][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.660260][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4476'. [ 161.705755][T14465] loop3: detected capacity change from 0 to 512 [ 161.714550][T14465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.003642][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.068128][T14509] loop5: detected capacity change from 0 to 128 [ 162.154307][T14517] SELinux: failed to load policy [ 162.260444][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4510'. [ 162.271887][T14535] bridge0: entered promiscuous mode [ 162.277264][T14535] macsec1: entered promiscuous mode [ 162.283787][T14535] bridge0: port 3(macsec1) entered blocking state [ 162.290364][T14535] bridge0: port 3(macsec1) entered disabled state [ 162.312852][T14535] macsec1: entered allmulticast mode [ 162.318395][T14535] bridge0: entered allmulticast mode [ 162.324485][T14535] macsec1: left allmulticast mode [ 162.329677][T14535] bridge0: left allmulticast mode [ 162.352837][T14535] bridge0: left promiscuous mode [ 162.366008][T14537] bridge0: port 3(macsec1) entered blocking state [ 162.372517][T14537] bridge0: port 3(macsec1) entered disabled state [ 162.379154][T14540] loop3: detected capacity change from 0 to 8192 [ 162.380671][T14537] macsec1: entered allmulticast mode [ 162.391602][T14537] macsec1: left allmulticast mode [ 162.787044][T14574] bridge0: port 3(macsec1) entered blocking state [ 162.793569][T14574] bridge0: port 3(macsec1) entered disabled state [ 162.803749][T14574] macsec1: entered allmulticast mode [ 162.821248][T14574] macsec1: left allmulticast mode [ 162.956991][T14589] vhci_hcd: invalid port number 96 [ 162.962150][T14589] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 163.076660][T14601] loop5: detected capacity change from 0 to 512 [ 163.085910][T14601] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 163.141506][T14608] loop5: detected capacity change from 0 to 2048 [ 163.164699][T14608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.205260][T14616] bridge0: port 4(macsec1) entered blocking state [ 163.211902][T14616] bridge0: port 4(macsec1) entered disabled state [ 163.258380][T14616] macsec1: entered allmulticast mode [ 163.282415][T14616] macsec1: left allmulticast mode [ 163.358114][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.440470][T14546] wޣ (14546) used greatest stack depth: 6376 bytes left [ 163.465084][T14636] sctp: [Deprecated]: syz.5.4547 (pid 14636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.465084][T14636] Use struct sctp_sack_info instead [ 163.495037][T14639] loop3: detected capacity change from 0 to 164 [ 163.505940][T14639] syz.3.4555: attempt to access beyond end of device [ 163.505940][T14639] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 163.520067][T14639] syz.3.4555: attempt to access beyond end of device [ 163.520067][T14639] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 163.939204][T14689] loop7: detected capacity change from 0 to 512 [ 163.946705][T14689] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 164.249869][T14732] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.257380][T14732] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.268068][T14732] vhci_hcd: default hub control req: 230f v0004 i0000 l3 [ 164.282580][T14737] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 164.299024][T14740] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.356698][T14748] __nla_validate_parse: 6 callbacks suppressed [ 164.356717][T14748] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4602'. [ 164.656580][T14771] netlink: 5388 bytes leftover after parsing attributes in process `syz.1.4612'. [ 165.077671][T14796] SELinux: failed to load policy [ 165.115088][T14800] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.4626' sets config #1 [ 165.162541][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 165.162556][ T29] audit: type=1326 audit(165.212:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 165.197835][ T29] audit: type=1326 audit(165.212:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 165.220874][ T29] audit: type=1326 audit(165.212:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 165.243737][ T29] audit: type=1326 audit(165.212:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 165.266638][ T29] audit: type=1326 audit(165.243:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36902efc9 code=0x7ffc0000 [ 165.319907][T14811] loop5: detected capacity change from 0 to 1024 [ 165.336402][T14811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.361059][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.624313][ T29] audit: type=1400 audit(165.685:5631): avc: denied { execute } for pid=14835 comm="syz.1.4641" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 165.844133][T14848] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 165.851700][T14848] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.877014][T14848] vhci_hcd: default hub control req: 230f v0004 i0000 l3 [ 165.935783][ T29] audit: type=1400 audit(166.004:5632): avc: denied { bind } for pid=14852 comm="syz.7.4649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.009572][ T29] audit: type=1400 audit(166.086:5633): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 166.070546][T14858] netlink: 5388 bytes leftover after parsing attributes in process `syz.2.4648'. [ 166.095169][ T29] audit: type=1400 audit(166.178:5634): avc: denied { setopt } for pid=14865 comm="syz.3.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.279534][ T29] audit: type=1400 audit(166.352:5635): avc: denied { ioctl } for pid=14887 comm="syz.3.4663" path="socket:[42181]" dev="sockfs" ino=42181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.346509][T14890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4664'. [ 166.452141][T14903] GUP no longer grows the stack in syz.5.4669 (14903): 200000004000-20000000a000 (200000002000) [ 166.462700][T14903] CPU: 0 UID: 0 PID: 14903 Comm: syz.5.4669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.462786][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.462804][T14903] Call Trace: [ 166.462812][T14903] [ 166.462821][T14903] __dump_stack+0x1d/0x30 [ 166.462844][T14903] dump_stack_lvl+0xe8/0x140 [ 166.462864][T14903] dump_stack+0x15/0x1b [ 166.462934][T14903] __get_user_pages+0x1968/0x1ed0 [ 166.462971][T14903] get_user_pages_remote+0x1d5/0x6c0 [ 166.463002][T14903] __access_remote_vm+0x15c/0x590 [ 166.463135][T14903] access_remote_vm+0x32/0x40 [ 166.463166][T14903] proc_pid_cmdline_read+0x32b/0x6c0 [ 166.463207][T14903] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 166.463321][T14903] vfs_readv+0x3fb/0x690 [ 166.463382][T14903] __x64_sys_preadv+0xfd/0x1c0 [ 166.463463][T14903] x64_sys_call+0x282e/0x3000 [ 166.463566][T14903] do_syscall_64+0xd2/0x200 [ 166.463594][T14903] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.463656][T14903] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.463685][T14903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.463768][T14903] RIP: 0033:0x7f87e1c8efc9 [ 166.463797][T14903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.463902][T14903] RSP: 002b:00007f87e06ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 166.463929][T14903] RAX: ffffffffffffffda RBX: 00007f87e1ee5fa0 RCX: 00007f87e1c8efc9 [ 166.463945][T14903] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 166.463962][T14903] RBP: 00007f87e1d11f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.463979][T14903] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 166.463995][T14903] R13: 00007f87e1ee6038 R14: 00007f87e1ee5fa0 R15: 00007ffea0dc0fd8 [ 166.464020][T14903] [ 166.743555][T14913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14913 comm=syz.7.4676 [ 167.132290][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4693'. [ 167.369016][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4700'. [ 167.456397][T14982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14982 comm=syz.2.4705 [ 167.754290][T15013] pim6reg1: entered promiscuous mode [ 167.759821][T15013] pim6reg1: entered allmulticast mode [ 167.769555][T15017] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15017 comm=syz.3.4720 [ 167.977785][T15054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15054 comm=syz.5.4737 [ 168.560825][T15079] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4748'. [ 168.641364][T15086] netlink: 'syz.1.4754': attribute type 12 has an invalid length. [ 169.109425][T15128] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4774'. [ 169.169114][T15134] loop9: detected capacity change from 0 to 7 [ 169.185871][T15134] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.199722][T15134] Buffer I/O error on dev loop9, logical block 0, async page read [ 169.207653][T15134] loop9: unable to read partition table [ 169.233722][T15134] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 169.233722][T15134] ) failed (rc=-5) [ 169.293569][T15138] pim6reg1: entered promiscuous mode [ 169.299059][T15138] pim6reg1: entered allmulticast mode [ 169.455497][T15169] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4788'. [ 169.850463][T15190] netlink: 'syz.5.4795': attribute type 12 has an invalid length. [ 170.135432][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4801'. [ 170.354135][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 170.354153][ T29] audit: type=1326 audit(170.525:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 170.394751][ T29] audit: type=1326 audit(170.525:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 170.417816][ T29] audit: type=1326 audit(170.525:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 170.440945][ T29] audit: type=1326 audit(170.525:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 170.463967][ T29] audit: type=1326 audit(170.525:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 170.486965][ T29] audit: type=1326 audit(170.525:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 170.509908][ T29] audit: type=1326 audit(170.525:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 170.533053][ T29] audit: type=1326 audit(170.536:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.2.4807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d1befc9 code=0x7ffc0000 [ 170.594924][T15224] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 170.669516][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4816'. [ 170.718265][ T29] audit: type=1400 audit(170.893:5673): avc: denied { setattr } for pid=15236 comm="syz.2.4817" name="/" dev="configfs" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.882261][ T29] audit: type=1400 audit(171.066:5674): avc: denied { ioctl } for pid=15254 comm="syz.5.4826" path="socket:[42751]" dev="sockfs" ino=42751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.925389][T15255] SELinux: failed to load policy [ 171.037621][T15270] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 171.087497][T15281] rdma_op ffff888109f0b580 conn xmit_rdma 0000000000000000 [ 171.160359][T15288] vlan1: entered allmulticast mode [ 171.396070][T15310] SELinux: failed to load policy [ 171.665015][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4851'. [ 171.735063][T15356] rdma_op ffff888109f08180 conn xmit_rdma 0000000000000000 [ 172.141139][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'. [ 172.157706][T15397] hsr_slave_0: left promiscuous mode [ 172.214179][T15407] vlan3: entered allmulticast mode [ 172.496037][T15429] netlink: 'syz.5.4884': attribute type 29 has an invalid length. [ 172.536782][T15429] netlink: 'syz.5.4884': attribute type 29 has an invalid length. [ 172.552837][T15429] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4884'. [ 172.927009][T15465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4905'. [ 172.940145][T15460] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4905'. [ 173.235664][T15488] netlink: 'syz.7.4908': attribute type 29 has an invalid length. [ 173.269703][T15488] netlink: 'syz.7.4908': attribute type 29 has an invalid length. [ 173.292462][T15488] netlink: 500 bytes leftover after parsing attributes in process `syz.7.4908'. [ 173.720726][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4934'. [ 173.860156][T15563] netlink: 'syz.3.4942': attribute type 1 has an invalid length. [ 173.921770][T15563] bond2: (slave bridge1): making interface the new active one [ 173.966330][T15563] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 174.419414][T15603] __nla_validate_parse: 2 callbacks suppressed [ 174.419432][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4966'. [ 174.435131][T15603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4966'. [ 174.915060][T15661] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4982'. [ 175.012206][T15675] atomic_op ffff88812862a928 conn xmit_atomic 0000000000000000 [ 175.041444][T15679] netlink: 'syz.2.4990': attribute type 1 has an invalid length. [ 175.073932][T15679] bond7: (slave bridge1): making interface the new active one [ 175.084808][T15679] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 175.320680][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 175.320699][ T29] audit: type=1400 audit(175.570:5849): avc: denied { listen } for pid=15707 comm="syz.5.5005" lport=36775 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.372479][ T29] audit: type=1400 audit(175.610:5850): avc: denied { accept } for pid=15707 comm="syz.5.5005" lport=36775 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.617601][ T29] audit: type=1326 audit(175.874:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 175.656837][ T29] audit: type=1326 audit(175.874:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 175.679951][ T29] audit: type=1326 audit(175.874:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 175.702912][ T29] audit: type=1326 audit(175.874:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 175.725944][ T29] audit: type=1326 audit(175.874:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 175.748999][ T29] audit: type=1326 audit(175.874:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 175.771921][ T29] audit: type=1326 audit(175.874:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 175.795001][ T29] audit: type=1326 audit(175.874:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.7.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 175.891631][T15737] bridge0: entered promiscuous mode [ 175.897075][T15737] macsec1: entered promiscuous mode [ 175.903528][T15737] bridge0: port 3(macsec1) entered blocking state [ 175.910107][T15737] bridge0: port 3(macsec1) entered disabled state [ 175.918422][T15737] macsec1: entered allmulticast mode [ 175.923779][T15737] bridge0: entered allmulticast mode [ 175.930902][T15737] macsec1: left allmulticast mode [ 175.936049][T15737] bridge0: left allmulticast mode [ 175.942441][T15737] bridge0: left promiscuous mode [ 175.943385][T15742] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 175.992647][T15746] netlink: 136 bytes leftover after parsing attributes in process `syz.7.5019'. [ 176.169260][T15759] 9pnet: Could not find request transport: f [ 176.384552][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5040'. [ 176.431161][T15802] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.488762][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5052'. [ 176.497819][T15810] netlink: 348 bytes leftover after parsing attributes in process `syz.5.5052'. [ 176.506951][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5052'. [ 176.515969][T15810] netlink: 348 bytes leftover after parsing attributes in process `syz.5.5052'. [ 176.525344][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5052'. [ 176.807032][T15860] bridge0: entered promiscuous mode [ 176.812816][T15860] macsec1: entered promiscuous mode [ 176.818572][T15860] bridge0: port 4(macsec1) entered blocking state [ 176.825256][T15860] bridge0: port 4(macsec1) entered disabled state [ 176.832477][T15860] macsec1: entered allmulticast mode [ 176.837809][T15860] bridge0: entered allmulticast mode [ 176.843884][T15860] macsec1: left allmulticast mode [ 176.848926][T15860] bridge0: left allmulticast mode [ 176.855159][T15860] bridge0: left promiscuous mode [ 177.577152][T15898] 9pnet_fd: Insufficient options for proto=fd [ 177.622612][T15904] syz!: rxe_newlink: already configured on team_slave_0 [ 178.392481][T15981] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 178.770818][T16025] bridge0: entered promiscuous mode [ 178.776125][T16025] macsec1: entered promiscuous mode [ 178.782826][T16025] bridge0: port 3(macsec1) entered blocking state [ 178.789508][T16025] bridge0: port 3(macsec1) entered disabled state [ 178.796233][T16025] macsec1: entered allmulticast mode [ 178.801582][T16025] bridge0: entered allmulticast mode [ 178.807468][T16025] macsec1: left allmulticast mode [ 178.812555][T16025] bridge0: left allmulticast mode [ 178.818124][T16025] bridge0: left promiscuous mode [ 179.118067][T16054] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 179.479299][T16083] __nla_validate_parse: 4 callbacks suppressed [ 179.479319][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5174'. [ 179.559695][T16089] netlink: 'syz.5.5177': attribute type 3 has an invalid length. [ 179.698123][T16100] netlink: 'syz.3.5182': attribute type 10 has an invalid length. [ 179.733155][T16100] bond0: (slave dummy0): Releasing backup interface [ 179.753123][T16101] netlink: 'syz.3.5182': attribute type 10 has an invalid length. [ 179.779699][T16101] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 180.326108][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 180.326127][ T29] audit: type=1400 audit(180.641:5985): avc: denied { mounton } for pid=16156 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 180.415799][ T7479] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.544776][ T29] audit: type=1326 audit(180.863:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.7.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 180.592084][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5219'. [ 180.613333][ T29] audit: type=1326 audit(180.863:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.7.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 180.636554][ T29] audit: type=1326 audit(180.863:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.7.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 180.659792][ T29] audit: type=1326 audit(180.863:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.7.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 180.682956][ T29] audit: type=1326 audit(180.863:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.7.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 180.706811][ T29] audit: type=1326 audit(180.863:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.7.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 180.729779][ T29] audit: type=1326 audit(180.863:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.7.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 180.752915][ T29] audit: type=1326 audit(180.863:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.7.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 180.775851][ T29] audit: type=1326 audit(180.863:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.7.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa629d1efc9 code=0x7ffc0000 [ 180.838129][T16156] chnl_net:caif_netlink_parms(): no params data found [ 180.887139][T16156] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.894323][T16156] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.922183][T16156] bridge_slave_0: entered allmulticast mode [ 180.952487][T16156] bridge_slave_0: entered promiscuous mode [ 180.964667][T16156] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.971950][T16156] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.992398][T16156] bridge_slave_1: entered allmulticast mode [ 180.999540][T16156] bridge_slave_1: entered promiscuous mode [ 181.033524][T16156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.048655][T16156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.059030][T16212] xt_hashlimit: max too large, truncated to 1048576 [ 181.066491][T16212] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 181.076367][T16156] team0: Port device team_slave_0 added [ 181.083304][T16156] team0: Port device team_slave_1 added [ 181.102485][T16156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.109585][T16156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.135599][T16156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.147153][T16156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.154234][T16156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.180260][T16156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.226036][T16156] hsr_slave_0: entered promiscuous mode [ 181.232461][T16156] hsr_slave_1: entered promiscuous mode [ 181.323566][T16232] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5240'. [ 181.387026][T16240] block device autoloading is deprecated and will be removed. [ 181.397253][T16156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 181.412610][T16156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 181.432724][T16156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 181.456525][T16156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 181.595884][T16156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.624153][T16156] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.666143][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.673342][ T7503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.693050][T16156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.703572][T16156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.731492][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.738733][ T7503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.824933][T16280] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5254'. [ 181.886987][T16156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.939835][T16294] tipc: New replicast peer: 255.255.255.83 [ 181.945900][T16294] tipc: Enabled bearer , priority 10 [ 182.069020][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'. [ 182.088645][T16321] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5267'. [ 182.143618][T16156] veth0_vlan: entered promiscuous mode [ 182.159856][T16156] veth1_vlan: entered promiscuous mode [ 182.175710][T16156] veth0_macvtap: entered promiscuous mode [ 182.184210][T16156] veth1_macvtap: entered promiscuous mode [ 182.198012][T16156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.211900][T16156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.227760][ T7479] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.251728][ T7479] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.285728][ T7479] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.302425][ T7479] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.348789][T16359] netem: change failed [ 182.564490][T16389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.572031][T16389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.582856][T16392] netlink: 'syz.2.5296': attribute type 1 has an invalid length. [ 182.590769][T16392] netlink: 'syz.2.5296': attribute type 4 has an invalid length. [ 182.598564][T16392] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5296'. [ 182.608478][T16389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.616078][T16393] loop7: detected capacity change from 0 to 256 [ 182.616099][T16389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.835357][T16421] netlink: 5420 bytes leftover after parsing attributes in process `syz.7.5310'. [ 182.948381][T16423] ================================================================== [ 182.956533][T16423] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 182.965165][T16423] [ 182.967514][T16423] write to 0xffff88811a9a3d68 of 8 bytes by task 16432 on cpu 1: [ 182.975258][T16423] shmem_file_splice_read+0x470/0x600 [ 182.980662][T16423] splice_direct_to_actor+0x26f/0x680 [ 182.986097][T16423] do_splice_direct+0xda/0x150 [ 182.990888][T16423] do_sendfile+0x380/0x650 [ 182.995399][T16423] __x64_sys_sendfile64+0x105/0x150 [ 183.000647][T16423] x64_sys_call+0x2bb4/0x3000 [ 183.005541][T16423] do_syscall_64+0xd2/0x200 [ 183.010090][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.016018][T16423] [ 183.018379][T16423] write to 0xffff88811a9a3d68 of 8 bytes by task 16423 on cpu 0: [ 183.026106][T16423] shmem_file_splice_read+0x470/0x600 [ 183.031763][T16423] splice_direct_to_actor+0x26f/0x680 [ 183.037152][T16423] do_splice_direct+0xda/0x150 [ 183.041944][T16423] do_sendfile+0x380/0x650 [ 183.046393][T16423] __x64_sys_sendfile64+0x105/0x150 [ 183.051631][T16423] x64_sys_call+0x2bb4/0x3000 [ 183.056325][T16423] do_syscall_64+0xd2/0x200 [ 183.060878][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.066787][T16423] [ 183.069116][T16423] value changed: 0x0000000000000c4c -> 0x0000000000000c54 [ 183.076229][T16423] [ 183.078643][T16423] Reported by Kernel Concurrency Sanitizer on: [ 183.084976][T16423] CPU: 0 UID: 0 PID: 16423 Comm: syz.2.5311 Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 183.094953][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.105118][T16423] ================================================================== [ 184.721933][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.993876][ T7479] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.320324][ T7479] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.389616][ T7479] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.449029][ T7479] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.500201][ T7479] bridge_slave_1: left allmulticast mode [ 185.505919][ T7479] bridge_slave_1: left promiscuous mode [ 185.511623][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.519460][ T7479] bridge_slave_0: left allmulticast mode [ 185.525172][ T7479] bridge_slave_0: left promiscuous mode [ 185.530952][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.637290][ T7479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.647589][ T7479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.657426][ T7479] bond0 (unregistering): Released all slaves [ 185.713396][ T7479] hsr_slave_0: left promiscuous mode [ 185.719054][ T7479] hsr_slave_1: left promiscuous mode [ 185.727664][ T7479] veth1_macvtap: left promiscuous mode [ 185.733144][ T7479] veth0_macvtap: left promiscuous mode [ 185.738727][ T7479] veth1_vlan: left promiscuous mode [ 185.743965][ T7479] veth0_vlan: left promiscuous mode [ 185.807469][ T7479] team0 (unregistering): Port device team_slave_1 removed [ 185.817227][ T7479] team0 (unregistering): Port device team_slave_0 removed