last executing test programs: 1m15.132529679s ago: executing program 1 (id=524): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) close(0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) 1m15.038938381s ago: executing program 1 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) 1m15.016992611s ago: executing program 4 (id=526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) close_range(r2, 0xffffffffffffffff, 0x400000000000000) 1m14.976553962s ago: executing program 1 (id=528): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 1m14.934936763s ago: executing program 4 (id=530): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1m14.849093014s ago: executing program 4 (id=534): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0xfffe, @multicast1}, 0x10) 1m14.746050226s ago: executing program 4 (id=538): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000f000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) fcntl$notify(r0, 0x402, 0x8000003d) 1m14.716946837s ago: executing program 4 (id=540): socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m14.617080649s ago: executing program 4 (id=544): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m14.01223427s ago: executing program 1 (id=556): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m13.540640739s ago: executing program 1 (id=563): socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m13.426912242s ago: executing program 1 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fadvise64(r2, 0x8000000000000000, 0x9, 0x1) 1m13.185031296s ago: executing program 0 (id=574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1m13.086039648s ago: executing program 0 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) 1m12.844514712s ago: executing program 0 (id=577): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m12.725542235s ago: executing program 0 (id=578): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0xfffffffe, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x0, 0x401, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 1m12.656725176s ago: executing program 0 (id=580): socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m12.623677037s ago: executing program 0 (id=581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 59.570589296s ago: executing program 32 (id=544): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 58.146227544s ago: executing program 33 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fadvise64(r2, 0x8000000000000000, 0x9, 0x1) 57.583533154s ago: executing program 34 (id=581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 22.72951859s ago: executing program 2 (id=2092): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x45833af92e4b38ff, 0x0) 22.578180603s ago: executing program 2 (id=2095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 22.476113015s ago: executing program 2 (id=2099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/183, 0xb7}], 0x1, 0x2, 0x500) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 22.141803011s ago: executing program 2 (id=2113): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) 22.121335912s ago: executing program 2 (id=2115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 21.963481185s ago: executing program 2 (id=2124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r2) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 21.925946306s ago: executing program 35 (id=2124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r2) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 11.940925876s ago: executing program 3 (id=2433): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000780)={0x0, 0x3f, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) clock_gettime(0x5, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000840)={{r2, r3+10000000}, {0x0, 0x989680}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x3f, &(0x7f0000000940)={&(0x7f00000008c0)="c46279340cdbc4c261ad9a0c000000c4c2d503f264430fae54bcc0660f638d9b540000c482c5ac2c566742d0430366f30fbae70040d9fa90", 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) 11.852233118s ago: executing program 3 (id=2439): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) execve(0x0, 0x0, 0x0) 11.76305844s ago: executing program 3 (id=2440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 11.674748131s ago: executing program 3 (id=2444): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x84000, 0x0) 11.616825832s ago: executing program 3 (id=2448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) 11.331244558s ago: executing program 3 (id=2457): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 11.301778879s ago: executing program 36 (id=2457): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.397569774s ago: executing program 7 (id=2836): pipe2(&(0x7f0000000000), 0x4800) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r2, 0x9}, 0xc) 1.178697688s ago: executing program 6 (id=2838): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="120000000a0000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 1.09465905s ago: executing program 6 (id=2841): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/31, 0x1f}, {0x0}], 0x2) recvfrom(r0, 0x0, 0x0, 0x22, 0x0, 0x0) shutdown(r0, 0x1) 938.665253ms ago: executing program 6 (id=2847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) 917.383823ms ago: executing program 6 (id=2848): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x1) io_uring_enter(r2, 0x52ee, 0x16eb, 0x8, &(0x7f00000001c0)={[0x32]}, 0x8) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 741.789667ms ago: executing program 5 (id=2859): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 692.065237ms ago: executing program 5 (id=2862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 668.118478ms ago: executing program 5 (id=2863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) 635.356808ms ago: executing program 5 (id=2864): r0 = socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000651c65a79d9eeeabb296813eeaecae189c46068edbcc41c810d955bbab531212b8a684b51737f3cda2027129006c7d7b211452a428"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 609.330949ms ago: executing program 7 (id=2865): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = eventfd2(0x76, 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x10000000}) 561.78219ms ago: executing program 7 (id=2867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000025c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 556.40786ms ago: executing program 5 (id=2869): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 535.26897ms ago: executing program 9 (id=2870): mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 528.78317ms ago: executing program 7 (id=2871): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 509.030221ms ago: executing program 9 (id=2872): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0, 0x0, 0xffffffffffffff82}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 437.411412ms ago: executing program 7 (id=2876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 427.789842ms ago: executing program 5 (id=2877): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) fallocate(r1, 0x20, 0x0, 0x8000) pipe2$9p(&(0x7f0000000000), 0x0) 355.086843ms ago: executing program 8 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)='%-5lx \x00'}, 0x20) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 293.317015ms ago: executing program 7 (id=2881): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000000000", @ANYRES32, @ANYBLOB="00000000000000002c0012800800010067"], 0x54}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 237.550476ms ago: executing program 8 (id=2882): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 237.356116ms ago: executing program 8 (id=2883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 199.075497ms ago: executing program 9 (id=2884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x30, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 193.399957ms ago: executing program 8 (id=2885): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1) 137.167458ms ago: executing program 9 (id=2886): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) 98.045068ms ago: executing program 9 (id=2887): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 97.664428ms ago: executing program 6 (id=2888): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 97.428878ms ago: executing program 8 (id=2889): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x20) poll(&(0x7f0000000040)=[{r1, 0x804f}], 0x1, 0x11ff) shutdown(r1, 0x0) 53.493569ms ago: executing program 9 (id=2890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3}, 0x0, 0x0) 53.190579ms ago: executing program 6 (id=2891): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f0000000440)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32c}, &(0x7f0000000680)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x8}, 0x18) 0s ago: executing program 8 (id=2892): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x20000, 0x0, 0x1e, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8800000) kernel console output (not intermixed with test programs): 1][ T5238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.987242][ T5238] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.999333][ T5246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5246 comm=syz.2.732 [ 73.011829][ T5246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5246 comm=syz.2.732 [ 73.026748][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.814364][ T5290] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 73.899221][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 73.940575][ T5290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.997296][ T5293] bond1 (unregistering): Released all slaves [ 74.125862][ T5308] loop3: detected capacity change from 0 to 512 [ 74.219413][ T5308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.255557][ T5308] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.289169][ T5308] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.757: corrupted inode contents [ 74.348923][ T5308] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.757: mark_inode_dirty error [ 74.400111][ T5294] chnl_net:caif_netlink_parms(): no params data found [ 74.421923][ T5308] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.757: corrupted inode contents [ 74.451913][ T5315] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.757: corrupted inode contents [ 74.464109][ T5315] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.757: mark_inode_dirty error [ 74.487614][ T5315] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.757: corrupted inode contents [ 74.504418][ T5315] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.757: mark_inode_dirty error [ 74.518531][ T5315] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.757: corrupted inode contents [ 74.532243][ T5315] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.757: mark_inode_dirty error [ 74.562372][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.572354][ T5294] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.579535][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.586941][ T5294] bridge_slave_0: entered allmulticast mode [ 74.593914][ T5294] bridge_slave_0: entered promiscuous mode [ 74.600889][ T5294] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.607963][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.615261][ T5294] bridge_slave_1: entered allmulticast mode [ 74.623960][ T5294] bridge_slave_1: entered promiscuous mode [ 74.678803][ T5329] loop3: detected capacity change from 0 to 1024 [ 74.693412][ T5329] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 74.710943][ T5294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.730180][ T5294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.740138][ T5329] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 74.779678][ T5333] loop3: detected capacity change from 0 to 164 [ 74.800357][ T5333] Unable to read rock-ridge attributes [ 74.809986][ T5333] Unable to read rock-ridge attributes [ 74.816076][ T5333] bio_check_eod: 32 callbacks suppressed [ 74.816191][ T5333] syz.3.764: attempt to access beyond end of device [ 74.816191][ T5333] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.838777][ T5294] team0: Port device team_slave_0 added [ 74.845358][ T5294] team0: Port device team_slave_1 added [ 74.853876][ T5333] syz.3.764: attempt to access beyond end of device [ 74.853876][ T5333] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.887391][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 74.887408][ T29] audit: type=1326 audit(1759713239.214:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab615eec9 code=0x7ffc0000 [ 74.918836][ T29] audit: type=1326 audit(1759713239.254:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fdab615eec9 code=0x7ffc0000 [ 74.942329][ T29] audit: type=1326 audit(1759713239.254:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab615eec9 code=0x7ffc0000 [ 74.965964][ T29] audit: type=1326 audit(1759713239.254:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fdab615eec9 code=0x7ffc0000 [ 74.996611][ T5294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.003714][ T5294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.029740][ T5294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.044838][ T5294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.051997][ T5294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.078050][ T5294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.088674][ T29] audit: type=1326 audit(1759713239.404:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab615eec9 code=0x7ffc0000 [ 75.112050][ T29] audit: type=1326 audit(1759713239.404:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdab6155d67 code=0x7ffc0000 [ 75.135723][ T29] audit: type=1326 audit(1759713239.404:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdab60faf79 code=0x7ffc0000 [ 75.158963][ T29] audit: type=1326 audit(1759713239.404:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdab6155d67 code=0x7ffc0000 [ 75.182314][ T29] audit: type=1326 audit(1759713239.404:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdab60faf79 code=0x7ffc0000 [ 75.205578][ T29] audit: type=1326 audit(1759713239.404:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdab6155d67 code=0x7ffc0000 [ 75.282861][ T5294] hsr_slave_0: entered promiscuous mode [ 75.324390][ T5294] hsr_slave_1: entered promiscuous mode [ 75.330560][ T5294] debugfs: 'hsr0' already exists in 'hsr' [ 75.336307][ T5294] Cannot create hsr debugfs directory [ 75.489652][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.500000][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.523350][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 75.553628][ T5368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.571752][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.582143][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.603150][ T5368] bond1: (slave veth3): Enslaving as an active interface with an up link [ 75.666695][ T5368] bond1 (unregistering): (slave veth3): Releasing backup interface [ 75.687808][ T5368] bond1 (unregistering): Released all slaves [ 75.711690][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.722115][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.789766][ T5294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.804585][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.815105][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.834352][ T5294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.843600][ T5294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.873499][ T5294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.978725][ T5353] chnl_net:caif_netlink_parms(): no params data found [ 76.042752][ T5294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.069311][ T5399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.785'. [ 76.190017][ T37] bond0 (unregistering): Released all slaves [ 76.208610][ T5294] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.224742][ T5353] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.231854][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.239063][ T5353] bridge_slave_0: entered allmulticast mode [ 76.245504][ T5353] bridge_slave_0: entered promiscuous mode [ 76.252420][ T5353] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.259531][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.268121][ T5353] bridge_slave_1: entered allmulticast mode [ 76.274720][ T5353] bridge_slave_1: entered promiscuous mode [ 76.282617][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.289741][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.303894][ T37] hsr_slave_0: left promiscuous mode [ 76.309812][ T37] hsr_slave_1: left promiscuous mode [ 76.318033][ T37] veth1_macvtap: left promiscuous mode [ 76.323593][ T37] veth0_macvtap: left promiscuous mode [ 76.329198][ T37] veth1_vlan: left promiscuous mode [ 76.334412][ T37] veth0_vlan: left promiscuous mode [ 76.431001][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.438154][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.452417][ T5353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.471756][ T5353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.505044][ T5353] team0: Port device team_slave_0 added [ 76.515686][ T5353] team0: Port device team_slave_1 added [ 76.525760][ T5294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.568561][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.575544][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.601563][ T5353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.615527][ T5353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.622630][ T5353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.648604][ T5353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.698076][ T5353] hsr_slave_0: entered promiscuous mode [ 76.704564][ T5353] hsr_slave_1: entered promiscuous mode [ 76.710582][ T5353] debugfs: 'hsr0' already exists in 'hsr' [ 76.716324][ T5353] Cannot create hsr debugfs directory [ 76.776928][ T5294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.800050][ T37] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.812177][ T5392] chnl_net:caif_netlink_parms(): no params data found [ 76.846966][ T37] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.900238][ T37] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.921978][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.929359][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.939307][ T5392] bridge_slave_0: entered allmulticast mode [ 76.945891][ T5392] bridge_slave_0: entered promiscuous mode [ 76.953471][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.960677][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.967888][ T5392] bridge_slave_1: entered allmulticast mode [ 76.974394][ T5392] bridge_slave_1: entered promiscuous mode [ 76.985230][ T37] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.008839][ T5353] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 77.034356][ T5392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.043698][ T5353] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 77.080918][ T5353] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 77.092620][ T5392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.101926][ T37] batadv1: left allmulticast mode [ 77.107048][ T37] batadv1: left promiscuous mode [ 77.112277][ T37] bridge0: port 3(batadv1) entered disabled state [ 77.119258][ T37] bridge_slave_1: left allmulticast mode [ 77.125044][ T37] bridge_slave_1: left promiscuous mode [ 77.130832][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.138755][ T37] bridge_slave_0: left allmulticast mode [ 77.144406][ T37] bridge_slave_0: left promiscuous mode [ 77.150101][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.241056][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.251046][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.260503][ T37] bond0 (unregistering): Released all slaves [ 77.270997][ T5353] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.294340][ T5294] veth0_vlan: entered promiscuous mode [ 77.309722][ T5392] team0: Port device team_slave_0 added [ 77.320413][ T37] hsr_slave_0: left promiscuous mode [ 77.326040][ T37] hsr_slave_1: left promiscuous mode [ 77.331713][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.339243][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.346989][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.354634][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.364513][ T37] veth1_macvtap: left promiscuous mode [ 77.370064][ T37] veth0_macvtap: left promiscuous mode [ 77.375584][ T37] veth1_vlan: left promiscuous mode [ 77.380943][ T37] veth0_vlan: left promiscuous mode [ 77.441215][ T37] team0 (unregistering): Port device team_slave_1 removed [ 77.474497][ T5294] veth1_vlan: entered promiscuous mode [ 77.481772][ T5392] team0: Port device team_slave_1 added [ 77.499607][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.506587][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.532550][ T5392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.554468][ T5294] veth0_macvtap: entered promiscuous mode [ 77.561496][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.568518][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.594546][ T5392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.613436][ T5294] veth1_macvtap: entered promiscuous mode [ 77.623811][ T5294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.656778][ T5294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.675735][ T5392] hsr_slave_0: entered promiscuous mode [ 77.682047][ T5392] hsr_slave_1: entered promiscuous mode [ 77.714432][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.736021][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.762871][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.771810][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.784349][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.823007][ T5353] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.851325][ T5392] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 77.889328][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.896468][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.920597][ T5392] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 77.939047][ T5392] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 77.960722][ T5392] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 77.974389][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.981524][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.072729][ T5392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.127059][ T5392] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.154340][ T5552] netlink: 'syz.5.791': attribute type 1 has an invalid length. [ 78.165633][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.172737][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.195871][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.203006][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.221668][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 78.252961][ T5353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.409919][ T5392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.568347][ T5353] veth0_vlan: entered promiscuous mode [ 78.595646][ T5353] veth1_vlan: entered promiscuous mode [ 78.642878][ T5353] veth0_macvtap: entered promiscuous mode [ 78.671224][ T5353] veth1_macvtap: entered promiscuous mode [ 78.708862][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.737680][ T5353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.758189][ T5392] veth0_vlan: entered promiscuous mode [ 78.772851][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.796391][ T5392] veth1_vlan: entered promiscuous mode [ 78.810497][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.857826][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.876785][ T5392] veth0_macvtap: entered promiscuous mode [ 78.899086][ T5392] veth1_macvtap: entered promiscuous mode [ 78.907075][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.944040][ T5651] loop6: detected capacity change from 0 to 1024 [ 78.954779][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.970543][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.807'. [ 78.992125][ T5651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.998178][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.038535][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.051579][ T5651] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.071786][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.104201][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.138125][ T5651] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.767: lblock 0 mapped to illegal pblock 0 (length 1) [ 79.166615][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.203515][ T5651] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 79.215942][ T5651] EXT4-fs (loop6): This should not happen!! Data will be lost [ 79.215942][ T5651] [ 79.261659][ T5651] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.767: lblock 0 mapped to illegal pblock 0 (length 1) [ 79.317750][ T5651] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 79.330216][ T5651] EXT4-fs (loop6): This should not happen!! Data will be lost [ 79.330216][ T5651] [ 79.386132][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.535330][ T5693] loop6: detected capacity change from 0 to 512 [ 79.555270][ T5693] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 79.599542][ T5693] EXT4-fs (loop6): 1 truncate cleaned up [ 79.615913][ T5693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.801519][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.100366][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 80.100444][ T29] audit: type=1326 audit(1759713244.434:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.188481][ T29] audit: type=1326 audit(1759713244.464:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.212170][ T29] audit: type=1326 audit(1759713244.464:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.235750][ T29] audit: type=1326 audit(1759713244.464:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.259301][ T29] audit: type=1326 audit(1759713244.474:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.282889][ T29] audit: type=1326 audit(1759713244.474:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.306413][ T29] audit: type=1326 audit(1759713244.474:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.329965][ T29] audit: type=1326 audit(1759713244.474:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.353306][ T29] audit: type=1326 audit(1759713244.474:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.376838][ T29] audit: type=1326 audit(1759713244.474:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.7.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 80.403549][ T5732] netlink: 'syz.3.836': attribute type 15 has an invalid length. [ 80.540188][ T5750] sg_write: data in/out 8156/120 bytes for SCSI command 0x0-- guessing data in; [ 80.540188][ T5750] program ,&#^% not setting count and/or reply_len properly [ 80.678123][ T5764] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.849'. [ 80.687252][ T5764] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 80.755724][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.853'. [ 81.013867][ T5797] loop5: detected capacity change from 0 to 1024 [ 81.030794][ T5797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.071714][ T5797] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.863: Allocating blocks 449-513 which overlap fs metadata [ 81.085941][ T5801] loop7: detected capacity change from 0 to 2364 [ 81.094864][ T5801] iso9660: Bad value for 'sbsector' [ 81.100603][ T5796] EXT4-fs (loop5): pa ffff8881072da150: logic 48, phys. 177, len 21 [ 81.108700][ T5796] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 81.133418][ T5294] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.293160][ T5811] can0: slcan on ttyS3. [ 81.355212][ T5816] loop5: detected capacity change from 0 to 1024 [ 81.357597][ T5815] SELinux: failed to load policy [ 81.368928][ T5811] can0 (unregistered): slcan off ttyS3. [ 81.375345][ T5816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.401306][ T5294] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.486820][ T5831] loop5: detected capacity change from 0 to 1024 [ 81.498735][ T5831] EXT4-fs: Ignoring removed orlov option [ 81.504489][ T5831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.521913][ T5831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.651869][ T5294] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.957212][ T5880] loop7: detected capacity change from 0 to 1024 [ 81.969748][ T5880] EXT4-fs: Ignoring removed orlov option [ 81.975457][ T5880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.002878][ T5880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.032198][ T5889] loop5: detected capacity change from 0 to 512 [ 82.058518][ T5889] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.102463][ T5889] EXT4-fs (loop5): 1 truncate cleaned up [ 82.121166][ T5889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.281853][ T5392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.296788][ T5294] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.392894][ T5906] loop5: detected capacity change from 0 to 2364 [ 82.400205][ T5906] iso9660: Bad value for 'sbsector' [ 82.493785][ T5911] can0: slcan on ttyS3. [ 82.562116][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 82.582432][ T5911] can0 (unregistered): slcan off ttyS3. [ 82.593356][ T5921] loop7: detected capacity change from 0 to 1024 [ 82.602774][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 82.630531][ T5921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.724683][ T5392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.049505][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.934'. [ 83.088049][ T5989] loop7: detected capacity change from 0 to 512 [ 83.121083][ T5989] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 83.160205][ T5989] EXT4-fs (loop7): 1 truncate cleaned up [ 83.171119][ T5989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.226551][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.942'. [ 83.235565][ T6010] netlink: 'syz.6.942': attribute type 12 has an invalid length. [ 83.262354][ T37] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.271459][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.942'. [ 83.280459][ T6010] netlink: 'syz.6.942': attribute type 12 has an invalid length. [ 83.288373][ T37] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.297764][ T37] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.311465][ T37] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.382593][ T5392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.472345][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 83.556598][ T6031] loop7: detected capacity change from 0 to 8192 [ 84.049577][ T1036] kernel write not supported for file bpf-prog (pid: 1036 comm: kworker/0:2) [ 84.230707][ T6065] loop5: detected capacity change from 0 to 2048 [ 84.338399][ T6068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6068 comm=syz.6.966 [ 84.350871][ T6068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6068 comm=syz.6.966 [ 84.664758][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.975'. [ 84.932849][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.7.984'. [ 84.950738][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.7.984'. [ 84.959589][ T6116] netlink: 6 bytes leftover after parsing attributes in process `syz.7.984'. [ 85.148655][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 85.158662][ T6138] netlink: 312 bytes leftover after parsing attributes in process `syz.2.993'. [ 85.167674][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 85.233819][ T6143] loop5: detected capacity change from 0 to 1024 [ 85.244964][ T6143] EXT4-fs: Ignoring removed orlov option [ 85.256528][ T6143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.340117][ T5294] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.384582][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 85.384601][ T29] audit: type=1326 audit(1759713249.714:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 85.448239][ T29] audit: type=1326 audit(1759713249.744:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 85.471812][ T29] audit: type=1326 audit(1759713249.744:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 85.495309][ T29] audit: type=1326 audit(1759713249.744:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 85.518854][ T29] audit: type=1326 audit(1759713249.754:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 85.542206][ T29] audit: type=1326 audit(1759713249.754:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 85.565663][ T29] audit: type=1326 audit(1759713249.754:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6153 comm="syz.6.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 85.774275][ T29] audit: type=1326 audit(1759713250.104:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.6.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 85.797812][ T29] audit: type=1326 audit(1759713250.104:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.6.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 85.892728][ T29] audit: type=1326 audit(1759713250.154:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6181 comm="syz.6.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 86.024649][ T6206] netlink: 'syz.2.1022': attribute type 21 has an invalid length. [ 86.063365][ T6212] loop6: detected capacity change from 0 to 512 [ 86.072225][ T6212] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 86.092516][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 86.104754][ T6212] EXT4-fs (loop6): 1 truncate cleaned up [ 86.111855][ T6212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.300314][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.683302][ T6266] netlink: 'syz.6.1046': attribute type 3 has an invalid length. [ 86.729408][ T2990] udevd[2990]: worker [3956] terminated by signal 33 (Unknown signal 33) [ 86.738323][ T2990] udevd[2990]: worker [3956] failed while handling '/devices/virtual/block/loop6' [ 87.245653][ T6343] can0: slcan on ttyS3. [ 87.299047][ T6343] can0 (unregistered): slcan off ttyS3. [ 87.710585][ T6395] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 88.000787][ T6416] netlink: 'syz.7.1104': attribute type 1 has an invalid length. [ 88.471625][ T6458] __nla_validate_parse: 6 callbacks suppressed [ 88.471644][ T6458] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1124'. [ 88.696730][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 88.704319][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.711784][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.719212][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.726679][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.734112][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.741584][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 88.749108][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.756500][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.764028][ T3401] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.802452][ T3401] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 88.911138][ T6479] fido_id[6479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.326228][ T6508] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1145'. [ 89.361034][ T6503] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1145'. [ 89.508374][ T6520] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1148'. [ 89.930242][ T6559] loop6: detected capacity change from 0 to 1024 [ 89.950393][ T6560] syzkaller1: entered promiscuous mode [ 89.955917][ T6560] syzkaller1: entered allmulticast mode [ 89.959106][ T6559] EXT4-fs: Ignoring removed orlov option [ 89.995887][ T6559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.071676][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.133469][ T6582] siw: device registration error -23 [ 90.279774][ T6601] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1168'. [ 90.304160][ T6593] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1168'. [ 90.409176][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 90.409194][ T29] audit: type=1326 audit(1759713254.744:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.476009][ T29] audit: type=1326 audit(1759713254.744:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.499635][ T29] audit: type=1326 audit(1759713254.744:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.523181][ T29] audit: type=1326 audit(1759713254.744:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.546703][ T29] audit: type=1326 audit(1759713254.744:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.570191][ T29] audit: type=1326 audit(1759713254.744:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.593582][ T29] audit: type=1326 audit(1759713254.744:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.617541][ T29] audit: type=1326 audit(1759713254.744:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.641340][ T29] audit: type=1326 audit(1759713254.744:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.664921][ T29] audit: type=1326 audit(1759713254.744:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.7.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11d7beec9 code=0x7ffc0000 [ 90.960658][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1186'. [ 91.069184][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 91.228670][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 91.915958][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1220'. [ 92.032410][ T3401] kernel write not supported for file /607/attr/prev (pid: 3401 comm: kworker/1:5) [ 92.056846][ T6783] capability: warning: `syz.7.1227' uses 32-bit capabilities (legacy support in use) [ 92.129660][ T6788] kernel profiling enabled (shift: 6) [ 92.270892][ T6797] SELinux: failed to load policy [ 92.484640][ T6822] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 92.491218][ T6822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.498881][ T6822] vhci_hcd vhci_hcd.0: Device attached [ 92.508527][ T6823] vhci_hcd: connection closed [ 92.508851][ T31] vhci_hcd: stop threads [ 92.518047][ T31] vhci_hcd: release socket [ 92.522475][ T31] vhci_hcd: disconnect device [ 92.706003][ T6857] netlink: 'syz.2.1259': attribute type 13 has an invalid length. [ 92.713986][ T6857] netlink: 'syz.2.1259': attribute type 17 has an invalid length. [ 92.762592][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.772854][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.825846][ T6857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.842671][ T6865] $H: renamed from bond0 (while UP) [ 92.853500][ T6865] $H: entered promiscuous mode [ 92.858756][ T6865] bond_slave_0: entered promiscuous mode [ 92.864577][ T6865] bond_slave_1: entered promiscuous mode [ 92.959613][ T6881] geneve2: entered promiscuous mode [ 92.964891][ T6881] geneve2: entered allmulticast mode [ 92.992871][ T4415] kernel write not supported for file /668/attr/prev (pid: 4415 comm: kworker/1:8) [ 93.335187][ T6910] SELinux: failed to load policy [ 93.362050][ T4427] kernel write not supported for file /190/attr/prev (pid: 4427 comm: kworker/0:11) [ 93.682101][ T6972] loop5: detected capacity change from 0 to 2048 [ 93.780647][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.796760][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.991175][ T7027] $H: renamed from bond0 (while UP) [ 93.998787][ T7027] $H: entered promiscuous mode [ 94.003922][ T7027] bond_slave_0: entered promiscuous mode [ 94.009843][ T7027] bond_slave_1: entered promiscuous mode [ 94.117886][ T7045] pim6reg1: entered promiscuous mode [ 94.123271][ T7045] pim6reg1: entered allmulticast mode [ 94.204981][ T7074] loop5: detected capacity change from 0 to 128 [ 94.225176][ T7074] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.256762][ T7074] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.312411][ T7088] geneve3: entered promiscuous mode [ 94.317677][ T7088] geneve3: entered allmulticast mode [ 94.329592][ T5294] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.340992][ T7091] __nla_validate_parse: 7 callbacks suppressed [ 94.341049][ T7091] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1313'. [ 94.552938][ T7120] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1331'. [ 94.554434][ T7123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1332'. [ 94.671094][ T7126] Falling back ldisc for ttyS3. [ 94.915821][ T7150] netlink: 'syz.7.1345': attribute type 13 has an invalid length. [ 94.923736][ T7150] netlink: 'syz.7.1345': attribute type 17 has an invalid length. [ 94.964277][ T7150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.263300][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 95.263318][ T29] audit: type=1400 audit(1759714027.751:3059): avc: denied { watch watch_reads } for pid=7158 comm="syz.7.1359" path="/proc/236/task/237" dev="proc" ino=17767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.294364][ T29] audit: type=1326 audit(1759714027.762:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 95.317961][ T29] audit: type=1326 audit(1759714027.762:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 95.341602][ T29] audit: type=1326 audit(1759714027.762:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 95.365137][ T29] audit: type=1326 audit(1759714027.762:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 95.388709][ T29] audit: type=1326 audit(1759714027.762:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 95.412149][ T29] audit: type=1326 audit(1759714027.762:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 95.435654][ T29] audit: type=1326 audit(1759714027.762:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 95.459131][ T29] audit: type=1326 audit(1759714027.762:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 95.482616][ T29] audit: type=1326 audit(1759714027.762:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 95.566166][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1352'. [ 95.812247][ T7195] serio: Serial port ptm0 [ 96.246044][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.253272][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.289292][ T7232] $H: left promiscuous mode [ 96.294119][ T7232] bond_slave_0: left promiscuous mode [ 96.299760][ T7232] bond_slave_1: left promiscuous mode [ 96.363398][ T7232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.386248][ T7232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.485873][ T7239] syzkaller0: refused to change device tx_queue_len [ 96.492742][ T1023] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.501749][ T1023] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.556089][ T1023] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.565107][ T1023] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.613382][ T1023] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.622496][ T1023] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.663833][ T1023] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.672793][ T1023] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.881236][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1399'. [ 97.139261][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1409'. [ 97.434988][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1413'. [ 97.796265][ T7341] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 97.805307][ T7341] netem: change failed [ 98.023239][ T7368] netem: change failed [ 98.164400][ T7382] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1450'. [ 98.196428][ T7382] batadv1: entered promiscuous mode [ 98.201850][ T7382] batadv1: entered allmulticast mode [ 98.510246][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1475'. [ 99.140886][ T7529] netlink: 'syz.7.1522': attribute type 1 has an invalid length. [ 99.166296][ T7529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.203609][ T7529] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.222037][ T7529] bond1: (slave batadv1): making interface the new active one [ 99.230905][ T7529] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 99.246987][ T7529] __nla_validate_parse: 3 callbacks suppressed [ 99.247007][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1522'. [ 99.278395][ T7529] bond1 (unregistering): (slave batadv1): Releasing active interface [ 99.299936][ T7529] bond1 (unregistering): Released all slaves [ 99.425382][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1535'. [ 99.714566][ T7582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7582 comm=syz.5.1547 [ 99.736402][ T7582] netlink: 'syz.5.1547': attribute type 1 has an invalid length. [ 99.768453][ T7582] bond0: (slave bridge1): making interface the new active one [ 99.776674][ T7582] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 99.996811][ T29] kauditd_printk_skb: 7273 callbacks suppressed [ 99.996829][ T29] audit: type=1400 audit(1759714032.762:10306): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.028254][ T29] audit: type=1400 audit(1759714032.762:10307): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.030158][ T3029] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.049546][ T29] audit: type=1400 audit(1759714032.762:10308): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.056073][ T3029] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 100.077185][ T29] audit: type=1400 audit(1759714032.762:10309): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.077215][ T29] audit: type=1400 audit(1759714032.762:10310): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.085067][ T3029] audit: backlog limit exceeded [ 100.106086][ T29] audit: type=1400 audit(1759714032.762:10311): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.153228][ T29] audit: type=1400 audit(1759714032.762:10312): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.419955][ T7636] macsec1: entered promiscuous mode [ 100.425231][ T7636] bridge0: entered promiscuous mode [ 100.445729][ T7636] bridge0: port 3(macsec1) entered blocking state [ 100.452403][ T7636] bridge0: port 3(macsec1) entered disabled state [ 100.470654][ T7643] netlink: 'syz.7.1575': attribute type 1 has an invalid length. [ 100.489118][ T7636] macsec1: entered allmulticast mode [ 100.494444][ T7636] bridge0: entered allmulticast mode [ 100.508824][ T7636] macsec1: left allmulticast mode [ 100.513940][ T7636] bridge0: left allmulticast mode [ 100.527793][ T7636] bridge0: left promiscuous mode [ 100.568716][ T7646] bond1: (slave ip6gretap1): making interface the new active one [ 100.576776][ T7646] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 100.584612][ T7646] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 100.592412][ T7646] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 100.656928][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1577'. [ 100.666010][ T7651] Unsupported xt match [ 100.666023][ T7651] unable to load match [ 101.417238][ T7746] bridge0: entered promiscuous mode [ 101.427912][ T7746] macsec1: entered promiscuous mode [ 101.442390][ T7746] bridge0: port 3(macsec1) entered blocking state [ 101.448995][ T7746] bridge0: port 3(macsec1) entered disabled state [ 101.457262][ T7746] macsec1: entered allmulticast mode [ 101.462597][ T7746] bridge0: entered allmulticast mode [ 101.469330][ T7746] macsec1: left allmulticast mode [ 101.474480][ T7746] bridge0: left allmulticast mode [ 101.499322][ T7746] bridge0: left promiscuous mode [ 101.538812][ T7752] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1622'. [ 101.624935][ T7758] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 102.121176][ T7830] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 102.129441][ T7830] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 102.304238][ T7855] netlink: 'syz.7.1672': attribute type 13 has an invalid length. [ 102.411089][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.418605][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.552253][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.572246][ T7855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.667197][ T7064] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.706138][ T7064] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.733662][ T7064] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.753237][ T7064] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.886183][ T7912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7912 comm=syz.7.1698 [ 102.939481][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1698'. [ 102.990926][ T7912] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 103.024160][ T7912] bond2: (slave vcan1): Error -95 calling set_mac_address [ 103.149522][ T7932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.321366][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 103.340295][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1716'. [ 103.470415][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1723'. [ 103.521537][ T7973] netlink: 'syz.2.1727': attribute type 3 has an invalid length. [ 103.741236][ T7999] netlink: 'syz.6.1740': attribute type 1 has an invalid length. [ 103.801482][ T7999] bond0: (slave geneve2): making interface the new active one [ 103.832864][ T7999] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 103.841771][ T7064] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 103.870643][ T7064] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 103.928387][ T7064] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 103.972042][ T7064] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 104.011737][ T8030] ip6tnl1: entered promiscuous mode [ 104.031766][ T8034] macsec1: entered promiscuous mode [ 104.037030][ T8034] bridge0: entered promiscuous mode [ 104.046577][ T8034] bridge0: port 3(macsec1) entered blocking state [ 104.053439][ T8034] bridge0: port 3(macsec1) entered disabled state [ 104.068078][ T8034] macsec1: entered allmulticast mode [ 104.073444][ T8034] bridge0: entered allmulticast mode [ 104.080111][ T8034] macsec1: left allmulticast mode [ 104.085188][ T8034] bridge0: left allmulticast mode [ 104.103906][ T8034] bridge0: left promiscuous mode [ 104.120405][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 104.129478][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 104.161211][ T7064] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.161161][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 104.161272][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 104.197017][ T7064] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.215727][ T7064] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.224863][ T7064] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.321206][ T8065] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1769'. [ 104.577458][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1783'. [ 104.591325][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1783'. [ 104.591334][ T1023] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.591401][ T1023] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.618116][ T1023] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.628410][ T1023] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.705565][ T8102] netlink: 'syz.5.1788': attribute type 4 has an invalid length. [ 104.715791][ T8102] netlink: 'syz.5.1788': attribute type 4 has an invalid length. [ 104.739177][ T29] kauditd_printk_skb: 20692 callbacks suppressed [ 104.739195][ T29] audit: type=1400 audit(1759714037.780:29688): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.748808][ T3029] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.768076][ T5392] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.773443][ T3029] audit: audit_lost=453 audit_rate_limit=0 audit_backlog_limit=64 [ 104.779919][ T5392] audit: audit_lost=454 audit_rate_limit=0 audit_backlog_limit=64 [ 104.787783][ T3029] audit: backlog limit exceeded [ 104.800669][ T5392] audit: backlog limit exceeded [ 104.807861][ T3029] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.814559][ T3029] audit: audit_lost=455 audit_rate_limit=0 audit_backlog_limit=64 [ 104.815960][ T29] audit: type=1400 audit(1759714037.780:29689): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 105.004848][ T8134] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1804'. [ 105.383468][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1827'. [ 105.439737][ T8191] netlink: 'syz.3.1831': attribute type 4 has an invalid length. [ 105.447541][ T8191] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1831'. [ 105.717032][ T8218] netlink: 'syz.6.1845': attribute type 1 has an invalid length. [ 105.761081][ T8218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.792532][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.808111][ T8226] bond1: (slave batadv1): making interface the new active one [ 105.833162][ T8226] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 105.848625][ T8218] bond1 (unregistering): (slave batadv1): Releasing active interface [ 105.859094][ T8218] bond1 (unregistering): Released all slaves [ 105.992438][ T8250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8250 comm=syz.7.1860 [ 106.019170][ T8250] netlink: 'syz.7.1860': attribute type 1 has an invalid length. [ 106.075855][ T8250] bond3: (slave bridge1): making interface the new active one [ 106.092124][ T8250] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 106.171817][ T8271] netlink: 'syz.5.1870': attribute type 1 has an invalid length. [ 106.194132][ T8271] bond1: entered promiscuous mode [ 106.203740][ T8271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.247555][ T8279] batadv1: entered promiscuous mode [ 106.252891][ T8279] batadv1: entered allmulticast mode [ 106.290731][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.322512][ T8279] bond1: (slave batadv1): making interface the new active one [ 106.343505][ T8279] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 106.553265][ T8313] bridge0: entered promiscuous mode [ 106.569292][ T8313] macsec1: entered promiscuous mode [ 106.583781][ T8313] bridge0: port 3(macsec1) entered blocking state [ 106.590330][ T8313] bridge0: port 3(macsec1) entered disabled state [ 106.598172][ T8313] macsec1: entered allmulticast mode [ 106.603581][ T8313] bridge0: entered allmulticast mode [ 106.624817][ T8313] macsec1: left allmulticast mode [ 106.629912][ T8313] bridge0: left allmulticast mode [ 106.637668][ T8313] bridge0: left promiscuous mode [ 106.949168][ T8360] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 107.007045][ T8360] gretap1: entered allmulticast mode [ 107.048423][ T8360] bond1: (slave gretap1): making interface the new active one [ 107.087552][ T8360] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 107.740262][ T8420] netlink: 'syz.6.1939': attribute type 1 has an invalid length. [ 107.783206][ T8420] bond1: (slave ip6gretap0): making interface the new active one [ 107.791850][ T8420] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 107.799661][ T8420] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 107.807600][ T8420] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 108.373037][ T8502] netlink: 'syz.2.1977': attribute type 12 has an invalid length. [ 108.462138][ T8515] gtp0: entered promiscuous mode [ 108.578685][ T8529] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 108.946596][ T8593] __nla_validate_parse: 7 callbacks suppressed [ 108.946620][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2022'. [ 108.961825][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2022'. [ 109.015370][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2022'. [ 109.024470][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2022'. [ 109.144796][ T8616] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2033'. [ 109.269799][ T8645] ipip0: entered promiscuous mode [ 109.309725][ T8652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.335581][ T8652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.520031][ T8666] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 109.541204][ T29] kauditd_printk_skb: 20920 callbacks suppressed [ 109.541237][ T29] audit: type=1326 audit(1759714042.849:47957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.6.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 109.589698][ T29] audit: type=1326 audit(1759714042.849:47958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.6.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 109.613418][ T29] audit: type=1326 audit(1759714042.849:47959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.6.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 109.637105][ T29] audit: type=1326 audit(1759714042.849:47960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.6.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 109.660829][ T29] audit: type=1326 audit(1759714042.849:47961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8667 comm="syz.6.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 109.700504][ T29] audit: type=1400 audit(1759714042.891:47962): avc: denied { create } for pid=8671 comm="syz.5.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.721088][ T29] audit: type=1400 audit(1759714042.944:47963): avc: denied { write } for pid=8671 comm="syz.5.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.741653][ T29] audit: type=1400 audit(1759714042.944:47964): avc: denied { read } for pid=8671 comm="syz.5.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.762251][ T29] audit: type=1400 audit(1759714042.997:47965): avc: denied { create } for pid=8673 comm="syz.6.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.782096][ T29] audit: type=1400 audit(1759714042.997:47966): avc: denied { connect } for pid=8673 comm="syz.6.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.833185][ T8688] netlink: 'syz.5.2064': attribute type 10 has an invalid length. [ 109.852028][ T8688] team0 (unregistering): Port device team_slave_0 removed [ 109.866766][ T8688] team0 (unregistering): Port device team_slave_1 removed [ 109.937067][ T3394] IPVS: starting estimator thread 0... [ 109.961344][ T8704] netlink: 'syz.5.2069': attribute type 15 has an invalid length. [ 110.023080][ T8700] IPVS: using max 2016 ests per chain, 100800 per kthread [ 110.105082][ T8725] netlink: 'syz.2.2078': attribute type 4 has an invalid length. [ 110.473258][ T8758] loop5: detected capacity change from 0 to 128 [ 110.598848][ T8770] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 110.835002][ T8781] loop5: detected capacity change from 0 to 512 [ 110.849831][ T8781] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.885530][ T8781] EXT4-fs (loop5): mount failed [ 110.896218][ T8783] ipip1: entered promiscuous mode [ 110.905997][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 110.931597][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 110.987598][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.994902][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.003245][ T8800] bridge0: entered allmulticast mode [ 111.018374][ T8798] tipc: Started in network mode [ 111.023385][ T8798] tipc: Node identity a2f100baef4a, cluster identity 4711 [ 111.030700][ T8798] tipc: Enabled bearer , priority 0 [ 111.038330][ T8800] bridge_slave_1: left allmulticast mode [ 111.044033][ T8800] bridge_slave_1: left promiscuous mode [ 111.049788][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.061529][ T8800] bridge_slave_0: left allmulticast mode [ 111.067282][ T8800] bridge_slave_0: left promiscuous mode [ 111.073038][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.120441][ T8802] tipc: Disabling bearer [ 111.243372][ T8821] macvtap1: entered allmulticast mode [ 111.248902][ T8821] bridge0: entered allmulticast mode [ 111.255442][ T8821] bridge0: left allmulticast mode [ 111.263838][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2112'. [ 111.282086][ T8824] netlink: 'syz.5.2122': attribute type 30 has an invalid length. [ 111.381836][ T8834] loop5: detected capacity change from 0 to 256 [ 111.418893][ T1023] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.428783][ T1023] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 111.442146][ T8837] loop7: detected capacity change from 0 to 512 [ 111.461063][ T8837] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 111.479158][ T8837] EXT4-fs (loop7): 1 truncate cleaned up [ 111.492226][ T8837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.499590][ T8841] loop6: detected capacity change from 0 to 1024 [ 111.529013][ T8841] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.539993][ T8841] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.552582][ T5392] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.582622][ T1023] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.592466][ T1023] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 111.614725][ T8841] JBD2: no valid journal superblock found [ 111.620488][ T8841] EXT4-fs (loop6): Could not load journal inode [ 111.664358][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 111.698306][ T8855] bridge3: entered promiscuous mode [ 111.710295][ T8859] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2131'. [ 111.729127][ T1023] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.739147][ T1023] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 111.797586][ T1023] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.807490][ T1023] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 111.880267][ T7059] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.912287][ T7059] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.930581][ T7059] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.967876][ T7059] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.047422][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.056950][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.066467][ T1023] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 112.076061][ T1023] bond0 (unregistering): Released all slaves [ 112.113192][ T8900] IPVS: Error connecting to the multicast addr [ 112.137006][ T1023] hsr_slave_0: left promiscuous mode [ 112.145554][ T1023] hsr_slave_1: left promiscuous mode [ 112.151334][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.160832][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.236389][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 112.246098][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 112.347050][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.384275][ T8928] netlink: 'syz.7.2157': attribute type 1 has an invalid length. [ 112.416543][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.455365][ T8939] bond4: (slave gretap1): making interface the new active one [ 112.470785][ T8939] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 112.481644][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 112.491600][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.500870][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.540036][ T8949] gretap0: entered promiscuous mode [ 112.660364][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.668254][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.692141][ T8850] bridge_slave_0: entered allmulticast mode [ 112.701405][ T8850] bridge_slave_0: entered promiscuous mode [ 112.742741][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.749900][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.755350][ T8977] netlink: 'syz.6.2172': attribute type 1 has an invalid length. [ 112.778826][ T8850] bridge_slave_1: entered allmulticast mode [ 112.793824][ T8850] bridge_slave_1: entered promiscuous mode [ 112.832438][ T8977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.899959][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.930790][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.017911][ T8850] team0: Port device team_slave_0 added [ 113.034563][ T8850] team0: Port device team_slave_1 added [ 113.098110][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.105202][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.131481][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.145080][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.152286][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.178258][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.208915][ T8850] hsr_slave_0: entered promiscuous mode [ 113.215073][ T8850] hsr_slave_1: entered promiscuous mode [ 113.228661][ T8850] debugfs: 'hsr0' already exists in 'hsr' [ 113.234523][ T8850] Cannot create hsr debugfs directory [ 113.422499][ T8850] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 113.450040][ T8850] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 113.471383][ T8850] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 113.515165][ T8850] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 113.616186][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.647839][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.671603][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.678725][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.711930][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.719113][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.856101][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.071042][ T9110] loop6: detected capacity change from 0 to 128 [ 114.103325][ T9110] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 114.111239][ T9110] FAT-fs (loop6): Filesystem has been set read-only [ 114.122320][ T9110] syz.6.2198: attempt to access beyond end of device [ 114.122320][ T9110] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 114.140823][ T9110] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 114.148711][ T9110] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 114.161422][ T9122] syz.6.2198: attempt to access beyond end of device [ 114.161422][ T9122] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.175136][ T9110] syz.6.2198: attempt to access beyond end of device [ 114.175136][ T9110] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.198130][ T8850] veth0_vlan: entered promiscuous mode [ 114.203866][ T9122] syz.6.2198: attempt to access beyond end of device [ 114.203866][ T9122] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.220321][ T8850] veth1_vlan: entered promiscuous mode [ 114.225958][ T9110] syz.6.2198: attempt to access beyond end of device [ 114.225958][ T9110] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.243913][ T9122] syz.6.2198: attempt to access beyond end of device [ 114.243913][ T9122] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.263147][ T8850] veth0_macvtap: entered promiscuous mode [ 114.269121][ T9110] syz.6.2198: attempt to access beyond end of device [ 114.269121][ T9110] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.286173][ T9125] __nla_validate_parse: 8 callbacks suppressed [ 114.286188][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2203'. [ 114.288014][ T9122] syz.6.2198: attempt to access beyond end of device [ 114.288014][ T9122] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.315649][ T8850] veth1_macvtap: entered promiscuous mode [ 114.327610][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.335585][ T9110] syz.6.2198: attempt to access beyond end of device [ 114.335585][ T9110] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.353500][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.363859][ T9110] syz.6.2198: attempt to access beyond end of device [ 114.363859][ T9110] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.382817][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.395863][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.435696][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 114.435711][ T29] audit: type=1400 audit(1759714048.010:48134): avc: denied { mounton } for pid=8850 comm="syz-executor" path="/root/syzkaller.IiZeHr/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 114.470517][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.483668][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.497382][ T29] audit: type=1400 audit(1759714048.042:48135): avc: denied { mount } for pid=8850 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 114.519521][ T29] audit: type=1400 audit(1759714048.042:48136): avc: denied { mounton } for pid=8850 comm="syz-executor" path="/root/syzkaller.IiZeHr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 114.546480][ T29] audit: type=1400 audit(1759714048.042:48137): avc: denied { mounton } for pid=8850 comm="syz-executor" path="/root/syzkaller.IiZeHr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 114.574367][ T29] audit: type=1326 audit(1759714048.074:48138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d14eec9 code=0x7ffc0000 [ 114.597927][ T29] audit: type=1400 audit(1759714048.074:48139): avc: denied { mounton } for pid=8850 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 114.620961][ T29] audit: type=1400 audit(1759714048.074:48140): avc: denied { mount } for pid=8850 comm="syz-executor" name="/" dev="gadgetfs" ino=3766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 114.646209][ T29] audit: type=1326 audit(1759714048.074:48141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d14eec9 code=0x7ffc0000 [ 114.669856][ T29] audit: type=1326 audit(1759714048.074:48142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356d14eec9 code=0x7ffc0000 [ 114.693573][ T29] audit: type=1326 audit(1759714048.074:48143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356d14eec9 code=0x7ffc0000 [ 114.789745][ T9141] hub 9-0:1.0: USB hub found [ 114.806628][ T9141] hub 9-0:1.0: 8 ports detected [ 114.962886][ T9169] pim6reg: entered allmulticast mode [ 114.983015][ T9169] pim6reg: left allmulticast mode [ 115.012564][ T9176] geneve2: entered promiscuous mode [ 115.017938][ T9176] geneve2: entered allmulticast mode [ 115.178986][ T9195] loop6: detected capacity change from 0 to 128 [ 115.206463][ T9195] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 115.221686][ T9195] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.296861][ T9213] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9213 comm=syz.5.2240 [ 115.309489][ T9213] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9213 comm=syz.5.2240 [ 115.331842][ T9214] netlink: 'syz.3.2239': attribute type 4 has an invalid length. [ 115.339822][ T9214] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2239'. [ 115.351227][ T5353] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.402125][ T9214] .`: renamed from bond0 (while UP) [ 115.477996][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2248'. [ 115.536257][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2250'. [ 115.545407][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2250'. [ 115.735911][ T9257] netlink: 'syz.5.2257': attribute type 10 has an invalid length. [ 115.779898][ T9257] netlink: 'syz.5.2257': attribute type 10 has an invalid length. [ 115.805978][ T9257] dummy0: entered promiscuous mode [ 115.826076][ T9257] $H: (slave dummy0): Enslaving as an active interface with an up link [ 116.176122][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2277'. [ 116.185397][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2277'. [ 116.273853][ T9310] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2281'. [ 116.537780][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'. [ 116.574187][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'. [ 116.714640][ T9350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.986119][ T9380] netlink: 'syz.7.2310': attribute type 12 has an invalid length. [ 117.025603][ T9386] loop7: detected capacity change from 0 to 256 [ 117.048167][ T9386] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.289144][ T9416] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 117.855992][ T9462] loop6: detected capacity change from 0 to 1024 [ 117.879180][ T9462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.901352][ T9462] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.925475][ T9462] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.2346: lblock 0 mapped to illegal pblock 0 (length 1) [ 117.961127][ T9462] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 117.973661][ T9462] EXT4-fs (loop6): This should not happen!! Data will be lost [ 117.973661][ T9462] [ 118.011654][ T9471] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: comm syz.6.2346: lblock 0 mapped to illegal pblock 0 (length 1) [ 118.082433][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.304100][ T5392] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 118.315129][ T5392] CPU: 1 UID: 0 PID: 5392 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.315162][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.315226][ T5392] Call Trace: [ 118.315263][ T5392] [ 118.315273][ T5392] __dump_stack+0x1d/0x30 [ 118.315326][ T5392] dump_stack_lvl+0xe8/0x140 [ 118.315432][ T5392] dump_stack+0x15/0x1b [ 118.315462][ T5392] dump_header+0x81/0x220 [ 118.315502][ T5392] oom_kill_process+0x342/0x400 [ 118.315529][ T5392] out_of_memory+0x979/0xb80 [ 118.315559][ T5392] try_charge_memcg+0x5e6/0x9e0 [ 118.315587][ T5392] ? should_fail_ex+0x30/0x280 [ 118.315757][ T5392] charge_memcg+0x51/0xc0 [ 118.315780][ T5392] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 118.315809][ T5392] __read_swap_cache_async+0x17b/0x2d0 [ 118.315851][ T5392] swap_cluster_readahead+0x262/0x3c0 [ 118.315958][ T5392] swapin_readahead+0xde/0x6f0 [ 118.315996][ T5392] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 118.316029][ T5392] ? __rcu_read_unlock+0x34/0x70 [ 118.316057][ T5392] ? __rcu_read_unlock+0x4f/0x70 [ 118.316094][ T5392] ? __rcu_read_unlock+0x4f/0x70 [ 118.316121][ T5392] ? swap_cache_get_folio+0x277/0x280 [ 118.316169][ T5392] do_swap_page+0x2ae/0x2370 [ 118.316193][ T5392] ? _raw_spin_unlock+0x26/0x50 [ 118.316287][ T5392] ? finish_task_switch+0xad/0x2b0 [ 118.316315][ T5392] ? __pfx_default_wake_function+0x10/0x10 [ 118.316346][ T5392] handle_mm_fault+0x9a5/0x2be0 [ 118.316439][ T5392] ? vma_start_read+0x141/0x1f0 [ 118.316546][ T5392] do_user_addr_fault+0x630/0x1080 [ 118.316569][ T5392] ? fpregs_restore_userregs+0xe2/0x1d0 [ 118.316603][ T5392] ? switch_fpu_return+0xe/0x20 [ 118.316635][ T5392] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.316700][ T5392] exc_page_fault+0x62/0xa0 [ 118.316730][ T5392] asm_exc_page_fault+0x26/0x30 [ 118.316756][ T5392] RIP: 0033:0x7fd11d7f1745 [ 118.316775][ T5392] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 118.316800][ T5392] RSP: 002b:00007ffdd91c8c48 EFLAGS: 00010246 [ 118.316819][ T5392] RAX: 0000000000000000 RBX: 00000000000002be RCX: 00007fd11d7f1743 [ 118.316836][ T5392] RDX: 00007ffdd91c8c60 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.316930][ T5392] RBP: 00007ffdd91c8ccc R08: 0000000029d04ee7 R09: 0000000000000000 [ 118.317022][ T5392] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 118.317034][ T5392] R13: 00000000000927c0 R14: 000000000001d06b R15: 00007ffdd91c8d20 [ 118.317053][ T5392] [ 118.317122][ T5392] memory: usage 307200kB, limit 307200kB, failcnt 191 [ 118.573127][ T5392] memory+swap: usage 307736kB, limit 9007199254740988kB, failcnt 0 [ 118.581086][ T5392] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 118.588386][ T5392] Memory cgroup stats for /syz7: [ 118.589000][ T5392] cache 0 [ 118.596933][ T5392] rss 0 [ 118.599055][ T9503] loop6: detected capacity change from 0 to 32768 [ 118.599738][ T5392] shmem 0 [ 118.609099][ T5392] mapped_file 0 [ 118.612578][ T5392] dirty 0 [ 118.615520][ T5392] writeback 0 [ 118.618853][ T5392] workingset_refault_anon 20 [ 118.623459][ T5392] workingset_refault_file 1 [ 118.627996][ T5392] swap 548864 [ 118.631286][ T5392] swapcached 4096 [ 118.634949][ T5392] pgpgin 35463 [ 118.638420][ T5392] pgpgout 35462 [ 118.641939][ T5392] pgfault 54767 [ 118.645413][ T5392] pgmajfault 7 [ 118.648845][ T5392] inactive_anon 0 [ 118.652480][ T5392] active_anon 4096 [ 118.656252][ T5392] inactive_file 0 [ 118.659887][ T5392] active_file 0 [ 118.663405][ T5392] unevictable 0 [ 118.666895][ T5392] hierarchical_memory_limit 314572800 [ 118.672278][ T5392] hierarchical_memsw_limit 9223372036854771712 [ 118.678558][ T5392] total_cache 0 [ 118.682024][ T5392] total_rss 0 [ 118.685446][ T5392] total_shmem 0 [ 118.688919][ T5392] total_mapped_file 0 [ 118.692951][ T5392] total_dirty 0 [ 118.696435][ T5392] total_writeback 0 [ 118.700262][ T5392] total_workingset_refault_anon 20 [ 118.705503][ T5392] total_workingset_refault_file 1 [ 118.710617][ T5392] total_swap 548864 [ 118.714453][ T5392] total_swapcached 4096 [ 118.718637][ T5392] total_pgpgin 35463 [ 118.722568][ T5392] total_pgpgout 35462 [ 118.726562][ T5392] total_pgfault 54767 [ 118.730558][ T5392] total_pgmajfault 7 [ 118.734665][ T5392] total_inactive_anon 0 [ 118.738832][ T5392] total_active_anon 4096 [ 118.743205][ T5392] total_inactive_file 0 [ 118.747367][ T5392] total_active_file 0 [ 118.751384][ T5392] total_unevictable 0 [ 118.755466][ T5392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2038,pid=8629,uid=0 [ 118.763852][ T9512] loop8: detected capacity change from 0 to 1024 [ 118.770265][ T5392] Memory cgroup out of memory: Killed process 8629 (syz.7.2038) total-vm:95872kB, anon-rss:1172kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 118.801976][ T9430] syz.7.2331 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 118.805938][ T9512] EXT4-fs: Ignoring removed bh option [ 118.816160][ T9430] CPU: 0 UID: 0 PID: 9430 Comm: syz.7.2331 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.816241][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.816259][ T9430] Call Trace: [ 118.816267][ T9430] [ 118.816278][ T9430] __dump_stack+0x1d/0x30 [ 118.816346][ T9430] dump_stack_lvl+0xe8/0x140 [ 118.816396][ T9430] dump_stack+0x15/0x1b [ 118.816508][ T9430] dump_header+0x81/0x220 [ 118.816552][ T9430] oom_kill_process+0x342/0x400 [ 118.816592][ T9430] out_of_memory+0x979/0xb80 [ 118.816690][ T9430] try_charge_memcg+0x5e6/0x9e0 [ 118.816732][ T9430] obj_cgroup_charge_pages+0xa6/0x150 [ 118.816917][ T9430] __memcg_kmem_charge_page+0x9f/0x170 [ 118.816963][ T9430] __alloc_frozen_pages_noprof+0x188/0x360 [ 118.817013][ T9430] alloc_pages_mpol+0xb3/0x260 [ 118.817134][ T9430] ? alloc_pages_noprof+0x61/0x130 [ 118.817181][ T9430] alloc_pages_noprof+0x90/0x130 [ 118.817227][ T9430] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 118.817332][ T9430] __kvmalloc_node_noprof+0x483/0x670 [ 118.817388][ T9430] ? ip_set_alloc+0x24/0x30 [ 118.817454][ T9430] ? ip_set_alloc+0x24/0x30 [ 118.817555][ T9430] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 118.817595][ T9430] ip_set_alloc+0x24/0x30 [ 118.817701][ T9430] hash_netiface_create+0x282/0x740 [ 118.817791][ T9430] ? __pfx_hash_netiface_create+0x10/0x10 [ 118.817899][ T9430] ip_set_create+0x3cc/0x970 [ 118.817939][ T9430] ? __nla_parse+0x40/0x60 [ 118.817973][ T9430] nfnetlink_rcv_msg+0x4c3/0x590 [ 118.818042][ T9430] netlink_rcv_skb+0x123/0x220 [ 118.818067][ T9430] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.818142][ T9430] nfnetlink_rcv+0x167/0x16c0 [ 118.818215][ T9430] ? __free_frozen_pages+0x284/0x510 [ 118.818247][ T9430] ? free_large_kmalloc+0xb1/0x100 [ 118.818275][ T9430] ? bpf_check+0xc239/0xd9d0 [ 118.818362][ T9430] ? do_jit+0x8050/0x8280 [ 118.818405][ T9430] ? xas_load+0x413/0x430 [ 118.818441][ T9430] ? __rcu_read_unlock+0x4f/0x70 [ 118.818584][ T9430] ? xa_load+0xb1/0xe0 [ 118.818622][ T9430] ? should_fail_ex+0x30/0x280 [ 118.818703][ T9430] ? selinux_nlmsg_lookup+0x99/0x890 [ 118.818735][ T9430] ? __rcu_read_unlock+0x34/0x70 [ 118.818766][ T9430] ? __netlink_lookup+0x266/0x2a0 [ 118.818799][ T9430] netlink_unicast+0x5c0/0x690 [ 118.818907][ T9430] netlink_sendmsg+0x58b/0x6b0 [ 118.818937][ T9430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.819002][ T9430] __sock_sendmsg+0x142/0x180 [ 118.819058][ T9430] ____sys_sendmsg+0x31e/0x4e0 [ 118.819092][ T9430] ___sys_sendmsg+0x17b/0x1d0 [ 118.819192][ T9430] __x64_sys_sendmsg+0xd4/0x160 [ 118.819296][ T9430] x64_sys_call+0x191e/0x3000 [ 118.819325][ T9430] do_syscall_64+0xd2/0x200 [ 118.819370][ T9430] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.819407][ T9430] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.819442][ T9430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.819531][ T9430] RIP: 0033:0x7fd11d7beec9 [ 118.819554][ T9430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.819578][ T9430] RSP: 002b:00007fd11c227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.819652][ T9430] RAX: ffffffffffffffda RBX: 00007fd11da15fa0 RCX: 00007fd11d7beec9 [ 118.819670][ T9430] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 118.819688][ T9430] RBP: 00007fd11d841f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.819705][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.819721][ T9430] R13: 00007fd11da16038 R14: 00007fd11da15fa0 R15: 00007ffdd91c8908 [ 118.819747][ T9430] [ 118.819919][ T9430] memory: usage 307196kB, limit 307200kB, failcnt 238 [ 118.923803][ T9512] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 118.928242][ T9430] memory+swap: usage 307540kB, limit 9007199254740988kB, failcnt 0 [ 118.928262][ T9430] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 118.928275][ T9430] Memory cgroup stats for /syz7: [ 118.949103][ T9430] cache 0 [ 119.029041][ T9503] loop6: p1 p2 p3 < p5 p6 > [ 119.031954][ T9430] rss 32768 [ 119.038842][ T9503] loop6: p2 size 16775168 extends beyond EOD, [ 119.041816][ T9430] shmem 0 [ 119.041828][ T9430] mapped_file 0 [ 119.041836][ T9430] dirty 0 [ 119.046717][ T9503] truncated [ 119.052196][ T9503] loop6: p5 start 4294970168 is beyond EOD, [ 119.056776][ T9430] writeback 4096 [ 119.061543][ T9503] truncated [ 119.066261][ T9430] workingset_refault_anon 53 [ 119.258559][ T9430] workingset_refault_file 1 [ 119.263185][ T9430] swap 356352 [ 119.266487][ T9430] swapcached 36864 [ 119.270268][ T9430] pgpgin 35496 [ 119.273790][ T9430] pgpgout 35486 [ 119.277287][ T9430] pgfault 54788 [ 119.277999][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 119.278075][ T29] audit: type=1326 audit(1759714053.022:48355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 119.280748][ T9430] pgmajfault 22 [ 119.280759][ T9430] inactive_anon 4096 [ 119.280768][ T9430] active_anon 28672 [ 119.280776][ T9430] inactive_file 0 [ 119.280784][ T9430] active_file 0 [ 119.280831][ T9430] unevictable 0 [ 119.287029][ T29] audit: type=1326 audit(1759714053.022:48356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 119.310580][ T9430] hierarchical_memory_limit 314572800 [ 119.314034][ T29] audit: type=1326 audit(1759714053.022:48357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 119.317915][ T9430] hierarchical_memsw_limit 9223372036854771712 [ 119.391395][ T9430] total_cache 0 [ 119.394901][ T9430] total_rss 32768 [ 119.398621][ T9430] total_shmem 0 [ 119.399513][ T9512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.402118][ T9430] total_mapped_file 0 [ 119.402130][ T9430] total_dirty 0 [ 119.402139][ T9430] total_writeback 4096 [ 119.421384][ T8709] udevd[8709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 119.421746][ T9430] total_workingset_refault_anon 53 [ 119.431248][ T29] audit: type=1400 audit(1759714053.275:48358): avc: denied { mounton } for pid=9507 comm="syz.8.2365" path="/50/file1/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.435631][ T9430] total_workingset_refault_file 1 [ 119.440773][ T29] audit: type=1400 audit(1759714053.275:48359): avc: denied { mount } for pid=9507 comm="syz.8.2365" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.443008][ T8649] udevd[8649]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 119.464143][ T9430] total_swap 356352 [ 119.464154][ T9430] total_swapcached 36864 [ 119.464161][ T9430] total_pgpgin 35496 [ 119.464168][ T9430] total_pgpgout 35486 [ 119.471551][ T8646] udevd[8646]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 119.491821][ T9430] total_pgfault 54788 [ 119.506697][ T8889] udevd[8889]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 119.509393][ T9430] total_pgmajfault 22 [ 119.509406][ T9430] total_inactive_anon 4096 [ 119.521147][ T8649] udevd[8649]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 119.527029][ T9430] total_active_anon 28672 [ 119.532720][ T8709] udevd[8709]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 119.540761][ T9430] total_inactive_file 0 [ 119.540773][ T9430] total_active_file 0 [ 119.546278][ T8889] udevd[8889]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 119.549201][ T9430] total_unevictable 0 [ 119.549214][ T9430] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 119.562305][ T8646] udevd[8646]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 119.563261][ T9430] ,cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2177,pid=9012,uid=0 [ 119.621729][ T9430] Memory cgroup out of memory: Killed process 9012 (syz.7.2177) total-vm:95872kB, anon-rss:1144kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 119.654662][ T29] audit: type=1400 audit(1759714053.518:48360): avc: denied { unmount } for pid=8850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.683334][ T8850] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.735058][ T29] audit: type=1326 audit(1759714053.539:48361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 119.758669][ T29] audit: type=1326 audit(1759714053.539:48362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 119.782379][ T29] audit: type=1326 audit(1759714053.549:48363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 119.805900][ T29] audit: type=1326 audit(1759714053.549:48364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 119.956519][ T9582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9582 comm=syz.6.2375 [ 119.969080][ T9582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9582 comm=syz.6.2375 [ 120.275112][ T9626] __nla_validate_parse: 8 callbacks suppressed [ 120.275157][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 120.299175][ T9626] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2390'. [ 120.308361][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 120.345206][ T9632] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2393'. [ 120.439446][ T9649] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2400'. [ 120.484593][ T9657] gtp0: entered promiscuous mode [ 120.568137][ T9668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9668 comm=syz.7.2409 [ 120.741745][ T9700] loop6: detected capacity change from 0 to 1024 [ 120.763769][ T9700] EXT4-fs: Ignoring removed nobh option [ 120.769437][ T9700] EXT4-fs: Ignoring removed bh option [ 120.802387][ T9720] macvlan1: entered promiscuous mode [ 120.829120][ T9720] ipvlan0: entered promiscuous mode [ 120.835179][ T9720] ipvlan0: left promiscuous mode [ 120.849435][ T9720] macvlan1: left promiscuous mode [ 120.911034][ T9700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.001412][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.206225][ T9709] Set syz1 is full, maxelem 65536 reached [ 121.249708][ T9748] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 121.376228][ T9758] 9pnet_fd: Insufficient options for proto=fd [ 121.574486][ T9785] ipip0: entered promiscuous mode [ 121.910634][ T9814] loop8: detected capacity change from 0 to 128 [ 122.077510][ T9723] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.087517][ T9723] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.176965][ T9684] bio_check_eod: 6555 callbacks suppressed [ 122.176991][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.176991][ T9684] loop8: rw=1, sector=145, nr_sectors = 8 limit=128 [ 122.284753][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.284753][ T9684] loop8: rw=1, sector=161, nr_sectors = 8 limit=128 [ 122.317419][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.317419][ T9684] loop8: rw=1, sector=177, nr_sectors = 8 limit=128 [ 122.361133][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.361133][ T9684] loop8: rw=1, sector=193, nr_sectors = 8 limit=128 [ 122.406583][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.406583][ T9684] loop8: rw=1, sector=209, nr_sectors = 8 limit=128 [ 122.428337][ T9806] Set syz1 is full, maxelem 65536 reached [ 122.440475][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.440475][ T9684] loop8: rw=1, sector=225, nr_sectors = 8 limit=128 [ 122.455679][ T9723] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.455642][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.455642][ T9684] loop8: rw=1, sector=241, nr_sectors = 8 limit=128 [ 122.465586][ T9723] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.479621][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.479621][ T9684] loop8: rw=1, sector=257, nr_sectors = 8 limit=128 [ 122.502411][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.502411][ T9684] loop8: rw=1, sector=273, nr_sectors = 8 limit=128 [ 122.516071][ T9684] kworker/u8:19: attempt to access beyond end of device [ 122.516071][ T9684] loop8: rw=1, sector=289, nr_sectors = 8 limit=128 [ 122.581875][ T9723] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.591764][ T9723] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.678680][ T9723] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.688691][ T9723] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.871376][ T9723] bridge_slave_1: left allmulticast mode [ 122.877119][ T9723] bridge_slave_1: left promiscuous mode [ 122.882853][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.910905][ T9723] bridge_slave_0: left allmulticast mode [ 122.916674][ T9723] bridge_slave_0: left promiscuous mode [ 122.922409][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.062540][ T9723] bond1 (unregistering): (slave gretap1): Releasing active interface [ 123.236968][ T9723] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.246410][ T9723] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.255970][ T9723] .` (unregistering): Released all slaves [ 123.264270][ T9723] bond1 (unregistering): Released all slaves [ 123.276617][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2477'. [ 123.289438][ T9877] netem: change failed [ 123.296785][ T9882] ipvlan2: entered promiscuous mode [ 123.302690][ T9882] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 123.310516][ T9882] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.329622][ T9893] netlink: 'syz.8.2480': attribute type 4 has an invalid length. [ 123.340718][ T9723] tipc: Left network mode [ 123.345229][ T9828] chnl_net:caif_netlink_parms(): no params data found [ 123.374792][ T9723] hsr_slave_0: left promiscuous mode [ 123.397167][ T9723] hsr_slave_1: left promiscuous mode [ 123.402936][ T9723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.410504][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.418254][ T9900] loop6: detected capacity change from 0 to 2368 [ 123.436431][ T9723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.443894][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.467419][ T3394] IPVS: starting estimator thread 0... [ 123.486470][ T9723] veth1_macvtap: left promiscuous mode [ 123.493216][ T9723] veth0_macvtap: left promiscuous mode [ 123.501287][ T9723] veth1_vlan: left promiscuous mode [ 123.509959][ T9911] netlink: 'syz.7.2490': attribute type 3 has an invalid length. [ 123.517833][ T9723] veth0_vlan: left promiscuous mode [ 123.557604][ T9907] IPVS: using max 2304 ests per chain, 115200 per kthread [ 123.620920][ T9723] team0 (unregistering): Port device team_slave_1 removed [ 123.631703][ T9723] team0 (unregistering): Port device team_slave_0 removed [ 123.723592][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.730770][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.753858][ T9828] bridge_slave_0: entered allmulticast mode [ 123.760333][ T9828] bridge_slave_0: entered promiscuous mode [ 123.767478][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.774574][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.783351][ T9828] bridge_slave_1: entered allmulticast mode [ 123.797228][ T9828] bridge_slave_1: entered promiscuous mode [ 123.871069][ T9828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.892725][ T9828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.966871][ T9828] team0: Port device team_slave_0 added [ 123.988290][ T9828] team0: Port device team_slave_1 added [ 124.042518][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.049513][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.075496][ T9828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.094072][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.101115][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.127200][ T9828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.219260][ T9967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.226543][ T9967] IPv6: NLM_F_CREATE should be set when creating new route [ 124.233807][ T9967] IPv6: NLM_F_CREATE should be set when creating new route [ 124.245591][ T9828] hsr_slave_0: entered promiscuous mode [ 124.297910][ T9828] hsr_slave_1: entered promiscuous mode [ 124.304340][ T9828] debugfs: 'hsr0' already exists in 'hsr' [ 124.310126][ T9828] Cannot create hsr debugfs directory [ 124.395458][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2519'. [ 124.414808][ T9982] team1: entered promiscuous mode [ 124.420026][ T9982] team1: entered allmulticast mode [ 124.425918][ T9982] 8021q: adding VLAN 0 to HW filter on device team1 [ 124.483425][ T9989] netlink: 'syz.8.2521': attribute type 1 has an invalid length. [ 124.503891][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 124.503908][ T29] audit: type=1326 audit(1759714058.622:48502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 124.536889][ T9993] loop6: detected capacity change from 0 to 1024 [ 124.544649][ T29] audit: type=1326 audit(1759714058.622:48503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 124.559576][ T9989] gretap1: entered allmulticast mode [ 124.568476][ T29] audit: type=1326 audit(1759714058.622:48504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 124.578755][ T9989] bond1: (slave gretap1): making interface the new active one [ 124.597250][ T29] audit: type=1326 audit(1759714058.622:48505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 124.628114][ T29] audit: type=1326 audit(1759714058.622:48506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 124.645293][ T9989] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 124.651990][ T29] audit: type=1326 audit(1759714058.664:48507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9991 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 124.671272][ T9828] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 124.694714][ T9828] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 124.704464][ T9828] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 124.711311][ T9993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.732522][ T9828] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 124.766777][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.789513][ T29] audit: type=1326 audit(1759714058.928:48508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10012 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d329eec9 code=0x7ffc0000 [ 124.813388][ T29] audit: type=1326 audit(1759714058.928:48509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10012 comm="syz.8.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d329eec9 code=0x7ffc0000 [ 124.908846][T10026] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.916124][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.925448][ T29] audit: type=1326 audit(1759714058.960:48510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.5.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 124.931386][T10026] bridge0: entered allmulticast mode [ 124.949285][ T29] audit: type=1326 audit(1759714058.960:48511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.5.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8577eec9 code=0x7ffc0000 [ 124.996183][ T9828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.010072][T10030] bridge_slave_1: left allmulticast mode [ 125.015848][T10030] bridge_slave_1: left promiscuous mode [ 125.021911][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.032537][T10030] bridge_slave_0: left allmulticast mode [ 125.038273][T10030] bridge_slave_0: left promiscuous mode [ 125.043994][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.110886][ T9828] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.120308][T10042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2539'. [ 125.129414][T10042] netlink: 'syz.6.2539': attribute type 7 has an invalid length. [ 125.137193][T10042] netlink: 'syz.6.2539': attribute type 8 has an invalid length. [ 125.145016][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2539'. [ 125.145642][ T9828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.164424][ T9828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.176979][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.184118][ T9723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.192846][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.199925][ T9723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.244886][T10050] vlan2: entered allmulticast mode [ 125.250117][T10050] bridge_slave_0: entered allmulticast mode [ 125.310807][ T9828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.467380][T10087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2551'. [ 125.513447][ T9828] veth0_vlan: entered promiscuous mode [ 125.523787][ T9828] veth1_vlan: entered promiscuous mode [ 125.533840][T10098] loop9: detected capacity change from 0 to 7 [ 125.540855][T10098] buffer_io_error: 18 callbacks suppressed [ 125.540871][T10098] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.554274][ T9828] veth0_macvtap: entered promiscuous mode [ 125.554797][T10098] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.563741][ T9828] veth1_macvtap: entered promiscuous mode [ 125.568446][T10098] loop9: unable to read partition table [ 125.581752][T10098] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 125.581752][T10098] ) failed (rc=-5) [ 125.591339][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.608015][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.618958][ T9688] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.628685][ T9688] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.650291][ T9688] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.664532][ T9688] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.823400][T10120] lo speed is unknown, defaulting to 1000 [ 125.829623][T10120] lo speed is unknown, defaulting to 1000 [ 125.835800][T10120] lo speed is unknown, defaulting to 1000 [ 125.842482][T10120] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 125.862988][T10120] lo speed is unknown, defaulting to 1000 [ 125.869137][T10120] lo speed is unknown, defaulting to 1000 [ 125.889912][T10120] lo speed is unknown, defaulting to 1000 [ 125.896698][T10120] lo speed is unknown, defaulting to 1000 [ 125.902988][T10120] lo speed is unknown, defaulting to 1000 [ 125.909240][T10120] lo speed is unknown, defaulting to 1000 [ 125.921693][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2566'. [ 126.111051][T10149] netlink: 664 bytes leftover after parsing attributes in process `syz.8.2577'. [ 126.157834][T10138] loop9: detected capacity change from 0 to 128 [ 126.186825][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2581'. [ 126.213318][T10159] bridge1: entered promiscuous mode [ 126.337951][T10178] loop8: detected capacity change from 0 to 1024 [ 126.359059][T10178] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 126.370029][T10178] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 126.424726][T10178] JBD2: no valid journal superblock found [ 126.430671][T10178] EXT4-fs (loop8): Could not load journal inode [ 126.467211][T10191] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2594'. [ 126.525332][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2596'. [ 126.581039][T10201] netlink: 'syz.9.2600': attribute type 1 has an invalid length. [ 126.768864][T10231] loop9: detected capacity change from 0 to 1024 [ 126.780600][T10231] EXT4-fs: inline encryption not supported [ 126.803220][T10231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.827379][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'. [ 126.856526][ T9828] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.937405][T10256] pim6reg: entered allmulticast mode [ 126.943727][T10256] pim6reg: left allmulticast mode [ 127.094673][T10266] SELinux: failed to load policy [ 127.144217][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2638'. [ 128.174319][T10340] lo speed is unknown, defaulting to 1000 [ 128.248567][T10355] netlink: 'syz.7.2668': attribute type 6 has an invalid length. [ 128.405460][T10383] macvtap0: refused to change device tx_queue_len [ 128.469728][T10395] batadv3: entered promiscuous mode [ 128.475078][T10395] batadv3: entered allmulticast mode [ 128.617015][T10424] debugfs: Bad value for 'uid' [ 128.621862][T10424] debugfs: Bad value for 'uid' [ 128.680856][T10432] netlink: 'syz.5.2700': attribute type 16 has an invalid length. [ 129.267050][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 129.267065][ T29] audit: type=1400 audit(1759714063.640:48657): avc: denied { read } for pid=10483 comm="syz.6.2721" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.296705][ T29] audit: type=1400 audit(1759714063.640:48658): avc: denied { open } for pid=10483 comm="syz.6.2721" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.331697][ T29] audit: type=1400 audit(1759714063.714:48659): avc: denied { ioctl } for pid=10483 comm="syz.6.2721" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.395903][T10490] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 129.482702][ T29] audit: type=1400 audit(1759714063.872:48660): avc: denied { watch watch_reads } for pid=10500 comm="syz.8.2729" path="/122/file0" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.619887][T10514] pim6reg: entered allmulticast mode [ 129.627148][T10514] pim6reg: left allmulticast mode [ 129.688773][ T29] audit: type=1326 audit(1759714064.094:48661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.6.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 129.727470][ T29] audit: type=1326 audit(1759714064.094:48662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.6.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 129.751209][ T29] audit: type=1326 audit(1759714064.125:48663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.6.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 129.774813][ T29] audit: type=1326 audit(1759714064.125:48664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.6.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 129.798495][ T29] audit: type=1326 audit(1759714064.125:48665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10522 comm="syz.6.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff715821785 code=0x7ffc0000 [ 129.822245][ T29] audit: type=1326 audit(1759714064.125:48666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.6.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff7157eeec9 code=0x7ffc0000 [ 129.906618][T10536] loop8: detected capacity change from 0 to 512 [ 129.942805][T10536] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 129.951493][T10536] EXT4-fs (loop8): orphan cleanup on readonly fs [ 129.962332][T10536] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.2745: corrupted inode contents [ 129.962813][T10540] __nla_validate_parse: 10 callbacks suppressed [ 129.962832][T10540] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2747'. [ 129.990119][T10536] EXT4-fs (loop8): Remounting filesystem read-only [ 129.996741][T10536] EXT4-fs (loop8): 1 truncate cleaned up [ 130.008382][ T9727] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.018979][ T9727] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.034092][ T9727] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 130.047237][T10536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.085202][T10558] 9pnet: p9_errstr2errno: server reported unknown error [ 130.118743][ T8850] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.128783][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2755'. [ 130.144480][T10562] hsr_slave_0: left promiscuous mode [ 130.156475][T10562] hsr_slave_1: left promiscuous mode [ 130.212448][T10571] netlink: 'syz.9.2761': attribute type 10 has an invalid length. [ 130.221240][T10571] veth0_vlan: entered allmulticast mode [ 130.234321][T10571] veth0_vlan: left promiscuous mode [ 130.257311][T10571] veth0_vlan: entered promiscuous mode [ 130.272310][T10571] team0: Device veth0_vlan failed to register rx_handler [ 130.422141][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2770'. [ 130.556817][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2773'. [ 130.565953][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2773'. [ 130.600488][T10605] veth0: entered promiscuous mode [ 130.612118][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2775'. [ 131.272161][T10675] geneve0: entered allmulticast mode [ 131.287784][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2806'. [ 131.298987][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2806'. [ 131.314041][T10680] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2807'. [ 131.808572][T10738] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 131.831097][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2831'. [ 131.844486][ T9727] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.856109][ T9727] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.866036][ T9727] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.875322][ T9727] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.246118][T10758] loop6: detected capacity change from 0 to 4096 [ 132.255681][T10758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.280750][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.554693][T10791] SELinux: ebitmap: map size 4294449787 does not match my size 64 (high bit was 0) [ 132.565046][T10791] SELinux: failed to load policy [ 132.690912][T10813] netlink: 'syz.8.2861': attribute type 3 has an invalid length. [ 133.318049][T10873] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 133.543893][T10883] loop8: detected capacity change from 0 to 8192 [ 133.692361][T10884] ================================================================== [ 133.700580][T10884] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 133.707718][T10884] [ 133.710059][T10884] write to 0xffff88811bbf5ff4 of 2 bytes by task 10883 on cpu 0: [ 133.717795][T10884] fat16_ent_put+0x28/0x60 [ 133.722241][T10884] fat_alloc_clusters+0x4ce/0xa80 [ 133.727297][T10884] fat_get_block+0x258/0x5e0 [ 133.731927][T10884] __block_write_begin_int+0x400/0xf90 [ 133.737426][T10884] cont_write_begin+0x5fc/0x970 [ 133.742302][T10884] fat_write_begin+0x4f/0xe0 [ 133.746913][T10884] cont_write_begin+0x1b0/0x970 [ 133.751803][T10884] fat_write_begin+0x4f/0xe0 [ 133.756404][T10884] generic_cont_expand_simple+0xad/0x150 [ 133.762051][T10884] fat_cont_expand+0x3e/0x170 [ 133.766735][T10884] fat_setattr+0x2a5/0x8a0 [ 133.771165][T10884] notify_change+0x809/0x890 [ 133.775804][T10884] do_truncate+0x13b/0x180 [ 133.780240][T10884] vfs_truncate+0x1e8/0x220 [ 133.784759][T10884] do_sys_truncate+0x91/0x130 [ 133.789447][T10884] __x64_sys_truncate+0x31/0x40 [ 133.794313][T10884] x64_sys_call+0x1a2f/0x3000 [ 133.798995][T10884] do_syscall_64+0xd2/0x200 [ 133.803509][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.809410][T10884] [ 133.811736][T10884] read to 0xffff88811bbf5e00 of 512 bytes by task 10884 on cpu 1: [ 133.819537][T10884] fat_mirror_bhs+0x1df/0x320 [ 133.824306][T10884] fat_alloc_clusters+0x98b/0xa80 [ 133.829336][T10884] fat_get_block+0x258/0x5e0 [ 133.834309][T10884] __block_write_begin_int+0x400/0xf90 [ 133.839784][T10884] cont_write_begin+0x5fc/0x970 [ 133.844647][T10884] fat_write_begin+0x4f/0xe0 [ 133.849268][T10884] generic_perform_write+0x184/0x490 [ 133.854581][T10884] __generic_file_write_iter+0x9e/0x120 [ 133.860150][T10884] generic_file_write_iter+0x8d/0x2f0 [ 133.865537][T10884] __kernel_write_iter+0x2d3/0x540 [ 133.870658][T10884] dump_user_range+0x61e/0x8f0 [ 133.875436][T10884] elf_core_dump+0x1de7/0x1f80 [ 133.880212][T10884] coredump_write+0xb0f/0xe30 [ 133.884898][T10884] vfs_coredump+0x143a/0x20d0 [ 133.889676][T10884] get_signal+0xd84/0xf70 [ 133.894008][T10884] arch_do_signal_or_restart+0x96/0x440 [ 133.899581][T10884] irqentry_exit_to_user_mode+0x5b/0xa0 [ 133.905154][T10884] irqentry_exit+0x12/0x50 [ 133.909591][T10884] asm_exc_page_fault+0x26/0x30 [ 133.914462][T10884] [ 133.916791][T10884] Reported by Kernel Concurrency Sanitizer on: [ 133.922957][T10884] CPU: 1 UID: 0 PID: 10884 Comm: syz.8.2892 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.932790][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.942856][T10884] ==================================================================