last executing test programs: 59.986463437s ago: executing program 3 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 59.955269008s ago: executing program 3 (id=762): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 59.793073391s ago: executing program 3 (id=766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffb}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 59.709369872s ago: executing program 3 (id=769): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000980)="009f3cca02f06410defd30976a9de22281", 0x11, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r3}, 0x14) 59.634274273s ago: executing program 3 (id=773): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x1c43, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x1) 59.481370806s ago: executing program 3 (id=777): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd]}, 0x8) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x0, 0x0, 0x173}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_io_uring_setup(0x2386, 0x0, 0x0, 0x0) 54.033769677s ago: executing program 2 (id=884): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000422000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x20000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) 53.341775498s ago: executing program 2 (id=886): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000ac0)={r2}, &(0x7f0000000b00)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f00000000c0)={r3, 0x1}, 0x8) 53.25807291s ago: executing program 2 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) syz_socket_connect_nvme_tcp() 53.25672944s ago: executing program 2 (id=888): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000280)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@i_version, 0x0}, {@noload}, {@usrquota}, {@grpquota}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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") add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) 53.043600593s ago: executing program 2 (id=893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 52.682264049s ago: executing program 2 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000008c0), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 52.682077079s ago: executing program 32 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000008c0), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 44.428432017s ago: executing program 33 (id=777): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd]}, 0x8) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x0, 0x0, 0x173}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_io_uring_setup(0x2386, 0x0, 0x0, 0x0) 16.17552303s ago: executing program 6 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 16.089936512s ago: executing program 6 (id=1972): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) 15.787845516s ago: executing program 6 (id=1977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpgid(0x0, 0x0) 15.781401066s ago: executing program 6 (id=1980): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0x909, &(0x7f0000000240)={0x0, 0x770, 0x1, 0x0, 0x18d}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0xdc7, 0xe4bd, 0x1, 0x0, 0x0) 15.602211599s ago: executing program 6 (id=1986): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 15.328397504s ago: executing program 6 (id=1997): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 15.292292625s ago: executing program 34 (id=1997): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13.123717961s ago: executing program 5 (id=2068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000000000ee068d0d3d457969f5e26c55e116ced3"], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) 13.049958432s ago: executing program 5 (id=2071): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x2000, 0x0, 0xfffffffffffffffd}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x3}, 0x8) 13.018977403s ago: executing program 5 (id=2075): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 12.974273453s ago: executing program 5 (id=2077): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0x909, &(0x7f0000000240)={0x0, 0x770, 0x1, 0x0, 0x18d}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0xdc7, 0xe4bd, 0x1, 0x0, 0x0) 12.778716057s ago: executing program 5 (id=2082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 12.661654088s ago: executing program 7 (id=2091): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 12.637618739s ago: executing program 7 (id=2092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000280), &(0x7f0000000840)=r1}, 0x20) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) 12.621304779s ago: executing program 7 (id=2093): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="0198001a000000002000128008000100677265001400028008000700ac14140008000100c64de96ffc8b899ae23b37a43092c09c8081ec79cf1e8225f8f923efeb240667e0fab1d0c593dd44c3128f17d4774f11f6a9a6efe2a8cdc34fff2cd670afda367b7d594481b2cbf4500ef5dea9c9b4b26a755d50085ff7b4f37b588df2a3beb11c"], 0x40}}, 0x6044850) sendto$packet(r0, &(0x7f0000000000)='1', 0x44, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 12.60620052s ago: executing program 7 (id=2094): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0x909, &(0x7f0000000240)={0x0, 0x770, 0x1, 0x0, 0x18d}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0xdc7, 0xe4bd, 0x1, 0x0, 0x0) 12.505947541s ago: executing program 5 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000200)={0xfffd, 0x2}, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 12.505651231s ago: executing program 35 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000200)={0xfffd, 0x2}, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 12.501333951s ago: executing program 7 (id=2100): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 10.821219799s ago: executing program 7 (id=2142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) 10.78147781s ago: executing program 36 (id=2142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) 4.654407723s ago: executing program 0 (id=2336): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) 3.64079933s ago: executing program 0 (id=2363): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000000000800007000000005c25d66308b0fa81f823bacad1c86b85154dc77a7a1a731e4e9537024fa0a13469e85c57bc69058580f0872e819a9e541832044b2c427f65f48349025c25226dac9cdd8b258dd972ef38111c02e0d0b84d786e4e29ed4c0b67dc3bdeffa649e3b4958587e1d8e26afdd35aa07f44e3ab18", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, 0x0, 0x0) 2.791628923s ago: executing program 9 (id=2383): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 2.722571965s ago: executing program 9 (id=2384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2.712864185s ago: executing program 0 (id=2385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.701584475s ago: executing program 8 (id=2386): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.689380735s ago: executing program 0 (id=2387): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 2.665378436s ago: executing program 0 (id=2388): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000004700000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 2.534297738s ago: executing program 9 (id=2389): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYBLOB="0000000001"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00'], 0x48) 2.43400379s ago: executing program 0 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000900)={{0x80}, 'port0\x00', 0xf3, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0xe1d6, 0x0, 0xff}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 2.43382655s ago: executing program 37 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000900)={{0x80}, 'port0\x00', 0xf3, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0xe1d6, 0x0, 0xff}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.972701458s ago: executing program 1 (id=2405): syz_open_dev$evdev(&(0x7f0000000240), 0x89c8, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 1.80184979s ago: executing program 8 (id=2397): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) 1.77958421s ago: executing program 8 (id=2398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.747914941s ago: executing program 8 (id=2399): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 1.618173783s ago: executing program 8 (id=2401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.568630714s ago: executing program 4 (id=2402): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.482085695s ago: executing program 4 (id=2403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.385008807s ago: executing program 8 (id=2404): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.353824008s ago: executing program 38 (id=2404): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.1831974s ago: executing program 1 (id=2407): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 933.658385ms ago: executing program 9 (id=2408): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 880.931596ms ago: executing program 9 (id=2409): r0 = getpgrp(0xffffffffffffffff) setreuid(0xffffffffffffffff, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 821.830017ms ago: executing program 4 (id=2410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 696.848359ms ago: executing program 4 (id=2411): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000ff8477", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x66) 592.56077ms ago: executing program 1 (id=2412): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 541.431481ms ago: executing program 4 (id=2413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 461.645002ms ago: executing program 1 (id=2414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 450.614673ms ago: executing program 1 (id=2415): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) 332.549445ms ago: executing program 4 (id=2416): syz_open_dev$evdev(&(0x7f0000000240), 0x89c8, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 142.624078ms ago: executing program 1 (id=2417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 0s ago: executing program 9 (id=2418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) kernel console output (not intermixed with test programs): =1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 68.866778][ T5630] System zones: 1-12 [ 68.880577][ T5630] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.899355][ T5630] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.888: invalid indirect mapped block 12 (level 1) [ 68.918950][ T5630] EXT4-fs (loop2): Remounting filesystem read-only [ 68.925709][ T5630] EXT4-fs (loop2): 1 truncate cleaned up [ 68.931969][ T5630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 69.016574][ T3309] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 69.141119][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 69.150119][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 69.175790][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.192018][ T5656] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.200983][ T5656] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.209788][ T5656] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.218588][ T5656] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.258364][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.279943][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.288412][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 69.307638][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.324130][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.370261][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.421079][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.439993][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.467394][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.481476][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.488707][ T397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.508018][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.515175][ T5451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.537110][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.654815][ T12] bridge_slave_1: left allmulticast mode [ 69.660639][ T12] bridge_slave_1: left promiscuous mode [ 69.666445][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.684780][ T12] bridge_slave_0: left allmulticast mode [ 69.690664][ T12] bridge_slave_0: left promiscuous mode [ 69.696416][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.774235][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 69.833740][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 69.833755][ T29] audit: type=1326 audit(1749594312.862:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf2cce929 code=0x7ffc0000 [ 69.888060][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.906886][ T29] audit: type=1326 audit(1749594312.892:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf2cce929 code=0x7ffc0000 [ 69.930393][ T29] audit: type=1326 audit(1749594312.892:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7efcf2cce929 code=0x7ffc0000 [ 69.954225][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.965713][ T12] bond0 (unregistering): Released all slaves [ 69.974895][ T12] bond1 (unregistering): Released all slaves [ 69.992747][ T12] bond2 (unregistering): Released all slaves [ 70.059438][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.076466][ T5672] lo speed is unknown, defaulting to 1000 [ 70.086206][ T12] hsr_slave_0: left promiscuous mode [ 70.105304][ T12] hsr_slave_1: left promiscuous mode [ 70.118144][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.125632][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.150384][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.157943][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.181275][ T12] veth1_macvtap: left promiscuous mode [ 70.192554][ T12] veth0_macvtap: left promiscuous mode [ 70.204723][ T12] veth1_vlan: left promiscuous mode [ 70.215552][ T12] veth0_vlan: left promiscuous mode [ 70.320461][ T29] audit: type=1326 audit(1749594313.352:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 70.382218][ T29] audit: type=1326 audit(1749594313.352:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 70.405608][ T29] audit: type=1326 audit(1749594313.352:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 70.428982][ T29] audit: type=1326 audit(1749594313.352:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 70.452270][ T29] audit: type=1326 audit(1749594313.352:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 70.475813][ T29] audit: type=1326 audit(1749594313.352:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 70.499061][ T29] audit: type=1326 audit(1749594313.352:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.1.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 70.523034][ T12] team0 (unregistering): Port device team_slave_1 removed [ 70.535231][ T12] team0 (unregistering): Port device team_slave_0 removed [ 70.750373][ T5672] chnl_net:caif_netlink_parms(): no params data found [ 70.891162][ T5720] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 70.912619][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.919863][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.927149][ T5672] bridge_slave_0: entered allmulticast mode [ 70.933724][ T5672] bridge_slave_0: entered promiscuous mode [ 70.942556][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.949732][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.956998][ T5672] bridge_slave_1: entered allmulticast mode [ 70.963759][ T5672] bridge_slave_1: entered promiscuous mode [ 70.975871][ T5601] veth0_vlan: entered promiscuous mode [ 70.996284][ T5601] veth1_vlan: entered promiscuous mode [ 71.009652][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.027361][ T5601] veth0_macvtap: entered promiscuous mode [ 71.045905][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.056341][ T5601] veth1_macvtap: entered promiscuous mode [ 71.096191][ T5672] team0: Port device team_slave_0 added [ 71.103944][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.114316][ T5672] team0: Port device team_slave_1 added [ 71.139005][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.159297][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.166312][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.192489][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.205382][ T5601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.214268][ T5601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.223168][ T5601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.232013][ T5601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.245684][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.252723][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.278951][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.319095][ T5672] hsr_slave_0: entered promiscuous mode [ 71.325266][ T5672] hsr_slave_1: entered promiscuous mode [ 71.336475][ T5672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.344469][ T5672] Cannot create hsr debugfs directory [ 71.465177][ T5746] gtp0: entered promiscuous mode [ 71.496168][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 71.567203][ T5672] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.576758][ T5672] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.586151][ T5672] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.614186][ T5672] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.718116][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.756696][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.780364][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.787561][ T397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.827374][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.834539][ T397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.045609][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.232412][ T5825] netlink: 36 bytes leftover after parsing attributes in process `syz.1.949'. [ 72.339008][ T5839] netlink: 87 bytes leftover after parsing attributes in process `syz.4.954'. [ 72.398354][ T5672] veth0_vlan: entered promiscuous mode [ 72.411389][ T5672] veth1_vlan: entered promiscuous mode [ 72.443843][ T5672] veth0_macvtap: entered promiscuous mode [ 72.463405][ T5672] veth1_macvtap: entered promiscuous mode [ 72.483041][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.500267][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.531396][ T5672] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.540252][ T5672] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.549218][ T5672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.558069][ T5672] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.934703][ T5880] loop5: detected capacity change from 0 to 128 [ 73.263220][ T5916] netlink: 36 bytes leftover after parsing attributes in process `syz.0.986'. [ 73.273805][ T9] kernel read not supported for file /17/oom_adj (pid: 9 comm: kworker/0:0) [ 73.385672][ T5926] vlan2: entered allmulticast mode [ 73.441816][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 73.544364][ T5940] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.997'. [ 73.622392][ T3389] kernel read not supported for file /509/oom_adj (pid: 3389 comm: kworker/1:3) [ 73.633220][ T5949] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.192690][ T6000] syz.5.1025 (6000) used greatest stack depth: 8752 bytes left [ 74.207953][ T6004] Falling back ldisc for ptm0. [ 74.381131][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.432930][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.640691][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.650716][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.823853][ T6058] loop5: detected capacity change from 0 to 164 [ 74.831384][ T6058] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.840160][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 74.840177][ T29] audit: type=1326 audit(1749594829.869:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d095858e7 code=0x7ffc0000 [ 74.869909][ T29] audit: type=1326 audit(1749594829.869:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d0952ab19 code=0x7ffc0000 [ 74.893298][ T29] audit: type=1326 audit(1749594829.869:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 74.917086][ T6058] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.917550][ T29] audit: type=1326 audit(1749594829.909:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d095858e7 code=0x7ffc0000 [ 74.948884][ T29] audit: type=1326 audit(1749594829.909:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d0952ab19 code=0x7ffc0000 [ 74.972319][ T29] audit: type=1326 audit(1749594829.909:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 74.995707][ T29] audit: type=1326 audit(1749594829.919:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d095858e7 code=0x7ffc0000 [ 75.001248][ T6058] Symlink component flag not implemented [ 75.019306][ T29] audit: type=1326 audit(1749594829.919:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d0952ab19 code=0x7ffc0000 [ 75.024729][ T6058] Symlink component flag not implemented [ 75.048146][ T29] audit: type=1326 audit(1749594829.919:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 75.077098][ T29] audit: type=1326 audit(1749594829.929:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d095858e7 code=0x7ffc0000 [ 75.100982][ T6058] Symlink component flag not implemented (7) [ 75.107251][ T6058] Symlink component flag not implemented (116) [ 75.360907][ T6077] loop5: detected capacity change from 0 to 512 [ 75.368000][ T6077] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 75.377015][ T6077] EXT4-fs (loop5): invalid journal inode [ 75.383701][ T6077] EXT4-fs (loop5): can't get journal size [ 75.391144][ T6077] EXT4-fs (loop5): 1 truncate cleaned up [ 75.397317][ T6077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.516783][ T5672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.203486][ T6098] loop4: detected capacity change from 0 to 128 [ 76.389664][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1073'. [ 76.398704][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1073'. [ 76.552149][ T6131] loop4: detected capacity change from 0 to 1024 [ 76.568202][ T6131] EXT4-fs: Ignoring removed bh option [ 76.573702][ T6131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.612566][ T6131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.477803][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 77.486722][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 77.561250][ T5601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.714227][ T4041] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.874810][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 77.892534][ T6193] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1106'. [ 77.946895][ T5445] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.970920][ T6185] lo speed is unknown, defaulting to 1000 [ 78.001427][ T5445] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.019761][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 78.028818][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 78.060512][ T6185] chnl_net:caif_netlink_parms(): no params data found [ 78.082215][ T5445] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.131391][ T5445] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.142349][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.149611][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.156972][ T6185] bridge_slave_0: entered allmulticast mode [ 78.163798][ T6185] bridge_slave_0: entered promiscuous mode [ 78.170996][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.178192][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.185597][ T6185] bridge_slave_1: entered allmulticast mode [ 78.192139][ T6185] bridge_slave_1: entered promiscuous mode [ 78.209229][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.219739][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.244629][ T6185] team0: Port device team_slave_0 added [ 78.254527][ T6185] team0: Port device team_slave_1 added [ 78.289997][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.297045][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.323218][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.335163][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.342360][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.368374][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.401976][ T5445] bridge_slave_1: left allmulticast mode [ 78.407889][ T5445] bridge_slave_1: left promiscuous mode [ 78.413710][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.423570][ T5445] bridge_slave_0: left allmulticast mode [ 78.429358][ T5445] bridge_slave_0: left promiscuous mode [ 78.435144][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.477574][ T5445] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 78.550336][ T5445] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.559428][ T5445] bond_slave_0: left promiscuous mode [ 78.566266][ T5445] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.575236][ T5445] bond_slave_1: left promiscuous mode [ 78.581944][ T5445] $H (unregistering): Released all slaves [ 78.591030][ T5445] bond1 (unregistering): Released all slaves [ 78.600484][ T5445] bond0 (unregistering): Released all slaves [ 78.610602][ T6185] hsr_slave_0: entered promiscuous mode [ 78.616783][ T6185] hsr_slave_1: entered promiscuous mode [ 78.622855][ T6185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.630462][ T6185] Cannot create hsr debugfs directory [ 78.638324][ T6237] syzkaller1: entered promiscuous mode [ 78.643873][ T6237] syzkaller1: entered allmulticast mode [ 78.672582][ T5445] hsr_slave_0: left promiscuous mode [ 78.679353][ T5445] hsr_slave_1: left promiscuous mode [ 78.689012][ T5445] veth1_macvtap: left promiscuous mode [ 78.694621][ T5445] veth0_macvtap: left promiscuous mode [ 78.700799][ T5445] veth1_vlan: left promiscuous mode [ 78.706147][ T5445] veth0_vlan: left promiscuous mode [ 78.767066][ T5445] team0 (unregistering): Port device team_slave_1 removed [ 78.776808][ T5445] team0 (unregistering): Port device team_slave_0 removed [ 78.833276][ T9] lo speed is unknown, defaulting to 1000 [ 78.839132][ T9] infiniband syz0: ib_query_port failed (-19) [ 78.903646][ T6185] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 78.912985][ T6185] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 78.922207][ T6185] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 78.940391][ T6185] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.030211][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.068584][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.095144][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.102295][ T397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.354996][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.362190][ T397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.554126][ T6279] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.566813][ T6185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.577251][ T6185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.638799][ T6289] SELinux: Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped). [ 79.671862][ T6285] loop5: detected capacity change from 0 to 512 [ 79.684202][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.711556][ T6285] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.735169][ T6285] EXT4-fs (loop5): mount failed [ 79.783052][ T6285] loop5: detected capacity change from 0 to 2048 [ 79.940149][ T6185] veth0_vlan: entered promiscuous mode [ 79.966542][ T6185] veth1_vlan: entered promiscuous mode [ 79.994914][ T6185] veth0_macvtap: entered promiscuous mode [ 80.019687][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 80.019708][ T29] audit: type=1400 audit(1749594835.029:1787): avc: denied { create } for pid=6325 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.045539][ T29] audit: type=1400 audit(1749594835.039:1788): avc: denied { connect } for pid=6325 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.065300][ T29] audit: type=1400 audit(1749594835.039:1789): avc: denied { write } for pid=6325 comm="syz.4.1147" path="socket:[14588]" dev="sockfs" ino=14588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.070251][ T6185] veth1_macvtap: entered promiscuous mode [ 80.144061][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.160288][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.183029][ T6185] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.191904][ T6185] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.200789][ T6185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.209596][ T6185] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.249343][ T29] audit: type=1400 audit(1749594835.169:1790): avc: denied { mounton } for pid=6331 comm="syz.4.1148" path="/60/file0" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.312113][ T29] audit: type=1400 audit(1749594835.339:1791): avc: denied { name_bind } for pid=6334 comm="syz.1.1159" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.334178][ T29] audit: type=1400 audit(1749594835.339:1792): avc: denied { node_bind } for pid=6334 comm="syz.1.1159" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 80.439557][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1101'. [ 80.448742][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1101'. [ 80.467912][ T29] audit: type=1400 audit(1749594835.399:1793): avc: denied { mounton } for pid=6185 comm="syz-executor" path="/root/syzkaller.shSfpe/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 80.492380][ T29] audit: type=1400 audit(1749594835.399:1794): avc: denied { mount } for pid=6185 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.514894][ T29] audit: type=1400 audit(1749594835.399:1795): avc: denied { mount } for pid=6185 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.536993][ T29] audit: type=1400 audit(1749594835.399:1796): avc: denied { mounton } for pid=6185 comm="syz-executor" path="/root/syzkaller.shSfpe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 80.566046][ T6345] netlink: 'syz.6.1101': attribute type 6 has an invalid length. [ 80.651810][ T6360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6360 comm=syz.1.1168 [ 80.664533][ T6360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6360 comm=syz.1.1168 [ 80.855940][ T6377] bridge_slave_1: left allmulticast mode [ 80.861895][ T6377] bridge_slave_1: left promiscuous mode [ 80.867735][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.901445][ T6377] bridge_slave_0: left allmulticast mode [ 80.907290][ T6377] bridge_slave_0: left promiscuous mode [ 80.913215][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.097282][ T6393] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 81.105820][ T6394] SELinux: Context  is not valid (left unmapped). [ 81.111941][ T6393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.144280][ T6393] bond3: (slave gretap1): making interface the new active one [ 81.152707][ T6393] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 81.201317][ T6388] loop4: detected capacity change from 0 to 8192 [ 81.221557][ T6388] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.391987][ T6412] loop4: detected capacity change from 0 to 2048 [ 81.412377][ T6417] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 81.439604][ T6412] loop4: p1 < > p4 [ 81.448502][ T6412] loop4: p4 size 8388608 extends beyond EOD, truncated [ 81.486981][ T6422] netlink: 'syz.1.1187': attribute type 13 has an invalid length. [ 81.554880][ T6422] gretap0: refused to change device tx_queue_len [ 81.561569][ T6422] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.640654][ T6432] SELinux: failed to load policy [ 81.690276][ T6438] pim6reg1: entered promiscuous mode [ 81.695823][ T6438] pim6reg1: entered allmulticast mode [ 81.775346][ T6444] ------------[ cut here ]------------ [ 81.781070][ T6444] WARNING: CPU: 0 PID: 6444 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 81.791268][ T6444] Modules linked in: [ 81.795217][ T6444] CPU: 0 UID: 0 PID: 6444 Comm: syz.6.1198 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 81.807764][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.817940][ T6444] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 81.824612][ T6444] Code: 83 3d 63 24 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 1a 1d 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 81.844316][ T6444] RSP: 0018:ffffc900012a7a98 EFLAGS: 00010246 [ 81.850452][ T6444] RAX: 8040b908f0845100 RBX: 0000000000000012 RCX: 0000000000000000 [ 81.858490][ T6444] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000040dc0 [ 81.866505][ T6444] RBP: 0000000000000dc0 R08: ffff8881194c2b18 R09: 0000000000000000 [ 81.874604][ T6444] R10: ffff888118409c10 R11: 0001888118409c10 R12: ffffc900012a7d28 [ 81.882752][ T6444] R13: 0000000005000000 R14: 0000000000040dc0 R15: 0000000000000000 [ 81.890824][ T6444] FS: 00007fa3c1a076c0(0000) GS:ffff8882aee3c000(0000) knlGS:0000000000000000 [ 81.899821][ T6444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.906438][ T6444] CR2: 0000200000001000 CR3: 00000001124e2000 CR4: 00000000003506f0 [ 81.914478][ T6444] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.922502][ T6444] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 81.930621][ T6444] Call Trace: [ 81.933921][ T6444] [ 81.936898][ T6444] ? copy_from_user_nofault+0xea/0x120 [ 81.942560][ T6444] __alloc_pages_noprof+0x9/0x20 [ 81.947563][ T6444] ___kmalloc_large_node+0x73/0x140 [ 81.952937][ T6444] __kmalloc_large_node_noprof+0x16/0xa0 [ 81.958646][ T6444] __kmalloc_noprof+0x2ab/0x3e0 [ 81.963548][ T6444] ? hashtab_init+0x9b/0xe0 [ 81.968152][ T6444] hashtab_init+0x9b/0xe0 [ 81.971212][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.972509][ T6444] symtab_init+0x2c/0x40 [ 81.982204][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.985269][ T6444] policydb_read+0x516/0x1330 [ 81.997819][ T6444] security_load_policy+0xba/0x890 [ 82.003065][ T6444] ? rep_movs_alternative+0x4a/0x90 [ 82.008338][ T6444] sel_write_load+0x1d4/0x380 [ 82.013108][ T6444] ? __pfx_sel_write_load+0x10/0x10 [ 82.018404][ T6444] vfs_write+0x266/0x8e0 [ 82.022731][ T6444] ? __rcu_read_unlock+0x4f/0x70 [ 82.027775][ T6444] ? __fget_files+0x184/0x1c0 [ 82.032507][ T6444] ksys_write+0xda/0x1a0 [ 82.036803][ T6444] __x64_sys_write+0x40/0x50 [ 82.041466][ T6444] x64_sys_call+0x2cdd/0x2fb0 [ 82.046196][ T6444] do_syscall_64+0xd2/0x200 [ 82.050779][ T6444] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.057100][ T6444] ? clear_bhb_loop+0x40/0x90 [ 82.061943][ T6444] ? clear_bhb_loop+0x40/0x90 [ 82.066696][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.072656][ T6444] RIP: 0033:0x7fa3c339e929 [ 82.077179][ T6444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.096916][ T6444] RSP: 002b:00007fa3c1a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.105460][ T6444] RAX: ffffffffffffffda RBX: 00007fa3c35c5fa0 RCX: 00007fa3c339e929 [ 82.113647][ T6444] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 82.121697][ T6444] RBP: 00007fa3c3420b39 R08: 0000000000000000 R09: 0000000000000000 [ 82.129801][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.137891][ T6444] R13: 0000000000000000 R14: 00007fa3c35c5fa0 R15: 00007ffff9b37928 [ 82.145910][ T6444] [ 82.149013][ T6444] ---[ end trace 0000000000000000 ]--- [ 82.154535][ T6444] SELinux: failed to load policy [ 82.283964][ T6456] __nla_validate_parse: 5 callbacks suppressed [ 82.283982][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 82.310278][ T6459] hub 1-0:1.0: USB hub found [ 82.326955][ T6459] hub 1-0:1.0: 8 ports detected [ 82.342186][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 82.457064][ T6475] syzkaller0: entered allmulticast mode [ 82.505918][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1216'. [ 82.599754][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 82.675470][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 82.716399][ T6501] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1224'. [ 83.037401][ T3490] kernel write not supported for file [eventfd] (pid: 3490 comm: kworker/0:4) [ 83.148030][ T6566] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1252'. [ 83.223419][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1258'. [ 83.487058][ T6601] capability: warning: `syz.1.1268' uses 32-bit capabilities (legacy support in use) [ 83.515301][ T6603] xt_hashlimit: max too large, truncated to 1048576 [ 83.701464][ T6624] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 83.954150][ T6654] vhci_hcd: invalid port number 96 [ 83.955867][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1295'. [ 83.959400][ T6654] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 84.002455][ T6664] loop6: detected capacity change from 0 to 512 [ 84.020442][ T6664] EXT4-fs (loop6): too many log groups per flexible block group [ 84.028333][ T6664] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 84.035457][ T6664] EXT4-fs (loop6): mount failed [ 84.140945][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1306'. [ 84.317283][ T6722] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4179 sclass=netlink_audit_socket pid=6722 comm=syz.1.1318 [ 84.561810][ T6743] smc: net device bond0 applied user defined pnetid SYZ2 [ 84.569479][ T6743] smc: net device bond0 erased user defined pnetid SYZ2 [ 84.765911][ T6756] netlink: 'syz.4.1332': attribute type 4 has an invalid length. [ 84.795467][ T6754] loop5: detected capacity change from 0 to 8192 [ 84.803856][ T6754] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.861495][ T6762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=6762 comm=syz.5.1335 [ 84.894516][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.904997][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.930309][ T6770] loop4: detected capacity change from 0 to 2048 [ 84.937057][ T6770] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.950103][ T6770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.964617][ T6770] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1340: bg 0: block 234: padding at end of block bitmap is not set [ 84.980146][ T6770] EXT4-fs (loop4): Remounting filesystem read-only [ 84.998436][ T5601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.033805][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 85.033823][ T29] audit: type=1326 audit(1749594840.059:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3c33958e7 code=0x7ffc0000 [ 85.064743][ T29] audit: type=1326 audit(1749594840.059:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3c333ab19 code=0x7ffc0000 [ 85.088141][ T29] audit: type=1326 audit(1749594840.059:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa3c339e929 code=0x7ffc0000 [ 85.111526][ T29] audit: type=1326 audit(1749594840.099:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3c33958e7 code=0x7ffc0000 [ 85.134923][ T29] audit: type=1326 audit(1749594840.099:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3c333ab19 code=0x7ffc0000 [ 85.158528][ T29] audit: type=1326 audit(1749594840.099:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3c33958e7 code=0x7ffc0000 [ 85.182118][ T29] audit: type=1326 audit(1749594840.099:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3c333ab19 code=0x7ffc0000 [ 85.205476][ T29] audit: type=1326 audit(1749594840.099:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa3c339e929 code=0x7ffc0000 [ 85.278727][ T29] audit: type=1326 audit(1749594840.119:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3c33958e7 code=0x7ffc0000 [ 85.302502][ T29] audit: type=1326 audit(1749594840.119:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6714 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3c333ab19 code=0x7ffc0000 [ 85.443379][ T6795] SELinux: ebitmap: truncated map [ 85.451898][ T6795] SELinux: failed to load policy [ 86.152508][ T6862] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 86.161304][ T6860] sd 0:0:1:0: device reset [ 86.402376][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810af1c000: rx timeout, send abort [ 86.902409][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810af1c200: rx timeout, send abort [ 86.910765][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810af1c000: abort rx timeout. Force session deactivation [ 86.931035][ T6922] smc: net device bond0 applied user defined pnetid SYZ0 [ 86.939816][ T6922] smc: net device bond0 erased user defined pnetid SYZ0 [ 87.185207][ T6949] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6949 comm=syz.5.1418 [ 87.197794][ T6949] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6949 comm=syz.5.1418 [ 87.246776][ T6948] bridge_slave_0: left allmulticast mode [ 87.252649][ T6948] bridge_slave_0: left promiscuous mode [ 87.258434][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.270273][ T6948] bridge_slave_1: left allmulticast mode [ 87.276000][ T6948] bridge_slave_1: left promiscuous mode [ 87.281874][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.293220][ T6959] netlink: 'syz.0.1424': attribute type 1 has an invalid length. [ 87.301113][ T6959] __nla_validate_parse: 2 callbacks suppressed [ 87.301126][ T6959] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1424'. [ 87.321887][ T6948] bond0: (slave bond_slave_0): Releasing backup interface [ 87.333286][ T6948] bond0: (slave bond_slave_1): Releasing backup interface [ 87.348949][ T6948] team0: Port device team_slave_0 removed [ 87.360680][ T6948] team0: Port device team_slave_1 removed [ 87.366961][ T6965] IPv6: Can't replace route, no match found [ 87.368202][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.380523][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.390203][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.397739][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.410732][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810af1c200: abort rx timeout. Force session deactivation [ 87.421999][ T6966] IPVS: stopping master sync thread 6969 ... [ 87.426872][ T6969] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 87.700880][ T6996] vhci_hcd: invalid port number 96 [ 87.706150][ T6996] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 87.716705][ T7000] vlan2: entered allmulticast mode [ 87.822851][ T7006] loop6: detected capacity change from 0 to 1024 [ 87.843748][ T7015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.861979][ T7006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.865720][ T7011] : renamed from vlan0 (while UP) [ 87.898736][ T7006] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 87.911265][ T7006] EXT4-fs (loop6): This should not happen!! Data will be lost [ 87.911265][ T7006] [ 87.920980][ T7006] EXT4-fs (loop6): Total free blocks count 0 [ 87.926994][ T7006] EXT4-fs (loop6): Free/Dirty block details [ 87.932974][ T7006] EXT4-fs (loop6): free_blocks=0 [ 87.938034][ T7006] EXT4-fs (loop6): dirty_blocks=0 [ 87.943094][ T7006] EXT4-fs (loop6): Block reservation details [ 87.949170][ T7006] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 87.976892][ T6185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.987954][ T7027] wireguard0: entered promiscuous mode [ 87.993526][ T7027] wireguard0: entered allmulticast mode [ 88.058321][ T7038] netlink: 2116 bytes leftover after parsing attributes in process `syz.4.1457'. [ 88.336130][ T7070] ALSA: seq fatal error: cannot create timer (-19) [ 88.436818][ T7083] xt_hashlimit: max too large, truncated to 1048576 [ 88.484000][ T7090] netlink: 'syz.5.1480': attribute type 1 has an invalid length. [ 88.606869][ T7104] sd 0:0:1:0: device reset [ 88.886194][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1494'. [ 88.896467][ T7131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1498'. [ 89.157693][ T7154] atomic_op ffff88811868d128 conn xmit_atomic 0000000000000000 [ 89.201390][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.209382][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.217202][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.225162][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.233016][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.240846][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.248666][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.256446][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.264253][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.272103][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.279929][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.287711][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.295547][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.303445][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.311287][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.319115][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.326972][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.334805][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.342592][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.350490][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.358316][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.366087][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.373993][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.381855][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.389665][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.397469][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.405292][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.413101][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.420901][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.428762][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.436565][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.444369][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.452151][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.459970][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.467768][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.475645][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.483413][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.491169][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.498988][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.506864][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.514645][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.522441][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.530205][ T36] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 89.539616][ T36] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.735906][ T7182] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 89.767304][ T7185] loop4: detected capacity change from 0 to 256 [ 89.849004][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1524'. [ 89.953228][ T7201] SELinux: failed to load policy [ 90.037255][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'. [ 90.047385][ T7211] IPVS: Error joining to the multicast group [ 90.110524][ T7219] loop4: detected capacity change from 0 to 1024 [ 90.137201][ T7219] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 90.150951][ T7219] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 90.164093][ T7219] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #32: comm syz.4.1535: iget: special inode unallocated [ 90.181470][ T7219] EXT4-fs (loop4): Remounting filesystem read-only [ 90.188203][ T7219] EXT4-fs (loop4): no journal found [ 90.193547][ T7219] EXT4-fs (loop4): can't get journal size [ 90.207925][ T7219] EXT4-fs (loop4): filesystem is read-only [ 90.220489][ T7219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.254714][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 90.254732][ T29] audit: type=1326 audit(1749594845.279:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 90.284587][ T29] audit: type=1326 audit(1749594845.279:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 90.308089][ T29] audit: type=1326 audit(1749594845.279:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 90.331661][ T29] audit: type=1326 audit(1749594845.289:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.1.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 90.356789][ T5601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.375755][ T7226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.377967][ T29] audit: type=1326 audit(1749594845.409:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 90.386125][ T7226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.421612][ T29] audit: type=1326 audit(1749594845.449:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 90.445151][ T29] audit: type=1326 audit(1749594845.449:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 90.468735][ T29] audit: type=1326 audit(1749594845.449:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 90.492330][ T29] audit: type=1326 audit(1749594845.449:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 90.515812][ T29] audit: type=1326 audit(1749594845.449:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.4.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 90.562647][ T7226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.573115][ T7226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.595831][ T7234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.610949][ T7226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.621375][ T7226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.670458][ T7226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.681007][ T7226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.734828][ T7226] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.743440][ T7226] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.757091][ T7249] atomic_op ffff888119245128 conn xmit_atomic 0000000000000000 [ 90.757229][ T7226] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.773000][ T7226] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.784996][ T7226] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.793417][ T7226] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.805926][ T7226] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.814342][ T7226] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.844793][ T7253] netlink: 'syz.6.1551': attribute type 1 has an invalid length. [ 90.852779][ T7253] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1551'. [ 90.931384][ T7263] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.1556'. [ 91.036727][ T7273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7273 comm=syz.6.1560 [ 91.049370][ T7273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7273 comm=syz.6.1560 [ 91.445741][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1574'. [ 91.454841][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1574'. [ 91.478002][ T7308] netlink: 'syz.4.1574': attribute type 6 has an invalid length. [ 92.298214][ T7337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7337 comm=syz.5.1585 [ 92.310872][ T7337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7337 comm=syz.5.1585 [ 92.337966][ T7336] loop6: detected capacity change from 0 to 2048 [ 92.378518][ T7336] loop6: p1 < > p4 [ 92.383379][ T7336] loop6: p4 size 8388608 extends beyond EOD, truncated [ 92.481668][ T7350] vlan2: entered allmulticast mode [ 92.514377][ T7346] bond0: (slave bond_slave_0): Releasing backup interface [ 92.525795][ T7346] bond0: (slave bond_slave_1): Releasing backup interface [ 92.555765][ T7346] team0: Port device team_slave_0 removed [ 92.573263][ T7346] team0: Port device team_slave_1 removed [ 92.589118][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.596754][ T7346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.624584][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.632255][ T7346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.662985][ T7360] loop5: detected capacity change from 0 to 256 [ 92.663285][ T7346] bond1: (slave ip6gretap1): Releasing active interface [ 92.700390][ T7346] bond3: (slave gretap1): Releasing active interface [ 92.757944][ T7364] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 92.822288][ T7368] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 92.901089][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.909096][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.916955][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.924849][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.932694][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.940651][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.948626][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.956602][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.964471][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.972335][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.980140][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.988026][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 92.996013][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.003900][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.011762][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.019541][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.027283][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.035148][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.042909][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.050744][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.058675][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.066438][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.074323][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.082180][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.090026][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.097791][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.105541][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.113355][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.121166][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.128981][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.136770][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.144621][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.152395][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.160156][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.168014][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.175804][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.183614][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.191392][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.199148][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.206958][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.214720][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.222505][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.230298][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 93.239992][ T1035] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.272859][ T7382] wireguard0: entered promiscuous mode [ 93.278533][ T7382] wireguard0: entered allmulticast mode [ 93.319082][ T7387] vlan2: entered allmulticast mode [ 93.324481][ T7387] bridge_slave_0: entered allmulticast mode [ 93.468636][ T7399] netlink: 'syz.0.1611': attribute type 13 has an invalid length. [ 93.512200][ T7399] gretap0: refused to change device tx_queue_len [ 93.518784][ T7399] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.549204][ T7403] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 93.580178][ T7403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.633484][ T7403] bond1: (slave gretap1): making interface the new active one [ 93.680933][ T7403] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 93.792717][ T7410] __nla_validate_parse: 2 callbacks suppressed [ 93.792736][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 93.817884][ T7410] bridge_slave_1: left allmulticast mode [ 93.823639][ T7410] bridge_slave_1: left promiscuous mode [ 93.829435][ T7410] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.869419][ T7410] bridge_slave_0: left promiscuous mode [ 93.875299][ T7410] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.228085][ T7425] wireguard0: entered promiscuous mode [ 94.233715][ T7425] wireguard0: entered allmulticast mode [ 94.456931][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'. [ 94.466365][ T7449] bridge_slave_1: left allmulticast mode [ 94.472281][ T7449] bridge_slave_1: left promiscuous mode [ 94.478149][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.491133][ T7449] bridge_slave_0: left promiscuous mode [ 94.497182][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.550041][ T7457] bond0: (slave bond_slave_0): Releasing backup interface [ 94.565519][ T7457] bond0: (slave bond_slave_1): Releasing backup interface [ 94.589627][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.597208][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.607918][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.615568][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.637299][ T7457] bond1: (slave ip6gretap1): Releasing active interface [ 94.659582][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 94.710674][ T7465] wireguard0: entered promiscuous mode [ 94.716310][ T7465] wireguard0: entered allmulticast mode [ 94.829867][ T7475] netlink: 'syz.5.1644': attribute type 29 has an invalid length. [ 94.840889][ T7475] netlink: 'syz.5.1644': attribute type 29 has an invalid length. [ 94.966129][ T7487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.085039][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 95.235079][ T7513] loop5: detected capacity change from 0 to 1024 [ 95.283083][ T7513] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 95.307839][ T7513] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 95.318746][ T7513] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #32: comm syz.5.1661: iget: special inode unallocated [ 95.347263][ T7513] EXT4-fs (loop5): Remounting filesystem read-only [ 95.353892][ T7513] EXT4-fs (loop5): no journal found [ 95.359164][ T7513] EXT4-fs (loop5): can't get journal size [ 95.376928][ T7513] EXT4-fs (loop5): filesystem is read-only [ 95.385726][ T7513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 95.450069][ T5672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.471318][ T7523] netlink: 'syz.1.1667': attribute type 298 has an invalid length. [ 95.503741][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 95.503757][ T29] audit: type=1326 audit(1749594850.529:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c544e929 code=0x7ffc0000 [ 95.551789][ T29] audit: type=1326 audit(1749594850.529:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82c544e929 code=0x7ffc0000 [ 95.575351][ T29] audit: type=1326 audit(1749594850.529:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c544e929 code=0x7ffc0000 [ 95.598996][ T29] audit: type=1326 audit(1749594850.529:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f82c544e929 code=0x7ffc0000 [ 95.622469][ T29] audit: type=1326 audit(1749594850.529:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c544e929 code=0x7ffc0000 [ 95.646184][ T29] audit: type=1326 audit(1749594850.539:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.5.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c544e929 code=0x7ffc0000 [ 95.676037][ T29] audit: type=1326 audit(1749594850.589:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 95.699695][ T29] audit: type=1326 audit(1749594850.589:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 95.723349][ T29] audit: type=1326 audit(1749594850.589:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 95.746838][ T29] audit: type=1326 audit(1749594850.589:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 95.995984][ T7563] SELinux: security policydb version 18 (MLS) not backwards compatible [ 96.009210][ T7563] SELinux: failed to load policy [ 96.322958][ T7597] loop4: detected capacity change from 0 to 512 [ 96.340307][ T7597] EXT4-fs (loop4): too many log groups per flexible block group [ 96.348115][ T7597] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 96.355088][ T7597] EXT4-fs (loop4): mount failed [ 96.370656][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.389153][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.531501][ T7620] hub 1-0:1.0: USB hub found [ 96.537298][ T7620] hub 1-0:1.0: 8 ports detected [ 96.556474][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 96.606977][ T7630] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1713'. [ 96.664335][ T7631] loop4: detected capacity change from 0 to 8192 [ 96.680267][ T7631] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.758009][ T7642] netlink: 'syz.1.1719': attribute type 29 has an invalid length. [ 96.769500][ T7642] netlink: 'syz.1.1719': attribute type 29 has an invalid length. [ 96.982568][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1732'. [ 97.091538][ T7691] SELinux: security policydb version 18 (MLS) not backwards compatible [ 97.113574][ T7691] SELinux: failed to load policy [ 97.159079][ T7695] SELinux: ebitmap: truncated map [ 97.164563][ T7695] SELinux: failed to load policy [ 97.197863][ T10] IPVS: starting estimator thread 0... [ 97.297729][ T7704] IPVS: using max 2304 ests per chain, 115200 per kthread [ 97.538371][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 97.562255][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 97.678130][ T7744] hub 1-0:1.0: USB hub found [ 97.692728][ T7744] hub 1-0:1.0: 8 ports detected [ 97.784132][ T7755] SELinux: ebitmap: truncated map [ 97.799164][ T7755] SELinux: failed to load policy [ 97.970902][ T7787] sd 0:0:1:0: device reset [ 97.983282][ T7789] hub 1-0:1.0: USB hub found [ 97.988597][ T7789] hub 1-0:1.0: 8 ports detected [ 98.011462][ T7792] loop5: detected capacity change from 0 to 256 [ 98.063185][ T7796] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.131795][ T7796] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.181015][ T7816] sd 0:0:1:0: device reset [ 98.221261][ T7796] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.250622][ T7796] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.303998][ T7796] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.315220][ T7796] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.326949][ T7796] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.338569][ T7796] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.381233][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.389768][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.919432][ T7829] loop4: detected capacity change from 0 to 128 [ 98.925388][ T3389] IPVS: starting estimator thread 0... [ 98.928650][ T7829] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 98.963284][ T7834] hub 1-0:1.0: USB hub found [ 98.969012][ T7834] hub 1-0:1.0: 8 ports detected [ 98.985198][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.011825][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.027834][ T7833] IPVS: using max 2304 ests per chain, 115200 per kthread [ 99.113621][ T7849] loop4: detected capacity change from 0 to 512 [ 99.130626][ T7849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.143935][ T7849] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.201574][ T7849] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1807: Allocating blocks 18-19 which overlap fs metadata [ 99.228416][ T7849] EXT4-fs (loop4): Remounting filesystem read-only [ 99.296237][ T5601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.366520][ T5451] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.598914][ T7874] loop6: detected capacity change from 0 to 256 [ 100.383983][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.394578][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.534165][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.547547][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.050400][ T7912] : renamed from vlan0 (while UP) [ 101.210033][ T7923] SELinux: policydb version 51586048 does not match my version range 15-34 [ 101.228039][ T7923] SELinux: failed to load policy [ 101.320103][ T7929] sd 0:0:1:0: device reset [ 101.460169][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 101.460183][ T29] audit: type=1326 audit(1749594856.489:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.533120][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.545312][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.555337][ T29] audit: type=1326 audit(1749594856.529:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.578974][ T29] audit: type=1326 audit(1749594856.529:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.602542][ T29] audit: type=1326 audit(1749594856.529:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.626767][ T29] audit: type=1326 audit(1749594856.529:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.650652][ T29] audit: type=1326 audit(1749594856.529:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.674116][ T29] audit: type=1326 audit(1749594856.529:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.697606][ T29] audit: type=1326 audit(1749594856.529:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.721122][ T29] audit: type=1326 audit(1749594856.529:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.744586][ T29] audit: type=1326 audit(1749594856.529:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7ffc0000 [ 101.842881][ T7950] loop5: detected capacity change from 0 to 512 [ 101.863193][ T7950] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.899662][ T7950] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.953643][ T7950] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1849: Allocating blocks 18-19 which overlap fs metadata [ 101.968904][ T7950] EXT4-fs (loop5): Remounting filesystem read-only [ 101.993587][ T5672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.011272][ T5447] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 102.034611][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 102.044810][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 102.048651][ T7964] SELinux: policydb version 51586048 does not match my version range 15-34 [ 102.064696][ T7964] SELinux: failed to load policy [ 102.095072][ T7962] wireguard0: entered promiscuous mode [ 102.101281][ T7962] wireguard0: entered allmulticast mode [ 102.208692][ T7971] loop5: detected capacity change from 0 to 8192 [ 102.301366][ T7977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7977 comm=syz.5.1860 [ 102.340821][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'. [ 102.370873][ T7980] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.378663][ T7980] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 102.397307][ T7990] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 102.418114][ T7990] SELinux: failed to load policy [ 102.767440][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1876'. [ 102.803543][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.812236][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.948509][ T8022] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.957173][ T8022] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 103.490280][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 103.500192][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 103.587264][ T8042] wireguard0: entered promiscuous mode [ 103.594772][ T8042] wireguard0: entered allmulticast mode [ 104.886260][ T8114] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1919'. [ 104.969125][ T8125] SELinux: failed to load policy [ 104.981027][ T8126] tipc: Started in network mode [ 104.985954][ T8126] tipc: Node identity ac14140f, cluster identity 4711 [ 105.008979][ T8126] tipc: New replicast peer: 10.1.1.2 [ 105.014375][ T8126] tipc: Enabled bearer , priority 10 [ 105.070966][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.080082][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.166002][ T8153] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1938'. [ 105.474431][ T8179] netlink: 404 bytes leftover after parsing attributes in process `syz.6.1949'. [ 105.723012][ T8206] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1961'. [ 105.825218][ T8218] tipc: Enabling not permitted [ 105.830880][ T8218] tipc: Enabling of bearer rejected, failed to enable media [ 105.888195][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.902723][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.144318][ T3390] tipc: Node number set to 2886997007 [ 106.290173][ T8247] loop6: detected capacity change from 0 to 1024 [ 106.317342][ T8247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.422903][ T8263] batadv_slave_0: entered promiscuous mode [ 106.431631][ T6185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.451892][ T8263] batadv_slave_0 (unregistering): left promiscuous mode [ 106.635401][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 106.635492][ T29] audit: type=1400 audit(1749594861.659:3952): avc: denied { remount } for pid=8276 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.729617][ T5445] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.769308][ T5445] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.802036][ T29] audit: type=1326 audit(1749594861.829:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 106.828923][ T5445] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.860397][ T8289] syz_tun: entered allmulticast mode [ 106.870244][ T29] audit: type=1326 audit(1749594861.829:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 106.893770][ T29] audit: type=1326 audit(1749594861.829:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 106.917340][ T29] audit: type=1326 audit(1749594861.829:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 106.940799][ T29] audit: type=1326 audit(1749594861.829:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 106.964377][ T29] audit: type=1326 audit(1749594861.829:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 106.987901][ T29] audit: type=1326 audit(1749594861.829:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 107.011519][ T29] audit: type=1326 audit(1749594861.829:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 107.034983][ T29] audit: type=1326 audit(1749594861.829:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0958e929 code=0x7ffc0000 [ 107.059544][ T5445] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.081975][ T8288] syz_tun: left allmulticast mode [ 107.268975][ T5445] bond0 (unregistering): Released all slaves [ 107.322962][ T5445] hsr_slave_0: left promiscuous mode [ 107.339199][ T5445] hsr_slave_1: left promiscuous mode [ 107.362700][ T5445] veth1_macvtap: left promiscuous mode [ 107.371654][ T5445] veth0_macvtap: left promiscuous mode [ 107.382818][ T5445] veth1_vlan: left promiscuous mode [ 107.388199][ T5445] veth0_vlan: left promiscuous mode [ 107.519045][ T8329] __nla_validate_parse: 5 callbacks suppressed [ 107.519063][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2014'. [ 107.534357][ T8329] netem: change failed [ 107.596108][ T8297] chnl_net:caif_netlink_parms(): no params data found [ 107.656638][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.663917][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.671897][ T8297] bridge_slave_0: entered allmulticast mode [ 107.678636][ T8297] bridge_slave_0: entered promiscuous mode [ 107.685403][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.692624][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.700009][ T8297] bridge_slave_1: entered allmulticast mode [ 107.706474][ T8297] bridge_slave_1: entered promiscuous mode [ 107.729478][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.741562][ T5445] IPVS: stop unused estimator thread 0... [ 107.748690][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.781095][ T8297] team0: Port device team_slave_0 added [ 107.788398][ T8297] team0: Port device team_slave_1 added [ 107.812383][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.819473][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.845607][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.857583][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.864659][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.890759][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.924820][ T8297] hsr_slave_0: entered promiscuous mode [ 107.931341][ T8297] hsr_slave_1: entered promiscuous mode [ 107.937537][ T8297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.950473][ T8297] Cannot create hsr debugfs directory [ 108.058668][ T8374] loop4: detected capacity change from 0 to 128 [ 108.066658][ T8374] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.079124][ T8374] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.109980][ T5601] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.134013][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2030'. [ 108.190445][ T8382] loop5: detected capacity change from 0 to 512 [ 108.198323][ T8382] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 108.212302][ T8382] EXT4-fs (loop5): 1 truncate cleaned up [ 108.218676][ T8382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.232288][ T8382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.319704][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 108.337435][ T8401] loop5: detected capacity change from 0 to 128 [ 108.338488][ T8397] 8021q: adding VLAN 0 to HW filter on device team1 [ 108.354069][ T8401] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.371112][ T8401] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.418908][ T5672] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.453764][ T8297] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 108.464162][ T8297] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 108.482098][ T8414] loop4: detected capacity change from 0 to 512 [ 108.489753][ T8297] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.497250][ T8414] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.510988][ T8297] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.530006][ T8414] EXT4-fs (loop4): 1 truncate cleaned up [ 108.536092][ T8414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.572846][ T8414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.655396][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.685111][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.696460][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.703736][ T5447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.726785][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.733942][ T5447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.791066][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 108.851671][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.055110][ T8297] veth0_vlan: entered promiscuous mode [ 109.064189][ T8297] veth1_vlan: entered promiscuous mode [ 109.087414][ T8297] veth0_macvtap: entered promiscuous mode [ 109.096211][ T8297] veth1_macvtap: entered promiscuous mode [ 109.105588][ T8510] loop5: detected capacity change from 0 to 1024 [ 109.110646][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.126855][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.139286][ T8297] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.148357][ T8297] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.157255][ T8297] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.166074][ T8297] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.185112][ T8510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.316013][ T6319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.460150][ T8550] loop7: detected capacity change from 0 to 1024 [ 109.469290][ T8550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.563020][ T8297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.733978][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 109.791735][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.799046][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.811778][ T8558] bridge_slave_0: entered allmulticast mode [ 109.818895][ T8558] bridge_slave_0: entered promiscuous mode [ 109.826020][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.833859][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.842635][ T8558] bridge_slave_1: entered allmulticast mode [ 109.849799][ T8558] bridge_slave_1: entered promiscuous mode [ 109.893799][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.906204][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.923015][ T3389] IPVS: starting estimator thread 0... [ 109.935102][ T8558] team0: Port device team_slave_0 added [ 109.948686][ T8558] team0: Port device team_slave_1 added [ 109.975474][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.982658][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.008841][ T8558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.020571][ T8582] IPVS: using max 2304 ests per chain, 115200 per kthread [ 110.059856][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.066866][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.092929][ T8558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.141376][ T8558] hsr_slave_0: entered promiscuous mode [ 110.158090][ T8558] hsr_slave_1: entered promiscuous mode [ 110.164258][ T8558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.177682][ T8558] Cannot create hsr debugfs directory [ 110.247913][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'. [ 110.283423][ T8599] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.353197][ T8558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 110.367690][ T8558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 110.377006][ T8558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 110.394803][ T8558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 110.522715][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.539760][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.562366][ T8558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.572817][ T8558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.597068][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.604262][ T5451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.632967][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.640115][ T5451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.685381][ T8557] syz.1.2099 (8557) used greatest stack depth: 6952 bytes left [ 110.769664][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.931360][ T8654] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 110.992604][ T8558] veth0_vlan: entered promiscuous mode [ 111.016307][ T8558] veth1_vlan: entered promiscuous mode [ 111.036364][ T8558] veth0_macvtap: entered promiscuous mode [ 111.043573][ T8558] veth1_macvtap: entered promiscuous mode [ 111.054370][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.067086][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.094331][ T8558] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.103276][ T8558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.112352][ T8558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.121225][ T8558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.256253][ T5441] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.589399][ T8694] chnl_net:caif_netlink_parms(): no params data found [ 111.684022][ T8694] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.691200][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.699600][ T8694] bridge_slave_0: entered allmulticast mode [ 111.706520][ T8694] bridge_slave_0: entered promiscuous mode [ 111.713713][ T8694] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.720985][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.728551][ T8694] bridge_slave_1: entered allmulticast mode [ 111.735323][ T8694] bridge_slave_1: entered promiscuous mode [ 111.741797][ T8749] hub 6-0:1.0: USB hub found [ 111.754979][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 111.754997][ T29] audit: type=1400 audit(1749594866.779:4066): avc: denied { setopt } for pid=8750 comm="syz.0.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.762145][ T8749] hub 6-0:1.0: 8 ports detected [ 111.789134][ T8694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.800007][ T8694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.838554][ T8694] team0: Port device team_slave_0 added [ 111.845576][ T8694] team0: Port device team_slave_1 added [ 111.855070][ T29] audit: type=1326 audit(1749594866.879:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8662 comm="syz.4.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c300e929 code=0x7fc00000 [ 111.895985][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.903094][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.929210][ T8694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.970824][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.974585][ T8762] serio: Serial port ptm0 [ 111.977852][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.977975][ T8694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.129155][ T8694] hsr_slave_0: entered promiscuous mode [ 112.135396][ T8694] hsr_slave_1: entered promiscuous mode [ 112.161761][ T8694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.204692][ T29] audit: type=1400 audit(1749594867.229:4068): avc: denied { read } for pid=8779 comm="syz.4.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.228607][ T8694] Cannot create hsr debugfs directory [ 112.341907][ T8791] hub 6-0:1.0: USB hub found [ 112.352557][ T8791] hub 6-0:1.0: 8 ports detected [ 112.400227][ T8694] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 112.416751][ T8694] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 112.434823][ T8694] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 112.451216][ T8694] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 112.484997][ T8694] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.492213][ T8694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.499590][ T8694] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.506694][ T8694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.525783][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.548143][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.632408][ T8694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.649268][ T8694] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.665817][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.672993][ T5442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.705367][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.712604][ T5442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.742954][ T8822] hub 6-0:1.0: USB hub found [ 112.750216][ T8822] hub 6-0:1.0: 8 ports detected [ 112.808821][ T8694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.891695][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2200'. [ 112.989516][ T8694] veth0_vlan: entered promiscuous mode [ 113.000583][ T8694] veth1_vlan: entered promiscuous mode [ 113.022418][ T8694] veth0_macvtap: entered promiscuous mode [ 113.029740][ T8694] veth1_macvtap: entered promiscuous mode [ 113.041118][ T8694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.052903][ T8694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.063493][ T8694] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.072382][ T8694] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.081210][ T8694] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.090168][ T8694] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.106389][ T29] audit: type=1326 audit(1749594868.129:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf2cce929 code=0x7fc00000 [ 113.130037][ T29] audit: type=1326 audit(1749594868.129:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcf2cce929 code=0x7fc00000 [ 113.153654][ T29] audit: type=1326 audit(1749594868.129:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf2cce929 code=0x7fc00000 [ 113.177155][ T29] audit: type=1326 audit(1749594868.129:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf2cce929 code=0x7fc00000 [ 113.200760][ T29] audit: type=1326 audit(1749594868.129:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf2cce929 code=0x7fc00000 [ 113.224441][ T29] audit: type=1326 audit(1749594868.129:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf2cce929 code=0x7fc00000 [ 113.247921][ T29] audit: type=1326 audit(1749594868.129:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf2cce929 code=0x7fc00000 [ 113.278554][ T5441] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.287761][ T8857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8857 comm=syz.0.2205 [ 113.332205][ T8862] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 113.343972][ T5441] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.402015][ T5441] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.483169][ T5441] bridge_slave_1: left allmulticast mode [ 113.489045][ T5441] bridge_slave_1: left promiscuous mode [ 113.494768][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.504509][ T5441] bridge_slave_0: left allmulticast mode [ 113.510284][ T5441] bridge_slave_0: left promiscuous mode [ 113.516007][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.602091][ T5441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.613534][ T5441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.624136][ T5441] bond0 (unregistering): Released all slaves [ 113.683176][ T5441] hsr_slave_0: left promiscuous mode [ 113.689332][ T5441] hsr_slave_1: left promiscuous mode [ 113.695208][ T5441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.702967][ T5441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.711067][ T8887] loop4: detected capacity change from 0 to 1024 [ 113.718347][ T5441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.718380][ T8887] EXT4-fs: inline encryption not supported [ 113.731904][ T5441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.741478][ T8887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.754278][ T5441] veth1_macvtap: left promiscuous mode [ 113.760159][ T5441] veth0_macvtap: left promiscuous mode [ 113.765883][ T5441] veth1_vlan: left promiscuous mode [ 113.772030][ T5441] veth0_vlan: left promiscuous mode [ 113.836486][ T5441] team0 (unregistering): Port device team_slave_1 removed [ 113.847288][ T5441] team0 (unregistering): Port device team_slave_0 removed [ 113.885380][ T5601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.906428][ T8892] openvswitch: netlink: Message has 6 unknown bytes. [ 113.931906][ T8894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8894 comm=syz.4.2218 [ 113.963117][ T8896] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 114.384693][ T8918] 9pnet: p9_errstr2errno: server reported unknown error @pA [ 114.472048][ T8929] loop9: detected capacity change from 0 to 1024 [ 114.502602][ T8929] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.529703][ T8932] xt_hashlimit: max too large, truncated to 1048576 [ 114.537949][ T8929] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.617634][ T8942] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2235'. [ 115.052989][ T8987] tipc: Started in network mode [ 115.058010][ T8987] tipc: Node identity ac141413, cluster identity 4711 [ 115.066594][ T8987] tipc: Enabled bearer , priority 10 [ 115.099704][ T8990] loop4: detected capacity change from 0 to 512 [ 115.111294][ T8992] loop8: detected capacity change from 0 to 1024 [ 115.118266][ T8990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.125319][ T8992] EXT4-fs: inline encryption not supported [ 115.140956][ T8992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.155904][ T8990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.168564][ T8990] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.221877][ T5601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.245976][ T8920] syz.9.2228 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 115.260310][ T8920] CPU: 1 UID: 0 PID: 8920 Comm: syz.9.2228 Tainted: G W 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 115.260354][ T8920] Tainted: [W]=WARN [ 115.260363][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.260380][ T8920] Call Trace: [ 115.260388][ T8920] [ 115.260453][ T8920] __dump_stack+0x1d/0x30 [ 115.260482][ T8920] dump_stack_lvl+0xe8/0x140 [ 115.260538][ T8920] dump_stack+0x15/0x1b [ 115.260560][ T8920] dump_header+0x81/0x220 [ 115.260604][ T8920] oom_kill_process+0x334/0x3f0 [ 115.260675][ T8920] out_of_memory+0x979/0xb80 [ 115.260716][ T8920] try_charge_memcg+0x5e6/0x9e0 [ 115.260751][ T8920] obj_cgroup_charge_pages+0xa6/0x150 [ 115.260833][ T8920] __memcg_kmem_charge_page+0x9f/0x170 [ 115.260915][ T8920] __alloc_frozen_pages_noprof+0x188/0x360 [ 115.261016][ T8920] alloc_pages_mpol+0xb3/0x250 [ 115.261059][ T8920] alloc_pages_noprof+0x90/0x130 [ 115.261170][ T8920] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 115.261229][ T8920] __kvmalloc_node_noprof+0x30f/0x4e0 [ 115.261311][ T8920] ? ip_set_alloc+0x1f/0x30 [ 115.261354][ T8920] ? ip_set_alloc+0x1f/0x30 [ 115.261455][ T8920] ? __kmalloc_cache_noprof+0x189/0x320 [ 115.261495][ T8920] ip_set_alloc+0x1f/0x30 [ 115.261610][ T8920] hash_netiface_create+0x282/0x740 [ 115.261661][ T8920] ? __pfx_hash_netiface_create+0x10/0x10 [ 115.261707][ T8920] ip_set_create+0x3cc/0x960 [ 115.261781][ T8920] ? __nla_parse+0x40/0x60 [ 115.261851][ T8920] nfnetlink_rcv_msg+0x4c3/0x590 [ 115.261909][ T8920] ? selinux_capable+0x1f9/0x270 [ 115.261945][ T8920] netlink_rcv_skb+0x120/0x220 [ 115.262039][ T8920] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 115.262154][ T8920] nfnetlink_rcv+0x16b/0x1690 [ 115.262190][ T8920] ? __kfree_skb+0x109/0x150 [ 115.262208][ T8920] ? nlmon_xmit+0x4f/0x60 [ 115.262236][ T8920] ? consume_skb+0x49/0x150 [ 115.262361][ T8920] ? nlmon_xmit+0x4f/0x60 [ 115.262404][ T8920] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 115.262482][ T8920] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 115.262511][ T8920] ? __dev_queue_xmit+0x182/0x1fb0 [ 115.262541][ T8920] ? ref_tracker_free+0x37d/0x3e0 [ 115.262656][ T8920] ? __netlink_deliver_tap+0x4dc/0x500 [ 115.262691][ T8920] netlink_unicast+0x5a1/0x670 [ 115.262810][ T8920] netlink_sendmsg+0x58b/0x6b0 [ 115.262842][ T8920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.262868][ T8920] __sock_sendmsg+0x142/0x180 [ 115.262937][ T8920] ____sys_sendmsg+0x31e/0x4e0 [ 115.262968][ T8920] ___sys_sendmsg+0x17b/0x1d0 [ 115.263026][ T8920] __x64_sys_sendmsg+0xd4/0x160 [ 115.263052][ T8920] x64_sys_call+0x2999/0x2fb0 [ 115.263141][ T8920] do_syscall_64+0xd2/0x200 [ 115.263167][ T8920] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.263201][ T8920] ? clear_bhb_loop+0x40/0x90 [ 115.263228][ T8920] ? clear_bhb_loop+0x40/0x90 [ 115.263275][ T8920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.263303][ T8920] RIP: 0033:0x7f143192e929 [ 115.263387][ T8920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.263414][ T8920] RSP: 002b:00007f142ff97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.263435][ T8920] RAX: ffffffffffffffda RBX: 00007f1431b55fa0 RCX: 00007f143192e929 [ 115.263447][ T8920] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 115.263463][ T8920] RBP: 00007f14319b0b39 R08: 0000000000000000 R09: 0000000000000000 [ 115.263480][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.263555][ T8920] R13: 0000000000000000 R14: 00007f1431b55fa0 R15: 00007ffe37bcdbf8 [ 115.263651][ T8920] [ 115.263662][ T8920] memory: usage 307200kB, limit 307200kB, failcnt 153 [ 115.623809][ T8920] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 115.631744][ T8920] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 115.639071][ T8920] Memory cgroup stats for /syz9: [ 115.639937][ T8920] cache 0 [ 115.647901][ T8920] rss 0 [ 115.650724][ T8920] shmem 0 [ 115.653740][ T8920] mapped_file 0 [ 115.657229][ T8920] dirty 0 [ 115.660231][ T8920] writeback 0 [ 115.663518][ T8920] workingset_refault_anon 74 [ 115.668137][ T8920] workingset_refault_file 0 [ 115.672698][ T8920] swap 192512 [ 115.675980][ T8920] swapcached 0 [ 115.679395][ T8920] pgpgin 517 [ 115.682623][ T8920] pgpgout 517 [ 115.685995][ T8920] pgfault 1058 [ 115.689444][ T8920] pgmajfault 46 [ 115.692907][ T8920] inactive_anon 0 [ 115.696613][ T8920] active_anon 0 [ 115.700149][ T8920] inactive_file 0 [ 115.703824][ T8920] active_file 0 [ 115.707283][ T8920] unevictable 0 [ 115.710805][ T8920] hierarchical_memory_limit 314572800 [ 115.716326][ T8920] hierarchical_memsw_limit 9223372036854771712 [ 115.722551][ T8920] total_cache 0 [ 115.726057][ T8920] total_rss 0 [ 115.729405][ T8920] total_shmem 0 [ 115.732909][ T8920] total_mapped_file 0 [ 115.736891][ T8920] total_dirty 0 [ 115.740446][ T8920] total_writeback 0 [ 115.744348][ T8920] total_workingset_refault_anon 74 [ 115.749503][ T8920] total_workingset_refault_file 0 [ 115.754574][ T8920] total_swap 192512 [ 115.758456][ T8920] total_swapcached 0 [ 115.762362][ T8920] total_pgpgin 517 [ 115.766131][ T8920] total_pgpgout 517 [ 115.770058][ T8920] total_pgfault 1058 [ 115.773963][ T8920] total_pgmajfault 46 [ 115.778170][ T8920] total_inactive_anon 0 [ 115.782421][ T8920] total_active_anon 0 [ 115.786414][ T8920] total_inactive_file 0 [ 115.790634][ T8920] total_active_file 0 [ 115.794713][ T8920] total_unevictable 0 [ 115.798720][ T8920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2228,pid=8919,uid=0 [ 115.813415][ T8920] Memory cgroup out of memory: Killed process 8919 (syz.9.2228) total-vm:95728kB, anon-rss:1060kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 115.835148][ T8558] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.870753][ T9002] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 115.878238][ T9002] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.962539][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 116.048093][ T9014] Falling back ldisc for ttyS3. [ 116.125870][ T8920] syz.9.2228 (8920) used greatest stack depth: 5904 bytes left [ 116.177980][ T3389] tipc: Node number set to 2886997011 [ 116.515998][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2302'. [ 116.738455][ T9111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9111 comm=syz.4.2317 [ 116.751075][ T9111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9111 comm=syz.4.2317 [ 116.800484][ T9115] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 116.830687][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 116.830706][ T29] audit: type=1400 audit(1749594871.859:4122): avc: denied { ioctl } for pid=9118 comm="syz.8.2314" path="socket:[25016]" dev="sockfs" ino=25016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.887952][ T9126] syzkaller0: entered promiscuous mode [ 116.893524][ T9126] syzkaller0: entered allmulticast mode [ 117.154086][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2328'. [ 117.185169][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2329'. [ 117.316196][ T9171] x_tables: unsorted underflow at hook 3 [ 117.347160][ T9173] SELinux: ebitmap: truncated map [ 117.353000][ T9173] SELinux: failed to load policy [ 117.375254][ T8823] kernel write not supported for file /674/attr/exec (pid: 8823 comm: kworker/0:5) [ 117.718057][ T9183] Falling back ldisc for ttyS3. [ 117.751968][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 117.766151][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2340'. [ 117.915056][ T9205] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2346'. [ 117.924282][ T9205] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2346'. [ 118.005333][ T9210] SELinux: ebitmap: truncated map [ 118.011335][ T9210] SELinux: failed to load policy [ 118.080625][ T23] kernel write not supported for file /1217/attr/exec (pid: 23 comm: kworker/1:0) [ 118.090202][ T9213] Falling back ldisc for ttyS3. [ 118.160414][ T29] audit: type=1326 audit(1749594873.189:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcb3e929 code=0x7ffc0000 [ 118.197047][ T29] audit: type=1326 audit(1749594873.189:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcb3e929 code=0x7ffc0000 [ 118.220703][ T29] audit: type=1326 audit(1749594873.189:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f84bcb3e929 code=0x7ffc0000 [ 118.244408][ T29] audit: type=1326 audit(1749594873.189:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcb3e929 code=0x7ffc0000 [ 118.260456][ T9237] loop8: detected capacity change from 0 to 128 [ 118.268074][ T29] audit: type=1326 audit(1749594873.189:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f84bcb3e929 code=0x7ffc0000 [ 118.297922][ T29] audit: type=1326 audit(1749594873.189:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84bcb358e7 code=0x7ffc0000 [ 118.321407][ T29] audit: type=1326 audit(1749594873.189:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84bcadab19 code=0x7ffc0000 [ 118.345191][ T29] audit: type=1326 audit(1749594873.189:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcb3e929 code=0x7ffc0000 [ 118.368834][ T29] audit: type=1326 audit(1749594873.219:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz.8.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcb3e929 code=0x7ffc0000 [ 118.489940][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.489940][ T5445] loop8: rw=1, sector=153, nr_sectors = 8 limit=128 [ 118.506506][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.506506][ T5445] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 118.540003][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.540003][ T5445] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 118.553734][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.553734][ T5445] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 118.567340][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.567340][ T5445] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 118.580961][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.580961][ T5445] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 118.594577][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.594577][ T5445] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 118.628578][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.628578][ T5445] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 118.642459][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.642459][ T5445] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 118.656072][ T5445] kworker/u8:46: attempt to access beyond end of device [ 118.656072][ T5445] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 118.927624][ T9256] loop8: detected capacity change from 0 to 128 [ 118.987782][ T9258] Falling back ldisc for ttyS3. [ 118.999811][ T9263] loop8: detected capacity change from 0 to 1024 [ 119.010257][ T9263] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 119.021322][ T9263] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 119.033469][ T9263] JBD2: no valid journal superblock found [ 119.039309][ T9263] EXT4-fs (loop8): Could not load journal inode [ 119.054991][ T9263] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 119.116276][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2374'. [ 119.125354][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2374'. [ 119.197253][ T9284] loop4: detected capacity change from 0 to 512 [ 119.204390][ T9285] loop9: detected capacity change from 0 to 128 [ 119.211743][ T9284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.219905][ T9284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.232390][ T9284] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 119.248965][ T9284] EXT4-fs (loop4): 1 truncate cleaned up [ 119.263297][ T9284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.290300][ T9291] loop9: detected capacity change from 0 to 128 [ 119.587515][ T5442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.641566][ T5442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.704681][ T5442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.744430][ T5442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.793221][ T9322] netlink: 'syz.1.2392': attribute type 4 has an invalid length. [ 119.795903][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 119.801064][ T9322] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2392'. [ 119.884771][ T5442] bond0 (unregistering): Released all slaves [ 119.893818][ T5442] bond1 (unregistering): Released all slaves [ 119.902796][ T5442] bond2 (unregistering): Released all slaves [ 119.932439][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.939623][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.946885][ T9310] bridge_slave_0: entered allmulticast mode [ 119.953571][ T9310] bridge_slave_0: entered promiscuous mode [ 119.960153][ T5442] tipc: Disabling bearer [ 119.965453][ T5442] tipc: Left network mode [ 119.965528][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.976916][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.984238][ T9310] bridge_slave_1: entered allmulticast mode [ 119.991310][ T9310] bridge_slave_1: entered promiscuous mode [ 119.999350][ T5442] hsr_slave_0: left promiscuous mode [ 120.005186][ T5442] hsr_slave_1: left promiscuous mode [ 120.013169][ T5442] veth1_macvtap: left promiscuous mode [ 120.018858][ T5442] veth0_macvtap: left promiscuous mode [ 120.024626][ T5442] veth1_vlan: left promiscuous mode [ 120.031882][ T5442] veth0_vlan: left promiscuous mode [ 120.042012][ T5601] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.183614][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.226239][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.292668][ T9310] team0: Port device team_slave_0 added [ 120.299557][ T9310] team0: Port device team_slave_1 added [ 120.318699][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.325701][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.351857][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.371296][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.378357][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.404652][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.456463][ T9310] hsr_slave_0: entered promiscuous mode [ 120.468257][ T9310] hsr_slave_1: entered promiscuous mode [ 120.474350][ T9310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.490015][ T9310] Cannot create hsr debugfs directory [ 120.541113][ T5442] IPVS: stop unused estimator thread 0... [ 120.673231][ T5442] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.740861][ T5442] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.833867][ T5442] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.921925][ T5442] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.981152][ T9310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.011830][ T9310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.034490][ T9310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.065176][ T9310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.096046][ T5442] bridge_slave_1: left allmulticast mode [ 121.101816][ T5442] bridge_slave_1: left promiscuous mode [ 121.107532][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.150377][ T5442] bridge_slave_0: left allmulticast mode [ 121.156111][ T5442] bridge_slave_0: left promiscuous mode [ 121.162127][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.314398][ T5442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.331020][ T5442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.350808][ T5442] bond0 (unregistering): Released all slaves [ 121.403147][ T9379] syzkaller0: entered promiscuous mode [ 121.408735][ T9379] syzkaller0: entered allmulticast mode [ 121.464908][ T5442] tipc: Disabling bearer [ 121.470272][ T5442] tipc: Left network mode [ 121.507633][ T5442] hsr_slave_0: left promiscuous mode [ 121.518169][ T5442] hsr_slave_1: left promiscuous mode [ 121.523998][ T5442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.531707][ T5442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.540984][ T5442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.548482][ T5442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.555965][ T9387] netlink: 'syz.4.2413': attribute type 4 has an invalid length. [ 121.563786][ T9387] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2413'. [ 121.576408][ T5442] veth1_vlan: left promiscuous mode [ 121.581187][ T9389] unsupported nla_type 52263 [ 121.581880][ T5442] veth0_vlan: left promiscuous mode [ 121.647181][ T5442] team0 (unregistering): Port device team_slave_1 removed [ 121.661219][ T5442] team0 (unregistering): Port device team_slave_0 removed [ 121.712037][ T9353] chnl_net:caif_netlink_parms(): no params data found [ 121.809554][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.816771][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.829423][ T9353] bridge_slave_0: entered allmulticast mode [ 121.836004][ T9353] bridge_slave_0: entered promiscuous mode [ 121.842777][ T9393] loop4: detected capacity change from 0 to 8192 [ 121.848561][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.856337][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.865636][ T9353] bridge_slave_1: entered allmulticast mode [ 121.873165][ T9353] bridge_slave_1: entered promiscuous mode [ 121.893897][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.922667][ T9353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.934888][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.946155][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.953333][ T5441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.963672][ T9353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.978597][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.985714][ T5445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.030107][ T9310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.060377][ T9353] team0: Port device team_slave_0 added [ 122.071908][ T9353] team0: Port device team_slave_1 added [ 122.086478][ T9397] ================================================================== [ 122.094634][ T9397] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 122.101782][ T9397] [ 122.104122][ T9397] write to 0xffff88812061b374 of 2 bytes by task 9393 on cpu 0: [ 122.111774][ T9397] fat16_ent_put+0x28/0x60 [ 122.116215][ T9397] fat_alloc_clusters+0x4d1/0xa80 [ 122.121267][ T9397] fat_get_block+0x258/0x5e0 [ 122.125896][ T9397] __block_write_begin_int+0x3fd/0xf90 [ 122.131405][ T9397] cont_write_begin+0x5fc/0x970 [ 122.136282][ T9397] fat_write_begin+0x4f/0xe0 [ 122.140908][ T9397] generic_perform_write+0x184/0x490 [ 122.146223][ T9397] __generic_file_write_iter+0x9e/0x120 [ 122.151790][ T9397] generic_file_write_iter+0x8d/0x2f0 [ 122.157182][ T9397] vfs_write+0x49d/0x8e0 [ 122.161443][ T9397] ksys_write+0xda/0x1a0 [ 122.165708][ T9397] __x64_sys_write+0x40/0x50 [ 122.170317][ T9397] x64_sys_call+0x2cdd/0x2fb0 [ 122.175017][ T9397] do_syscall_64+0xd2/0x200 [ 122.179539][ T9397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.185456][ T9397] [ 122.187795][ T9397] read to 0xffff88812061b200 of 512 bytes by task 9397 on cpu 1: [ 122.195529][ T9397] fat_mirror_bhs+0x1df/0x320 [ 122.200232][ T9397] fat_ent_write+0xd0/0xe0 [ 122.204669][ T9397] fat_chain_add+0x15b/0x3f0 [ 122.209292][ T9397] fat_get_block+0x46c/0x5e0 [ 122.213915][ T9397] __block_write_begin_int+0x3fd/0xf90 [ 122.219404][ T9397] cont_write_begin+0x5fc/0x970 [ 122.224277][ T9397] fat_write_begin+0x4f/0xe0 [ 122.228899][ T9397] generic_perform_write+0x184/0x490 [ 122.234204][ T9397] __generic_file_write_iter+0x9e/0x120 [ 122.239769][ T9397] generic_file_write_iter+0x8d/0x2f0 [ 122.245162][ T9397] aio_write+0x2e5/0x410 [ 122.249422][ T9397] io_submit_one+0xacd/0x11d0 [ 122.254146][ T9397] __se_sys_io_submit+0xfb/0x280 [ 122.259104][ T9397] __x64_sys_io_submit+0x43/0x50 [ 122.264061][ T9397] x64_sys_call+0xfc4/0x2fb0 [ 122.268669][ T9397] do_syscall_64+0xd2/0x200 [ 122.273190][ T9397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.279104][ T9397] [ 122.281436][ T9397] Reported by Kernel Concurrency Sanitizer on: [ 122.287602][ T9397] CPU: 1 UID: 0 PID: 9397 Comm: syz.4.2416 Tainted: G W 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(voluntary) [ 122.301610][ T9397] Tainted: [W]=WARN [ 122.305422][ T9397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.315493][ T9397] ================================================================== [ 122.346005][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.353130][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.379376][ T9353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.391270][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.398387][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.424434][ T9353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.528904][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.540991][ T9353] hsr_slave_0: entered promiscuous mode [ 122.547456][ T9353] hsr_slave_1: entered promiscuous mode [ 122.567488][ T9353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.576020][ T9353] Cannot create hsr debugfs directory [ 122.725032][ T9310] veth0_vlan: entered promiscuous mode [ 122.733016][ T9310] veth1_vlan: entered promiscuous mode [ 122.751598][ T9310] veth0_macvtap: entered promiscuous mode [ 122.759702][ T9310] veth1_macvtap: entered promiscuous mode [ 122.771174][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.782339][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.792346][ T9310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.801452][ T9310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.810359][ T9310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.819145][ T9310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.923032][ T9353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 122.931872][ T9353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 122.941590][ T9353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 122.950299][ T9353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.988794][ T9353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.001369][ T9353] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.011145][ T5445] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.018257][ T5445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.030891][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.038038][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.104910][ T9353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.173405][ T9353] veth0_vlan: entered promiscuous mode [ 123.181648][ T9353] veth1_vlan: entered promiscuous mode [ 123.198201][ T9353] veth0_macvtap: entered promiscuous mode [ 123.205832][ T9353] veth1_macvtap: entered promiscuous mode [ 123.216706][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.228487][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.236827][ T9353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.245633][ T9353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.254470][ T9353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.263191][ T9353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0