last executing test programs: 37.786395269s ago: executing program 4 (id=988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) close(0x3) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) 37.66752284s ago: executing program 4 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 37.438653214s ago: executing program 4 (id=994): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 36.488617499s ago: executing program 4 (id=1010): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nyUt2nfxFq/2qrTBjGgJk2iQsBNRUVBcKE7FxKaaSlOmtKM2BYXKoKr4saVrlzpH+DGhSDuXQmudC+FIMW1jNyZe5txMhMzyYyjvb8fTHLO3DOc88yZZ+bcc2cCKK1K9ieJOBIRP0fEdKv61waV1r/fb793Prsl0Wi8/lvSbJfVi6bF46byylwakX6UxMku/W5ev/H2aq1WvZrXF+rrVxY2r9946tL66sXqxerl5ZVnzi4trzy7sjywWG/ePvXTxuev/fHJmV+mnr/51gvZeI/kx9rjGJRKVKKR6zz22KA7G7GjbeVkfIQDoS9jEZFN10Qz/6djLLYnbzpe/HCkgwOGKvtsOtT78PsN4C6WxKhHAIxG8UFfnNsP4zz432zrXOsEaGf845HmbSY6zm8HKTvbuvbmx99mtxjSPgQAQLvvsvXPk93WP2nc39bu//m1oZmIuCcijkXEvRFxPCLui2i2fSAiHuyz/0pHfef6J721r8D2KFv/Pdd1/Vus/mJmLK8dbcY/kVy4VKuezZ+TuZg4lNUXd+njx1e++rLXsUrb+i+7Zf0Xa8F8HLfGOzbo1lbrqweJud3WBxEnuq5/kztXApKIeCgiTuyzj2/ONT7rdezv4x+uxhcRj3ed/+2roMnu1ycXmq+HheJVsdOpd6+s9ep/1PFn83949/hnkvbrtZv99/H1zOmtXsf2+/qfTN5olifz+66t1utXFyMmk1d33r+0/diiXrTP4p+b7Z7/x2L7mTiZzWNEPBwRj0TEo/nYT0fEmYiY3SX+l2Zfru4//uHK4l/ra/77L6wvff9Dr/73Nv9PN0tz+T17ef/b6wAP8twBAADAf0Xa/A58ks7fKafp/HzrO/zH43Ba29isP3Fh453La63vys/ERFrsdE237Ycu5nvDRX2po76c7xt/Ova/Zn3+/Eat56YY8I+Y6pH/mV/HRj06YOj8XgvKS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kMpHeR3/QoKCndrYdTvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPxZwAAAP//jYTnFQ==") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x800, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 36.297851702s ago: executing program 4 (id=1012): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r1, r0, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 35.058635961s ago: executing program 4 (id=1036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xd}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$inet6(0xa, 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0x52, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 34.859915365s ago: executing program 32 (id=1036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xd}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$inet6(0xa, 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0x52, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.740260313s ago: executing program 1 (id=1798): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.629921064s ago: executing program 3 (id=1800): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 1.609774795s ago: executing program 3 (id=1803): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.608921875s ago: executing program 1 (id=1805): r0 = epoll_create1(0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x9, r0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1}, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) 1.563113985s ago: executing program 3 (id=1816): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r3}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.544425106s ago: executing program 1 (id=1807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x18) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) 1.140297312s ago: executing program 2 (id=1811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) fcntl$notify(r1, 0x402, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 993.761205ms ago: executing program 2 (id=1812): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x0) flock(r2, 0x2) dup3(r2, r1, 0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x18) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 989.703534ms ago: executing program 0 (id=1813): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 944.903115ms ago: executing program 2 (id=1814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r5, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x94) 939.536385ms ago: executing program 3 (id=1815): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8a5d0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x80, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 889.918016ms ago: executing program 0 (id=1817): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$eJzs2k9rXFUYB+D3TqpJU9MZ8R8tiAddqJtLM2sXDdKCOKBoR6iCdGpvdcglE2aGwIjYrPRruBaX7gTp0k02fgIX7rLJMgvxyiTTNNYpNgYzoX2ezbxwz++ee84c7ryL2X4riyzGhlHLsqhdjs3YzaIRtbhnM958/fovL394/eN3V1qtKx+kdHXl2nIzpXT+lZ8/+eqHV+8Oz3304/mf5mOr8en2TvP3rRe3Lmz/ee2L7iB1793kZq837Nwsi3SrO1jNU3q/LDqDInXXBkV/mDrp4Prtsre+PpqPiKXF9X4xGKTO2iitFqM07KVhf5Q6n3e6aynP87S0GBxH+/vdqlqIiBtRVdXZ7+Lc3Vj6LeqRPZuy5y5nL9zIXtrMLuxUVX3Wj8r/YreqYqd6yvf/hDr0Ul+IKL/daG+09z/3r6/cTuOfhyIuRT3+iPExmdirz05uk1JKjfimvDPJ39loz03y0Y0yiliOejT+ka+u1ibplNLf8/OxeDjfjHo8PyX/TutKc2p+Id547VA+j3r8+ln0ooxbMc7ez3+9nNLb77UeyF/cGwcA8LjJ04Gp/VueP+z6fv6gv5reH+71V5em9mdn4uKZ2a6diMHoy9VOWRb9RyyePsrgYxXjw3FSc/3nYi6OMHjxWHM9dDequdOyGzMuqhOYK2oRjzQ4Fk7Ltvxr8czkXfDASnkC3D8Gs34SAAAAAAAAAAAAjuIk/mA46zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn218BAAD//6Y9vzY=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000000)='./bus/file0\x00', 0x0) unlinkat(r3, &(0x7f0000000080)='./bus/file0\x00', 0x200) 847.580167ms ago: executing program 2 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 847.119767ms ago: executing program 2 (id=1819): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 740.937319ms ago: executing program 0 (id=1820): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 740.662448ms ago: executing program 3 (id=1821): openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x0, @void}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x42, 0x14044, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x400, 0xc8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 691.963189ms ago: executing program 2 (id=1822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x100000000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x8463, 0x10001, 0x0, 0x7, 0x10001, 0x20045, 0xb, 0x0, 0x0, 0x0, 0x800000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 665.85092ms ago: executing program 5 (id=1823): pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000000005, 0x0) 648.00806ms ago: executing program 0 (id=1824): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 647.6076ms ago: executing program 1 (id=1825): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) r1 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 581.399141ms ago: executing program 3 (id=1826): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) socket$kcm(0x10, 0x2, 0x0) ioperm(0x21, 0x1, 0x81) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 547.599451ms ago: executing program 5 (id=1827): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) set_robust_list(&(0x7f0000000480)={0x0, 0x95f}, 0x18) 524.521032ms ago: executing program 0 (id=1828): socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x8004}, 0x0) unshare(0x6020000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 503.333682ms ago: executing program 5 (id=1829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e57f000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x486, &(0x7f0000001040)="$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") symlink(0x0, &(0x7f00000017c0)='./file0\x00') rename(&(0x7f0000000040)='./file0/../file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) clock_gettime(0x0, &(0x7f00000000c0)) 391.239814ms ago: executing program 1 (id=1830): openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 223.914516ms ago: executing program 5 (id=1831): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 223.465386ms ago: executing program 0 (id=1841): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000005440)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/46, 0x2e}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) 98.608398ms ago: executing program 1 (id=1832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x75) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 62.843029ms ago: executing program 5 (id=1833): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, 0x0) 0s ago: executing program 5 (id=1834): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0xf8, 0x2c2, &(0x7f0000000540)="$eJzs3U9rI2UYAPBnkjQ7q4cU8aIIDujBU9l69dIoK4g9KRHUi8HtgiRloQsBe7Dd034K8bN48+w3ULwK3lyh8spkZprEzT/XbRd2f79L377zPu/7dJ4hPeWZr944Ht25l8WDP3+JPM+idRAH8SiL3WhF4zw6AQA8Px6lFH+kiNipfs+2juy0ri4rAOAqVf//K886FwDgenz6+Rcf9w8Pb39SFHm81ns4GWQRcfxwMqiu9+/GNzGOo7gVvbiISJeq8YcfHd6OTlHajbePzyaDycL+/d/j5jR+P3qxuzx+v6jU8YOI8udOvBRF9O/uNFv14tXl8e8uiY9BN955ay7/vejFz1/HvRjHnShj49cm/rv9ovggziO+LI8p47NWDG5M182k9vVUBAAAAAAAAAAAAAAAAAAAAACAF8FeUWRV+55p/55yqu6/076YXt8rGruL/Xmq+Mt+wVV/oBR1i56zFN83/XVuFUWR6oWz+E683vFiAQAAAAAAAAAAAAAAAAAAACjd//Z0NByPj07+96A9Go6bbgDN1/qfdMODuZk343Q0bK/cMDvf/qz5bgNlrmsXR6cTT+G2bB7EjzfLfFas+aHO97/vfGNW3M/q8KYw2+2T10dvWPzK+5cZFvWl5iaPhtmms/KqcKe9hbO6mw6dewCyhZlpbcdHJ2n6SFykxZrmK25m9ymUsnxGuy8vvfR3Sqkc/JVSWr/Pe79VNapnsmmLje3S2KkHK5+W/PFa/LR6w5UfGe0n/rABAAAAAAAAAAAAAAAAAADWWvzi9L88WBvaurKkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCazd7/3wzyiFiceWxwVgevW1MPunFy/xn/iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwA/gkAAP//ZZxAsg==") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xc29600}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) kernel console output (not intermixed with test programs): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.951931][ T29] audit: type=1400 audit(1753770309.712:510): avc: denied { open } for pid=3310 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.976038][ T29] audit: type=1400 audit(1753770309.712:511): avc: denied { ioctl } for pid=3310 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.001523][ T29] audit: type=1400 audit(1753770309.722:512): avc: denied { prog_load } for pid=4251 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.020410][ T29] audit: type=1400 audit(1753770309.722:513): avc: denied { bpf } for pid=4251 comm="syz.0.330" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.040881][ T29] audit: type=1400 audit(1753770309.722:514): avc: denied { perfmon } for pid=4251 comm="syz.0.330" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.061627][ T29] audit: type=1400 audit(1753770309.722:515): avc: denied { prog_run } for pid=4251 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.082921][ T29] audit: type=1400 audit(1753770309.812:516): avc: denied { map_create } for pid=4253 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.087292][ T4254] loop2: detected capacity change from 0 to 512 [ 41.148566][ T4254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.170699][ T4254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.183587][ T4254] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.279672][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.863041][ T4309] loop2: detected capacity change from 0 to 8192 [ 42.121327][ T4334] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.161647][ T4341] loop2: detected capacity change from 0 to 128 [ 42.172957][ T4341] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 42.180885][ T4341] FAT-fs (loop2): Filesystem has been set read-only [ 42.187480][ T4341] syz.2.365: attempt to access beyond end of device [ 42.187480][ T4341] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 42.201124][ T4341] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 42.204209][ T4334] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.209033][ T4341] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 42.227282][ T4341] syz.2.365: attempt to access beyond end of device [ 42.227282][ T4341] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.312746][ T4334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.356360][ T4354] xt_hashlimit: max too large, truncated to 1048576 [ 42.382769][ T4334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.416692][ T4363] Driver unsupported XDP return value 0 on prog (id 339) dev N/A, expect packet loss! [ 42.447064][ T4334] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.475354][ T4334] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.487486][ T4334] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.492924][ T4369] loop1: detected capacity change from 0 to 128 [ 42.500346][ T4334] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.512995][ T4369] FAT-fs (loop1): invalid media value (0x00) [ 42.519067][ T4369] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 42.528287][ T4369] FAT-fs (loop1): Can't find a valid FAT filesystem [ 42.609534][ T4377] wg2: entered promiscuous mode [ 42.614418][ T4377] wg2: entered allmulticast mode [ 42.835937][ T4402] netlink: 96 bytes leftover after parsing attributes in process `syz.3.392'. [ 42.983979][ T4425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.404'. [ 43.019160][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 43.032097][ T4433] loop3: detected capacity change from 0 to 128 [ 43.075286][ T4433] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.155431][ T4433] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.238392][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.293455][ T4448] delete_channel: no stack [ 43.339800][ T4453] 9pnet: p9_errstr2errno: server reported unknown error [ 43.743507][ T4480] C: renamed from team_slave_0 [ 43.751089][ T4480] netlink: 'syz.3.427': attribute type 3 has an invalid length. [ 43.758788][ T4480] netlink: 152 bytes leftover after parsing attributes in process `syz.3.427'. [ 43.767738][ T4480] net_ratelimit: 76 callbacks suppressed [ 43.767815][ T4480] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 43.885299][ T4481] netlink: 'syz.1.426': attribute type 2 has an invalid length. [ 44.525682][ T4517] loop4: detected capacity change from 0 to 512 [ 44.552598][ T4517] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.580373][ T4517] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.612321][ T4517] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 44.662884][ T4517] System zones: 1-12 [ 44.699570][ T4517] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.741578][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 44.768372][ T4517] EXT4-fs (loop4): 1 truncate cleaned up [ 44.774600][ T4517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.787637][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 45.001041][ T4537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 45.169004][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.220867][ T4542] vlan0: entered allmulticast mode [ 45.301809][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.309265][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.332718][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.340159][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.347587][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.354993][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.362427][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.369833][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.377206][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.384600][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.391995][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.399385][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.416866][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.424289][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.431724][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.439225][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.446702][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.454140][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.461582][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.468982][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.476425][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.483831][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.491304][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.498776][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.506168][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.513579][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.521006][ T3354] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 45.531452][ T3354] hid-generic 0005:0000:0000.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 45.558001][ T2992] udevd[2992]: worker [3295] terminated by signal 33 (Unknown signal 33) [ 45.593254][ T2992] udevd[2992]: worker [3295] failed while handling '/devices/virtual/misc/uhid/0005:0000:0000.0001/hidraw/hidraw0' [ 45.658354][ T2992] udevd[2992]: worker [4008] terminated by signal 33 (Unknown signal 33) [ 45.684330][ T2992] udevd[2992]: worker [4008] failed while handling '/devices/virtual/block/loop1' [ 45.766169][ T4556] loop4: detected capacity change from 0 to 128 [ 45.799198][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 45.799210][ T29] audit: type=1400 audit(1753770314.602:828): avc: denied { mounton } for pid=4557 comm="syz.0.458" path="/102/file0" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.850779][ T4556] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.878957][ T4556] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.910688][ T29] audit: type=1400 audit(1753770314.712:829): avc: denied { mount } for pid=4562 comm="syz.2.459" name="/" dev="ramfs" ino=7596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 45.973629][ T3307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.030517][ T29] audit: type=1400 audit(1753770314.742:830): avc: denied { execute } for pid=4562 comm="syz.2.459" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=7597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 46.053821][ T29] audit: type=1400 audit(1753770314.742:831): avc: denied { firmware_load } for pid=4553 comm="syz.1.456" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 46.078464][ T29] audit: type=1400 audit(1753770314.752:832): avc: denied { append } for pid=4555 comm="syz.4.457" path="/83/mnt/cpuset.memory_pressure_enabled" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.115716][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 46.124632][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 46.193851][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 46.228808][ T29] audit: type=1400 audit(1753770315.032:833): avc: denied { bind } for pid=4586 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.277297][ T4585] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 46.345292][ T4593] loop4: detected capacity change from 0 to 128 [ 46.351992][ T29] audit: type=1400 audit(1753770315.142:834): avc: denied { create } for pid=4596 comm="syz.2.476" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.380331][ T4593] netlink: 48 bytes leftover after parsing attributes in process `syz.4.474'. [ 46.387436][ T29] audit: type=1400 audit(1753770315.162:835): avc: denied { mounton } for pid=4596 comm="syz.2.476" path="/111/file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.412053][ T29] audit: type=1400 audit(1753770315.162:836): avc: denied { mount } for pid=4596 comm="syz.2.476" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.433955][ T29] audit: type=1400 audit(1753770315.182:837): avc: denied { remount } for pid=4592 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.506254][ T4606] loop2: detected capacity change from 0 to 512 [ 46.526054][ T4606] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 46.591712][ T4606] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 46.706559][ T4625] loop2: detected capacity change from 0 to 1024 [ 46.749810][ T4625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.773083][ T4625] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.807751][ T4625] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 46.839464][ T4625] EXT4-fs (loop2): Remounting filesystem read-only [ 46.848814][ T41] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 46.893929][ T4625] syz.2.486 (4625) used greatest stack depth: 9080 bytes left [ 46.917612][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.965533][ T4643] hub 2-0:1.0: USB hub found [ 46.975323][ T4643] hub 2-0:1.0: 8 ports detected [ 47.053109][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.060355][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.110420][ T4647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.143070][ T4647] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.152242][ T4647] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.161294][ T4647] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.170299][ T4647] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.327803][ T4673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4673 comm=syz.4.505 [ 47.633775][ T4700] loop3: detected capacity change from 0 to 128 [ 48.057073][ T4719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 48.256633][ T4733] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 48.270296][ T4733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.289809][ T4733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.297014][ T4733] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 48.309505][ T4733] bond1: (slave vti0): Error -95 calling set_mac_address [ 48.386472][ T4743] 9pnet_fd: Insufficient options for proto=fd [ 48.516054][ T4745] netlink: 'syz.4.534': attribute type 2 has an invalid length. [ 48.564002][ T4752] capability: warning: `syz.0.537' uses deprecated v2 capabilities in a way that may be insecure [ 48.604979][ T2955] IPVS: starting estimator thread 0... [ 48.685876][ T4767] vlan0: entered allmulticast mode [ 48.697894][ T4767] dummy0: entered allmulticast mode [ 48.703280][ T4759] IPVS: using max 2736 ests per chain, 136800 per kthread [ 48.979992][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 49.081889][ T4828] loop1: detected capacity change from 0 to 512 [ 49.093827][ T4828] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.130835][ T4828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.143421][ T4828] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.193173][ T4837] netlink: 96 bytes leftover after parsing attributes in process `syz.0.568'. [ 49.345139][ T4847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4847 comm=syz.4.573 [ 49.359716][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.389982][ T4850] wg2: left promiscuous mode [ 49.394618][ T4850] wg2: left allmulticast mode [ 49.403965][ T4852] xt_hashlimit: max too large, truncated to 1048576 [ 49.502536][ T4860] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 49.512000][ T4861] netlink: 240 bytes leftover after parsing attributes in process `syz.3.572'. [ 49.540593][ T4860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.594188][ T4860] macvlan2: entered promiscuous mode [ 49.599724][ T4860] macvlan2: entered allmulticast mode [ 49.611108][ T4860] bond2: entered promiscuous mode [ 49.616791][ T4860] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 49.638965][ T4860] bond2: left promiscuous mode [ 49.680236][ T4874] openvswitch: netlink: Message has 6 unknown bytes. [ 49.789140][ T4885] loop2: detected capacity change from 0 to 2048 [ 49.830910][ T4885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.985588][ T4891] netlink: 'syz.0.590': attribute type 2 has an invalid length. [ 50.014732][ T4916] xt_CT: No such helper "pptp" [ 50.242287][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.382819][ T4927] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.459903][ T4927] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.509918][ T4927] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.569732][ T4927] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.625361][ T4927] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.639908][ T4927] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.669462][ T4927] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.691348][ T4927] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.764141][ T4934] loop3: detected capacity change from 0 to 164 [ 50.780535][ T4934] syz.3.605: attempt to access beyond end of device [ 50.780535][ T4934] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 50.804504][ T4934] syz.3.605: attempt to access beyond end of device [ 50.804504][ T4934] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 50.878714][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 50.878727][ T29] audit: type=1400 audit(1753770319.682:942): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 50.935382][ T29] audit: type=1400 audit(1753770319.712:943): avc: denied { create } for pid=4938 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.954842][ T29] audit: type=1400 audit(1753770319.712:944): avc: denied { write } for pid=4938 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.981957][ T4943] loop3: detected capacity change from 0 to 1024 [ 51.007485][ T4943] EXT4-fs: Ignoring removed orlov option [ 51.022883][ T4943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.025096][ T29] audit: type=1400 audit(1753770319.822:945): avc: denied { read } for pid=4944 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.232284][ T29] audit: type=1400 audit(1753770320.032:946): avc: denied { watch watch_reads } for pid=4958 comm="syz.2.614" path="/123/file0" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.330223][ T29] audit: type=1400 audit(1753770320.122:947): avc: denied { write } for pid=4964 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.409053][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.416292][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.429397][ T4967] bridge0: entered allmulticast mode [ 51.431367][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.493559][ T4967] batadv1: left allmulticast mode [ 51.498746][ T4978] Cannot find set identified by id 0 to match [ 51.498846][ T4967] batadv1: left promiscuous mode [ 51.510004][ T4967] bridge0: port 3(batadv1) entered disabled state [ 51.520519][ T4967] bridge_slave_1: left allmulticast mode [ 51.526202][ T4967] bridge_slave_1: left promiscuous mode [ 51.531911][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.542811][ T4967] bridge_slave_0: left allmulticast mode [ 51.548519][ T4967] bridge_slave_0: left promiscuous mode [ 51.554216][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.557574][ T4980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4980 comm=syz.3.624 [ 51.590374][ T4983] loop3: detected capacity change from 0 to 128 [ 51.629320][ T4986] netlink: 96 bytes leftover after parsing attributes in process `syz.3.626'. [ 51.653724][ T4988] loop9: detected capacity change from 0 to 7 [ 51.671846][ T4988] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.682527][ T4988] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.690410][ T4988] loop9: unable to read partition table [ 51.700550][ T4988] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 51.700550][ T4988] ) failed (rc=-5) [ 51.701821][ T4006] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.769386][ T29] audit: type=1326 audit(1753770320.572:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4994 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 51.798693][ T4006] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.806601][ T4006] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.839924][ T29] audit: type=1326 audit(1753770320.592:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4994 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 51.863204][ T29] audit: type=1326 audit(1753770320.612:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4994 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 51.863393][ T4006] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.886407][ T29] audit: type=1326 audit(1753770320.612:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4994 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 51.959373][ T5000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.631'. [ 51.977858][ T4006] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.988161][ T5003] loop2: detected capacity change from 0 to 2048 [ 52.030710][ T5006] loop4: detected capacity change from 0 to 8192 [ 52.038399][ T5003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.091302][ T5006] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.093521][ T3310] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 52.133327][ T3310] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 52.162218][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.355043][ T5041] 9pnet: p9_errstr2errno: server reported unknown error [ 52.453481][ T5051] netlink: 52 bytes leftover after parsing attributes in process `syz.2.650'. [ 52.647763][ T5071] 9pnet: p9_errstr2errno: server reported unknown error [ 52.745378][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 53.550404][ T5085] netlink: 'syz.3.665': attribute type 2 has an invalid length. [ 53.929522][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.958475][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 54.011827][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.033271][ T5136] loop3: detected capacity change from 0 to 164 [ 54.039472][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 54.059198][ T5136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 54.111803][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.130900][ T5131] netlink: 156 bytes leftover after parsing attributes in process `syz.4.686'. [ 54.172927][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.242649][ T5151] netlink: 64 bytes leftover after parsing attributes in process `syz.4.689'. [ 54.318438][ T5156] 9pnet: p9_errstr2errno: server reported unknown error [ 54.437193][ T31] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 54.506286][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.527555][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.538583][ T31] bond0 (unregistering): Released all slaves [ 54.548893][ T31] bond1 (unregistering): Released all slaves [ 54.701848][ T31] hsr_slave_0: left promiscuous mode [ 54.727170][ T31] hsr_slave_1: left promiscuous mode [ 54.736225][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.743686][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.771657][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.779195][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.793799][ T31] veth1_vlan: left promiscuous mode [ 54.802716][ T31] veth0_vlan: left promiscuous mode [ 54.893437][ T31] team0 (unregistering): Port device team_slave_1 removed [ 54.903187][ T31] team0 (unregistering): Port device team_slave_0 removed [ 54.977715][ T5133] chnl_net:caif_netlink_parms(): no params data found [ 55.048052][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.055231][ T5133] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.064977][ T5133] bridge_slave_0: entered allmulticast mode [ 55.088764][ T5133] bridge_slave_0: entered promiscuous mode [ 55.097420][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.104625][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.112148][ T5133] bridge_slave_1: entered allmulticast mode [ 55.118888][ T5133] bridge_slave_1: entered promiscuous mode [ 55.144029][ T5133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.164516][ T5133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.209697][ T5133] team0: Port device team_slave_0 added [ 55.226170][ T5133] team0: Port device team_slave_1 added [ 55.285933][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.293161][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.319318][ T5133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.330875][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.337892][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.363869][ T5133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.472230][ T5133] hsr_slave_0: entered promiscuous mode [ 55.493513][ T5133] hsr_slave_1: entered promiscuous mode [ 55.509098][ T5133] debugfs: 'hsr0' already exists in 'hsr' [ 55.514933][ T5133] Cannot create hsr debugfs directory [ 55.515277][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 55.875088][ T5377] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.919734][ T5377] netlink: 'syz.3.713': attribute type 4 has an invalid length. [ 56.015961][ T5133] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.041771][ T5133] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.056874][ T5133] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.072458][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 56.072472][ T29] audit: type=1400 audit(1753770324.872:1327): avc: denied { bind } for pid=5411 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.107609][ T5133] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.120416][ T29] audit: type=1400 audit(1753770324.872:1328): avc: denied { setopt } for pid=5411 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.141140][ T29] audit: type=1400 audit(1753770324.902:1329): avc: denied { write } for pid=5413 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 56.282110][ T5133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.301552][ T5133] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.314434][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.321712][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.352522][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.359721][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.370520][ T29] audit: type=1326 audit(1753770325.172:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98a2fe9a9 code=0x7ffc0000 [ 56.377480][ T5133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.404203][ T5133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.489917][ T29] audit: type=1326 audit(1753770325.202:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd98a2fe9a9 code=0x7ffc0000 [ 56.513340][ T29] audit: type=1326 audit(1753770325.202:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98a2fe9a9 code=0x7ffc0000 [ 56.536423][ T5133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.536670][ T29] audit: type=1326 audit(1753770325.202:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd98a2fe9a9 code=0x7ffc0000 [ 56.566761][ T29] audit: type=1326 audit(1753770325.202:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98a2fe9a9 code=0x7ffc0000 [ 56.590054][ T29] audit: type=1326 audit(1753770325.202:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd98a2fe9a9 code=0x7ffc0000 [ 56.613534][ T29] audit: type=1326 audit(1753770325.202:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98a2fe9a9 code=0x7ffc0000 [ 56.699687][ T5133] veth0_vlan: entered promiscuous mode [ 56.774748][ T5502] bridge0: port 3(gretap0) entered blocking state [ 56.781377][ T5502] bridge0: port 3(gretap0) entered disabled state [ 56.788623][ T5502] gretap0: entered allmulticast mode [ 56.795717][ T5502] gretap0: entered promiscuous mode [ 56.803452][ T5511] gretap0: left allmulticast mode [ 56.808568][ T5511] gretap0: left promiscuous mode [ 56.813642][ T5511] bridge0: port 3(gretap0) entered disabled state [ 56.827295][ T5133] veth1_vlan: entered promiscuous mode [ 56.853934][ T5133] veth0_macvtap: entered promiscuous mode [ 56.866335][ T5133] veth1_macvtap: entered promiscuous mode [ 56.890138][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.894580][ T5519] loop3: detected capacity change from 0 to 512 [ 56.911993][ T5519] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 56.914812][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.941044][ T5133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.949893][ T5133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.958698][ T5133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.967500][ T5133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.063154][ T5543] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.101563][ T5548] hub 6-0:1.0: USB hub found [ 57.106621][ T5548] hub 6-0:1.0: 8 ports detected [ 57.132879][ T5543] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.189904][ T5571] loop4: detected capacity change from 0 to 512 [ 57.197395][ T5571] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 57.207660][ T5543] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.237362][ T5571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 57.250344][ T5571] System zones: 1-12 [ 57.255978][ T5571] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 57.272817][ T5543] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.284878][ T5571] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #11: comm syz.4.754: corrupted inode contents [ 57.298078][ T5571] EXT4-fs error (device loop4): ext4_dirty_inode:6454: inode #11: comm syz.4.754: mark_inode_dirty error [ 57.311432][ T5571] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.754: invalid indirect mapped block 1 (level 1) [ 57.324966][ T5571] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #11: comm syz.4.754: corrupted inode contents [ 57.338003][ T5571] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 57.347034][ T5571] EXT4-fs error (device loop4): ext4_do_update_inode:5563: inode #11: comm syz.4.754: corrupted inode contents [ 57.366012][ T5543] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.394104][ T5571] EXT4-fs error (device loop4): ext4_truncate:4592: inode #11: comm syz.4.754: mark_inode_dirty error [ 57.406257][ T5543] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.424060][ T5571] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 57.438543][ T5543] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.453460][ T5571] EXT4-fs (loop4): 1 truncate cleaned up [ 57.462956][ T5543] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.473652][ T5571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.520248][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.677779][ T5631] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 57.708759][ T5631] bond3: entered promiscuous mode [ 57.718103][ T5631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 57.768113][ T5631] __nla_validate_parse: 2 callbacks suppressed [ 57.768128][ T5631] netlink: 3 bytes leftover after parsing attributes in process `syz.4.762'. [ 57.795030][ T5631] batadv1: entered promiscuous mode [ 57.800364][ T5631] batadv1: entered allmulticast mode [ 57.806741][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 57.815020][ T5631] bond3: (slave batadv1): making interface the new active one [ 57.823203][ T5631] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 57.883970][ T5631] netlink: 3 bytes leftover after parsing attributes in process `syz.4.762'. [ 57.981388][ T5631] batadv2: entered promiscuous mode [ 57.986610][ T5631] batadv2: entered allmulticast mode [ 58.028548][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 58.047068][ T5631] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 58.234446][ T5645] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 58.413458][ T5654] wg2: entered promiscuous mode [ 58.418390][ T5654] wg2: entered allmulticast mode [ 58.536808][ T5625] syz.0.760 (5625) used greatest stack depth: 7000 bytes left [ 58.549746][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 58.567888][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 58.603869][ T5665] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=5665 comm=syz.4.776 [ 59.425796][ T5741] bridge0: port 3(gretap0) entered blocking state [ 59.432433][ T5741] bridge0: port 3(gretap0) entered disabled state [ 59.439249][ T5741] gretap0: entered allmulticast mode [ 59.444995][ T5741] gretap0: entered promiscuous mode [ 59.456942][ T5741] gretap0: left allmulticast mode [ 59.462057][ T5741] gretap0: left promiscuous mode [ 59.467079][ T5741] bridge0: port 3(gretap0) entered disabled state [ 59.488132][ T5744] program syz.3.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.708781][ T5750] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=5750 comm=syz.3.809 [ 59.721375][ T5751] loop4: detected capacity change from 0 to 512 [ 59.743397][ T5751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.756397][ T5751] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.820333][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.833868][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 59.844246][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 59.908378][ T5771] loop4: detected capacity change from 0 to 128 [ 59.979668][ T5780] loop4: detected capacity change from 0 to 1024 [ 60.029307][ T5780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.060356][ T5780] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.106748][ T5780] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.824: lblock 1 mapped to illegal pblock 1 (length 15) [ 60.161682][ T5801] tipc: Started in network mode [ 60.166596][ T5801] tipc: Node identity ac14140f, cluster identity 4711 [ 60.190091][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.196665][ T5801] tipc: New replicast peer: 255.255.255.83 [ 60.205008][ T5801] tipc: Enabled bearer , priority 10 [ 60.741787][ T5842] wg2: entered promiscuous mode [ 60.746691][ T5842] wg2: entered allmulticast mode [ 60.786499][ T5846] netlink: 'syz.3.853': attribute type 1 has an invalid length. [ 60.802394][ T5848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.820685][ T5846] bond1: entered promiscuous mode [ 60.825978][ T5846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.839465][ T5846] netlink: 3 bytes leftover after parsing attributes in process `syz.3.853'. [ 60.852003][ T5848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.862556][ T5854] program syz.1.854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.875343][ T5846] batadv1: entered promiscuous mode [ 60.881910][ T5846] batadv1: entered allmulticast mode [ 60.888866][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 60.895882][ T5855] netlink: 3 bytes leftover after parsing attributes in process `syz.3.853'. [ 60.897322][ T5846] bond1: (slave batadv1): making interface the new active one [ 60.913460][ T5846] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 60.927033][ T5855] batadv2: entered promiscuous mode [ 60.932270][ T5855] batadv2: entered allmulticast mode [ 60.938126][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 60.946341][ T5855] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 60.963634][ T5848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.991909][ T5859] wg2: left promiscuous mode [ 60.996553][ T5859] wg2: left allmulticast mode [ 61.004380][ T5859] wg2: entered promiscuous mode [ 61.009496][ T5859] wg2: entered allmulticast mode [ 61.017434][ T5848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.072004][ T5848] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.086221][ T5848] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.100353][ T5869] syz.3.863 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.105521][ T5848] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.122660][ T5848] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.218309][ T1037] tipc: Node number set to 2886997007 [ 61.251356][ T5886] loop2: detected capacity change from 0 to 1024 [ 61.259684][ T5886] EXT4-fs: Ignoring removed orlov option [ 61.271022][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.544836][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.624752][ T5914] loop1: detected capacity change from 0 to 512 [ 61.650551][ T5914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.671885][ T5914] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.732303][ T5133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.756670][ T5921] program syz.2.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.057848][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 62.057863][ T29] audit: type=1400 audit(1753770330.852:1492): avc: denied { execute } for pid=5936 comm="syz.0.889" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 62.110583][ T5941] loop2: detected capacity change from 0 to 256 [ 62.156603][ T5943] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 62.180963][ T5943] bond1: entered promiscuous mode [ 62.186210][ T5943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.205700][ T5943] netlink: 3 bytes leftover after parsing attributes in process `syz.1.891'. [ 62.217559][ T5943] batadv1: entered promiscuous mode [ 62.222798][ T5943] batadv1: entered allmulticast mode [ 62.229109][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 62.237183][ T5943] bond1: (slave batadv1): making interface the new active one [ 62.245335][ T5943] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 62.261330][ T5946] netlink: 'syz.0.892': attribute type 6 has an invalid length. [ 62.302794][ T5948] team0: Port device ip6gretap1 added [ 62.435514][ T5960] program syz.4.896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.509539][ T5971] bridge0: port 3(gretap0) entered blocking state [ 62.516010][ T5971] bridge0: port 3(gretap0) entered disabled state [ 62.544362][ T5971] gretap0: entered allmulticast mode [ 62.557728][ T5971] gretap0: entered promiscuous mode [ 62.601029][ T5971] gretap0: left allmulticast mode [ 62.606131][ T5971] gretap0: left promiscuous mode [ 62.611224][ T5971] bridge0: port 3(gretap0) entered disabled state [ 62.730070][ T5981] SELinux: failed to load policy [ 62.735133][ T29] audit: type=1400 audit(1753770331.532:1493): avc: denied { load_policy } for pid=5980 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.792361][ T29] audit: type=1326 audit(1753770331.592:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 62.815724][ T29] audit: type=1326 audit(1753770331.592:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 62.839024][ T29] audit: type=1326 audit(1753770331.592:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 62.862503][ T29] audit: type=1326 audit(1753770331.592:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 62.885875][ T29] audit: type=1326 audit(1753770331.592:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 62.909232][ T29] audit: type=1326 audit(1753770331.592:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 62.932526][ T29] audit: type=1326 audit(1753770331.592:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 62.955886][ T29] audit: type=1326 audit(1753770331.592:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 62.988146][ T5988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5988 comm=syz.2.910 [ 63.059541][ T6006] bridge0: port 3(gretap0) entered blocking state [ 63.066007][ T6006] bridge0: port 3(gretap0) entered disabled state [ 63.073614][ T6006] gretap0: entered allmulticast mode [ 63.079982][ T6006] gretap0: entered promiscuous mode [ 63.085448][ T6006] bridge0: port 3(gretap0) entered blocking state [ 63.092012][ T6006] bridge0: port 3(gretap0) entered forwarding state [ 63.119968][ T6008] pim6reg1: entered promiscuous mode [ 63.125350][ T6008] pim6reg1: entered allmulticast mode [ 63.134605][ T6006] gretap0: left allmulticast mode [ 63.139666][ T6006] gretap0: left promiscuous mode [ 63.140012][ T6012] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 63.144850][ T6006] bridge0: port 3(gretap0) entered disabled state [ 63.191518][ T6012] bond1: entered promiscuous mode [ 63.196664][ T6012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.250978][ T6012] netlink: 3 bytes leftover after parsing attributes in process `syz.2.922'. [ 63.301474][ T6021] netlink: 3 bytes leftover after parsing attributes in process `syz.2.922'. [ 63.350022][ T6012] batadv1: entered promiscuous mode [ 63.355319][ T6012] batadv1: entered allmulticast mode [ 63.389386][ T6012] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 63.409610][ T6012] bond1: (slave batadv1): making interface the new active one [ 63.430558][ T6012] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 63.466191][ T6021] batadv2: entered promiscuous mode [ 63.471455][ T6021] batadv2: entered allmulticast mode [ 63.492736][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 63.510953][ T6021] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 63.744775][ T6046] ref_ctr increment failed for inode: 0x362 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811b6c5800 [ 64.378886][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 65.275059][ T6093] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.384539][ T6093] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.440058][ T6093] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.500171][ T6093] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.565481][ T6093] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.585404][ T6093] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.615806][ T6093] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.641507][ T6093] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.086266][ T6119] loop1: detected capacity change from 0 to 256 [ 66.128637][ T6119] msdos: Unknown parameter '0xffffffffffffffff' [ 67.297256][ T6175] loop1: detected capacity change from 0 to 2048 [ 67.351829][ T6175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.620049][ T5133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.657892][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 67.657930][ T29] audit: type=1400 audit(1753770336.452:1543): avc: denied { mounton } for pid=6191 comm="syz.1.983" path="/60/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 68.005014][ T6205] loop1: detected capacity change from 0 to 512 [ 68.096136][ T6205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.178317][ T6205] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.288844][ T6218] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.358501][ T5133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.368771][ T6225] netlink: 'syz.4.994': attribute type 10 has an invalid length. [ 68.376563][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.994'. [ 68.479774][ T6225] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.487993][ T6225] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.555665][ T6225] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 68.593572][ T29] audit: type=1400 audit(1753770337.112:1544): avc: denied { ioctl } for pid=6204 comm="syz.1.989" path="/62/file1/file2" dev="loop1" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.613323][ T6225] team0: Failed to send options change via netlink (err -105) [ 68.617961][ T29] audit: type=1326 audit(1753770337.242:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6228 comm="syz.3.999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x0 [ 68.617995][ T29] audit: type=1326 audit(1753770337.372:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 68.625486][ T6225] team0: Port device geneve1 added [ 68.648204][ T29] audit: type=1326 audit(1753770337.372:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 68.648225][ T29] audit: type=1326 audit(1753770337.372:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 68.648245][ T29] audit: type=1326 audit(1753770337.382:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 68.732472][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 68.747030][ T29] audit: type=1326 audit(1753770337.382:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 68.747102][ T29] audit: type=1326 audit(1753770337.382:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 68.756072][ T6243] netlink: 'syz.0.1002': attribute type 15 has an invalid length. [ 68.779366][ T29] audit: type=1326 audit(1753770337.382:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 68.802711][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 68.863929][ T6243] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 68.872099][ T6243] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 68.880301][ T6243] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 68.888482][ T6243] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 68.945608][ T6243] vxlan0: entered promiscuous mode [ 68.957787][ T6220] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.009564][ T6220] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.090500][ T6220] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.135075][ T6220] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.167843][ T6220] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.181150][ T6220] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214860][ T6263] loop4: detected capacity change from 0 to 512 [ 69.252666][ T6263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.461782][ T6269] vlan2: entered allmulticast mode [ 69.490756][ T6271] netlink: 'syz.2.1014': attribute type 27 has an invalid length. [ 69.506613][ T6273] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1015'. [ 69.520501][ T6271] bond1: left promiscuous mode [ 69.528443][ T6271] batadv1: left promiscuous mode [ 69.533478][ T6271] batadv1: left allmulticast mode [ 69.558703][ T6271] batadv2: left promiscuous mode [ 69.563671][ T6271] batadv2: left allmulticast mode [ 69.605112][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.648459][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.678118][ T6276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.721659][ T6285] loop1: detected capacity change from 0 to 512 [ 69.753469][ T6285] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.778660][ T6285] EXT4-fs (loop1): mount failed [ 70.609622][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.621420][ T1922] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.679124][ T1922] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.781648][ T1922] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.866092][ T1922] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.896689][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 70.936262][ T6340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.021004][ T6340] macvlan2: entered promiscuous mode [ 71.026334][ T6340] macvlan2: entered allmulticast mode [ 71.089447][ T6340] bond2: entered promiscuous mode [ 71.122083][ T6340] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.148696][ T6340] bond2: left promiscuous mode [ 71.187527][ T1922] bridge_slave_1: left allmulticast mode [ 71.193222][ T1922] bridge_slave_1: left promiscuous mode [ 71.199006][ T1922] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.221232][ T1922] bridge_slave_0: left promiscuous mode [ 71.227001][ T1922] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.342266][ T6386] loop3: detected capacity change from 0 to 128 [ 71.368330][ T1922] team0: Port device geneve1 removed [ 71.385403][ T6386] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 71.393320][ T6386] FAT-fs (loop3): Filesystem has been set read-only [ 71.419133][ T6386] syz.3.1054: attempt to access beyond end of device [ 71.419133][ T6386] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 71.447470][ T6386] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 71.455370][ T6386] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 71.478307][ T6386] syz.3.1054: attempt to access beyond end of device [ 71.478307][ T6386] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.498337][ T1922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.519658][ T1922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.528596][ T1922] bond0 (unregistering): Released all slaves [ 71.537007][ T1922] bond1 (unregistering): Released all slaves [ 71.565043][ T1922] bond2 (unregistering): Released all slaves [ 71.593161][ T1922] bond3 (unregistering): (slave batadv1): Releasing active interface [ 71.602252][ T1922] bond3 (unregistering): (slave batadv2): Releasing active interface [ 71.628684][ T1922] bond3 (unregistering): Released all slaves [ 71.640123][ T6388] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1055'. [ 71.724360][ T1922] hsr_slave_0: left promiscuous mode [ 71.750227][ T1922] hsr_slave_1: left promiscuous mode [ 71.755892][ T1922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.865793][ T1922] team0 (unregistering): Port device team_slave_1 removed [ 71.893433][ T1922] team0 (unregistering): Port device team_slave_0 removed [ 72.157323][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 72.285410][ T1922] IPVS: stop unused estimator thread 0... [ 72.309360][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.316457][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.394965][ T6341] bridge_slave_0: entered allmulticast mode [ 72.420714][ T6341] bridge_slave_0: entered promiscuous mode [ 72.461152][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.468252][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.495583][ T6341] bridge_slave_1: entered allmulticast mode [ 72.510898][ T6341] bridge_slave_1: entered promiscuous mode [ 72.576824][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.607236][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.682155][ T6341] team0: Port device team_slave_0 added [ 72.702721][ T6341] team0: Port device team_slave_1 added [ 72.787172][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.794205][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.820269][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.870170][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.877141][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.903278][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.010797][ T6341] hsr_slave_0: entered promiscuous mode [ 73.029272][ T6341] hsr_slave_1: entered promiscuous mode [ 73.035185][ T6341] debugfs: 'hsr0' already exists in 'hsr' [ 73.040965][ T6341] Cannot create hsr debugfs directory [ 73.267933][ T6341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.339532][ T6341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.362863][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 73.362976][ T29] audit: type=1326 audit(1753770342.162:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.401099][ T6341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.420733][ T6341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.441921][ T29] audit: type=1326 audit(1753770342.162:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.465387][ T29] audit: type=1326 audit(1753770342.162:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.488855][ T29] audit: type=1326 audit(1753770342.162:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.512242][ T29] audit: type=1326 audit(1753770342.162:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.535669][ T29] audit: type=1326 audit(1753770342.162:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.559098][ T29] audit: type=1326 audit(1753770342.222:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.582527][ T29] audit: type=1326 audit(1753770342.222:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.711828][ T29] audit: type=1326 audit(1753770342.272:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.735225][ T29] audit: type=1326 audit(1753770342.272:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.2.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 73.764492][ T6523] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 73.772410][ T6523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1082'. [ 73.808474][ T6523] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.816825][ T6523] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.825157][ T6523] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.849231][ T6523] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 73.858084][ T6523] team0: Failed to send options change via netlink (err -105) [ 73.865601][ T6523] team0: Port device geneve1 added [ 73.907140][ T6516] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.926337][ T6538] loop1: detected capacity change from 0 to 128 [ 73.954136][ T6538] FAT-fs (loop1): Directory bread(block 32) failed [ 73.961888][ T6516] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.978824][ T6538] FAT-fs (loop1): Directory bread(block 33) failed [ 73.988443][ T6538] FAT-fs (loop1): Directory bread(block 34) failed [ 73.994959][ T6538] FAT-fs (loop1): Directory bread(block 35) failed [ 74.002651][ T6516] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.034764][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.041490][ T6538] FAT-fs (loop1): Directory bread(block 36) failed [ 74.058236][ T6538] FAT-fs (loop1): Directory bread(block 37) failed [ 74.064824][ T6538] FAT-fs (loop1): Directory bread(block 38) failed [ 74.079677][ T6516] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.088228][ T6538] FAT-fs (loop1): Directory bread(block 39) failed [ 74.099224][ T6516] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.120980][ T6538] FAT-fs (loop1): Directory bread(block 40) failed [ 74.127725][ T6538] FAT-fs (loop1): Directory bread(block 41) failed [ 74.139782][ T6516] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.150640][ T6516] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.164518][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.214058][ T1922] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.221133][ T1922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.259277][ T1922] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.266434][ T1922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.485889][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.740118][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 74.876271][ T6341] veth0_vlan: entered promiscuous mode [ 74.877093][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 74.916504][ T6341] veth1_vlan: entered promiscuous mode [ 74.941987][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1100'. [ 74.944658][ T6341] veth0_macvtap: entered promiscuous mode [ 75.011416][ T6341] veth1_macvtap: entered promiscuous mode [ 75.048232][ T6629] Q6\bY4: renamed from lo (while UP) [ 75.101784][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.127571][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.156510][ T6341] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.165363][ T6341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.174221][ T6341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.182992][ T6341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.404174][ T6670] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.453829][ T6677] netlink: 'syz.5.1115': attribute type 10 has an invalid length. [ 75.461697][ T6677] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1115'. [ 75.486845][ T6680] mmap: syz.3.1118 (6680) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.504871][ T6677] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 75.514179][ T6677] team0: Failed to send options change via netlink (err -105) [ 75.521711][ T6677] team0: Port device geneve1 added [ 75.533590][ T6678] netlink: 'syz.1.1119': attribute type 12 has an invalid length. [ 75.549052][ T6670] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.591104][ T6689] loop3: detected capacity change from 0 to 256 [ 75.949236][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 75.962017][ T6717] ip6gre1: entered allmulticast mode [ 76.116492][ T6729] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.1137'. [ 76.289762][ T6740] loop1: detected capacity change from 0 to 164 [ 76.297359][ T6740] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 76.410900][ T6670] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.911605][ T6765] IPv6: addrconf: prefix option has invalid lifetime [ 77.005016][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 77.625703][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 77.675096][ T6832] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1176'. [ 77.692147][ T6670] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.724537][ T6832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.755194][ T6832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.775640][ T6832] bond0 (unregistering): Released all slaves [ 77.911888][ T6854] netlink: 'syz.0.1186': attribute type 27 has an invalid length. [ 77.945674][ T6670] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.958404][ T6857] IPv6: addrconf: prefix option has invalid lifetime [ 78.015692][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.022862][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.067885][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.084784][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.118430][ T6854] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.126794][ T6854] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.135190][ T6854] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.143667][ T6854] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.154126][ T6854] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 256 - 0 [ 78.162581][ T6854] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 256 - 0 [ 78.170852][ T6854] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 256 - 0 [ 78.179117][ T6854] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 256 - 0 [ 78.188032][ T6854] vxlan0: left promiscuous mode [ 78.205084][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.214180][ T6860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.232087][ T6670] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.246234][ T6670] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.289787][ T6670] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.317630][ T6870] ip6_vti0: mtu greater than device maximum [ 78.503547][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 78.503561][ T29] audit: type=1400 audit(1753770347.302:1684): avc: denied { mount } for pid=6880 comm="syz.5.1197" name="/" dev="hugetlbfs" ino=15905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 78.566567][ T29] audit: type=1326 audit(1753770347.352:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 78.590100][ T29] audit: type=1326 audit(1753770347.352:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 78.672137][ T29] audit: type=1326 audit(1753770347.362:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 78.695615][ T29] audit: type=1326 audit(1753770347.362:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 78.719054][ T29] audit: type=1326 audit(1753770347.362:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 78.742474][ T29] audit: type=1326 audit(1753770347.422:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 78.765829][ T29] audit: type=1326 audit(1753770347.422:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 78.789217][ T29] audit: type=1326 audit(1753770347.422:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 78.812703][ T29] audit: type=1326 audit(1753770347.422:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 79.045227][ T6917] __nla_validate_parse: 5 callbacks suppressed [ 79.045239][ T6917] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1212'. [ 79.247810][ T6938] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 79.267048][ T6938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.286746][ T6938] bond2: (slave gretap1): making interface the new active one [ 79.296875][ T6938] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 79.312832][ T6938] bond2 (unregistering): (slave gretap1): Releasing active interface [ 79.321784][ T6938] bond2 (unregistering): Released all slaves [ 79.792419][ T6994] ip6_vti0: mtu greater than device maximum [ 79.853220][ T6983] loop1: detected capacity change from 0 to 512 [ 79.865364][ T6983] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.881517][ T6983] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1239: bg 0: block 248: padding at end of block bitmap is not set [ 79.907422][ T6983] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1239: Failed to acquire dquot type 1 [ 79.919264][ T6983] EXT4-fs (loop1): 1 truncate cleaned up [ 79.938706][ T6983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.977069][ T7006] netlink: 'syz.0.1245': attribute type 10 has an invalid length. [ 79.984963][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1245'. [ 80.020396][ T5133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.034476][ T7006] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.059522][ T7006] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 80.083886][ T7006] team0: Failed to send options change via netlink (err -105) [ 80.091466][ T7006] team0: Port device geneve1 added [ 80.117630][ T7003] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.246614][ T7021] loop1: detected capacity change from 0 to 8192 [ 80.447094][ T7044] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1263'. [ 80.513622][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1264'. [ 80.539168][ T7052] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1265'. [ 80.632300][ T7063] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.671375][ T7069] netlink: 'syz.3.1273': attribute type 21 has an invalid length. [ 80.680567][ T7069] netlink: 'syz.3.1273': attribute type 1 has an invalid length. [ 80.688407][ T7069] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1273'. [ 80.711758][ T7063] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.781781][ T7076] netlink: 'syz.3.1276': attribute type 39 has an invalid length. [ 80.801207][ T7063] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.881386][ T7063] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.974073][ T7003] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.001623][ T7003] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.023882][ T7003] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.052132][ T7003] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.073247][ T7063] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.104634][ T7063] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.135409][ T7063] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.150562][ T7063] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.469042][ T7133] syz.0.1298: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 81.483765][ T7133] CPU: 0 UID: 0 PID: 7133 Comm: syz.0.1298 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 81.483828][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.483841][ T7133] Call Trace: [ 81.483847][ T7133] [ 81.483853][ T7133] __dump_stack+0x1d/0x30 [ 81.483906][ T7133] dump_stack_lvl+0xe8/0x140 [ 81.483923][ T7133] dump_stack+0x15/0x1b [ 81.483937][ T7133] warn_alloc+0x12b/0x1a0 [ 81.483978][ T7133] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 81.484009][ T7133] ? perf_callchain_user+0xae0/0xb50 [ 81.484042][ T7133] __vmalloc_node_range_noprof+0x9c/0xe00 [ 81.484135][ T7133] ? __bpf_get_stackid+0x721/0x800 [ 81.484161][ T7133] ? __rcu_read_unlock+0x4f/0x70 [ 81.484265][ T7133] ? avc_has_perm_noaudit+0x1b1/0x200 [ 81.484329][ T7133] ? should_fail_ex+0x30/0x280 [ 81.484351][ T7133] ? xskq_create+0x36/0xe0 [ 81.484379][ T7133] vmalloc_user_noprof+0x7d/0xb0 [ 81.484403][ T7133] ? xskq_create+0x80/0xe0 [ 81.484497][ T7133] xskq_create+0x80/0xe0 [ 81.484518][ T7133] xsk_init_queue+0x95/0xf0 [ 81.484541][ T7133] xsk_setsockopt+0x3de/0x510 [ 81.484568][ T7133] ? __pfx_xsk_setsockopt+0x10/0x10 [ 81.484589][ T7133] __sys_setsockopt+0x181/0x200 [ 81.484610][ T7133] __x64_sys_setsockopt+0x64/0x80 [ 81.484630][ T7133] x64_sys_call+0x20ec/0x2ff0 [ 81.484717][ T7133] do_syscall_64+0xd2/0x200 [ 81.484739][ T7133] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.484828][ T7133] ? clear_bhb_loop+0x40/0x90 [ 81.484850][ T7133] ? clear_bhb_loop+0x40/0x90 [ 81.484899][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.484918][ T7133] RIP: 0033:0x7fd98a2fe9a9 [ 81.484938][ T7133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.484954][ T7133] RSP: 002b:00007fd988967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.484986][ T7133] RAX: ffffffffffffffda RBX: 00007fd98a525fa0 RCX: 00007fd98a2fe9a9 [ 81.485041][ T7133] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 81.485051][ T7133] RBP: 00007fd98a380d69 R08: 0000000000000004 R09: 0000000000000000 [ 81.485070][ T7133] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 81.485080][ T7133] R13: 0000000000000000 R14: 00007fd98a525fa0 R15: 00007ffda8a11158 [ 81.485097][ T7133] [ 81.485177][ T7133] Mem-Info: [ 81.720181][ T7133] active_anon:8786 inactive_anon:4 isolated_anon:0 [ 81.720181][ T7133] active_file:15854 inactive_file:2287 isolated_file:0 [ 81.720181][ T7133] unevictable:0 dirty:321 writeback:0 [ 81.720181][ T7133] slab_reclaimable:3076 slab_unreclaimable:30942 [ 81.720181][ T7133] mapped:31132 shmem:2199 pagetables:1497 [ 81.720181][ T7133] sec_pagetables:0 bounce:0 [ 81.720181][ T7133] kernel_misc_reclaimable:0 [ 81.720181][ T7133] free:1850467 free_pcp:28165 free_cma:0 [ 81.765176][ T7133] Node 0 active_anon:38392kB inactive_anon:16kB active_file:63416kB inactive_file:9148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127892kB dirty:1284kB writeback:0kB shmem:12044kB writeback_tmp:0kB kernel_stack:3520kB pagetables:5988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 81.794229][ T7133] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.822976][ T7133] lowmem_reserve[]: 0 2883 7862 7862 [ 81.828355][ T7133] Node 0 DMA32 free:2949548kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953080kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 81.858742][ T7133] lowmem_reserve[]: 0 0 4978 4978 [ 81.863908][ T7133] Node 0 Normal free:4436960kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38740kB inactive_anon:16kB active_file:63416kB inactive_file:9148kB unevictable:0kB writepending:1284kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:105440kB local_pcp:69492kB free_cma:0kB [ 81.896106][ T7133] lowmem_reserve[]: 0 0 0 0 [ 81.900804][ T7133] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.913523][ T7133] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 5*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949548kB [ 81.929715][ T7133] Node 0 Normal: 488*4kB (UME) 351*8kB (UME) 138*16kB (UM) 258*32kB (UME) 435*64kB (UM) 175*128kB (UME) 108*256kB (UM) 78*512kB (UME) 63*1024kB (UM) 46*2048kB (UME) 1012*4096kB (UM) = 4436920kB [ 81.948997][ T7133] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 81.958292][ T7133] 18424 total pagecache pages [ 81.963092][ T7133] 6 pages in swap cache [ 81.967348][ T7133] Free swap = 124776kB [ 81.971535][ T7133] Total swap = 124996kB [ 81.975687][ T7133] 2097051 pages RAM [ 81.979549][ T7133] 0 pages HighMem/MovableOnly [ 81.984214][ T7133] 80381 pages reserved [ 82.003970][ T7141] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1300'. [ 82.517289][ T7181] loop1: detected capacity change from 0 to 512 [ 82.555018][ T7181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.593454][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'. [ 82.620987][ T7181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.688612][ T7181] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.729115][ T7181] netlink: 'syz.1.1314': attribute type 27 has an invalid length. [ 82.823245][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.830415][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.891365][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.922689][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.969086][ T7181] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.977466][ T7181] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.986014][ T7181] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.994462][ T7181] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.005007][ T7181] bond1: left promiscuous mode [ 83.012397][ T7181] batadv1: left promiscuous mode [ 83.017348][ T7181] batadv1: left allmulticast mode [ 83.039373][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.047529][ T7196] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.057264][ T7196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.104776][ T5133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.825546][ T7276] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 83.825546][ T7276] The task syz.2.1350 (7276) triggered the difference, watch for misbehavior. [ 83.914775][ T7286] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1353'. [ 83.924015][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1353'. [ 84.153427][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 84.153439][ T29] audit: type=1326 audit(1753770352.952:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.5.1358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd01f7de9a9 code=0x0 [ 84.253756][ T7302] uprobe: syz.5.1358:7302 failed to unregister, leaking uprobe [ 84.424198][ T7304] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 84.436315][ T7304] team0: Port device dummy0 added [ 84.446024][ T7304] netlink: 'syz.1.1359': attribute type 10 has an invalid length. [ 84.456938][ T7304] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 84.467774][ T7304] team0: Failed to send options change via netlink (err -105) [ 84.477164][ T7304] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 84.486459][ T7304] team0: Port device dummy0 removed [ 84.499929][ T7304] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.544992][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 84.829470][ T7316] netlink: 'syz.2.1364': attribute type 4 has an invalid length. [ 84.848240][ T29] audit: type=1400 audit(1753770353.642:1872): avc: denied { create } for pid=7317 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 85.003875][ T29] audit: type=1326 audit(1753770353.802:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 85.027480][ T29] audit: type=1326 audit(1753770353.802:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 85.050881][ T29] audit: type=1326 audit(1753770353.802:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 85.074359][ T29] audit: type=1326 audit(1753770353.802:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 85.098222][ T29] audit: type=1326 audit(1753770353.882:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 85.122037][ T29] audit: type=1326 audit(1753770353.932:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 85.145552][ T29] audit: type=1326 audit(1753770353.932:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 85.206534][ T7337] lo speed is unknown, defaulting to 1000 [ 85.214965][ T7337] lo speed is unknown, defaulting to 1000 [ 85.228468][ T7337] lo speed is unknown, defaulting to 1000 [ 85.234584][ T7337] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.259480][ T29] audit: type=1326 audit(1753770353.972:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.3.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 85.290113][ T7337] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 85.311990][ T7337] lo speed is unknown, defaulting to 1000 [ 85.329895][ T7337] lo speed is unknown, defaulting to 1000 [ 85.338648][ T7337] lo speed is unknown, defaulting to 1000 [ 85.355967][ T7337] lo speed is unknown, defaulting to 1000 [ 85.376614][ T7337] lo speed is unknown, defaulting to 1000 [ 85.478658][ T7356] lo speed is unknown, defaulting to 1000 [ 85.907974][ T7395] lo speed is unknown, defaulting to 1000 [ 85.975282][ T7398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=616 sclass=netlink_route_socket pid=7398 comm=syz.3.1391 [ 86.058273][ T7392] lo speed is unknown, defaulting to 1000 [ 86.769529][ T7441] netlink: 'syz.0.1411': attribute type 6 has an invalid length. [ 87.055402][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 87.064528][ T7470] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1424'. [ 87.078862][ T7470] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.087183][ T7470] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.095378][ T7470] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.103564][ T7470] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.115515][ T7470] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.123996][ T7470] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.132568][ T7470] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.140945][ T7470] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.286428][ T7478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7478 comm=syz.2.1428 [ 87.309963][ T7480] loop5: detected capacity change from 0 to 128 [ 87.320786][ T7480] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.346022][ T7480] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.396702][ T389] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.617801][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 87.626841][ T7498] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1437'. [ 87.641989][ T7498] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.650273][ T7498] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.658521][ T7498] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.666740][ T7498] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.683075][ T7498] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.691485][ T7498] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.699962][ T7498] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.708326][ T7498] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.749218][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 87.758209][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 87.767192][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 87.816360][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 87.825454][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1434'. [ 87.941983][ T7519] netlink: 'syz.2.1442': attribute type 10 has an invalid length. [ 87.968642][ T7519] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.988080][ T7519] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 88.004801][ T7519] team0: Failed to send options change via netlink (err -105) [ 88.012445][ T7519] team0: Port device geneve1 added [ 88.036480][ T7530] netlink: 'syz.5.1449': attribute type 13 has an invalid length. [ 88.038325][ T7525] netlink: 'syz.0.1446': attribute type 13 has an invalid length. [ 88.054286][ T7514] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.117180][ T7525] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.125841][ T7525] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.134203][ T7525] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.142559][ T7525] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.218266][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.225494][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.302865][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.322845][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.383453][ T7530] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.391934][ T7530] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.400412][ T7530] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.408820][ T7530] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.453795][ T7514] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.507837][ T7543] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.527776][ T7514] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.540667][ T7508] lo speed is unknown, defaulting to 1000 [ 88.555329][ T7514] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.582471][ T7514] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.619737][ T7543] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.727751][ T7543] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.771810][ T7554] team0 (unregistering): Port device team_slave_0 removed [ 88.787481][ T7554] team0 (unregistering): Port device team_slave_1 removed [ 88.813207][ T7554] team0 (unregistering): Port device geneve1 removed [ 88.839124][ T7543] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.945648][ T7543] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.976064][ T7543] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.018126][ T7543] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.047644][ T7543] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.325538][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 89.325553][ T29] audit: type=1326 audit(1753770358.122:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 89.391106][ T29] audit: type=1326 audit(1753770358.162:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 89.414489][ T29] audit: type=1326 audit(1753770358.162:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 89.437901][ T29] audit: type=1326 audit(1753770358.162:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.1.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc482ace9a9 code=0x7ffc0000 [ 89.513165][ T7598] infiniband syz1: set active [ 89.517889][ T7598] infiniband syz1: added bond0 [ 89.524169][ T29] audit: type=1326 audit(1753770358.312:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 89.547588][ T29] audit: type=1326 audit(1753770358.312:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 89.571043][ T29] audit: type=1326 audit(1753770358.312:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 89.578953][ T7602] sch_fq: defrate 4294967295 ignored. [ 89.594338][ T29] audit: type=1326 audit(1753770358.312:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 89.594359][ T29] audit: type=1326 audit(1753770358.312:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 89.594378][ T29] audit: type=1326 audit(1753770358.312:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 89.675216][ T7598] RDS/IB: syz1: added [ 89.679475][ T7598] smc: adding ib device syz1 with port count 1 [ 89.685661][ T7598] smc: ib device syz1 port 1 has pnetid [ 89.864298][ T7620] __nla_validate_parse: 5 callbacks suppressed [ 89.864313][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 89.965686][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 89.974680][ T7626] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1489'. [ 90.006389][ T7626] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.014726][ T7626] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.023099][ T7626] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.031290][ T7626] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.080949][ T7626] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.089377][ T7626] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.097767][ T7626] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.106213][ T7626] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.226505][ T7633] loop1: detected capacity change from 0 to 2048 [ 90.241513][ T7633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.420413][ T5133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.806537][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1504'. [ 90.842562][ T7666] ipvlan2: entered promiscuous mode [ 91.127879][ T7680] loop1: detected capacity change from 0 to 8192 [ 91.321692][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1514'. [ 91.354748][ T7698] netlink: 'syz.5.1517': attribute type 4 has an invalid length. [ 91.365496][ T7698] netlink: 'syz.5.1517': attribute type 4 has an invalid length. [ 91.762122][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 91.808757][ T7725] bridge0: port 3(batadv2) entered blocking state [ 91.815335][ T7725] bridge0: port 3(batadv2) entered disabled state [ 91.822689][ T7725] batadv2: entered allmulticast mode [ 91.828931][ T7725] batadv2: entered promiscuous mode [ 91.840216][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 91.865466][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.873563][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.990977][ T7737] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.062997][ T7737] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.095149][ T7743] lo speed is unknown, defaulting to 1000 [ 92.141952][ T7737] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.209575][ T7737] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.300093][ T7737] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.310373][ T41] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 92.318602][ T7737] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.319696][ T41] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 92.331191][ T7737] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.357246][ T7737] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.368487][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7749 comm=syz.3.1538 [ 92.499320][ T7756] lo speed is unknown, defaulting to 1000 [ 92.549088][ T7760] netlink: 'syz.5.1542': attribute type 12 has an invalid length. [ 92.808654][ T7774] lo speed is unknown, defaulting to 1000 [ 93.508038][ T7804] loop5: detected capacity change from 0 to 128 [ 93.540731][ T7806] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1560'. [ 93.637709][ T7818] netlink: 'syz.5.1566': attribute type 1 has an invalid length. [ 93.664059][ T7818] bond1: (slave veth3): Enslaving as an active interface with a down link [ 93.680117][ T7818] bond1: entered promiscuous mode [ 93.685178][ T7818] bond1: entered allmulticast mode [ 93.692662][ T7818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.722096][ T7825] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1569'. [ 93.885494][ T7844] ip6gre1: entered allmulticast mode [ 94.123158][ T7858] netlink: 'syz.2.1583': attribute type 4 has an invalid length. [ 94.139635][ T7858] netlink: 'syz.2.1583': attribute type 4 has an invalid length. [ 94.159673][ T3354] lo speed is unknown, defaulting to 1000 [ 94.165528][ T3354] syz2: Port: 1 Link ACTIVE [ 94.246534][ T7865] team0 (unregistering): Port device team_slave_0 removed [ 94.263394][ T7865] team0 (unregistering): Port device team_slave_1 removed [ 94.280229][ T7865] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.288694][ T7865] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.297060][ T7865] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.305511][ T7865] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.332228][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 94.332241][ T29] audit: type=1326 audit(1753770363.132:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f68b35967 code=0x7ffc0000 [ 94.389183][ T7865] team0 (unregistering): Port device geneve1 removed [ 94.395136][ T29] audit: type=1326 audit(1753770363.162:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f68adab89 code=0x7ffc0000 [ 94.419250][ T29] audit: type=1326 audit(1753770363.162:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f68b35967 code=0x7ffc0000 [ 94.442571][ T29] audit: type=1326 audit(1753770363.162:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f68adab89 code=0x7ffc0000 [ 94.465862][ T29] audit: type=1326 audit(1753770363.162:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 94.489278][ T29] audit: type=1326 audit(1753770363.182:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f68b35967 code=0x7ffc0000 [ 94.512597][ T29] audit: type=1326 audit(1753770363.182:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f68adab89 code=0x7ffc0000 [ 94.535926][ T29] audit: type=1326 audit(1753770363.182:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0f68b3e9a9 code=0x7ffc0000 [ 94.559431][ T29] audit: type=1326 audit(1753770363.182:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f68b35967 code=0x7ffc0000 [ 94.582821][ T29] audit: type=1326 audit(1753770363.182:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.3.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f68adab89 code=0x7ffc0000 [ 94.625616][ T7852] lo speed is unknown, defaulting to 1000 [ 94.645695][ T7872] loop1: detected capacity change from 0 to 1024 [ 94.662355][ T7872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.702921][ T7872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.780711][ T7888] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 94.805559][ T7888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.834733][ T5133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.858355][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 94.900495][ T7896] rdma_rxe: rxe_newlink: failed to add bond0 [ 94.921664][ T7888] bond2 (unregistering): Released all slaves [ 94.973844][ T7902] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1597'. [ 95.803557][ T7943] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1612'. [ 95.865189][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 95.907755][ T7952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.914991][ T7952] IPv6: NLM_F_CREATE should be set when creating new route [ 95.922189][ T7952] IPv6: NLM_F_CREATE should be set when creating new route [ 95.932285][ T7952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.943354][ T7953] lo speed is unknown, defaulting to 1000 [ 95.949220][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 96.239955][ T7982] 0: reclassify loop, rule prio 0, protocol 800 [ 96.248310][ C1] 0: reclassify loop, rule prio 0, protocol 800 [ 96.284651][ T7986] netlink: 'syz.1.1634': attribute type 10 has an invalid length. [ 96.294102][ T7986] bond0: (slave dummy0): Releasing backup interface [ 96.302926][ T7986] team0: Port device dummy0 added [ 96.312004][ T7986] netlink: 'syz.1.1634': attribute type 10 has an invalid length. [ 96.325205][ T7986] team0: Port device dummy0 removed [ 96.333195][ T7986] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.362391][ T7989] bridge0: port 3(batadv3) entered blocking state [ 96.368917][ T7989] bridge0: port 3(batadv3) entered disabled state [ 96.387854][ T7989] batadv3: entered allmulticast mode [ 96.399124][ T7989] batadv3: entered promiscuous mode [ 96.415579][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 96.424642][ T7994] loop1: detected capacity change from 0 to 1024 [ 96.433724][ T7994] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 96.436150][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.443395][ T7994] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.463451][ T7994] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.471649][ T7994] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.472279][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.487044][ T7994] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.1637: Inode bitmap for bg 0 marked uninitialized [ 96.502133][ T7994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.538094][ T5133] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.611404][ T8004] tipc: Started in network mode [ 96.616346][ T8004] tipc: Node identity ac1414aa, cluster identity 4711 [ 96.623212][ T2955] IPVS: starting estimator thread 0... [ 96.638575][ T8004] tipc: Enabled bearer , priority 10 [ 96.718457][ T8005] IPVS: using max 2160 ests per chain, 108000 per kthread [ 96.868438][ T8083] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 96.877680][ T8083] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 96.995407][ T8096] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1656'. [ 97.448529][ T8121] lo speed is unknown, defaulting to 1000 [ 97.777912][ T36] tipc: Node number set to 2886997162 [ 98.075807][ T8156] bridge0: port 3(batadv1) entered blocking state [ 98.082350][ T8156] bridge0: port 3(batadv1) entered disabled state [ 98.103488][ T8156] batadv1: entered allmulticast mode [ 98.109883][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1677'. [ 98.115080][ T8156] batadv1: entered promiscuous mode [ 98.136295][ T8161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.154275][ T8161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.413040][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1689'. [ 98.485888][ T8185] bond3: (slave veth3): Enslaving as an active interface with an up link [ 98.513577][ T8185] bond3: entered promiscuous mode [ 98.518710][ T8185] veth3: entered promiscuous mode [ 98.523911][ T8185] bond3: entered allmulticast mode [ 98.529065][ T8185] veth3: entered allmulticast mode [ 98.537888][ T8185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.560367][ T8039] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 98.569732][ T8039] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 98.595357][ T8194] netlink: 'syz.5.1693': attribute type 10 has an invalid length. [ 98.609632][ T8194] netlink: 'syz.5.1693': attribute type 10 has an invalid length. [ 98.621695][ T8194] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.761773][ T8204] bridge0: port 3(batadv1) entered blocking state [ 98.768316][ T8204] bridge0: port 3(batadv1) entered disabled state [ 98.775938][ T8204] batadv1: entered allmulticast mode [ 98.790721][ T8204] batadv1: entered promiscuous mode [ 98.813140][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 98.834296][ T8204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.859482][ T8204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.896049][ T8208] netem: change failed [ 99.008845][ T8214] lo speed is unknown, defaulting to 1000 [ 99.037168][ T8220] veth0: entered promiscuous mode [ 99.060081][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1706'. [ 99.094155][ T8220] veth0 (unregistering): left promiscuous mode [ 99.105630][ T8226] bridge0: port 4(batadv0) entered blocking state [ 99.112235][ T8226] bridge0: port 4(batadv0) entered disabled state [ 99.121248][ T8226] batadv0: entered allmulticast mode [ 99.127183][ T8226] batadv0: entered promiscuous mode [ 99.138346][ T8226] batadv0 (unregistering): left allmulticast mode [ 99.144827][ T8226] batadv0 (unregistering): left promiscuous mode [ 99.151276][ T8226] bridge0: port 4(batadv0) entered disabled state [ 99.236709][ T8233] bridge: RTM_NEWNEIGH with invalid ether address [ 99.270763][ T8072] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 99.280021][ T8072] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 99.346278][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 99.346292][ T29] audit: type=1326 audit(1753770368.142:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dd0cc5967 code=0x7ffc0000 [ 99.413664][ T29] audit: type=1326 audit(1753770368.182:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dd0c6ab89 code=0x7ffc0000 [ 99.437172][ T29] audit: type=1326 audit(1753770368.182:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dd0cc5967 code=0x7ffc0000 [ 99.460566][ T29] audit: type=1326 audit(1753770368.182:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dd0c6ab89 code=0x7ffc0000 [ 99.483916][ T29] audit: type=1326 audit(1753770368.182:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 99.507301][ T29] audit: type=1326 audit(1753770368.182:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dd0cc5967 code=0x7ffc0000 [ 99.530689][ T29] audit: type=1326 audit(1753770368.182:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dd0c6ab89 code=0x7ffc0000 [ 99.553993][ T29] audit: type=1326 audit(1753770368.182:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 99.577508][ T29] audit: type=1326 audit(1753770368.192:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dd0cc5967 code=0x7ffc0000 [ 99.600818][ T29] audit: type=1326 audit(1753770368.192:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.2.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dd0c6ab89 code=0x7ffc0000 [ 99.746378][ T8242] loop5: detected capacity change from 0 to 256 [ 100.117256][ T8272] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 100.154172][ T8272] bond2: (slave veth1): Enslaving as an active interface with a down link [ 100.184316][ T8272] bond2: entered promiscuous mode [ 100.189401][ T8272] bond2: entered allmulticast mode [ 100.204612][ T8272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.423112][ T8325] __nla_validate_parse: 1 callbacks suppressed [ 101.423126][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1749'. [ 101.452740][ T8325] bridge0: port 3(batadv3) entered blocking state [ 101.459363][ T8325] bridge0: port 3(batadv3) entered disabled state [ 101.481430][ T8325] batadv3: entered allmulticast mode [ 101.487740][ T8325] batadv3: entered promiscuous mode [ 101.516697][ T8329] syzkaller0: entered allmulticast mode [ 101.524377][ T8329] syzkaller0: entered promiscuous mode [ 101.532137][ T8329] syzkaller0 (unregistering): left allmulticast mode [ 101.538930][ T8329] syzkaller0 (unregistering): left promiscuous mode [ 101.953023][ T8042] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 101.962287][ T8042] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 102.155323][ T8363] netlink: 'syz.5.1768': attribute type 27 has an invalid length. [ 102.213093][ T8363] bond1: left promiscuous mode [ 102.217909][ T8363] bond1: left allmulticast mode [ 102.995068][ T8375] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 103.001832][ T8376] veth0: entered promiscuous mode [ 103.032330][ T8375] batadv1: left allmulticast mode [ 103.037436][ T8375] batadv1: left promiscuous mode [ 103.042698][ T8375] bridge0: port 3(batadv1) entered disabled state [ 103.063556][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 103.109359][ T8375] bridge_slave_1: left allmulticast mode [ 103.115099][ T8375] bridge_slave_1: left promiscuous mode [ 103.120791][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.183466][ T8375] bridge_slave_0: left allmulticast mode [ 103.189163][ T8375] bridge_slave_0: left promiscuous mode [ 103.194888][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.314698][ T8376] veth0 (unregistering): left promiscuous mode [ 103.730540][ T8413] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1790'. [ 104.145777][ T8450] bridge0: entered allmulticast mode [ 104.181340][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 104.207837][ T8450] batadv3: left allmulticast mode [ 104.212955][ T8450] batadv3: left promiscuous mode [ 104.218011][ T8450] bridge0: port 3(batadv3) entered disabled state [ 104.244925][ T8450] bridge_slave_1: left allmulticast mode [ 104.248418][ T8459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1801'. [ 104.250722][ T8450] bridge_slave_1: left promiscuous mode [ 104.265281][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.303529][ T8450] bridge_slave_0: left promiscuous mode [ 104.309298][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.334638][ T8450] bridge0 (unregistering): left allmulticast mode [ 104.350129][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 104.350139][ T29] audit: type=1326 audit(1753770373.152:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd01f7d5967 code=0x7ffc0000 [ 104.404936][ T29] audit: type=1326 audit(1753770373.192:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd01f77ab89 code=0x7ffc0000 [ 104.428344][ T29] audit: type=1326 audit(1753770373.192:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd01f7d5967 code=0x7ffc0000 [ 104.451703][ T29] audit: type=1326 audit(1753770373.192:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd01f77ab89 code=0x7ffc0000 [ 104.475084][ T29] audit: type=1326 audit(1753770373.192:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd01f7d5967 code=0x7ffc0000 [ 104.498449][ T29] audit: type=1326 audit(1753770373.192:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd01f77ab89 code=0x7ffc0000 [ 104.521863][ T29] audit: type=1326 audit(1753770373.192:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd01f7de9a9 code=0x7ffc0000 [ 104.545323][ T29] audit: type=1326 audit(1753770373.192:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.2.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 104.568793][ T29] audit: type=1326 audit(1753770373.192:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.2.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd0cce9a9 code=0x7ffc0000 [ 104.592215][ T29] audit: type=1326 audit(1753770373.192:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.5.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd01f7d5967 code=0x7ffc0000 [ 104.757182][ T8477] all: renamed from lo (while UP) [ 105.092343][ T8495] wg2: entered promiscuous mode [ 105.097265][ T8495] wg2: entered allmulticast mode [ 105.176191][ T8507] netlink: 'syz.0.1828': attribute type 13 has an invalid length. [ 105.217671][ T8509] loop5: detected capacity change from 0 to 512 [ 105.247207][ T8509] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.1829: casefold flag without casefold feature [ 105.313700][ T8509] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1829: couldn't read orphan inode 15 (err -117) [ 105.364284][ T8509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.464984][ T6341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.506583][ T8523] veth0: entered promiscuous mode [ 105.528723][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1831'. [ 105.559853][ T8523] veth0 (unregistering): left promiscuous mode [ 105.618572][ T8525] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 105.657265][ T8525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.670538][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'. [ 105.697716][ T8529] bond3 (unregistering): Released all slaves [ 105.711228][ T8531] loop5: detected capacity change from 0 to 256 [ 105.765717][ T8490] ================================================================== [ 105.773807][ T8490] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 105.781596][ T8490] [ 105.783894][ T8490] write to 0xffffea00050be718 of 8 bytes by task 8370 on cpu 0: [ 105.791497][ T8490] __filemap_remove_folio+0x1a5/0x2a0 [ 105.796856][ T8490] filemap_remove_folio+0x6d/0x1d0 [ 105.801954][ T8490] truncate_inode_folio+0x42/0x50 [ 105.807138][ T8490] shmem_undo_range+0x244/0xa80 [ 105.811976][ T8490] shmem_evict_inode+0x134/0x520 [ 105.816890][ T8490] evict+0x2e0/0x550 [ 105.820768][ T8490] iput+0x447/0x5b0 [ 105.824555][ T8490] dentry_unlink_inode+0x24f/0x260 [ 105.829649][ T8490] __dentry_kill+0x18d/0x4b0 [ 105.834218][ T8490] dput+0x5e/0xd0 [ 105.837828][ T8490] __fput+0x444/0x650 [ 105.841788][ T8490] ____fput+0x1c/0x30 [ 105.845750][ T8490] task_work_run+0x131/0x1a0 [ 105.850322][ T8490] do_exit+0x483/0x1590 [ 105.854458][ T8490] do_group_exit+0xff/0x140 [ 105.858951][ T8490] get_signal+0xe59/0xf70 [ 105.863266][ T8490] arch_do_signal_or_restart+0x96/0x480 [ 105.868795][ T8490] irqentry_exit_to_user_mode+0x5e/0xa0 [ 105.874316][ T8490] irqentry_exit+0x12/0x50 [ 105.878710][ T8490] asm_exc_page_fault+0x26/0x30 [ 105.883539][ T8490] [ 105.885842][ T8490] read to 0xffffea00050be718 of 8 bytes by task 8490 on cpu 1: [ 105.893362][ T8490] folio_mapping+0xa1/0x120 [ 105.897844][ T8490] move_folios_to_lru+0x128/0x6a0 [ 105.902845][ T8490] evict_folios+0x3013/0x33d0 [ 105.907497][ T8490] try_to_shrink_lruvec+0x45a/0x7e0 [ 105.912674][ T8490] shrink_lruvec+0x22e/0x1b40 [ 105.917410][ T8490] shrink_node+0x686/0x2120 [ 105.921890][ T8490] do_try_to_free_pages+0x3f6/0xcd0 [ 105.927065][ T8490] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 105.932935][ T8490] try_charge_memcg+0x358/0x9e0 [ 105.937769][ T8490] obj_cgroup_charge_pages+0xa6/0x150 [ 105.943120][ T8490] __memcg_kmem_charge_page+0x9f/0x170 [ 105.948564][ T8490] __alloc_frozen_pages_noprof+0x188/0x360 [ 105.954348][ T8490] alloc_pages_mpol+0xb3/0x250 [ 105.959090][ T8490] alloc_pages_noprof+0x90/0x130 [ 105.964008][ T8490] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 105.969792][ T8490] __kvmalloc_node_noprof+0x30f/0x4e0 [ 105.975141][ T8490] ip_set_alloc+0x1f/0x30 [ 105.979443][ T8490] hash_netiface_create+0x282/0x740 [ 105.984618][ T8490] ip_set_create+0x3cc/0x960 [ 105.989183][ T8490] nfnetlink_rcv_msg+0x4c3/0x590 [ 105.994098][ T8490] netlink_rcv_skb+0x120/0x220 [ 105.998855][ T8490] nfnetlink_rcv+0x16b/0x1690 [ 106.003526][ T8490] netlink_unicast+0x5a5/0x680 [ 106.008277][ T8490] netlink_sendmsg+0x58b/0x6b0 [ 106.013023][ T8490] __sock_sendmsg+0x142/0x180 [ 106.017683][ T8490] ____sys_sendmsg+0x31e/0x4e0 [ 106.022426][ T8490] ___sys_sendmsg+0x17b/0x1d0 [ 106.027081][ T8490] __x64_sys_sendmsg+0xd4/0x160 [ 106.031912][ T8490] x64_sys_call+0x191e/0x2ff0 [ 106.036567][ T8490] do_syscall_64+0xd2/0x200 [ 106.041057][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.046936][ T8490] [ 106.049239][ T8490] value changed: 0xffff8881220684d8 -> 0x0000000000000000 [ 106.056324][ T8490] [ 106.058628][ T8490] Reported by Kernel Concurrency Sanitizer on: [ 106.064756][ T8490] CPU: 1 UID: 0 PID: 8490 Comm: syz.2.1822 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 106.076798][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.086831][ T8490] ================================================================== [ 106.492627][ T8490] syz.2.1822 (8490) used greatest stack depth: 5904 bytes left