last executing test programs: 1m10.740617789s ago: executing program 4 (id=666): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0xffffffffffffffe6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0x461}], 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 1m10.696633594s ago: executing program 4 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m10.452472097s ago: executing program 4 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 1m10.403362662s ago: executing program 4 (id=677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 1m10.239206739s ago: executing program 4 (id=679): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 1m7.340335062s ago: executing program 4 (id=779): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2e) 1m7.340186072s ago: executing program 32 (id=779): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2e) 1m3.36912139s ago: executing program 5 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x30) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x4000000f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1m3.319016884s ago: executing program 5 (id=899): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5, 0xfe, "ff00"}) socket$kcm(0x29, 0x7, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x292140, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 1m3.227402394s ago: executing program 5 (id=902): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) getuid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m3.206517186s ago: executing program 5 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 1m3.188720768s ago: executing program 5 (id=904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 1m1.691464624s ago: executing program 5 (id=919): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 1m1.670871135s ago: executing program 33 (id=919): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 1.930187452s ago: executing program 2 (id=2250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 1.885148256s ago: executing program 2 (id=2252): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000982020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) 1.811688834s ago: executing program 2 (id=2254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x1, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f00000031c0)={0x1, 0x1, 0x8002, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7fffffff}) 1.43567876s ago: executing program 6 (id=2267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 1.314243882s ago: executing program 0 (id=2271): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.285868965s ago: executing program 0 (id=2273): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000480), &(0x7f0000000280)=@udp=r3, 0x1}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.245105858s ago: executing program 0 (id=2275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.180292785s ago: executing program 3 (id=2286): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 1.124543401s ago: executing program 1 (id=2276): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.124190241s ago: executing program 3 (id=2277): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.095080644s ago: executing program 3 (id=2278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) getcwd(0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 1.000322723s ago: executing program 3 (id=2279): r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000000000000005000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r2, 0x0, 0xeffd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 949.890048ms ago: executing program 1 (id=2280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) 914.322461ms ago: executing program 2 (id=2281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 856.187977ms ago: executing program 2 (id=2282): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) 774.380525ms ago: executing program 1 (id=2283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000380), &(0x7f0000000340)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 638.861848ms ago: executing program 1 (id=2284): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) creat(&(0x7f0000000000)='./file0\x00', 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 585.131774ms ago: executing program 6 (id=2287): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 584.338074ms ago: executing program 1 (id=2297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 562.786195ms ago: executing program 1 (id=2288): ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x100) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r3}}) 418.188519ms ago: executing program 6 (id=2289): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 404.510141ms ago: executing program 0 (id=2290): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757819"], 0x65) 382.812903ms ago: executing program 6 (id=2291): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 362.904095ms ago: executing program 0 (id=2292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 341.884057ms ago: executing program 0 (id=2293): syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) fsopen(&(0x7f00000006c0)='efivarfs\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x20004009) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4050}, 0x8801) 128.505668ms ago: executing program 3 (id=2294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 121.758139ms ago: executing program 6 (id=2295): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000000, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 93.200461ms ago: executing program 3 (id=2296): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 650.191µs ago: executing program 2 (id=2298): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) socket(0x2, 0x80805, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 0s ago: executing program 6 (id=2299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) write$cgroup_subtree(r2, 0x0, 0x32600) kernel console output (not intermixed with test programs): tdevsim5 netdevsim0: renamed from eth0 [ 70.158477][ T5543] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.168205][ T5543] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.181384][ T5543] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.248871][ T5543] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.256026][ T5543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.263600][ T5543] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.270767][ T5543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.316435][ T5543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.332742][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.341216][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.358194][ T5543] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.369989][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.377139][ T4801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.389781][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.397040][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.422850][ T5543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.433324][ T5543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.529876][ T5662] SELinux: syz.0.822 (5662) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 70.535739][ T5543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.609858][ T5672] loop0: detected capacity change from 0 to 512 [ 70.618798][ T5672] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 70.630637][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 70.630655][ T29] audit: type=1400 audit(1760465111.639:3155): avc: denied { execute } for pid=5674 comm="syz.2.825" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 70.649691][ T5672] EXT4-fs (loop0): couldn't read superblock of external journal [ 70.749704][ T5543] veth0_vlan: entered promiscuous mode [ 70.759988][ T5543] veth1_vlan: entered promiscuous mode [ 70.780428][ T5543] veth0_macvtap: entered promiscuous mode [ 70.788748][ T5543] veth1_macvtap: entered promiscuous mode [ 70.801263][ T5543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.815104][ T5543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.828704][ T4801] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.845044][ T4801] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.863010][ T4801] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.872511][ T4801] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.875312][ T29] audit: type=1400 audit(1760465111.889:3156): avc: denied { mounton } for pid=5543 comm="syz-executor" path="/root/syzkaller.A9UcoR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.910314][ T29] audit: type=1400 audit(1760465111.919:3157): avc: denied { mount } for pid=5543 comm="syz-executor" name="/" dev="gadgetfs" ino=3823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.071287][ T29] audit: type=1400 audit(1760465112.069:3158): avc: denied { mounton } for pid=5701 comm="syz.5.833" path="/3/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 71.097922][ T29] audit: type=1400 audit(1760465112.109:3159): avc: denied { unmount } for pid=5543 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 71.294679][ T5725] loop2: detected capacity change from 0 to 2048 [ 71.339777][ T5725] Alternate GPT is invalid, using primary GPT. [ 71.346162][ T5725] loop2: p1 p2 p3 [ 71.496069][ T5748] loop3: detected capacity change from 0 to 512 [ 71.503868][ T5748] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.528336][ T5748] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 71.538447][ T5748] FAT-fs (loop3): Filesystem has been set read-only [ 71.555882][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.563327][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.588464][ T29] audit: type=1326 audit(1760465112.599:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 71.611951][ T29] audit: type=1326 audit(1760465112.599:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 71.636011][ T29] audit: type=1326 audit(1760465112.599:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 71.659467][ T29] audit: type=1326 audit(1760465112.599:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 71.682913][ T29] audit: type=1326 audit(1760465112.599:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5751 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 71.733816][ T5749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.744811][ T5749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.782370][ T5749] bond1: left allmulticast mode [ 71.795178][ T4788] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.807258][ T4788] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.816702][ T4788] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.826304][ T4788] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.160753][ T5793] __nla_validate_parse: 4 callbacks suppressed [ 72.160772][ T5793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.868'. [ 72.176354][ T5793] IPVS: Error connecting to the multicast addr [ 72.210679][ T5797] loop3: detected capacity change from 0 to 128 [ 72.289261][ T5802] syz.3.870: attempt to access beyond end of device [ 72.289261][ T5802] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 72.310240][ T5802] syz.3.870: attempt to access beyond end of device [ 72.310240][ T5802] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 72.324004][ T5802] syz.3.870: attempt to access beyond end of device [ 72.324004][ T5802] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 72.348219][ T5802] syz.3.870: attempt to access beyond end of device [ 72.348219][ T5802] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 72.401694][ T5802] syz.3.870: attempt to access beyond end of device [ 72.401694][ T5802] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 72.423945][ T5815] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 72.438412][ T5802] syz.3.870: attempt to access beyond end of device [ 72.438412][ T5802] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 72.468167][ T5802] syz.3.870: attempt to access beyond end of device [ 72.468167][ T5802] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 72.520023][ T5826] loop3: detected capacity change from 0 to 1024 [ 72.526975][ T5826] EXT4-fs: Ignoring removed orlov option [ 72.533576][ T5826] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 72.554467][ T5826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.577181][ T5826] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 72.589600][ T5826] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.589600][ T5826] [ 72.599504][ T5826] EXT4-fs (loop3): Total free blocks count 0 [ 72.605656][ T5826] EXT4-fs (loop3): Free/Dirty block details [ 72.611653][ T5826] EXT4-fs (loop3): free_blocks=0 [ 72.616663][ T5826] EXT4-fs (loop3): dirty_blocks=0 [ 72.621704][ T5826] EXT4-fs (loop3): Block reservation details [ 72.627757][ T5826] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 72.695141][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.775213][ T5858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.892'. [ 73.341942][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.349266][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.390469][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.397677][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'. [ 73.401498][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.448002][ T5892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.456118][ T52] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.472630][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 73.482766][ T5892] bond2 (unregistering): Released all slaves [ 73.491736][ T52] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.500339][ T52] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.509010][ T52] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.457980][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 74.466994][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.477415][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.526028][ T4801] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.575975][ T4801] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.666484][ T4801] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.736936][ T4801] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.839982][ T4801] bridge_slave_1: left allmulticast mode [ 74.845810][ T4801] bridge_slave_1: left promiscuous mode [ 74.851508][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.868316][ T4801] bridge_slave_0: left allmulticast mode [ 74.874203][ T4801] bridge_slave_0: left promiscuous mode [ 74.879979][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.995356][ T4801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.014362][ T4801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.024971][ T4801] bond0 (unregistering): Released all slaves [ 75.093852][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 75.136631][ T4801] hsr_slave_0: left promiscuous mode [ 75.143937][ T4801] hsr_slave_1: left promiscuous mode [ 75.149807][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.157354][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.165455][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.172979][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.185766][ T4801] veth1_macvtap: left promiscuous mode [ 75.191526][ T4801] veth0_macvtap: left promiscuous mode [ 75.197287][ T4801] veth1_vlan: left promiscuous mode [ 75.202659][ T4801] veth0_vlan: left promiscuous mode [ 75.270337][ T4801] team0 (unregistering): Port device team_slave_1 removed [ 75.281423][ T4801] team0 (unregistering): Port device team_slave_0 removed [ 75.331604][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.338796][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.346284][ T5927] bridge_slave_0: entered allmulticast mode [ 75.352745][ T5927] bridge_slave_0: entered promiscuous mode [ 75.359691][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.366828][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.374125][ T5927] bridge_slave_1: entered allmulticast mode [ 75.380613][ T5927] bridge_slave_1: entered promiscuous mode [ 75.398050][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.408444][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.427777][ T5927] team0: Port device team_slave_0 added [ 75.434827][ T5927] team0: Port device team_slave_1 added [ 75.450818][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.457824][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.483746][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.495107][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.502060][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.528141][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.555171][ T5927] hsr_slave_0: entered promiscuous mode [ 75.561274][ T5927] hsr_slave_1: entered promiscuous mode [ 75.567312][ T5927] debugfs: 'hsr0' already exists in 'hsr' [ 75.573084][ T5927] Cannot create hsr debugfs directory [ 75.646359][ T5927] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.657438][ T5927] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.674911][ T5927] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.692131][ T5927] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 75.725220][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.732395][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.739757][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.746871][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.817130][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.849430][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.858066][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.929293][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.977453][ T4788] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.984585][ T4788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.015970][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.023192][ T4827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.093944][ T5998] loop1: detected capacity change from 0 to 128 [ 76.109786][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 76.109804][ T29] audit: type=1326 audit(1760465117.119:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 76.139331][ T29] audit: type=1326 audit(1760465117.119:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 76.162798][ T29] audit: type=1326 audit(1760465117.119:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 76.186169][ T29] audit: type=1326 audit(1760465117.119:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 76.209579][ T29] audit: type=1326 audit(1760465117.119:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 76.249381][ T5998] syz.1.941: attempt to access beyond end of device [ 76.249381][ T5998] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 76.258532][ T5927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.273391][ T5927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.286244][ T5998] syz.1.941: attempt to access beyond end of device [ 76.286244][ T5998] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 76.325494][ T5998] syz.1.941: attempt to access beyond end of device [ 76.325494][ T5998] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 76.340045][ T6005] serio: Serial port ptm0 [ 76.428476][ T29] audit: type=1400 audit(1760465117.439:3217): avc: denied { recv } for pid=6015 comm="syz.1.949" saddr=10.128.0.163 src=30036 daddr=10.128.0.180 dest=42196 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 76.470717][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.478350][ T29] audit: type=1400 audit(1760465117.469:3218): avc: denied { egress } for pid=4827 comm="kworker/u8:65" daddr=ff02::1:ff00:1c netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 76.501704][ T29] audit: type=1400 audit(1760465117.469:3219): avc: denied { sendto } for pid=4827 comm="kworker/u8:65" daddr=ff02::1:ff00:1c netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 76.675241][ T29] audit: type=1400 audit(1760465117.679:3220): avc: denied { read } for pid=6044 comm="syz.1.958" lport=38958 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 76.728786][ T6052] loop2: detected capacity change from 0 to 128 [ 76.738200][ T5927] veth0_vlan: entered promiscuous mode [ 76.755095][ T6053] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 76.773749][ T5927] veth1_vlan: entered promiscuous mode [ 76.790541][ T6053] gretap0: entered promiscuous mode [ 76.830416][ T6053] macsec1: entered promiscuous mode [ 76.835964][ T6053] macsec1: entered allmulticast mode [ 76.841311][ T6053] gretap0: entered allmulticast mode [ 76.887686][ T6053] gretap0: left allmulticast mode [ 76.893154][ T6053] gretap0: left promiscuous mode [ 76.939385][ T5927] veth0_macvtap: entered promiscuous mode [ 76.970001][ T5927] veth1_macvtap: entered promiscuous mode [ 77.000718][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.013708][ T6061] lo speed is unknown, defaulting to 1000 [ 77.019761][ T6061] lo speed is unknown, defaulting to 1000 [ 77.030789][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.042457][ T6061] lo speed is unknown, defaulting to 1000 [ 77.071151][ T4827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.080312][ T4827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.099737][ T6061] infiniband syz0: set down [ 77.104361][ T6061] infiniband syz0: added lo [ 77.117403][ T6061] RDS/IB: syz0: added [ 77.131129][ T4827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.140008][ T1035] lo speed is unknown, defaulting to 1000 [ 77.145970][ T6061] lo speed is unknown, defaulting to 1000 [ 77.160446][ T4827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.184317][ T6061] lo speed is unknown, defaulting to 1000 [ 77.221476][ T6061] lo speed is unknown, defaulting to 1000 [ 77.256728][ T6061] lo speed is unknown, defaulting to 1000 [ 77.275819][ T6070] loop1: detected capacity change from 0 to 1764 [ 77.294583][ T6061] lo speed is unknown, defaulting to 1000 [ 77.310329][ T6070] iso9660: Unknown parameter 'de' [ 77.413335][ T6077] sch_tbf: burst 127 is lower than device ip6tnl0 mtu (1452) ! [ 77.473895][ T6079] loop1: detected capacity change from 0 to 128 [ 77.504322][ T6079] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.523025][ T6079] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.593383][ T29] audit: type=1400 audit(1760465118.589:3221): avc: denied { setattr } for pid=6078 comm="syz.1.970" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.622816][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.640746][ T6096] syzkaller0: entered allmulticast mode [ 77.663518][ T6096] syzkaller0 (unregistering): left allmulticast mode [ 77.676787][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 78.080913][ T6120] loop0: detected capacity change from 0 to 128 [ 78.125261][ T6123] syz.1.987: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 78.139756][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.1.987 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.139830][ T6123] Tainted: [W]=WARN [ 78.139837][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.139854][ T6123] Call Trace: [ 78.139863][ T6123] [ 78.139874][ T6123] __dump_stack+0x1d/0x30 [ 78.139897][ T6123] dump_stack_lvl+0xe8/0x140 [ 78.139917][ T6123] dump_stack+0x15/0x1b [ 78.139933][ T6123] warn_alloc+0x12b/0x1a0 [ 78.139989][ T6123] ? __rcu_read_unlock+0x4f/0x70 [ 78.140020][ T6123] __vmalloc_node_range_noprof+0x9d/0xed0 [ 78.140113][ T6123] ? __futex_wait+0x1fa/0x260 [ 78.140139][ T6123] ? __pfx_futex_wake_mark+0x10/0x10 [ 78.140179][ T6123] ? __rcu_read_unlock+0x4f/0x70 [ 78.140342][ T6123] ? avc_has_perm_noaudit+0x1b1/0x200 [ 78.140388][ T6123] ? should_fail_ex+0x30/0x280 [ 78.140479][ T6123] ? xskq_create+0x36/0xe0 [ 78.140512][ T6123] vmalloc_user_noprof+0x7d/0xb0 [ 78.140557][ T6123] ? xskq_create+0x80/0xe0 [ 78.140585][ T6123] xskq_create+0x80/0xe0 [ 78.140696][ T6123] xsk_init_queue+0x95/0xf0 [ 78.140723][ T6123] xsk_setsockopt+0x3f5/0x640 [ 78.140802][ T6123] ? __pfx_xsk_setsockopt+0x10/0x10 [ 78.140837][ T6123] __sys_setsockopt+0x184/0x200 [ 78.140877][ T6123] __x64_sys_setsockopt+0x64/0x80 [ 78.140907][ T6123] x64_sys_call+0x20ec/0x3000 [ 78.140929][ T6123] do_syscall_64+0xd2/0x200 [ 78.141016][ T6123] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.141052][ T6123] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.141097][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.141119][ T6123] RIP: 0033:0x7fdde386eec9 [ 78.141135][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.141209][ T6123] RSP: 002b:00007fdde22d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.141230][ T6123] RAX: ffffffffffffffda RBX: 00007fdde3ac5fa0 RCX: 00007fdde386eec9 [ 78.141255][ T6123] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 78.141287][ T6123] RBP: 00007fdde38f1f91 R08: 0000000000000004 R09: 0000000000000000 [ 78.141305][ T6123] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.141325][ T6123] R13: 00007fdde3ac6038 R14: 00007fdde3ac5fa0 R15: 00007ffc1a8d1f08 [ 78.141412][ T6123] [ 78.141427][ T6123] Mem-Info: [ 78.227108][ T6126] bio_check_eod: 1139 callbacks suppressed [ 78.227128][ T6126] syz.0.986: attempt to access beyond end of device [ 78.227128][ T6126] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 78.231422][ T6123] active_anon:4173 inactive_anon:5 isolated_anon:0 [ 78.231422][ T6123] active_file:8894 inactive_file:2290 isolated_file:0 [ 78.231422][ T6123] unevictable:0 dirty:276 writeback:0 [ 78.231422][ T6123] slab_reclaimable:3331 slab_unreclaimable:17382 [ 78.231422][ T6123] mapped:28906 shmem:191 pagetables:1219 [ 78.231422][ T6123] sec_pagetables:0 bounce:0 [ 78.231422][ T6123] kernel_misc_reclaimable:0 [ 78.231422][ T6123] free:1870494 free_pcp:33258 free_cma:0 [ 78.261142][ T6126] syz.0.986: attempt to access beyond end of device [ 78.261142][ T6126] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 78.264757][ T6123] Node 0 active_anon:16692kB inactive_anon:20kB active_file:35576kB inactive_file:9160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115624kB dirty:1104kB writeback:0kB shmem:764kB kernel_stack:4368kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.297530][ T6126] syz.0.986: attempt to access beyond end of device [ 78.297530][ T6126] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 78.301291][ T6123] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 78.359221][ T6129] batadv_slave_1: entered promiscuous mode [ 78.361804][ T6123] lowmem_reserve[]: [ 78.396721][ T6129] batadv_slave_1: left promiscuous mode [ 78.440507][ T6123] 0 2883 7862 7862 [ 78.440547][ T6123] Node 0 DMA32 free:2949156kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 78.469826][ T6126] syz.0.986: attempt to access beyond end of device [ 78.469826][ T6126] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 78.481297][ T6123] lowmem_reserve[]: 0 0 4978 4978 [ 78.481341][ T6123] Node 0 Normal free:4517460kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16808kB inactive_anon:20kB active_file:35576kB inactive_file:9044kB unevictable:116kB writepending:988kB zspages:0kB present:5242880kB managed:5098240kB mlocked:116kB bounce:0kB free_pcp:129460kB local_pcp:127804kB free_cma:0kB [ 78.627561][ T6123] lowmem_reserve[]: 0 0 0 0 [ 78.632180][ T6123] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 78.645006][ T6123] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949156kB [ 78.661283][ T6123] Node 0 Normal: 204*4kB (ME) 201*8kB (ME) 119*16kB (UME) 78*32kB (M) 50*64kB (UME) 34*128kB (UME) 44*256kB (UM) 56*512kB (UM) 36*1024kB (UM) 17*2048kB (UME) 1072*4096kB (UM) = 4516904kB [ 78.680055][ T6123] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 78.689436][ T6123] 11344 total pagecache pages [ 78.694157][ T6123] 5 pages in swap cache [ 78.698317][ T6123] Free swap = 124976kB [ 78.702667][ T6123] Total swap = 124996kB [ 78.706837][ T6123] 2097051 pages RAM [ 78.710668][ T6123] 0 pages HighMem/MovableOnly [ 78.715514][ T6123] 80479 pages reserved [ 78.903537][ T6148] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 78.946212][ T6148] macsec1: entered promiscuous mode [ 78.951484][ T6148] gretap0: entered promiscuous mode [ 78.956889][ T6148] macsec1: entered allmulticast mode [ 78.962279][ T6148] gretap0: entered allmulticast mode [ 78.990196][ T6148] gretap0: left allmulticast mode [ 78.995530][ T6148] gretap0: left promiscuous mode [ 79.046859][ T6155] loop2: detected capacity change from 0 to 1024 [ 79.055220][ T6156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1000'. [ 79.076553][ T6155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.192188][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.349000][ T6174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1007'. [ 79.358171][ T6174] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1007'. [ 79.416675][ T6174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1007'. [ 79.455160][ T6174] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1007'. [ 79.653304][ T6189] loop1: detected capacity change from 0 to 1024 [ 79.686547][ T6189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.722474][ T6189] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1013: Allocating blocks 449-513 which overlap fs metadata [ 79.749371][ T6188] EXT4-fs (loop1): pa ffff888106e575b0: logic 48, phys. 177, len 21 [ 79.757571][ T6188] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 79.850758][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.287770][ T6213] loop0: detected capacity change from 0 to 512 [ 80.299709][ T6213] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.358420][ T6213] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 80.376811][ T6213] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1022: attempt to clear invalid blocks 2 len 1 [ 80.393640][ T6213] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 80.408683][ T6213] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1022: invalid indirect mapped block 1819239214 (level 0) [ 80.423526][ T6213] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1022: invalid indirect mapped block 1819239214 (level 1) [ 80.438487][ T6213] EXT4-fs (loop0): 1 truncate cleaned up [ 80.444797][ T6213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.460945][ T6213] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.1022: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 80.483249][ T6213] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.1022: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 80.509208][ T6225] loop2: detected capacity change from 0 to 1024 [ 80.530786][ T6225] ext2: Bad value for 'mb_optimize_scan' [ 80.538372][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.006185][ T6244] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 81.204714][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 81.204733][ T29] audit: type=1400 audit(1760465122.219:3245): avc: denied { getopt } for pid=6251 comm="syz.0.1037" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.250637][ T6254] loop0: detected capacity change from 0 to 256 [ 81.257457][ T6254] vfat: Deprecated parameter 'posix' [ 81.262826][ T6254] FAT-fs: "posix" option is obsolete, not supported now [ 81.390173][ T6268] pimreg: entered allmulticast mode [ 81.409334][ T6268] pimreg: left allmulticast mode [ 81.561137][ T6284] loop1: detected capacity change from 0 to 1024 [ 81.568733][ T6284] ext2: Bad value for 'mb_optimize_scan' [ 81.703461][ T29] audit: type=1326 audit(1760465122.719:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 81.742636][ T29] audit: type=1326 audit(1760465122.739:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 81.766376][ T29] audit: type=1326 audit(1760465122.739:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 81.790635][ T29] audit: type=1326 audit(1760465122.739:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 81.814910][ T29] audit: type=1326 audit(1760465122.739:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 81.823628][ T6297] loop6: detected capacity change from 0 to 8192 [ 81.838370][ T29] audit: type=1326 audit(1760465122.739:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 81.838410][ T29] audit: type=1326 audit(1760465122.739:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 81.838439][ T29] audit: type=1326 audit(1760465122.739:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 81.916118][ T29] audit: type=1326 audit(1760465122.739:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6293 comm="syz.6.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 81.959724][ T6299] syz_tun: entered allmulticast mode [ 81.966053][ T6299] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 81.974663][ T6299] mroute: pending queue full, dropping entries [ 81.981331][ T6299] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 81.989952][ T6299] mroute: pending queue full, dropping entries [ 81.996979][ T6298] syz_tun: left allmulticast mode [ 82.380387][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1062'. [ 82.394549][ T6306] lo speed is unknown, defaulting to 1000 [ 82.394734][ T6310] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1062'. [ 82.600270][ T6319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.068112][ T6339] pimreg: entered allmulticast mode [ 83.076193][ T6339] pimreg: left allmulticast mode [ 83.506115][ T6349] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 83.514139][ T6349] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.1078'. [ 83.570777][ T6355] loop1: detected capacity change from 0 to 1024 [ 83.578712][ T6355] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 83.744305][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1088'. [ 83.753508][ T6370] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1088'. [ 83.792806][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1088'. [ 83.813020][ T6370] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1088'. [ 83.822130][ T6370] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1088'. [ 84.153098][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1100'. [ 84.333744][ T6407] loop6: detected capacity change from 0 to 1024 [ 84.363522][ T6407] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 84.373809][ T6411] loop2: detected capacity change from 0 to 1024 [ 84.408633][ T6411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.487092][ T6420] veth0_to_team: entered promiscuous mode [ 84.544713][ T6411] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.1106: Allocating blocks 449-513 which overlap fs metadata [ 84.726664][ T6433] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 84.758860][ T6410] EXT4-fs (loop2): pa ffff888106e57540: logic 48, phys. 177, len 21 [ 84.767056][ T6410] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 84.827238][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.884620][ T6440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.894738][ T6440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.168502][ T6467] loop6: detected capacity change from 0 to 128 [ 85.363884][ T6476] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 85.372778][ T6476] ref_ctr increment failed for inode: 0xd4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881040d5640 [ 85.673838][ T6501] loop3: detected capacity change from 0 to 1024 [ 85.687098][ T6501] EXT4-fs: Ignoring removed orlov option [ 85.692985][ T6501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.720404][ T6501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.769184][ T6513] loop6: detected capacity change from 0 to 128 [ 85.934961][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.390667][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 86.390685][ T29] audit: type=1400 audit(1760465127.399:3362): avc: denied { write } for pid=6552 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 86.435210][ T29] audit: type=1326 audit(1760465127.449:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 86.438796][ T6555] loop2: detected capacity change from 0 to 1024 [ 86.466529][ T29] audit: type=1326 audit(1760465127.449:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 86.490174][ T29] audit: type=1326 audit(1760465127.449:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 86.513753][ T29] audit: type=1326 audit(1760465127.449:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 86.537383][ T29] audit: type=1326 audit(1760465127.449:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 86.560970][ T29] audit: type=1326 audit(1760465127.449:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 86.584480][ T29] audit: type=1326 audit(1760465127.449:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 86.608457][ T29] audit: type=1326 audit(1760465127.449:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 86.633004][ T29] audit: type=1326 audit(1760465127.649:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.1.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 86.673512][ T6555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.738131][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 86.747391][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.762883][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.797515][ T6574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.855522][ T6578] loop1: detected capacity change from 0 to 1024 [ 86.863284][ T6578] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.879084][ T6578] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1176: Invalid block bitmap block 0 in block_group 0 [ 86.905991][ T6578] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1176: Failed to acquire dquot type 0 [ 86.920415][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.937636][ T6574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.949856][ T6578] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.1176: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.972851][ T6578] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1176: Invalid inode bitmap blk 0 in block_group 0 [ 86.992940][ T4820] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:58: Failed to release dquot type 0 [ 87.010747][ T6578] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 87.041862][ T6578] EXT4-fs (loop1): 1 orphan inode deleted [ 87.057474][ T6578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.071439][ T6574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.136599][ T6574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.222212][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.232659][ T4801] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.244103][ T4801] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.252401][ T4801] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.266577][ T4801] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.283297][ T2966] IPVS: starting estimator thread 0... [ 87.372992][ T6594] IPVS: using max 2304 ests per chain, 115200 per kthread [ 87.428850][ T6612] pim6reg1: entered promiscuous mode [ 87.434311][ T6612] pim6reg1: entered allmulticast mode [ 87.808067][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1196'. [ 88.036795][ T6630] loop6: detected capacity change from 0 to 764 [ 88.083266][ T6632] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.115801][ T6632] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.144754][ T6636] bridge: RTM_NEWNEIGH with invalid ether address [ 88.196612][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 88.226854][ T6632] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.297182][ T6632] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.378787][ T52] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.406076][ T52] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.436799][ T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.459718][ T52] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.686997][ T6671] wg2: entered promiscuous mode [ 88.691940][ T6671] wg2: entered allmulticast mode [ 88.738720][ T6676] netlink: 'syz.2.1222': attribute type 21 has an invalid length. [ 89.483266][ T6697] loop6: detected capacity change from 0 to 128 [ 89.502495][ T6697] bond1: option miimon: invalid value (18446744073709551615) [ 89.509967][ T6697] bond1: option miimon: allowed values 0 - 2147483647 [ 89.549025][ T6697] bond1 (unregistering): Released all slaves [ 89.766054][ T6712] 9pnet_fd: Insufficient options for proto=fd [ 89.818993][ T6717] loop0: detected capacity change from 0 to 1024 [ 89.826511][ T6717] EXT4-fs: Ignoring removed orlov option [ 89.844566][ T6717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.861284][ T6717] __nla_validate_parse: 6 callbacks suppressed [ 89.861342][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1239'. [ 89.901480][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.951263][ T6730] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1243'. [ 89.989102][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 90.122735][ T6734] lo speed is unknown, defaulting to 1000 [ 90.123008][ T6726] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 90.681281][ T6754] lo speed is unknown, defaulting to 1000 [ 90.756997][ T6761] loop6: detected capacity change from 0 to 512 [ 90.809570][ T6765] vlan2: entered allmulticast mode [ 91.163331][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1278'. [ 91.172446][ T6789] IPVS: Unknown mcast interface: ipvlan1 [ 91.241735][ T6792] lo speed is unknown, defaulting to 1000 [ 91.345026][ T6797] loop2: detected capacity change from 0 to 128 [ 91.360182][ T6797] bond2: option miimon: invalid value (18446744073709551615) [ 91.367774][ T6797] bond2: option miimon: allowed values 0 - 2147483647 [ 91.380079][ T6797] bond2 (unregistering): Released all slaves [ 91.568461][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 91.568480][ T29] audit: type=1326 audit(1760465132.579:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 91.622662][ T29] audit: type=1326 audit(1760465132.579:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 91.646390][ T29] audit: type=1326 audit(1760465132.579:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 91.669951][ T29] audit: type=1326 audit(1760465132.579:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 91.693430][ T29] audit: type=1326 audit(1760465132.579:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 91.716953][ T29] audit: type=1326 audit(1760465132.579:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 91.740538][ T29] audit: type=1326 audit(1760465132.579:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 91.764180][ T29] audit: type=1326 audit(1760465132.579:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 91.787676][ T29] audit: type=1326 audit(1760465132.579:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 91.811176][ T29] audit: type=1326 audit(1760465132.579:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 92.074684][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1289'. [ 92.170311][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 92.189940][ T6850] bridge0: entered promiscuous mode [ 92.207291][ T6850] macvtap1: entered allmulticast mode [ 92.212792][ T6850] bridge0: entered allmulticast mode [ 92.254670][ T6859] loop6: detected capacity change from 0 to 1024 [ 92.261601][ T6859] EXT4-fs: Ignoring removed orlov option [ 92.290987][ T6859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.320689][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1297'. [ 92.413730][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.502663][ T6888] netlink: 'syz.3.1303': attribute type 4 has an invalid length. [ 93.141515][ T6989] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1312'. [ 93.141610][ T6991] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1313'. [ 93.205591][ T6997] loop2: detected capacity change from 0 to 512 [ 93.212481][ T6997] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.582961][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1326'. [ 93.983393][ T7042] loop3: detected capacity change from 0 to 128 [ 94.100017][ T7047] loop3: detected capacity change from 0 to 1024 [ 94.126490][ T7047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.150447][ T7044] lo speed is unknown, defaulting to 1000 [ 94.219596][ T7047] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1336: Allocating blocks 449-513 which overlap fs metadata [ 94.248421][ T7046] EXT4-fs (loop3): pa ffff888106e57540: logic 48, phys. 177, len 21 [ 94.256560][ T7046] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 94.277111][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.311814][ T7063] wg2: left promiscuous mode [ 94.316494][ T7063] wg2: left allmulticast mode [ 94.329063][ T7063] wg2: entered promiscuous mode [ 94.334167][ T7063] wg2: entered allmulticast mode [ 94.713284][ T7079] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 94.786599][ T7083] sd 0:0:1:0: device reset [ 95.163820][ T7097] __nla_validate_parse: 1 callbacks suppressed [ 95.163841][ T7097] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.1356'. [ 95.993118][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 96.023261][ T7139] netlink: 'syz.0.1371': attribute type 4 has an invalid length. [ 96.112805][ T7146] loop3: detected capacity change from 0 to 512 [ 96.148068][ T7146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.180581][ T7146] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.209252][ T7152] netlink: 'syz.6.1376': attribute type 7 has an invalid length. [ 96.217197][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1376'. [ 96.281160][ T7146] netlink: 'syz.3.1374': attribute type 13 has an invalid length. [ 96.337355][ T7161] loop6: detected capacity change from 0 to 1024 [ 96.344285][ T7164] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 96.390793][ T7161] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.397352][ T7161] EXT4-fs: Ignoring removed bh option [ 96.407096][ T7167] loop2: detected capacity change from 0 to 2048 [ 96.425633][ T7161] ext3: Unknown parameter 'subj_type' [ 96.453057][ T7167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.488298][ T3314] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 96.512290][ T7146] bridge0: left allmulticast mode [ 96.530397][ T4786] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.573744][ T4786] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.625209][ T4786] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.657872][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 96.657891][ T29] audit: type=1400 audit(1760465137.669:3582): avc: denied { unlink } for pid=3314 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 96.658788][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.712732][ T4786] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.728091][ T29] audit: type=1326 audit(1760465137.739:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 96.751597][ T29] audit: type=1326 audit(1760465137.739:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 96.775073][ T29] audit: type=1326 audit(1760465137.739:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 96.790688][ T7181] netlink: 'syz.2.1383': attribute type 4 has an invalid length. [ 96.798769][ T29] audit: type=1326 audit(1760465137.739:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 96.829927][ T29] audit: type=1326 audit(1760465137.739:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 96.852316][ T23] lo speed is unknown, defaulting to 1000 [ 96.855657][ T29] audit: type=1326 audit(1760465137.869:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 96.859301][ T23] syz0: Port: 1 Link ACTIVE [ 96.882614][ T29] audit: type=1326 audit(1760465137.869:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 96.910525][ T29] audit: type=1326 audit(1760465137.869:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 96.962176][ T7175] loop6: detected capacity change from 0 to 4096 [ 97.051452][ T29] audit: type=1326 audit(1760465137.949:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdde386eec9 code=0x7ffc0000 [ 97.052260][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.110741][ T7175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.129401][ T7192] team0: Port device vlan0 added [ 97.346691][ T7204] lo speed is unknown, defaulting to 1000 [ 97.372774][ T7198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1392'. [ 97.381792][ T7198] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1392'. [ 97.390826][ T7198] netlink: 'syz.3.1392': attribute type 2 has an invalid length. [ 97.398763][ T7198] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1392'. [ 97.545669][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.586394][ T7214] netlink: 'syz.6.1399': attribute type 4 has an invalid length. [ 97.731392][ T7227] netlink: 'syz.6.1405': attribute type 30 has an invalid length. [ 98.714121][ T7288] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1432'. [ 99.078751][ T7309] loop1: detected capacity change from 0 to 1024 [ 99.087437][ T7309] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.093975][ T7309] EXT4-fs: Ignoring removed bh option [ 99.099997][ T7309] ext3: Unknown parameter 'subj_type' [ 99.150989][ T7317] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1440'. [ 99.713586][ T7341] syz.2.1451 uses obsolete (PF_INET,SOCK_PACKET) [ 100.602332][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 100.773953][ T7485] Falling back ldisc for ttyS3. [ 101.522019][ T7534] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 101.530527][ T7534] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 101.555047][ T7534] netlink: '+}[@': attribute type 1 has an invalid length. [ 101.562347][ T7534] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 101.737394][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 101.737425][ T29] audit: type=1326 audit(1760465142.749:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 101.776795][ T29] audit: type=1326 audit(1760465142.749:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 101.800570][ T29] audit: type=1326 audit(1760465142.789:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 101.824305][ T29] audit: type=1326 audit(1760465142.789:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 101.848266][ T29] audit: type=1326 audit(1760465142.789:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 101.872147][ T29] audit: type=1326 audit(1760465142.789:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 101.895805][ T29] audit: type=1326 audit(1760465142.789:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 101.919263][ T29] audit: type=1326 audit(1760465142.789:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 101.942760][ T29] audit: type=1326 audit(1760465142.789:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 101.982934][ T29] audit: type=1326 audit(1760465142.789:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 102.603551][ T7599] loop0: detected capacity change from 0 to 128 [ 102.755521][ T7553] syz.2.1494 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 102.766643][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.2.1494 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 102.766684][ T7553] Tainted: [W]=WARN [ 102.766728][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.766744][ T7553] Call Trace: [ 102.766752][ T7553] [ 102.766762][ T7553] __dump_stack+0x1d/0x30 [ 102.766787][ T7553] dump_stack_lvl+0xe8/0x140 [ 102.766812][ T7553] dump_stack+0x15/0x1b [ 102.766905][ T7553] dump_header+0x81/0x220 [ 102.766940][ T7553] oom_kill_process+0x342/0x400 [ 102.767042][ T7553] out_of_memory+0x979/0xb80 [ 102.767081][ T7553] try_charge_memcg+0x610/0xa10 [ 102.767173][ T7553] charge_memcg+0x51/0xc0 [ 102.767194][ T7553] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 102.767221][ T7553] __read_swap_cache_async+0x17b/0x2d0 [ 102.767270][ T7553] swap_cluster_readahead+0x262/0x3c0 [ 102.767374][ T7553] swapin_readahead+0xde/0x6f0 [ 102.767412][ T7553] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 102.767522][ T7553] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 102.767559][ T7553] ? __rcu_read_unlock+0x4f/0x70 [ 102.767637][ T7553] ? swap_cache_get_folio+0x277/0x280 [ 102.767678][ T7553] do_swap_page+0x2ae/0x2370 [ 102.767704][ T7553] ? css_rstat_updated+0xb7/0x240 [ 102.767744][ T7553] ? __pfx_default_wake_function+0x10/0x10 [ 102.767817][ T7553] handle_mm_fault+0x9a5/0x2be0 [ 102.767849][ T7553] ? vma_start_read+0x141/0x1f0 [ 102.767937][ T7553] do_user_addr_fault+0x630/0x1080 [ 102.767965][ T7553] ? fpregs_restore_userregs+0xad/0x1d0 [ 102.768039][ T7553] ? switch_fpu_return+0xe/0x20 [ 102.768076][ T7553] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 102.768143][ T7553] exc_page_fault+0x62/0xa0 [ 102.768170][ T7553] asm_exc_page_fault+0x26/0x30 [ 102.768197][ T7553] RIP: 0033:0x7fa8dea857cc [ 102.768228][ T7553] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 102.768294][ T7553] RSP: 002b:00007ffc9d47dea0 EFLAGS: 00010202 [ 102.768317][ T7553] RAX: 0000000000000000 RBX: 00007fa8dee05fa0 RCX: 0000000000000000 [ 102.768353][ T7553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555568a8a808 [ 102.768378][ T7553] RBP: 00007fa8dee07da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 102.768395][ T7553] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000191b6 [ 102.768415][ T7553] R13: 00007ffc9d47df90 R14: ffffffffffffffff R15: 00007ffc9d47dfb0 [ 102.768440][ T7553] [ 102.768471][ T7553] memory: usage 307200kB, limit 307200kB, failcnt 98 [ 103.016827][ T7553] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 103.024774][ T7553] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 103.032228][ T7553] Memory cgroup stats for /syz2: [ 103.067993][ T7553] cache 0 [ 103.075981][ T7553] rss 0 [ 103.078848][ T7553] shmem 0 [ 103.081826][ T7553] mapped_file 0 [ 103.085425][ T7553] dirty 0 [ 103.088382][ T7553] writeback 0 [ 103.091687][ T7553] workingset_refault_anon 1911 [ 103.096498][ T7553] workingset_refault_file 32 [ 103.101123][ T7553] swap 188416 [ 103.104461][ T7553] swapcached 20480 [ 103.108200][ T7553] pgpgin 46504 [ 103.111667][ T7553] pgpgout 46497 [ 103.115186][ T7553] pgfault 68133 [ 103.118671][ T7553] pgmajfault 249 [ 103.122245][ T7553] inactive_anon 20480 [ 103.126284][ T7553] active_anon 0 [ 103.129761][ T7553] inactive_file 8192 [ 103.133702][ T7553] active_file 0 [ 103.137186][ T7553] unevictable 0 [ 103.140673][ T7553] hierarchical_memory_limit 314572800 [ 103.146117][ T7553] hierarchical_memsw_limit 9223372036854771712 [ 103.152291][ T7553] total_cache 0 [ 103.155800][ T7553] total_rss 0 [ 103.159106][ T7553] total_shmem 0 [ 103.162626][ T7553] total_mapped_file 0 [ 103.166643][ T7553] total_dirty 0 [ 103.170121][ T7553] total_writeback 0 [ 103.173971][ T7553] total_workingset_refault_anon 1911 [ 103.179360][ T7553] total_workingset_refault_file 32 [ 103.184544][ T7553] total_swap 188416 [ 103.188411][ T7553] total_swapcached 20480 [ 103.192725][ T7553] total_pgpgin 46504 [ 103.196645][ T7553] total_pgpgout 46497 [ 103.200648][ T7553] total_pgfault 68133 [ 103.204679][ T7553] total_pgmajfault 249 [ 103.208933][ T7553] total_inactive_anon 20480 [ 103.213613][ T7553] total_active_anon 0 [ 103.217614][ T7553] total_inactive_file 8192 [ 103.222255][ T7553] total_active_file 0 [ 103.226318][ T7553] total_unevictable 0 [ 103.230330][ T7553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1494,pid=7553,uid=0 [ 103.245067][ T7553] Memory cgroup out of memory: Killed process 7553 (syz.2.1494) total-vm:95872kB, anon-rss:1140kB, file-rss:22060kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 103.430484][ T7677] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 103.439082][ T7677] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 103.450998][ T7677] netlink: '+}[@': attribute type 1 has an invalid length. [ 103.458306][ T7677] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 103.705026][ T7700] netlink: 'syz.3.1510': attribute type 12 has an invalid length. [ 103.768160][ T7554] syz.2.1494 (7554) used greatest stack depth: 7240 bytes left [ 103.866676][ T7715] loop2: detected capacity change from 0 to 4096 [ 103.916043][ T7715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.996914][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 104.115018][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.190837][ T7743] loop2: detected capacity change from 0 to 512 [ 104.244155][ T7743] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1518: casefold flag without casefold feature [ 104.268221][ T7743] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1518: couldn't read orphan inode 15 (err -117) [ 104.449677][ T7743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.475429][ T7749] loop1: detected capacity change from 0 to 512 [ 104.590804][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.671891][ T7756] bridge: RTM_NEWNEIGH with invalid ether address [ 104.774268][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'. [ 104.799734][ T7761] loop2: detected capacity change from 0 to 1024 [ 104.823155][ T7761] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.835892][ T7763] loop6: detected capacity change from 0 to 512 [ 104.862850][ T7761] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.873896][ T7761] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 104.885519][ T7761] JBD2: no valid journal superblock found [ 104.891310][ T7761] EXT4-fs (loop2): Could not load journal inode [ 104.892727][ T7763] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 104.987006][ T7763] EXT4-fs (loop6): 1 truncate cleaned up [ 104.993734][ T7763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.113374][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.243525][ T7773] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 105.714127][ T7786] lo speed is unknown, defaulting to 1000 [ 105.764218][ T7796] bridge0: port 3(batadv1) entered blocking state [ 105.770704][ T7796] bridge0: port 3(batadv1) entered disabled state [ 105.782601][ T7796] batadv1: entered allmulticast mode [ 105.789994][ T7796] batadv1: entered promiscuous mode [ 105.840209][ T7798] xt_hashlimit: max too large, truncated to 1048576 [ 105.913514][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1542'. [ 105.923872][ T7804] loop6: detected capacity change from 0 to 512 [ 105.970935][ T7804] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1544: casefold flag without casefold feature [ 106.032789][ T7804] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1544: couldn't read orphan inode 15 (err -117) [ 106.075773][ T7811] bridge0: entered promiscuous mode [ 106.093254][ T7811] macvtap1: entered allmulticast mode [ 106.098755][ T7811] bridge0: entered allmulticast mode [ 106.123559][ T7804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.161185][ T7811] bridge0: port 3(macvtap1) entered blocking state [ 106.167834][ T7811] bridge0: port 3(macvtap1) entered disabled state [ 106.194703][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.206947][ T7811] bridge0: left allmulticast mode [ 106.212061][ T7811] bridge0: left promiscuous mode [ 106.262714][ T4798] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 106.272016][ T4798] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 106.577896][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 106.664357][ T7851] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.701956][ T7848] team1: entered promiscuous mode [ 106.707111][ T7848] team1: entered allmulticast mode [ 106.722299][ T7851] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 106.745162][ T7848] 8021q: adding VLAN 0 to HW filter on device team1 [ 106.824615][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 106.960565][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 106.960583][ T29] audit: type=1326 audit(1760465147.969:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 107.072551][ T29] audit: type=1326 audit(1760465147.999:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 107.096102][ T29] audit: type=1326 audit(1760465147.999:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 107.119661][ T29] audit: type=1326 audit(1760465147.999:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 107.143198][ T29] audit: type=1326 audit(1760465148.019:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 107.166750][ T29] audit: type=1326 audit(1760465148.019:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 107.190096][ T29] audit: type=1326 audit(1760465148.019:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.3.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 107.307902][ T7867] lo speed is unknown, defaulting to 1000 [ 107.319920][ T7868] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.1573'. [ 107.444049][ T7880] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 107.574222][ T29] audit: type=1326 audit(1760465148.579:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.6.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 107.597906][ T29] audit: type=1326 audit(1760465148.579:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.6.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 107.621459][ T29] audit: type=1326 audit(1760465148.589:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.6.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 107.726217][ T7897] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1585'. [ 107.806982][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1572'. [ 107.817740][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 108.143546][ T7928] loop3: detected capacity change from 0 to 164 [ 108.175583][ T7928] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 108.731121][ T7944] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1603'. [ 109.037878][ T7971] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1616'. [ 109.069529][ T7973] loop2: detected capacity change from 0 to 512 [ 109.076296][ T7973] EXT4-fs: Ignoring removed nobh option [ 109.082183][ T7973] EXT4-fs: quotafile must be on filesystem root [ 109.227804][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 109.555564][ T8006] loop6: detected capacity change from 0 to 512 [ 109.594703][ T8006] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1631: bad orphan inode 11862016 [ 109.616328][ T8006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 109.651148][ T8006] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.696665][ T8016] loop3: detected capacity change from 0 to 512 [ 109.735813][ T8016] EXT4-fs: Ignoring removed nobh option [ 109.741546][ T8016] EXT4-fs: quotafile must be on filesystem root [ 109.996589][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 110.197370][ T8032] netlink: 'syz.6.1639': attribute type 1 has an invalid length. [ 110.606194][ T8041] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 110.765029][ T8046] netlink: 'syz.6.1645': attribute type 10 has an invalid length. [ 111.021437][ T8050] __nla_validate_parse: 2 callbacks suppressed [ 111.021456][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'. [ 111.049365][ T8046] team0: Port device geneve1 added [ 111.168239][ T8058] netlink: 'syz.6.1651': attribute type 10 has an invalid length. [ 111.218885][ T8062] netlink: 'syz.6.1651': attribute type 10 has an invalid length. [ 111.234140][ T8058] team0: Port device dummy0 added [ 111.244963][ T8062] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.272739][ T8062] team0: Failed to send options change via netlink (err -105) [ 111.326953][ T8062] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 111.368145][ T8062] team0: Port device dummy0 removed [ 111.396578][ T8062] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.507552][ T8075] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 111.791970][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1667'. [ 111.890166][ T8107] netlink: 332 bytes leftover after parsing attributes in process `wÞ££‘'. [ 111.917470][ T8107] netlink: 'wÞ££‘': attribute type 9 has an invalid length. [ 111.925076][ T8107] netlink: 108 bytes leftover after parsing attributes in process `wÞ££‘'. [ 111.933888][ T8107] netlink: 32 bytes leftover after parsing attributes in process `wÞ££‘'. [ 111.981303][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 111.981383][ T29] audit: type=1326 audit(1760465152.989:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 112.011123][ T29] audit: type=1326 audit(1760465152.989:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 112.034666][ T29] audit: type=1326 audit(1760465152.989:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 112.058186][ T29] audit: type=1326 audit(1760465152.989:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.2.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 112.144763][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'. [ 112.148218][ T8116] loop6: detected capacity change from 0 to 2048 [ 112.163614][ T29] audit: type=1400 audit(1760465153.179:4346): avc: denied { load_policy } for pid=8112 comm="syz.1.1673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.165814][ T8113] SELinux: failed to load policy [ 112.192994][ T8116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.228631][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.311784][ T8124] lo speed is unknown, defaulting to 1000 [ 112.390722][ T29] audit: type=1326 audit(1760465153.399:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 112.414366][ T29] audit: type=1326 audit(1760465153.399:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 112.438134][ T29] audit: type=1326 audit(1760465153.399:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 112.461757][ T29] audit: type=1326 audit(1760465153.399:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 112.485246][ T29] audit: type=1326 audit(1760465153.399:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.3.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 112.617407][ T8143] loop2: detected capacity change from 0 to 1024 [ 112.733575][ T8147] loop6: detected capacity change from 0 to 512 [ 112.773206][ T8147] EXT4-fs (loop6): orphan cleanup on readonly fs [ 112.783539][ T8152] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.785744][ T8147] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.1686: EA inode hash validation failed [ 112.803423][ T8147] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.817162][ T8152] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.818933][ T8147] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.1686: corrupted inode contents [ 112.840868][ T8147] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #15: comm syz.6.1686: mark_inode_dirty error [ 112.851063][ T8155] netlink: 'syz.1.1689': attribute type 1 has an invalid length. [ 112.858053][ T8147] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #15: comm syz.6.1686: corrupted inode contents [ 112.860052][ T8155] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.1689'. [ 112.881553][ T8147] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.1686: mark_inode_dirty error [ 112.896980][ T8147] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.1686: mark inode dirty (error -117) [ 112.911099][ T8147] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 112.920540][ T8147] EXT4-fs (loop6): 1 orphan inode deleted [ 112.926970][ T8147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.001442][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.036292][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1694'. [ 113.050380][ T8165] loop2: detected capacity change from 0 to 4096 [ 113.057574][ T8165] EXT4-fs: test_dummy_encryption option not supported [ 113.114108][ T8165] SELinux: failed to load policy [ 113.188627][ T8180] netlink: '+}[@': attribute type 10 has an invalid length. [ 113.202927][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 113.251882][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 113.490628][ T4758] Bluetooth: hci0: Frame reassembly failed (-90) [ 113.515803][ T8218] netlink: 'syz.3.1716': attribute type 3 has an invalid length. [ 113.540992][ T8220] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 113.745776][ T8233] loop3: detected capacity change from 0 to 1024 [ 113.752729][ T8233] EXT4-fs: Ignoring removed bh option [ 113.758523][ T8233] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 113.774109][ T8233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.813444][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.836761][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1723'. [ 113.931845][ T8244] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 113.967605][ T8244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.979467][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 113.993378][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.000837][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.008376][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.015911][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.023390][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.030822][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.038366][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.045824][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.053327][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.060882][ T10] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 114.084240][ T8244] bond1 (unregistering): Released all slaves [ 114.095780][ T10] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 114.144428][ T8254] loop1: detected capacity change from 0 to 512 [ 114.169097][ T8254] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.171430][ T8256] tmpfs: Bad value for 'mpol' [ 114.185779][ T8254] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1729: EA inode hash validation failed [ 114.213412][ T8254] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.1729: corrupted inode contents [ 114.244663][ T8254] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.1729: mark_inode_dirty error [ 114.256568][ T8254] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.1729: corrupted inode contents [ 114.272909][ T8254] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.1729: mark_inode_dirty error [ 114.288991][ T8254] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.1729: mark inode dirty (error -117) [ 114.307801][ T8254] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 114.317070][ T8254] EXT4-fs (loop1): 1 orphan inode deleted [ 114.323521][ T8254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.426108][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.798956][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.813795][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.919262][ T8272] netlink: 'syz.3.1736': attribute type 10 has an invalid length. [ 114.929034][ T8272] team0: Port device dummy0 added [ 114.936325][ T8272] team0: Failed to send options change via netlink (err -105) [ 114.944123][ T8272] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.953622][ T8272] team0: Port device dummy0 removed [ 114.961355][ T8272] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.309938][ T8299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8299 comm=syz.2.1748 [ 115.374015][ T8303] vlan2: entered allmulticast mode [ 115.379492][ T8303] dummy0: entered allmulticast mode [ 115.562628][ T8215] Bluetooth: hci0: command 0x1003 tx timeout [ 115.563638][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.661505][ T8325] tipc: Started in network mode [ 115.666756][ T8325] tipc: Node identity ac14140f, cluster identity 4711 [ 115.681212][ T8325] tipc: New replicast peer: 255.255.255.83 [ 115.687497][ T8325] tipc: Enabled bearer , priority 10 [ 115.759209][ T8332] SELinux: failed to load policy [ 116.482749][ T8391] validate_nla: 1 callbacks suppressed [ 116.482769][ T8391] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 116.510300][ T8391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.529659][ T8396] loop6: detected capacity change from 0 to 2048 [ 116.538375][ T8391] __nla_validate_parse: 1 callbacks suppressed [ 116.538421][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 116.556636][ T8396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.563183][ T8391] bond2 (unregistering): Released all slaves [ 116.630007][ T8402] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 116.645043][ T8402] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 116.657460][ T8402] EXT4-fs (loop6): This should not happen!! Data will be lost [ 116.657460][ T8402] [ 116.667335][ T8402] EXT4-fs (loop6): Total free blocks count 0 [ 116.673380][ T8402] EXT4-fs (loop6): Free/Dirty block details [ 116.679361][ T8402] EXT4-fs (loop6): free_blocks=2415919504 [ 116.685147][ T8402] EXT4-fs (loop6): dirty_blocks=176 [ 116.690617][ T8402] EXT4-fs (loop6): Block reservation details [ 116.696673][ T8402] EXT4-fs (loop6): i_reserved_data_blocks=11 [ 116.802617][ T3422] tipc: Node number set to 2886997007 [ 117.200231][ T8425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1800'. [ 117.252364][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 117.252381][ T29] audit: type=1326 audit(1760465158.259:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.255949][ T8427] loop2: detected capacity change from 0 to 2048 [ 117.261360][ T29] audit: type=1326 audit(1760465158.269:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.331108][ T29] audit: type=1326 audit(1760465158.329:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.351532][ T8435] loop0: detected capacity change from 0 to 512 [ 117.354686][ T29] audit: type=1326 audit(1760465158.329:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.384406][ T29] audit: type=1326 audit(1760465158.329:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.399492][ T8435] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.408125][ T29] audit: type=1326 audit(1760465158.329:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.425293][ T8427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.443364][ T29] audit: type=1326 audit(1760465158.329:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.478906][ T29] audit: type=1326 audit(1760465158.329:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.502366][ T29] audit: type=1326 audit(1760465158.329:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.526099][ T29] audit: type=1326 audit(1760465158.329:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8430 comm="syz.0.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0bd7aceec9 code=0x7ffc0000 [ 117.557881][ T8435] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 117.575795][ T8435] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 117.584092][ T8435] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 117.630361][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.642137][ T4786] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 160 with max blocks 2048 with error 28 [ 117.752694][ T8445] netlink: 5388 bytes leftover after parsing attributes in process `syz.1.1810'. [ 117.887086][ T8454] vlan1: entered allmulticast mode [ 117.892575][ T8454] dummy0: entered allmulticast mode [ 118.027401][ T8471] loop6: detected capacity change from 0 to 1024 [ 118.035798][ T8471] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 118.046818][ T8471] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 118.058723][ T8471] JBD2: no valid journal superblock found [ 118.064695][ T8471] EXT4-fs (loop6): Could not load journal inode [ 118.071970][ T8470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8470 comm=syz.0.1818 [ 118.300024][ T8494] loop6: detected capacity change from 0 to 2048 [ 118.332325][ T8496] netlink: 'syz.2.1832': attribute type 1 has an invalid length. [ 118.351379][ T8496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.377195][ T8494] Alternate GPT is invalid, using primary GPT. [ 118.383093][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'. [ 118.383878][ T8494] loop6: p2 p3 p7 [ 118.411964][ T8496] bond2 (unregistering): Released all slaves [ 118.535390][ T8507] lo speed is unknown, defaulting to 1000 [ 118.703180][ T8534] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.1846'. [ 118.712352][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 118.734251][ T8536] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1849'. [ 118.743423][ T8536] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1849'. [ 118.756717][ T8536] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1849'. [ 118.768483][ T8539] netlink: 'syz.2.1850': attribute type 3 has an invalid length. [ 118.776481][ T8539] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1850'. [ 119.577284][ T8568] lo speed is unknown, defaulting to 1000 [ 119.639092][ T8575] loop6: detected capacity change from 0 to 512 [ 119.652703][ T8575] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 120.531033][ T8607] loop2: detected capacity change from 0 to 512 [ 120.563425][ T8607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.596223][ T8607] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.644666][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.825266][ T8633] vhci_hcd: invalid port number 96 [ 120.830460][ T8633] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 120.838565][ T8640] loop6: detected capacity change from 0 to 1024 [ 120.846894][ T8640] EXT4-fs: Ignoring removed bh option [ 120.855138][ T8640] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 120.884365][ T8640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.901252][ T8648] bridge0: port 3(gretap0) entered blocking state [ 120.907929][ T8648] bridge0: port 3(gretap0) entered disabled state [ 120.930524][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.946963][ T8648] gretap0: entered allmulticast mode [ 120.953318][ T8648] gretap0: entered promiscuous mode [ 120.960701][ T8648] gretap0: left allmulticast mode [ 120.966071][ T8648] gretap0: left promiscuous mode [ 120.971343][ T8648] bridge0: port 3(gretap0) entered disabled state [ 121.211661][ T8677] loop3: detected capacity change from 0 to 512 [ 121.272936][ T8677] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 121.291180][ T8677] EXT4-fs (loop3): mount failed [ 121.597848][ T8716] __nla_validate_parse: 5 callbacks suppressed [ 121.597865][ T8716] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1927'. [ 121.613424][ T8716] IPVS: Unknown mcast interface: [ 121.639242][ T8714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8714 comm=syz.0.1926 [ 121.775811][ T8733] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1934'. [ 121.961450][ T8748] loop2: detected capacity change from 0 to 8192 [ 122.183864][ T8763] syz.6.1946: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 122.198733][ T8763] CPU: 0 UID: 0 PID: 8763 Comm: syz.6.1946 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.198770][ T8763] Tainted: [W]=WARN [ 122.198777][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.198796][ T8763] Call Trace: [ 122.198840][ T8763] [ 122.198966][ T8763] __dump_stack+0x1d/0x30 [ 122.198995][ T8763] dump_stack_lvl+0xe8/0x140 [ 122.199031][ T8763] dump_stack+0x15/0x1b [ 122.199132][ T8763] warn_alloc+0x12b/0x1a0 [ 122.199171][ T8763] ? __rcu_read_unlock+0x4f/0x70 [ 122.199280][ T8763] __vmalloc_node_range_noprof+0x9d/0xed0 [ 122.199326][ T8763] ? __futex_wait+0x1fa/0x260 [ 122.199354][ T8763] ? __pfx_futex_wake_mark+0x10/0x10 [ 122.199474][ T8763] ? __rcu_read_unlock+0x4f/0x70 [ 122.199509][ T8763] ? avc_has_perm_noaudit+0x1b1/0x200 [ 122.199598][ T8763] ? should_fail_ex+0x30/0x280 [ 122.199680][ T8763] ? xskq_create+0x36/0xe0 [ 122.199721][ T8763] vmalloc_user_noprof+0x7d/0xb0 [ 122.199764][ T8763] ? xskq_create+0x80/0xe0 [ 122.199820][ T8763] xskq_create+0x80/0xe0 [ 122.199847][ T8763] xsk_init_queue+0x95/0xf0 [ 122.199873][ T8763] xsk_setsockopt+0x477/0x640 [ 122.199906][ T8763] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.199942][ T8763] __sys_setsockopt+0x184/0x200 [ 122.200002][ T8763] __x64_sys_setsockopt+0x64/0x80 [ 122.200047][ T8763] x64_sys_call+0x20ec/0x3000 [ 122.200142][ T8763] do_syscall_64+0xd2/0x200 [ 122.200168][ T8763] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.200239][ T8763] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 122.200283][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.200391][ T8763] RIP: 0033:0x7fb31764eec9 [ 122.200413][ T8763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.200439][ T8763] RSP: 002b:00007fb3160af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.200466][ T8763] RAX: ffffffffffffffda RBX: 00007fb3178a5fa0 RCX: 00007fb31764eec9 [ 122.200479][ T8763] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 122.200534][ T8763] RBP: 00007fb3176d1f91 R08: 0000000000000004 R09: 0000000000000000 [ 122.200568][ T8763] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 122.200632][ T8763] R13: 00007fb3178a6038 R14: 00007fb3178a5fa0 R15: 00007ffc42341718 [ 122.200659][ T8763] [ 122.200756][ T8763] Mem-Info: [ 122.438352][ T8763] active_anon:27985 inactive_anon:11 isolated_anon:0 [ 122.438352][ T8763] active_file:25373 inactive_file:2278 isolated_file:0 [ 122.438352][ T8763] unevictable:8 dirty:317 writeback:0 [ 122.438352][ T8763] slab_reclaimable:3471 slab_unreclaimable:37974 [ 122.438352][ T8763] mapped:28873 shmem:18123 pagetables:1334 [ 122.438352][ T8763] sec_pagetables:0 bounce:0 [ 122.438352][ T8763] kernel_misc_reclaimable:0 [ 122.438352][ T8763] free:1805998 free_pcp:37644 free_cma:0 [ 122.483615][ T8763] Node 0 active_anon:111940kB inactive_anon:44kB active_file:101492kB inactive_file:9112kB unevictable:32kB isolated(anon):0kB isolated(file):0kB mapped:115492kB dirty:1268kB writeback:0kB shmem:72492kB kernel_stack:4432kB pagetables:5336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.511418][ T8763] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.541344][ T8763] lowmem_reserve[]: 0 2883 7862 7862 [ 122.546758][ T8763] Node 0 DMA32 free:2949156kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 122.578307][ T8763] lowmem_reserve[]: 0 0 4978 4978 [ 122.583436][ T8763] Node 0 Normal free:4259476kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:111940kB inactive_anon:44kB active_file:101608kB inactive_file:9112kB unevictable:32kB writepending:1384kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:146928kB local_pcp:89424kB free_cma:0kB [ 122.616966][ T8763] lowmem_reserve[]: 0 0 0 0 [ 122.621525][ T8763] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.634409][ T8763] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949156kB [ 122.650741][ T8763] Node 0 Normal: 227*4kB (UME) 50*8kB (UM) 9*16kB (UME) 200*32kB (UME) 181*64kB (UM) 136*128kB (UME) 137*256kB (UME) 51*512kB (UME) 58*1024kB (UM) 41*2048kB (UM) 981*4096kB (UME) = 4259564kB [ 122.669774][ T8763] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 122.679131][ T8763] 45815 total pagecache pages [ 122.683863][ T8763] 13 pages in swap cache [ 122.688187][ T8763] Free swap = 124944kB [ 122.692370][ T8763] Total swap = 124996kB [ 122.696563][ T8763] 2097051 pages RAM [ 122.700385][ T8763] 0 pages HighMem/MovableOnly [ 122.705154][ T8763] 80479 pages reserved [ 122.841472][ T8768] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1951'. [ 122.887498][ T8778] loop3: detected capacity change from 0 to 1024 [ 122.904190][ T8778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.916810][ T8778] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.974779][ T8778] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.1953: lblock 3 mapped to illegal pblock 3 (length 1) [ 123.007415][ T8789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1955'. [ 123.031579][ T8778] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 123.044059][ T8778] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.044059][ T8778] [ 123.109937][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 123.130149][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.150914][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 123.159890][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 123.194867][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 123.194887][ T29] audit: type=1326 audit(1760465164.209:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 123.244015][ T29] audit: type=1326 audit(1760465164.209:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 123.267626][ T29] audit: type=1326 audit(1760465164.209:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 123.291211][ T29] audit: type=1326 audit(1760465164.209:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 123.314690][ T29] audit: type=1326 audit(1760465164.209:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fd24dd710 code=0x7ffc0000 [ 123.338347][ T29] audit: type=1326 audit(1760465164.239:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 123.361848][ T29] audit: type=1326 audit(1760465164.239:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 123.385374][ T29] audit: type=1326 audit(1760465164.239:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 123.408752][ T29] audit: type=1326 audit(1760465164.239:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 123.432238][ T29] audit: type=1326 audit(1760465164.239:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 123.496369][ T8814] netlink: 'syz.0.1966': attribute type 21 has an invalid length. [ 123.505381][ T8814] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1966'. [ 123.515981][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 123.569995][ T8826] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.1971'. [ 123.579972][ T8825] netlink: 'syz.2.1972': attribute type 7 has an invalid length. [ 123.664114][ T8837] netlink: 'syz.1.1978': attribute type 12 has an invalid length. [ 123.716232][ T8841] loop2: detected capacity change from 0 to 128 [ 123.725617][ T8841] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.746700][ T8841] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.779750][ T4786] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.086823][ T8864] loop3: detected capacity change from 0 to 512 [ 124.125784][ T8864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.148025][ T8864] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.214421][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.439644][ T8876] loop3: detected capacity change from 0 to 256 [ 125.685224][ T8930] loop3: detected capacity change from 0 to 1024 [ 125.702003][ T8930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.711287][ T8930] EXT4-fs: quotafile must be on filesystem root [ 125.743170][ T8930] loop3: detected capacity change from 0 to 512 [ 125.754277][ T8930] ext4: Unknown parameter 'nouser_xattr' [ 126.094533][ T8954] loop6: detected capacity change from 0 to 1024 [ 126.130948][ T8954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.144193][ T8946] lo speed is unknown, defaulting to 1000 [ 126.153208][ T8954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.191257][ T8954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.247648][ T8954] tipc: Started in network mode [ 126.252688][ T8954] tipc: Node identity 3a71a9cf2da3, cluster identity 4711 [ 126.259842][ T8954] tipc: Enabled bearer , priority 0 [ 126.268581][ T8954] tipc: Disabling bearer [ 126.357560][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.607689][ T8980] __nla_validate_parse: 6 callbacks suppressed [ 126.607728][ T8980] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2033'. [ 126.760360][ T8989] loop2: detected capacity change from 0 to 1024 [ 126.776807][ T8989] EXT4-fs: inline encryption not supported [ 126.801355][ T8989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.951601][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.979408][ T9002] loop6: detected capacity change from 0 to 1024 [ 126.993570][ T9006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.000811][ T9006] IPv6: NLM_F_CREATE should be set when creating new route [ 127.007253][ T9002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.026274][ T9002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.076529][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.208644][ T9029] netlink: 'syz.1.2054': attribute type 1 has an invalid length. [ 127.216510][ T9029] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.2054'. [ 127.244983][ T9027] lo speed is unknown, defaulting to 1000 [ 127.466430][ T9041] vhci_hcd: invalid port number 96 [ 127.471598][ T9041] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 127.664185][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 127.691264][ T9063] netlink: 'syz.0.2068': attribute type 10 has an invalid length. [ 127.699322][ T9063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2068'. [ 127.728466][ T9063] dummy0: entered promiscuous mode [ 127.753458][ T9063] bridge0: port 3(dummy0) entered blocking state [ 127.759959][ T9063] bridge0: port 3(dummy0) entered disabled state [ 127.786508][ T9063] dummy0: entered allmulticast mode [ 127.796038][ T9063] bridge0: port 3(dummy0) entered blocking state [ 127.802463][ T9063] bridge0: port 3(dummy0) entered forwarding state [ 128.194913][ T9093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2079'. [ 128.406902][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'. [ 128.463783][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 128.463803][ T29] audit: type=1326 audit(1760465169.479:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.510635][ T29] audit: type=1326 audit(1760465169.479:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.534147][ T29] audit: type=1326 audit(1760465169.479:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.557723][ T29] audit: type=1326 audit(1760465169.479:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.581162][ T29] audit: type=1326 audit(1760465169.479:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.583980][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 128.604638][ T29] audit: type=1326 audit(1760465169.479:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.604680][ T29] audit: type=1326 audit(1760465169.479:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.604714][ T29] audit: type=1326 audit(1760465169.479:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.613656][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'. [ 128.693135][ T29] audit: type=1326 audit(1760465169.479:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.716534][ T29] audit: type=1326 audit(1760465169.479:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.3.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd24deec9 code=0x7ffc0000 [ 128.895982][ T9133] pim6reg1: entered promiscuous mode [ 128.901362][ T9133] pim6reg1: entered allmulticast mode [ 128.932026][ T9139] netlink: 'syz.6.2100': attribute type 10 has an invalid length. [ 128.950542][ T9139] bond0: (slave dummy0): Releasing backup interface [ 128.960014][ T9139] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.969103][ T9139] team0: Failed to send options change via netlink (err -105) [ 128.976971][ T9139] team0: Port device dummy0 added [ 128.983176][ T9144] netlink: 'syz.6.2100': attribute type 10 has an invalid length. [ 128.992635][ T9144] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 129.047913][ T9144] team0: Failed to send options change via netlink (err -105) [ 129.056427][ T9144] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 129.066558][ T9144] team0: Port device dummy0 removed [ 129.091497][ T9144] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.293511][ T9174] lo speed is unknown, defaulting to 1000 [ 129.318912][ T9179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9179 comm=syz.2.2117 [ 129.414096][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2119'. [ 129.647902][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2123'. [ 130.167688][ T9221] loop2: detected capacity change from 0 to 512 [ 130.195147][ T9221] EXT4-fs (loop2): too many log groups per flexible block group [ 130.213141][ T9221] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 130.230178][ T9221] EXT4-fs (loop2): mount failed [ 130.650733][ T9246] netlink: 'syz.3.2145': attribute type 7 has an invalid length. [ 130.793815][ T9252] bond3: entered promiscuous mode [ 130.799014][ T9252] bond3: entered allmulticast mode [ 130.804978][ T9252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.823558][ T9252] bond3 (unregistering): Released all slaves [ 131.283004][ T9290] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 131.433047][ T9300] sch_fq: defrate 0 ignored. [ 131.486343][ T9309] pim6reg: entered allmulticast mode [ 131.494986][ T9309] pim6reg: left allmulticast mode [ 131.560871][ T9314] netlink: 'syz.2.2175': attribute type 39 has an invalid length. [ 131.679813][ T9320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9320 comm=syz.2.2178 [ 131.693099][ T9320] __nla_validate_parse: 6 callbacks suppressed [ 131.693119][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2178'. [ 131.728657][ T9323] loop6: detected capacity change from 0 to 128 [ 131.774079][ T9323] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.786438][ T9323] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.881468][ T5927] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.896573][ T9338] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 131.934893][ T9338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.964972][ T9338] macvlan0: entered promiscuous mode [ 131.975795][ T9338] bond2: entered promiscuous mode [ 132.013399][ T9338] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 132.026091][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2187'. [ 132.053045][ T9338] bond2: left promiscuous mode [ 132.201126][ T9352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2191'. [ 132.272555][ T9352] netem: change failed [ 132.384074][ T9362] loop2: detected capacity change from 0 to 512 [ 132.753538][ T9387] loop3: detected capacity change from 0 to 256 [ 132.789979][ T9387] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.825236][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2205'. [ 133.121446][ T9410] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 133.166318][ T9412] loop2: detected capacity change from 0 to 2048 [ 133.192098][ T9395] bond0: (slave dummy0): Releasing backup interface [ 133.261088][ T9412] loop2: p3 p4 < > [ 133.265065][ T9412] loop2: p3 start 11362048 is beyond EOD, truncated [ 133.281790][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2217'. [ 133.388357][ T9395] bridge_slave_0: left allmulticast mode [ 133.395447][ T9395] bridge_slave_0: left promiscuous mode [ 133.406978][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.523194][ T9431] loop2: detected capacity change from 0 to 2048 [ 133.539364][ T9395] bridge_slave_1: left allmulticast mode [ 133.545792][ T9395] bridge_slave_1: left promiscuous mode [ 133.553974][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.607893][ T9395] bond0: (slave bond_slave_0): Releasing backup interface [ 133.632437][ T9431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.655115][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 133.655132][ T29] audit: type=1326 audit(1760465174.669:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9430 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 133.685242][ T29] audit: type=1326 audit(1760465174.669:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9430 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 133.708723][ T29] audit: type=1326 audit(1760465174.669:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9430 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 133.732144][ T29] audit: type=1326 audit(1760465174.669:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9430 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 133.755570][ T29] audit: type=1326 audit(1760465174.669:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9430 comm="syz.2.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8debaeec9 code=0x7ffc0000 [ 133.810335][ T9395] bond0: (slave bond_slave_1): Releasing backup interface [ 133.831668][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.898115][ T9395] team0: Port device team_slave_0 removed [ 133.915399][ T9395] team0: Port device team_slave_1 removed [ 133.940826][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.948296][ T9395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.958086][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.965831][ T9395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.975328][ T9395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.991612][ T9410] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 134.052014][ T29] audit: type=1326 audit(1760465175.059:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.6.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 134.083932][ T29] audit: type=1326 audit(1760465175.059:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.6.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 134.113391][ T29] audit: type=1326 audit(1760465175.069:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.6.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 134.137356][ T29] audit: type=1326 audit(1760465175.069:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.6.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 134.160887][ T29] audit: type=1326 audit(1760465175.069:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.6.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb31764eec9 code=0x7ffc0000 [ 134.174668][ T9466] netlink: 'syz.1.2242': attribute type 21 has an invalid length. [ 134.200582][ T9466] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 134.208516][ T9466] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2242'. [ 134.334196][ T9490] loop2: detected capacity change from 0 to 2048 [ 134.374151][ T9490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.403320][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.463770][ T9499] bond_slave_1: mtu less than device minimum [ 134.590040][ T9515] loop3: detected capacity change from 0 to 1024 [ 134.597191][ T9515] EXT4-fs: Ignoring removed orlov option [ 134.601957][ T9517] netlink: 'syz.6.2264': attribute type 13 has an invalid length. [ 134.610827][ T9517] netlink: 'syz.6.2264': attribute type 17 has an invalid length. [ 134.620642][ T9515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.662121][ T9515] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 134.682882][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.698407][ T9517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.726350][ T9522] loop3: detected capacity change from 0 to 1024 [ 134.745846][ T9522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.780192][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.224503][ T9545] Set syz1 is full, maxelem 65536 reached [ 135.710697][ T9578] 9pnet_fd: Insufficient options for proto=fd [ 135.820871][ T9583] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 135.830543][ T9583] SELinux: failed to load policy [ 136.095968][ T9593] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2294'. [ 136.129715][ T9599] loop3: detected capacity change from 0 to 1024 [ 136.136936][ T9599] EXT4-fs: Ignoring removed oldalloc option [ 136.143093][ T9599] EXT4-fs: Ignoring removed bh option [ 136.154324][ T9599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.196216][ T9604] netlink: 'syz.2.2298': attribute type 10 has an invalid length. [ 136.205574][ T9604] bond0: (slave dummy0): Releasing backup interface [ 136.214922][ T9604] netlink: 'syz.2.2298': attribute type 10 has an invalid length. [ 136.224652][ T9606] ================================================================== [ 136.232782][ T9606] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 136.239928][ T9606] [ 136.242262][ T9606] write to 0xffff8881004aa0f4 of 4 bytes by task 9599 on cpu 0: [ 136.249905][ T9606] xas_set_mark+0x12b/0x140 [ 136.254556][ T9606] __folio_start_writeback+0x155/0x390 [ 136.260054][ T9606] ext4_bio_write_folio+0x5ad/0x9f0 [ 136.265287][ T9606] mpage_process_page_bufs+0x4a1/0x620 [ 136.270778][ T9606] mpage_prepare_extent_to_map+0x786/0xc00 [ 136.276624][ T9606] ext4_do_writepages+0xa05/0x2750 [ 136.281770][ T9606] ext4_writepages+0x176/0x300 [ 136.286550][ T9606] do_writepages+0x1c6/0x310 [ 136.291178][ T9606] file_write_and_wait_range+0x156/0x2c0 [ 136.296845][ T9606] generic_buffers_fsync_noflush+0x45/0x120 [ 136.302766][ T9606] ext4_sync_file+0x1ab/0x690 [ 136.307463][ T9606] vfs_fsync_range+0x10d/0x130 [ 136.312241][ T9606] ext4_buffered_write_iter+0x34f/0x3c0 [ 136.317799][ T9606] ext4_file_write_iter+0x387/0xf60 [ 136.323039][ T9606] iter_file_splice_write+0x666/0xa60 [ 136.328419][ T9606] direct_splice_actor+0x156/0x2a0 [ 136.333544][ T9606] splice_direct_to_actor+0x312/0x680 [ 136.338927][ T9606] do_splice_direct+0xda/0x150 [ 136.343699][ T9606] do_sendfile+0x380/0x650 [ 136.348139][ T9606] __x64_sys_sendfile64+0x105/0x150 [ 136.353448][ T9606] x64_sys_call+0x2bb4/0x3000 [ 136.358152][ T9606] do_syscall_64+0xd2/0x200 [ 136.362682][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.368619][ T9606] [ 136.370950][ T9606] read to 0xffff8881004aa0f4 of 4 bytes by task 9606 on cpu 1: [ 136.378537][ T9606] xas_find_marked+0x5dc/0x620 [ 136.383321][ T9606] find_get_entry+0x5d/0x380 [ 136.387929][ T9606] filemap_get_folios_tag+0x92/0x210 [ 136.393232][ T9606] mpage_prepare_extent_to_map+0x320/0xc00 [ 136.399051][ T9606] ext4_do_writepages+0x708/0x2750 [ 136.404203][ T9606] ext4_writepages+0x176/0x300 [ 136.408990][ T9606] do_writepages+0x1c6/0x310 [ 136.413605][ T9606] file_write_and_wait_range+0x156/0x2c0 [ 136.419270][ T9606] generic_buffers_fsync_noflush+0x45/0x120 [ 136.425183][ T9606] ext4_sync_file+0x1ab/0x690 [ 136.429874][ T9606] vfs_fsync_range+0x10d/0x130 [ 136.434688][ T9606] ext4_buffered_write_iter+0x34f/0x3c0 [ 136.440259][ T9606] ext4_file_write_iter+0x387/0xf60 [ 136.445482][ T9606] iter_file_splice_write+0x666/0xa60 [ 136.450867][ T9606] direct_splice_actor+0x156/0x2a0 [ 136.455986][ T9606] splice_direct_to_actor+0x312/0x680 [ 136.461367][ T9606] do_splice_direct+0xda/0x150 [ 136.466236][ T9606] do_sendfile+0x380/0x650 [ 136.470678][ T9606] __x64_sys_sendfile64+0x105/0x150 [ 136.475900][ T9606] x64_sys_call+0x2bb4/0x3000 [ 136.480595][ T9606] do_syscall_64+0xd2/0x200 [ 136.485128][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.491046][ T9606] [ 136.493379][ T9606] value changed: 0x0a000021 -> 0x04000021 [ 136.499109][ T9606] [ 136.501437][ T9606] Reported by Kernel Concurrency Sanitizer on: [ 136.507774][ T9606] CPU: 1 UID: 0 PID: 9606 Comm: syz.3.2296 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.519074][ T9606] Tainted: [W]=WARN [ 136.522883][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.532949][ T9606] ================================================================== [ 136.560152][ T9604] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.571052][ T9607] loop6: detected capacity change from 0 to 512 [ 136.587844][ T9607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.600857][ T9607] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.613007][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.634271][ T5927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.962565][ T3408] page_pool_release_retry() stalled pool shutdown: id 58, 1 inflight 60 sec