last executing test programs: 27.234246744s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000, {r0}}, 0x20) 27.141112596s ago: executing program 1 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 25.962407849s ago: executing program 1 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8084}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}}, 0x0) 25.938996049s ago: executing program 32 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8084}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}}, 0x0) 14.391564992s ago: executing program 4 (id=396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0x1, 0x0, 0x1000}], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 14.241535176s ago: executing program 4 (id=400): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) 14.221804666s ago: executing program 4 (id=401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) 14.180855437s ago: executing program 4 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 14.179977157s ago: executing program 4 (id=403): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_virt_wifi\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000308000140000000000900010073797a30000000000900020073797a320000000020000000080a01010000000000000000020000030900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) 14.088759828s ago: executing program 4 (id=404): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 14.088633448s ago: executing program 33 (id=404): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 13.447657451s ago: executing program 3 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 12.98653937s ago: executing program 3 (id=431): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "202002", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}}}}}}}, 0x0) 12.867053952s ago: executing program 3 (id=433): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x10001, 0xffffffff, 0x4, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) 12.866742512s ago: executing program 3 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 12.838008772s ago: executing program 3 (id=438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 12.409109261s ago: executing program 3 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, r1, 0xc4fc9e906872338b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x4c002) 12.389219721s ago: executing program 34 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, r1, 0xc4fc9e906872338b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x4c002) 1.519886531s ago: executing program 7 (id=909): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 1.519741301s ago: executing program 5 (id=910): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r0) 1.519480131s ago: executing program 7 (id=912): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x45, 0x0}, 0x40002020) 1.519205051s ago: executing program 0 (id=913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005020000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.514843651s ago: executing program 5 (id=914): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random="25b80000180c", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "475cfbcdae09c4723086e5215b8b056cd495721502b6a9b5", "70e01c7f0c0dce5d4a6e924e0680e0395eaf37b60e9797f4c6b67410989e9ad1"}}}}}}, 0x0) 1.452798022s ago: executing program 0 (id=915): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f5", 0x1}], 0x1}}], 0x1, 0x8011) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) shutdown(r0, 0x0) 1.452602713s ago: executing program 6 (id=916): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xa55c}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 1.452471692s ago: executing program 0 (id=917): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000001300000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 1.427245223s ago: executing program 0 (id=918): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) read(r1, &(0x7f00000076c0)=""/252, 0xfc) 1.415074593s ago: executing program 6 (id=919): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 1.364320944s ago: executing program 5 (id=921): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.269640586s ago: executing program 6 (id=924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) 1.216634227s ago: executing program 6 (id=925): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000540)) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 623.466318ms ago: executing program 7 (id=935): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 622.871988ms ago: executing program 7 (id=937): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x2) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 533.02679ms ago: executing program 0 (id=940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000c40)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0) 508.35206ms ago: executing program 5 (id=941): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r1, 0x0, r1, 0x0, 0x863, 0x0) 507.98289ms ago: executing program 0 (id=942): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0xf}], 0x2, 0x0, 0x0) 487.022411ms ago: executing program 5 (id=943): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 486.544761ms ago: executing program 5 (id=944): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 359.098903ms ago: executing program 6 (id=948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 352.712963ms ago: executing program 2 (id=949): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 288.665565ms ago: executing program 7 (id=950): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000de00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x6}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 288.492435ms ago: executing program 7 (id=951): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa048ac44c63ed287a665f2c34b9e2278e78aaae0b120c255ab10ea38b054ba09f60ad3c2bf21e965b71d8eb98bc84eed4f0bd3328057355205890abf0e68f3ebc151dd697ab4a22a73f621c6ea0e69273df84fe8b7be01000000000000008d480bb059e3b2c99ed69714131f6e16468a22ae659bdb6fd1abb22b42248d0059fe9878b12528ed5ed88a488d9e559aad6e06755b265e65228499e5bef88efd8d46df22ac3ea4448a82db6a521d4aefb90c72dae445e8a6afb896d4adf3adaa43c777928c5689868ce622f990045c69864021da6ffbfb3a401f7e2397ebe7df53356a9a6de7753e09ca0e8d6aa6bc197474e005dc2bf3d11042b633506c83", 0x133) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 231.129226ms ago: executing program 2 (id=952): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@fat=@check_strict}, {@nodots}, {@fat=@usefree}, {@nodots}, {@fat=@usefree}, {@dots}, {@dots}, {@dots}, {@nodots}, {@fat=@showexec}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xf}}, {@nodots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ftruncate(r0, 0x200) sendfile(r0, r0, 0x0, 0x800000009) 221.289086ms ago: executing program 6 (id=953): socket$inet6_sctp(0xa, 0x1, 0x84) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 137.149478ms ago: executing program 2 (id=954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x3]}, 0x8, 0x80800) 136.939858ms ago: executing program 2 (id=955): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 297.6µs ago: executing program 2 (id=956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 0s ago: executing program 2 (id=957): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 21.351344][ T29] audit: type=1400 audit(1756930319.197:62): avc: denied { mounton } for pid=3259 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.352215][ T3259] cgroup: Unknown subsys name 'net' [ 21.374152][ T29] audit: type=1400 audit(1756930319.197:63): avc: denied { mount } for pid=3259 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.401729][ T29] audit: type=1400 audit(1756930319.227:64): avc: denied { unmount } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.555188][ T3259] cgroup: Unknown subsys name 'cpuset' [ 21.561329][ T3259] cgroup: Unknown subsys name 'rlimit' [ 21.670200][ T29] audit: type=1400 audit(1756930319.517:65): avc: denied { setattr } for pid=3259 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.693674][ T29] audit: type=1400 audit(1756930319.517:66): avc: denied { create } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.714278][ T29] audit: type=1400 audit(1756930319.517:67): avc: denied { write } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.734893][ T29] audit: type=1400 audit(1756930319.517:68): avc: denied { read } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.755164][ T29] audit: type=1400 audit(1756930319.527:69): avc: denied { mounton } for pid=3259 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.761654][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.780012][ T29] audit: type=1400 audit(1756930319.527:70): avc: denied { mount } for pid=3259 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.811934][ T29] audit: type=1400 audit(1756930319.637:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.863461][ T3259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.865946][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 22.944499][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.951643][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.958953][ T3299] bridge_slave_0: entered allmulticast mode [ 22.965492][ T3299] bridge_slave_0: entered promiscuous mode [ 22.973690][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.980824][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.988000][ T3299] bridge_slave_1: entered allmulticast mode [ 22.994323][ T3299] bridge_slave_1: entered promiscuous mode [ 23.016936][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 23.037605][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 23.049842][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.071115][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.114908][ T3299] team0: Port device team_slave_0 added [ 23.130207][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 23.139386][ T3299] team0: Port device team_slave_1 added [ 23.182879][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.189929][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.216120][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.237660][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.244751][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.252053][ T3305] bridge_slave_0: entered allmulticast mode [ 23.258695][ T3305] bridge_slave_0: entered promiscuous mode [ 23.265214][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.272157][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.298128][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.308903][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.316002][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.323159][ T3307] bridge_slave_0: entered allmulticast mode [ 23.329728][ T3307] bridge_slave_0: entered promiscuous mode [ 23.338224][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 23.346862][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.354039][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.361166][ T3305] bridge_slave_1: entered allmulticast mode [ 23.367393][ T3305] bridge_slave_1: entered promiscuous mode [ 23.375964][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.383099][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.390303][ T3307] bridge_slave_1: entered allmulticast mode [ 23.396827][ T3307] bridge_slave_1: entered promiscuous mode [ 23.449324][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.464812][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.474078][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.481155][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.488366][ T3300] bridge_slave_0: entered allmulticast mode [ 23.494707][ T3300] bridge_slave_0: entered promiscuous mode [ 23.503905][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.516729][ T3299] hsr_slave_0: entered promiscuous mode [ 23.522700][ T3299] hsr_slave_1: entered promiscuous mode [ 23.529512][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.544355][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.551559][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.558904][ T3300] bridge_slave_1: entered allmulticast mode [ 23.565389][ T3300] bridge_slave_1: entered promiscuous mode [ 23.613915][ T3307] team0: Port device team_slave_0 added [ 23.620950][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.630117][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.637219][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.644377][ T3308] bridge_slave_0: entered allmulticast mode [ 23.650880][ T3308] bridge_slave_0: entered promiscuous mode [ 23.661175][ T3305] team0: Port device team_slave_0 added [ 23.667760][ T3305] team0: Port device team_slave_1 added [ 23.676582][ T3307] team0: Port device team_slave_1 added [ 23.685830][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.695195][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.702314][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.709676][ T3308] bridge_slave_1: entered allmulticast mode [ 23.716072][ T3308] bridge_slave_1: entered promiscuous mode [ 23.753785][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.760765][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.786907][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.810249][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.820002][ T3300] team0: Port device team_slave_0 added [ 23.826477][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.833442][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.859406][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.872720][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.879687][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.905677][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.918949][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.925958][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.951938][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.963530][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.973365][ T3300] team0: Port device team_slave_1 added [ 24.016568][ T3308] team0: Port device team_slave_0 added [ 24.028908][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.035905][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.061872][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.085615][ T3308] team0: Port device team_slave_1 added [ 24.097728][ T3305] hsr_slave_0: entered promiscuous mode [ 24.103741][ T3305] hsr_slave_1: entered promiscuous mode [ 24.109642][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 24.115372][ T3305] Cannot create hsr debugfs directory [ 24.121078][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.128162][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.154181][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.169416][ T3307] hsr_slave_0: entered promiscuous mode [ 24.175537][ T3307] hsr_slave_1: entered promiscuous mode [ 24.181418][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 24.187264][ T3307] Cannot create hsr debugfs directory [ 24.203018][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.210088][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.236401][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.247465][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.254551][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.280537][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.328943][ T3300] hsr_slave_0: entered promiscuous mode [ 24.334954][ T3300] hsr_slave_1: entered promiscuous mode [ 24.340800][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 24.346573][ T3300] Cannot create hsr debugfs directory [ 24.387290][ T3308] hsr_slave_0: entered promiscuous mode [ 24.393380][ T3308] hsr_slave_1: entered promiscuous mode [ 24.399536][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 24.405476][ T3308] Cannot create hsr debugfs directory [ 24.422400][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.447179][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.467868][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.478189][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.573119][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.585759][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.594604][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.607820][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.644392][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.653105][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.662704][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.671754][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.694215][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.707415][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.724694][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.733278][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.745681][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.784422][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.799391][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.813114][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.820247][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.829087][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.836233][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.848322][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.858234][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.875224][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.882316][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.896455][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.910062][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.928882][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.935994][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.946830][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.969766][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.976968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.991352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.998657][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.007755][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.014806][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.031867][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.064163][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.075124][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.089596][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.100535][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.111401][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.128802][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.136283][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.146098][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.153470][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.198263][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.211305][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.234094][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.249936][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.257199][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.280995][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.288090][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.304443][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.338383][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.361228][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.381015][ T3299] veth0_vlan: entered promiscuous mode [ 25.407875][ T3299] veth1_vlan: entered promiscuous mode [ 25.445874][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.481975][ T3299] veth0_macvtap: entered promiscuous mode [ 25.497438][ T3299] veth1_macvtap: entered promiscuous mode [ 25.514237][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.540516][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.551416][ T3307] veth0_vlan: entered promiscuous mode [ 25.576348][ T3300] veth0_vlan: entered promiscuous mode [ 25.583248][ T3305] veth0_vlan: entered promiscuous mode [ 25.589349][ T2549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.598919][ T2549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.611406][ T3300] veth1_vlan: entered promiscuous mode [ 25.620271][ T2549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.629825][ T3307] veth1_vlan: entered promiscuous mode [ 25.638997][ T3305] veth1_vlan: entered promiscuous mode [ 25.646648][ T2549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.686292][ T3300] veth0_macvtap: entered promiscuous mode [ 25.696828][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.698616][ T3308] veth0_vlan: entered promiscuous mode [ 25.722288][ T3307] veth0_macvtap: entered promiscuous mode [ 25.729725][ T3307] veth1_macvtap: entered promiscuous mode [ 25.737195][ T3300] veth1_macvtap: entered promiscuous mode [ 25.746969][ T3305] veth0_macvtap: entered promiscuous mode [ 25.754351][ T3305] veth1_macvtap: entered promiscuous mode [ 25.777629][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.793173][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.802676][ T3308] veth1_vlan: entered promiscuous mode [ 25.810577][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.821658][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.833951][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.844302][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.867062][ T287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.882419][ T287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.898846][ T287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.915977][ T287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.936257][ T3308] veth0_macvtap: entered promiscuous mode [ 25.946394][ T3308] veth1_macvtap: entered promiscuous mode [ 25.953106][ T287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.967844][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.978173][ T287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.993886][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.002035][ T287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.025509][ T287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.043310][ T3477] loop0: detected capacity change from 0 to 164 [ 26.049754][ T287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.071597][ T3477] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 26.080424][ T287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.099913][ T287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.132085][ T3484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'. [ 26.140905][ T3484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'. [ 26.172832][ T287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.186984][ T287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.224824][ T287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.249134][ T287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.290691][ T3500] loop3: detected capacity change from 0 to 512 [ 26.309238][ T3500] ======================================================= [ 26.309238][ T3500] WARNING: The mand mount option has been deprecated and [ 26.309238][ T3500] and is ignored by this kernel. Remove the mand [ 26.309238][ T3500] option from the mount to silence this warning. [ 26.309238][ T3500] ======================================================= [ 26.349004][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.356240][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.380227][ T3506] loop2: detected capacity change from 0 to 4096 [ 26.386827][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 26.386839][ T29] audit: type=1400 audit(1756930324.227:127): avc: denied { create } for pid=3501 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.412447][ T29] audit: type=1400 audit(1756930324.227:128): avc: denied { setopt } for pid=3501 comm="syz.0.15" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.431558][ T3500] EXT4-fs (loop3): orphan cleanup on readonly fs [ 26.433392][ T29] audit: type=1400 audit(1756930324.237:129): avc: denied { mounton } for pid=3503 comm="syz.2.16" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.443063][ T3506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.474725][ T29] audit: type=1400 audit(1756930324.317:130): avc: denied { mount } for pid=3503 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.497948][ T3500] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14: bg 0: block 248: padding at end of block bitmap is not set [ 26.507897][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 26.512902][ T3500] Quota error (device loop3): write_blk: dquota write failed [ 26.520984][ T3506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.527524][ T3500] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 26.546529][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 26.547032][ T3500] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.14: Failed to acquire dquot type 1 [ 26.567153][ T3500] EXT4-fs (loop3): 1 truncate cleaned up [ 26.573443][ T3500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 26.587197][ T29] audit: type=1326 audit(1756930324.437:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3498 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8895cd550 code=0x7ffc0000 [ 26.610742][ T29] audit: type=1326 audit(1756930324.437:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3498 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb8895cd937 code=0x7ffc0000 [ 26.634203][ T29] audit: type=1326 audit(1756930324.437:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3498 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8895cd550 code=0x7ffc0000 [ 26.657614][ T29] audit: type=1326 audit(1756930324.437:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3498 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8895cebe9 code=0x7ffc0000 [ 26.706687][ T287] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.725047][ T3500] syz.3.14 (3500) used greatest stack depth: 9280 bytes left [ 26.750654][ T287] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.769333][ T287] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 26.790799][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.845960][ T3525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 26.854932][ T3525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24'. [ 26.863840][ T3525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 26.879507][ T3525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24'. [ 26.888440][ T3525] netlink: 'syz.0.24': attribute type 6 has an invalid length. [ 26.928528][ T3535] loop2: detected capacity change from 0 to 128 [ 26.972312][ T3543] veth0_to_bridge: entered promiscuous mode [ 26.991103][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.020305][ T3542] veth0_to_bridge: left promiscuous mode [ 27.037409][ T3547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 27.187994][ T3568] process 'syz.0.44' launched './file1' with NULL argv: empty string added [ 27.391123][ T3594] loop4: detected capacity change from 0 to 164 [ 27.454324][ T3564] chnl_net:caif_netlink_parms(): no params data found [ 27.470445][ T3594] syz.4.52: attempt to access beyond end of device [ 27.470445][ T3594] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 27.493857][ T3594] syz.4.52: attempt to access beyond end of device [ 27.493857][ T3594] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 27.563123][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.570452][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.585563][ T3564] bridge_slave_0: entered allmulticast mode [ 27.599231][ T3564] bridge_slave_0: entered promiscuous mode [ 27.606350][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.613990][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.625474][ T3564] bridge_slave_1: entered allmulticast mode [ 27.632272][ T3564] bridge_slave_1: entered promiscuous mode [ 28.146582][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.525590][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.656613][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.894768][ T51] bridge_slave_1: left allmulticast mode [ 28.900500][ T51] bridge_slave_1: left promiscuous mode [ 28.906174][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.044672][ T51] bridge_slave_0: left allmulticast mode [ 29.050336][ T51] bridge_slave_0: left promiscuous mode [ 29.056153][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.437748][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 29.536572][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 29.616596][ T51] bond0 (unregistering): Released all slaves [ 29.711026][ T3564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.731115][ T51] hsr_slave_0: left promiscuous mode [ 29.749045][ T51] hsr_slave_1: left promiscuous mode [ 29.752534][ T2992] udevd[2992]: worker [3534] terminated by signal 33 (Unknown signal 33) [ 29.764371][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.771874][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.779546][ T2992] udevd[2992]: worker [3534] failed while handling '/devices/virtual/block/loop2' [ 29.791394][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.799829][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.812563][ T2992] udevd[2992]: worker [3625] terminated by signal 33 (Unknown signal 33) [ 29.815710][ T3644] loop3: detected capacity change from 0 to 128 [ 29.821377][ T2992] udevd[2992]: worker [3625] failed while handling '/devices/virtual/block/loop4' [ 29.838011][ T3644] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 29.850734][ T51] veth1_macvtap: left promiscuous mode [ 29.851302][ T3644] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.859699][ T3647] netlink: 100 bytes leftover after parsing attributes in process `syz.0.75'. [ 29.899175][ T51] veth0_macvtap: left promiscuous mode [ 29.921320][ T51] veth1_vlan: left promiscuous mode [ 29.937050][ T51] veth0_vlan: left promiscuous mode [ 29.965942][ T3651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 29.991035][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.016317][ T3653] loop4: detected capacity change from 0 to 512 [ 30.030868][ T3655] loop3: detected capacity change from 0 to 512 [ 30.044840][ T3655] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.067120][ T3653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.069944][ T3655] EXT4-fs (loop3): 1 orphan inode deleted [ 30.079747][ T3653] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.086068][ T3655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.096137][ T287] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 30.135323][ T3655] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.150535][ T51] team0 (unregistering): Port device team_slave_1 removed [ 30.158274][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.172090][ T51] team0 (unregistering): Port device team_slave_0 removed [ 30.218001][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.230184][ T3564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.249891][ T3666] rdma_op ffff88811980f980 conn xmit_rdma 0000000000000000 [ 30.296958][ T3564] team0: Port device team_slave_0 added [ 30.303742][ T3564] team0: Port device team_slave_1 added [ 30.353826][ T3564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.360988][ T3564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.387023][ T3564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.400562][ T3564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.407632][ T3564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.434562][ T3564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.572689][ T3674] loop4: detected capacity change from 0 to 32768 [ 30.608987][ T3564] hsr_slave_0: entered promiscuous mode [ 30.620108][ T3564] hsr_slave_1: entered promiscuous mode [ 30.645475][ T3626] loop4: p1 p3 < > [ 30.650878][ T10] IPVS: starting estimator thread 0... [ 30.660126][ T3707] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 30.667573][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 30.682713][ T3674] loop4: p1 p3 < > [ 30.754819][ T3708] IPVS: using max 3024 ests per chain, 151200 per kthread [ 30.809781][ T3711] smc: net device bond0 applied user defined pnetid SYZ0 [ 30.860252][ T3723] smc: net device bond0 erased user defined pnetid SYZ0 [ 30.885137][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 30.893721][ C0] hrtimer: interrupt took 26923 ns [ 30.896054][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 30.911242][ T3564] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 30.922721][ T3564] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 30.950381][ T3564] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 30.965649][ T3564] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 31.078933][ T3564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.118420][ T3564] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.139968][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.147156][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.187272][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.195010][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.269884][ T3564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.395508][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 31.398105][ T3564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.404614][ T3800] netlink: 'syz.0.105': attribute type 19 has an invalid length. [ 31.404639][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'. [ 31.447758][ T3335] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.457364][ T3800] Zero length message leads to an empty skb [ 31.469926][ T3335] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.507090][ T3335] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.539227][ T3335] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.607488][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 31.662292][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 31.662307][ T29] audit: type=1400 audit(31.637:286): avc: denied { create } for pid=3846 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.676142][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.694252][ T3847] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.697726][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 31.716379][ T29] audit: type=1400 audit(31.687:287): avc: denied { ioctl } for pid=3846 comm="syz.0.110" path="socket:[5485]" dev="sockfs" ino=5485 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.728751][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.770792][ T3564] veth0_vlan: entered promiscuous mode [ 31.781394][ T29] audit: type=1400 audit(31.737:288): avc: denied { setopt } for pid=3846 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.800774][ T29] audit: type=1400 audit(31.737:289): avc: denied { bind } for pid=3846 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.813508][ T3564] veth1_vlan: entered promiscuous mode [ 31.858641][ T3860] loop2: detected capacity change from 0 to 512 [ 31.879104][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.891058][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.897761][ T29] audit: type=1326 audit(31.817:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 31.905298][ T3860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.922969][ T29] audit: type=1326 audit(31.817:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 31.960351][ T29] audit: type=1326 audit(31.817:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 31.963762][ T3564] veth0_macvtap: entered promiscuous mode [ 31.983351][ T29] audit: type=1326 audit(31.827:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 32.012249][ T29] audit: type=1326 audit(31.827:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 32.035330][ T29] audit: type=1326 audit(31.827:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 32.086462][ T3564] veth1_macvtap: entered promiscuous mode [ 32.105178][ T3564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.121520][ T3564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.147073][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.201401][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.229667][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.238975][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300024][ T3893] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.358061][ T3893] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.400819][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.413359][ T3893] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.466878][ T3893] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.649482][ T3944] IPv6: Can't replace route, no match found [ 32.864879][ T3976] loop0: detected capacity change from 0 to 512 [ 32.878115][ T3979] ref_ctr_offset mismatch. inode: 0xc2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 32.894726][ T3976] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.138: bg 0: block 5: invalid block bitmap [ 32.926108][ T3976] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 32.967620][ T3976] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.138: invalid indirect mapped block 3 (level 2) [ 33.009054][ T3976] EXT4-fs (loop0): 2 truncates cleaned up [ 33.024802][ T3976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.085498][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.135633][ T4003] syz.4.142 uses obsolete (PF_INET,SOCK_PACKET) [ 33.311274][ T2549] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.333018][ T2549] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.366219][ T2549] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.396136][ T2549] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.449621][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.457134][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.464652][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.472140][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.479838][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.487347][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.494951][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.502409][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.509851][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.517441][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.525322][ T2549] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 33.534047][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 33.596891][ T4057] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 33.709823][ T4070] loop4: detected capacity change from 0 to 1024 [ 33.717999][ T4070] EXT4-fs: Ignoring removed orlov option [ 33.730049][ T4070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.982123][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.056162][ T4101] netlink: 'syz.4.165': attribute type 3 has an invalid length. [ 34.143625][ T4119] loop5: detected capacity change from 0 to 1024 [ 34.167297][ T4119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.197078][ T4119] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 3) [ 34.211972][ T4119] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 34.224300][ T4119] EXT4-fs (loop5): This should not happen!! Data will be lost [ 34.224300][ T4119] [ 34.237469][ T4119] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.256567][ T4119] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.270990][ T4119] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.292760][ T4119] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.307987][ T4118] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.325673][ T4118] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.342264][ T4119] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.356995][ T4119] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.371571][ T4118] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.174: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.453560][ T4146] loop3: detected capacity change from 0 to 128 [ 34.461568][ T4146] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 34.478569][ T4146] SELinux: security_context_str_to_sid ($iqr埋A?U<{ט'5?}}wz-&ד\kOwv7c?5'QoٝsmSz=gʯc) failed with errno=-22 [ 34.487091][ T4148] loop0: detected capacity change from 0 to 512 [ 34.505575][ T4148] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.536717][ T4148] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.186: invalid indirect mapped block 4294967295 (level 0) [ 34.550928][ T4148] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.186: invalid indirect mapped block 4294967295 (level 1) [ 34.567345][ T4148] EXT4-fs (loop0): 1 orphan inode deleted [ 34.573197][ T4148] EXT4-fs (loop0): 1 truncate cleaned up [ 34.581171][ T4148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.627518][ T4153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 34.636473][ T4153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 34.650944][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.693584][ T4157] netlink: 96 bytes leftover after parsing attributes in process `syz.3.191'. [ 34.924996][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 34.981340][ T4190] SELinux: policydb version 0 does not match my version range 15-35 [ 34.994644][ T4190] SELinux: failed to load policy [ 35.030313][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 35.042634][ T41] EXT4-fs (loop5): This should not happen!! Data will be lost [ 35.042634][ T41] [ 35.053856][ T3564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.065827][ T4196] loop3: detected capacity change from 0 to 128 [ 35.072555][ T4196] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.085637][ T4196] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.102000][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.137078][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 35.146028][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 35.333492][ T4228] random: crng reseeded on system resumption [ 35.378978][ T4235] loop3: detected capacity change from 0 to 512 [ 35.396710][ T4235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.412106][ T4240] veth0: entered promiscuous mode [ 35.417944][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 35.442816][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.691158][ T4276] SELinux: failed to load policy [ 35.763453][ T4280] loop0: detected capacity change from 0 to 8192 [ 35.770589][ T4280] msdos: Unknown parameter 'do' [ 35.868467][ T4295] loop2: detected capacity change from 0 to 8192 [ 36.028454][ T4313] x_tables: ip_tables: udp match: only valid for protocol 17 [ 36.069305][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 36.088703][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 36.105953][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 36.130691][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 36.190580][ T4332] loop5: detected capacity change from 0 to 764 [ 36.215575][ T4332] Symlink component flag not implemented [ 36.233442][ T4332] Symlink component flag not implemented (129) [ 36.252364][ T4332] rock: directory entry would overflow storage [ 36.258693][ T4332] rock: sig=0x4f50, size=4, remaining=3 [ 36.264314][ T4332] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 36.269114][ T4303] loop3: detected capacity change from 0 to 32768 [ 36.316066][ T4303] loop3: p1 p3 < > [ 36.453060][ T4361] netlink: 'syz.2.286': attribute type 10 has an invalid length. [ 36.460977][ T4361] __nla_validate_parse: 2 callbacks suppressed [ 36.460994][ T4361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.286'. [ 36.505294][ T4361] dummy0: entered promiscuous mode [ 36.651770][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 36.825513][ T4402] bond1: entered promiscuous mode [ 36.830596][ T4402] bond1: entered allmulticast mode [ 36.836282][ T4402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.852243][ T4402] bond1 (unregistering): Released all slaves [ 36.918001][ T4415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.310'. [ 36.920053][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 36.920067][ T29] audit: type=1400 audit(36.897:483): avc: denied { write } for pid=4416 comm="syz.0.311" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.959279][ T4417] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 36.959279][ T4417] program syz.0.311 not setting count and/or reply_len properly [ 36.983290][ T29] audit: type=1400 audit(36.907:484): avc: denied { sqpoll } for pid=4410 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.006731][ T4420] loop5: detected capacity change from 0 to 164 [ 37.038287][ T4420] rock: directory entry would overflow storage [ 37.044337][ T29] audit: type=1400 audit(37.017:485): avc: denied { name_bind } for pid=4425 comm="syz.0.315" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 37.045185][ T4420] rock: sig=0x66, size=4, remaining=3 [ 37.105093][ T29] audit: type=1326 audit(37.077:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8895cebe9 code=0x7ffc0000 [ 37.128073][ T29] audit: type=1326 audit(37.077:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8895cebe9 code=0x7ffc0000 [ 37.150894][ T29] audit: type=1326 audit(37.077:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fb8895cebe9 code=0x7ffc0000 [ 37.174336][ T29] audit: type=1326 audit(37.077:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8895cebe9 code=0x7ffc0000 [ 37.203068][ T29] audit: type=1400 audit(37.177:490): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.226724][ T29] audit: type=1400 audit(37.177:491): avc: denied { open } for pid=3307 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.250275][ T29] audit: type=1400 audit(37.177:492): avc: denied { ioctl } for pid=3307 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.304952][ T4420] rock: directory entry would overflow storage [ 37.311302][ T4420] rock: sig=0x66, size=4, remaining=3 [ 37.312780][ T4436] loop2: detected capacity change from 0 to 2048 [ 37.355064][ T4436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.400059][ T4436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.319: bg 0: block 464: padding at end of block bitmap is not set [ 37.421939][ T4453] bond1: entered promiscuous mode [ 37.427134][ T4453] bond1: entered allmulticast mode [ 37.433367][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.442371][ T4453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.452006][ T4453] bond1 (unregistering): Released all slaves [ 37.476697][ T4460] mmap: syz.3.329 (4460) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.633052][ T4491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.343'. [ 37.642325][ T4493] loop4: detected capacity change from 0 to 1024 [ 37.657295][ T4493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.692129][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.821728][ T4524] Illegal XDP return value 4294967294 on prog (id 259) dev N/A, expect packet loss! [ 37.822129][ T4525] loop2: detected capacity change from 0 to 128 [ 37.845330][ T4525] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.878739][ T3300] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.893096][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 37.902897][ T4532] IPVS: Error joining to the multicast group [ 38.005731][ T4551] netlink: 'syz.2.367': attribute type 10 has an invalid length. [ 38.015885][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.023586][ T4551] bridge_slave_1: left allmulticast mode [ 38.029534][ T4551] bridge_slave_1: left promiscuous mode [ 38.035423][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.045987][ T4551] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 38.100918][ T4557] loop4: detected capacity change from 0 to 8192 [ 38.142538][ T4567] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 38.161328][ T4557] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.188484][ T4557] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 38.197785][ T4557] FAT-fs (loop4): Filesystem has been set read-only [ 38.274141][ T4577] sd 0:0:1:0: device reset [ 38.308917][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 38.462073][ T4602] loop3: detected capacity change from 0 to 8192 [ 38.577447][ T4602] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 38.586694][ T4602] FAT-fs (loop3): Filesystem has been set read-only [ 38.637272][ T4619] loop3: detected capacity change from 0 to 2048 [ 38.660552][ T4619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.679696][ T4619] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.397: bg 0: block 464: padding at end of block bitmap is not set [ 38.708181][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.845839][ T3335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 38.906938][ T3335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 38.986000][ T3335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 39.065132][ T3335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 39.185655][ T3335] bridge_slave_1: left allmulticast mode [ 39.191504][ T3335] bridge_slave_1: left promiscuous mode [ 39.197352][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.212353][ T3335] bridge_slave_0: left allmulticast mode [ 39.218120][ T3335] bridge_slave_0: left promiscuous mode [ 39.223785][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.345490][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 39.389735][ T4677] netlink: 'syz.3.422': attribute type 4 has an invalid length. [ 39.416649][ T3335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.426163][ T3335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.436724][ T3335] bond0 (unregistering): Released all slaves [ 39.478772][ T3335] hsr_slave_0: left promiscuous mode [ 39.494170][ T3335] hsr_slave_1: left promiscuous mode [ 39.501040][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.515715][ T4686] ------------[ cut here ]------------ [ 39.521446][ T4686] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 39.541940][ T4686] WARNING: CPU: 0 PID: 4686 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 39.552419][ T4686] Modules linked in: [ 39.556435][ T4686] CPU: 0 UID: 0 PID: 4686 Comm: syz.3.425 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.566344][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.576448][ T4686] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 39.582713][ T4686] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 02 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 39.602473][ T4686] RSP: 0018:ffffc9000160f440 EFLAGS: 00010292 [ 39.608604][ T4686] RAX: f2509087066f1600 RBX: ffff88811a53a840 RCX: 0000000000080000 [ 39.616689][ T4686] RDX: ffffc9000334d000 RSI: 000000000001ccc2 RDI: 000000000001ccc3 [ 39.624788][ T4686] RBP: 0000000000000000 R08: 0001c9000160f27f R09: 0000000000000000 [ 39.632811][ T4686] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a53a800 [ 39.640899][ T4686] R13: ffff888106ed0000 R14: ffff888106ed0000 R15: ffff88811a53a838 [ 39.648898][ T4686] FS: 00007fb8880376c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 39.657949][ T4686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.664903][ T4686] CR2: 0000001b33221ff8 CR3: 00000001169fc000 CR4: 00000000003506f0 [ 39.672885][ T4686] Call Trace: [ 39.676204][ T4686] [ 39.679164][ T4686] reg_set_min_max+0x1eb/0x260 [ 39.684210][ T4686] check_cond_jmp_op+0x1080/0x16e0 [ 39.689383][ T4686] do_check+0x332a/0x7a10 [ 39.693857][ T4686] do_check_common+0xc3a/0x12a0 [ 39.698790][ T4686] bpf_check+0x942b/0xd9e0 [ 39.703345][ T4686] ? __rcu_read_unlock+0x4f/0x70 [ 39.708418][ T4686] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 39.714531][ T4686] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 39.720488][ T4686] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 39.726486][ T4686] ? css_rstat_updated+0xb7/0x240 [ 39.731850][ T4686] ? pcpu_block_update+0x24e/0x3b0 [ 39.737270][ T4686] ? _find_next_zero_bit+0x29/0xa0 [ 39.742548][ T4686] ? pcpu_block_refresh_hint+0x157/0x170 [ 39.748403][ T4686] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 39.754487][ T4686] ? css_rstat_updated+0xb7/0x240 [ 39.759635][ T4686] ? __rcu_read_unlock+0x4f/0x70 [ 39.764608][ T4686] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 39.770543][ T4686] ? should_fail_ex+0x30/0x280 [ 39.775432][ T4686] ? selinux_bpf_prog_load+0x36/0xf0 [ 39.780983][ T4686] ? should_failslab+0x8c/0xb0 [ 39.785835][ T4686] ? __kmalloc_cache_noprof+0x189/0x320 [ 39.791419][ T4686] ? selinux_bpf_prog_load+0xbf/0xf0 [ 39.796874][ T4686] ? security_bpf_prog_load+0x2c/0xa0 [ 39.802557][ T4686] bpf_prog_load+0xedd/0x1070 [ 39.807338][ T4686] ? security_bpf+0x2b/0x90 [ 39.811945][ T4686] __sys_bpf+0x462/0x7b0 [ 39.816289][ T4686] __x64_sys_bpf+0x41/0x50 [ 39.820860][ T4686] x64_sys_call+0x2aea/0x2ff0 [ 39.825638][ T4686] do_syscall_64+0xd2/0x200 [ 39.830263][ T4686] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.836462][ T4686] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.842253][ T4686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.848373][ T4686] RIP: 0033:0x7fb8895cebe9 [ 39.852869][ T4686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.872830][ T4686] RSP: 002b:00007fb888037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.881368][ T4686] RAX: ffffffffffffffda RBX: 00007fb889805fa0 RCX: 00007fb8895cebe9 [ 39.889351][ T4686] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 39.897328][ T4686] RBP: 00007fb889651e19 R08: 0000000000000000 R09: 0000000000000000 [ 39.905686][ T4686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.913664][ T4686] R13: 00007fb889806038 R14: 00007fb889805fa0 R15: 00007ffd8115e388 [ 39.921745][ T4686] [ 39.924879][ T4686] ---[ end trace 0000000000000000 ]--- [ 39.931384][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.983550][ T3335] team0 (unregistering): Port device team_slave_1 removed [ 39.998092][ T3335] team0 (unregistering): Port device team_slave_0 removed [ 40.039158][ T4693] netlink: 'syz.0.428': attribute type 9 has an invalid length. [ 40.047171][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 40.048743][ T4630] chnl_net:caif_netlink_parms(): no params data found [ 40.070009][ T4693] netlink: 'syz.0.428': attribute type 9 has an invalid length. [ 40.078034][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 40.138094][ T4630] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.145946][ T4630] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.160652][ T4630] bridge_slave_0: entered allmulticast mode [ 40.168657][ T4630] bridge_slave_0: entered promiscuous mode [ 40.176458][ T4630] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.183710][ T4630] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.195093][ T4714] vhci_hcd: invalid port number 96 [ 40.200559][ T4714] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 40.213273][ T4630] bridge_slave_1: entered allmulticast mode [ 40.220764][ T4630] bridge_slave_1: entered promiscuous mode [ 40.259474][ T4630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.273466][ T4630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.318676][ T4630] team0: Port device team_slave_0 added [ 40.325665][ T4630] team0: Port device team_slave_1 added [ 40.363320][ T4630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.370436][ T4630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.396526][ T4630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.408448][ T4630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.415420][ T4630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.441498][ T4630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.502401][ T4630] hsr_slave_0: entered promiscuous mode [ 40.508878][ T4630] hsr_slave_1: entered promiscuous mode [ 40.515899][ T4630] debugfs: 'hsr0' already exists in 'hsr' [ 40.521882][ T4630] Cannot create hsr debugfs directory [ 40.601588][ T4754] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 40.609573][ T4630] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 40.623747][ T4754] bond1: entered promiscuous mode [ 40.629410][ T4754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.638360][ T4630] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 40.653256][ T3335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.668931][ T4754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.676321][ T4754] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 40.686631][ T4754] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 40.697916][ T31] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 40.698420][ T4754] bond1: (slave vxcan3): making interface the new active one [ 40.713538][ T4754] vxcan3: entered promiscuous mode [ 40.720003][ T4754] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 40.728653][ T4630] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 40.747241][ T3335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.765128][ T4630] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 40.797998][ T3335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.840615][ T3335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.869321][ T4761] chnl_net:caif_netlink_parms(): no params data found [ 40.912487][ T3335] bridge_slave_1: left allmulticast mode [ 40.918196][ T3335] bridge_slave_1: left promiscuous mode [ 40.923959][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.933149][ T3335] bridge_slave_0: left allmulticast mode [ 40.938839][ T3335] bridge_slave_0: left promiscuous mode [ 40.944474][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.027242][ T3335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.036881][ T3335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.046661][ T3335] bond0 (unregistering): Released all slaves [ 41.054039][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.061271][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.068715][ T4761] bridge_slave_0: entered allmulticast mode [ 41.075355][ T4761] bridge_slave_0: entered promiscuous mode [ 41.084057][ T4761] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.091145][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.098410][ T4761] bridge_slave_1: entered allmulticast mode [ 41.104943][ T4761] bridge_slave_1: entered promiscuous mode [ 41.113364][ T3335] hsr_slave_0: left promiscuous mode [ 41.119129][ T3335] hsr_slave_1: left promiscuous mode [ 41.124854][ T3335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.132216][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.139830][ T3335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.147223][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.157006][ T3335] veth1_macvtap: left promiscuous mode [ 41.162558][ T3335] veth0_macvtap: left promiscuous mode [ 41.168272][ T3335] veth1_vlan: left promiscuous mode [ 41.173652][ T3335] veth0_vlan: left promiscuous mode [ 41.229034][ T3335] team0 (unregistering): Port device team_slave_1 removed [ 41.239363][ T3335] team0 (unregistering): Port device team_slave_0 removed [ 41.277576][ T4761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.288245][ T4761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.307044][ T4761] team0: Port device team_slave_0 added [ 41.313363][ T4761] team0: Port device team_slave_1 added [ 41.327773][ T4761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.334749][ T4761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.360784][ T4761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.372284][ T4761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.379296][ T4761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.405249][ T4761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.433055][ T4761] hsr_slave_0: entered promiscuous mode [ 41.439205][ T4761] hsr_slave_1: entered promiscuous mode [ 41.445123][ T4761] debugfs: 'hsr0' already exists in 'hsr' [ 41.450857][ T4761] Cannot create hsr debugfs directory [ 41.523463][ T4800] sd 0:0:1:0: device reset [ 41.590564][ T4630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.607968][ T4812] loop0: detected capacity change from 0 to 512 [ 41.613843][ T4761] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 41.623156][ T4812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.627244][ T4630] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.648323][ T4761] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 41.668806][ T4761] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 41.679966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.687162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.695133][ T4818] atomic_op ffff888128007128 conn xmit_atomic 0000000000000000 [ 41.697371][ T4812] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz.0.471: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 41.732538][ T4761] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 41.748335][ T4812] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #12: comm syz.0.471: directory missing '.' [ 41.763438][ T4822] netlink: 'syz.5.475': attribute type 2 has an invalid length. [ 41.763945][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.771899][ T4822] netlink: 92 bytes leftover after parsing attributes in process `syz.5.475'. [ 41.778313][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.852253][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.874256][ T4761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.881621][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.479'. [ 41.903626][ T4630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.913877][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.479'. [ 41.931507][ T4761] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.952318][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.959592][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.985701][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.992842][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.005374][ T4838] loop0: detected capacity change from 0 to 8192 [ 42.030536][ T4838] FAT-fs (loop0): bogus sectors per cluster 0 [ 42.036794][ T4838] FAT-fs (loop0): Can't find a valid FAT filesystem [ 42.099824][ T4761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.127360][ T4864] loop5: detected capacity change from 0 to 256 [ 42.166807][ T4870] unsupported nla_type 52263 [ 42.181900][ T4630] veth0_vlan: entered promiscuous mode [ 42.199870][ T4630] veth1_vlan: entered promiscuous mode [ 42.237099][ T4630] veth0_macvtap: entered promiscuous mode [ 42.244973][ T4630] veth1_macvtap: entered promiscuous mode [ 42.268471][ T4630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.286000][ T4630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.300202][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 42.300295][ T29] audit: type=1400 audit(42.277:712): avc: denied { mount } for pid=4889 comm="syz.0.490" name="/" dev="ramfs" ino=10531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.328472][ T4761] veth0_vlan: entered promiscuous mode [ 42.337166][ T29] audit: type=1326 audit(42.317:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 42.360348][ T29] audit: type=1326 audit(42.317:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 42.385912][ T29] audit: type=1326 audit(42.317:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 42.387946][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.408603][ T29] audit: type=1400 audit(42.317:716): avc: denied { unmount } for pid=4889 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.408626][ T29] audit: type=1326 audit(42.357:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 42.408647][ T29] audit: type=1326 audit(42.357:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ae08ebe9 code=0x7ffc0000 [ 42.419970][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.497048][ T4761] veth1_vlan: entered promiscuous mode [ 42.503416][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.517503][ T29] audit: type=1400 audit(42.497:719): avc: denied { mounton } for pid=4630 comm="syz-executor" path="/root/syzkaller.lTXePG/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 42.551670][ T4761] veth0_macvtap: entered promiscuous mode [ 42.563034][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.564539][ T29] audit: type=1400 audit(42.507:720): avc: denied { search } for pid=4894 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.594109][ T29] audit: type=1400 audit(42.507:721): avc: denied { search } for pid=4894 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.597420][ T4761] veth1_macvtap: entered promiscuous mode [ 42.632775][ T4897] netlink: 1 bytes leftover after parsing attributes in process `syz.0.491'. [ 42.646916][ T4897] xt_policy: neither incoming nor outgoing policy selected [ 42.655875][ T4761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.683747][ T4761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.702471][ T3335] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.723731][ T3335] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.741971][ T3335] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.756572][ T3335] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.851943][ T3390] kernel write not supported for file [eventfd] (pid: 3390 comm: kworker/0:3) [ 42.863341][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.883465][ T4934] loop5: detected capacity change from 0 to 1024 [ 42.888968][ T4942] loop0: detected capacity change from 0 to 1024 [ 42.891264][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.922115][ T4942] EXT4-fs: Ignoring removed nobh option [ 42.937568][ T4934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.957643][ T4942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.035856][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.099129][ T4965] vhci_hcd: default hub control req: 2309 v0017 i0000 l0 [ 43.137860][ T3564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.217723][ T4989] SELinux: failed to load policy [ 43.534169][ T5045] loop0: detected capacity change from 0 to 8192 [ 43.562075][ T5045] syz.0.529: attempt to access beyond end of device [ 43.562075][ T5045] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 43.578235][ T5045] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 43.586178][ T5045] FAT-fs (loop0): Filesystem has been set read-only [ 43.596481][ T5045] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 43.605589][ T5054] netlink: 'syz.7.533': attribute type 1 has an invalid length. [ 43.611840][ T5045] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 43.617440][ T5054] team0: Device vxcan3 is of different type [ 43.671217][ T5059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 43.721187][ T5065] sg_write: data in/out 197376/1 bytes for SCSI command 0x26-- guessing data in; [ 43.721187][ T5065] program syz.0.538 not setting count and/or reply_len properly [ 43.761496][ T5073] loop7: detected capacity change from 0 to 128 [ 43.778881][ T5073] netlink: 56 bytes leftover after parsing attributes in process `syz.7.542'. [ 43.794040][ T5073] netlink: 16 bytes leftover after parsing attributes in process `syz.7.542'. [ 43.820415][ T5073] netlink: 28 bytes leftover after parsing attributes in process `syz.7.542'. [ 43.829450][ T5073] netlink: 196 bytes leftover after parsing attributes in process `syz.7.542'. [ 43.841644][ T5073] netlink: 28 bytes leftover after parsing attributes in process `syz.7.542'. [ 43.887591][ T5089] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 43.887591][ T5089] program syz.0.550 not setting count and/or reply_len properly [ 44.116297][ T5133] netlink: 'syz.5.568': attribute type 1 has an invalid length. [ 44.140933][ T5133] bond1: entered promiscuous mode [ 44.146796][ T5133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.170751][ T5133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.191738][ T5133] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 44.202270][ T5133] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 44.223367][ T5133] bond1: (slave vxcan3): making interface the new active one [ 44.230989][ T5133] vxcan3: entered promiscuous mode [ 44.237425][ T5133] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 44.277534][ T5143] syzkaller1: entered promiscuous mode [ 44.283042][ T5143] syzkaller1: entered allmulticast mode [ 44.386026][ T5176] netlink: 'syz.6.588': attribute type 10 has an invalid length. [ 44.398120][ T5176] team0: Device hsr_slave_0 failed to register rx_handler [ 44.408909][ T5178] SELinux: policydb version -407613062 does not match my version range 15-35 [ 44.422007][ T5184] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 44.422883][ T5178] SELinux: failed to load policy [ 44.448528][ T5184] bond1: entered promiscuous mode [ 44.460184][ T5184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.491882][ T5184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.505206][ T5184] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 44.515580][ T5184] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 44.528684][ T5184] bond1: (slave vxcan3): making interface the new active one [ 44.536301][ T5184] vxcan3: entered promiscuous mode [ 44.542913][ T5184] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 44.582984][ T5193] hub 6-0:1.0: USB hub found [ 44.602462][ T5193] hub 6-0:1.0: 8 ports detected [ 44.709027][ T5230] netlink: 'syz.6.611': attribute type 1 has an invalid length. [ 44.911732][ T5247] netlink: 'syz.6.619': attribute type 1 has an invalid length. [ 45.206033][ T5261] netlink: 'syz.7.626': attribute type 1 has an invalid length. [ 45.216299][ T5263] SELinux: policydb version -407613062 does not match my version range 15-35 [ 45.225849][ T5263] SELinux: failed to load policy [ 45.251536][ T5265] sg_write: data in/out 197376/1 bytes for SCSI command 0x26-- guessing data in; [ 45.251536][ T5265] program syz.6.628 not setting count and/or reply_len properly [ 45.320462][ T5270] loop7: detected capacity change from 0 to 164 [ 45.336565][ T5270] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 45.777038][ T5326] netlink: 'syz.0.655': attribute type 4 has an invalid length. [ 45.946683][ T3398] hid_parser_main: 16 callbacks suppressed [ 45.946700][ T3398] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.961952][ T3398] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.124685][ T5357] netlink: 'syz.5.669': attribute type 1 has an invalid length. [ 46.149850][ T5360] loop7: detected capacity change from 0 to 1024 [ 46.162753][ T5357] bond2: entered promiscuous mode [ 46.183329][ T5360] EXT4-fs: Ignoring removed oldalloc option [ 46.189577][ T5360] EXT4-fs: Ignoring removed bh option [ 46.196408][ T5357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 46.221773][ T5366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 46.229012][ T5366] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 46.239385][ T5366] bond2: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 46.241760][ T5360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.251215][ T5366] bond2: (slave vxcan5): making interface the new active one [ 46.269937][ T5366] vxcan5: entered promiscuous mode [ 46.276734][ T5366] bond2: (slave vxcan5): Enslaving as an active interface with an up link [ 46.357031][ T5376] loop2: detected capacity change from 0 to 128 [ 46.374138][ T4761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.400710][ T5376] syz.2.676: attempt to access beyond end of device [ 46.400710][ T5376] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 46.426709][ T5376] syz.2.676: attempt to access beyond end of device [ 46.426709][ T5376] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 46.441193][ T5376] syz.2.676: attempt to access beyond end of device [ 46.441193][ T5376] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 46.458409][ T5376] syz.2.676: attempt to access beyond end of device [ 46.458409][ T5376] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 46.472021][ T5376] syz.2.676: attempt to access beyond end of device [ 46.472021][ T5376] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 46.495330][ T5387] syz.2.676: attempt to access beyond end of device [ 46.495330][ T5387] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 46.511758][ T5390] loop6: detected capacity change from 0 to 512 [ 46.512716][ T5376] syz.2.676: attempt to access beyond end of device [ 46.512716][ T5376] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 46.537667][ T5390] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.682: iget: bad i_size value: 38620345925642 [ 46.550965][ T5390] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.682: couldn't read orphan inode 15 (err -117) [ 46.564444][ T5390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.592992][ T5376] syz.2.676: attempt to access beyond end of device [ 46.592992][ T5376] loop2: rw=2049, sector=289, nr_sectors = 16 limit=128 [ 46.593848][ T5396] loop7: detected capacity change from 0 to 512 [ 46.606788][ T5387] syz.2.676: attempt to access beyond end of device [ 46.606788][ T5387] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 46.632566][ T5396] EXT4-fs: Ignoring removed nobh option [ 46.637518][ T4630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.688095][ T5406] netlink: 'syz.6.686': attribute type 1 has an invalid length. [ 46.705032][ T5406] bond1: entered promiscuous mode [ 46.710458][ T5406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.722362][ T5396] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.677: corrupted inode contents [ 46.735943][ T5406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.743175][ T5406] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 46.754044][ T5406] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 46.765957][ T5406] bond1: (slave vxcan3): making interface the new active one [ 46.773347][ T5406] vxcan3: entered promiscuous mode [ 46.780514][ T5406] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 46.782667][ T5396] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.677: mark_inode_dirty error [ 46.832400][ T5396] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.677: corrupted inode contents [ 46.856986][ T5396] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.677: mark_inode_dirty error [ 46.876543][ T5396] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.677: Failed to acquire dquot type 0 [ 46.896896][ T5396] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.677: corrupted inode contents [ 46.919310][ T5396] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.677: mark_inode_dirty error [ 46.931792][ T5396] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.677: corrupted inode contents [ 46.957351][ T5396] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.677: mark_inode_dirty error [ 46.984645][ T5396] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.677: corrupted inode contents [ 46.998788][ T5396] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 47.007974][ T5396] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.677: corrupted inode contents [ 47.020681][ T5396] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.677: mark_inode_dirty error [ 47.064501][ T5446] netlink: 'syz.6.705': attribute type 1 has an invalid length. [ 47.091483][ T5396] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 47.093283][ T5446] bond2: entered promiscuous mode [ 47.115228][ T5396] EXT4-fs (loop7): 1 truncate cleaned up [ 47.121306][ T5396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.122265][ T5446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 47.186468][ T4761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.207095][ T5446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 47.214603][ T5446] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 47.225647][ T5446] bond2: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 47.237998][ T5446] bond2: (slave vxcan5): making interface the new active one [ 47.245622][ T5446] vxcan5: entered promiscuous mode [ 47.251954][ T5446] bond2: (slave vxcan5): Enslaving as an active interface with an up link [ 47.273382][ T5452] __nla_validate_parse: 9 callbacks suppressed [ 47.273474][ T5452] netlink: 132 bytes leftover after parsing attributes in process `syz.7.707'. [ 47.432836][ T5464] netlink: 28 bytes leftover after parsing attributes in process `syz.7.714'. [ 47.469179][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 47.469195][ T29] audit: type=1326 audit(47.447:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.502899][ T29] audit: type=1326 audit(47.447:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.525548][ T29] audit: type=1326 audit(47.447:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.548331][ T29] audit: type=1326 audit(47.447:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.571476][ T29] audit: type=1326 audit(47.447:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.594274][ T29] audit: type=1326 audit(47.447:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.617358][ T29] audit: type=1326 audit(47.447:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.640084][ T29] audit: type=1326 audit(47.447:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.662662][ T29] audit: type=1326 audit(47.447:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.685514][ T5468] Falling back ldisc for ttyS3. [ 47.690489][ T29] audit: type=1326 audit(47.507:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.7.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abd43ebe9 code=0x7ffc0000 [ 47.822332][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 47.835064][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 47.874256][ T5506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5506 comm=syz.0.734 [ 47.877397][ T5508] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 48.166975][ T5556] netlink: 'syz.6.757': attribute type 1 has an invalid length. [ 48.175431][ T5555] openvswitch: netlink: Message has 6 unknown bytes. [ 48.181287][ T5556] bond3: entered promiscuous mode [ 48.188028][ T5556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 48.212122][ T5556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 48.219591][ T5556] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 48.230148][ T5556] bond3: (slave vxcan7): Setting fail_over_mac to active for active-backup mode [ 48.242173][ T5556] bond3: (slave vxcan7): making interface the new active one [ 48.249741][ T5556] vxcan7: entered promiscuous mode [ 48.258396][ T5556] bond3: (slave vxcan7): Enslaving as an active interface with an up link [ 48.298715][ T5566] loop6: detected capacity change from 0 to 1024 [ 48.305531][ T5566] EXT4-fs: Ignoring removed oldalloc option [ 48.311617][ T5566] EXT4-fs: Ignoring removed bh option [ 48.335430][ T5566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.363258][ T5576] ipvlan2: entered promiscuous mode [ 48.455632][ T4630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.565438][ T5614] loop2: detected capacity change from 0 to 1024 [ 48.574399][ T5614] EXT4-fs: Ignoring removed oldalloc option [ 48.580522][ T5614] EXT4-fs: Ignoring removed bh option [ 48.612481][ T5614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.716760][ T5628] SELinux: failed to load policy [ 48.724395][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.999049][ T5655] netlink: 96 bytes leftover after parsing attributes in process `syz.7.800'. [ 49.048430][ T5659] loop7: detected capacity change from 0 to 512 [ 49.066047][ T5659] EXT4-fs: Ignoring removed nobh option [ 49.076190][ T5659] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.802: corrupted inode contents [ 49.223039][ T5659] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.802: mark_inode_dirty error [ 49.283842][ T5659] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.802: corrupted inode contents [ 49.304905][ T5659] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.802: mark_inode_dirty error [ 49.319391][ T5659] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.802: Failed to acquire dquot type 0 [ 49.334175][ T5659] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.802: corrupted inode contents [ 49.347740][ T5659] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.802: mark_inode_dirty error [ 49.365203][ T5678] loop6: detected capacity change from 0 to 512 [ 49.373932][ T5659] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.802: corrupted inode contents [ 49.388068][ T5659] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.802: mark_inode_dirty error [ 49.401088][ T5678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.417798][ T5659] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.802: corrupted inode contents [ 49.430722][ T5659] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 49.436086][ T5678] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.460635][ T5659] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.802: corrupted inode contents [ 49.472937][ T5659] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.802: mark_inode_dirty error [ 49.486421][ T5659] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 49.506888][ T5659] EXT4-fs (loop7): 1 truncate cleaned up [ 49.513194][ T5659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.527126][ T4630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.627281][ T4761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.815320][ T5706] vlan2: entered allmulticast mode [ 49.836139][ T5706] dummy0: entered allmulticast mode [ 50.022025][ T5737] netlink: 'syz.2.837': attribute type 10 has an invalid length. [ 50.029899][ T5737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.837'. [ 50.052641][ T5737] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 50.072345][ T5741] netlink: 48 bytes leftover after parsing attributes in process `syz.5.847'. [ 50.201706][ T5758] netlink: 104 bytes leftover after parsing attributes in process `syz.5.846'. [ 50.208168][ T5764] loop6: detected capacity change from 0 to 512 [ 50.219034][ T5764] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.228184][ T5764] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 50.240317][ T5764] EXT4-fs (loop6): 1 truncate cleaned up [ 50.246672][ T5764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.354714][ T5782] ipvlan2: entered promiscuous mode [ 50.368520][ T5775] netlink: 'syz.2.855': attribute type 13 has an invalid length. [ 50.376384][ T5775] netlink: 'syz.2.855': attribute type 17 has an invalid length. [ 50.415795][ T5787] loop5: detected capacity change from 0 to 128 [ 50.425712][ T5787] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 50.433985][ T5787] FAT-fs (loop5): Filesystem has been set read-only [ 50.445491][ T5787] bio_check_eod: 9 callbacks suppressed [ 50.445507][ T5787] syz.5.860: attempt to access beyond end of device [ 50.445507][ T5787] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 50.465541][ T5787] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 50.470421][ T5775] dummy0: left promiscuous mode [ 50.473608][ T5787] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 50.487167][ T5787] syz.5.860: attempt to access beyond end of device [ 50.487167][ T5787] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.501406][ T5787] syz.5.860: attempt to access beyond end of device [ 50.501406][ T5787] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.535763][ T5775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.551966][ T5787] syz.5.860: attempt to access beyond end of device [ 50.551966][ T5787] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 50.870280][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 51.082206][ T4630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.143114][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.888'. [ 51.382575][ T5885] netlink: 'syz.7.905': attribute type 3 has an invalid length. [ 51.415070][ T5893] SELinux: policydb version 0 does not match my version range 15-35 [ 51.423313][ T5893] SELinux: failed to load policy [ 51.455538][ T5897] loop2: detected capacity change from 0 to 512 [ 51.485159][ T5897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.557980][ T5915] loop6: detected capacity change from 0 to 128 [ 51.566829][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.580335][ T5915] syz.6.919: attempt to access beyond end of device [ 51.580335][ T5915] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 51.596667][ T5915] syz.6.919: attempt to access beyond end of device [ 51.596667][ T5915] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 51.612764][ T5915] syz.6.919: attempt to access beyond end of device [ 51.612764][ T5915] loop6: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 51.626994][ T5915] syz.6.919: attempt to access beyond end of device [ 51.626994][ T5915] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 51.641470][ T5915] syz.6.919: attempt to access beyond end of device [ 51.641470][ T5915] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 51.655881][ T5915] syz.6.919: attempt to access beyond end of device [ 51.655881][ T5915] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 51.853622][ T5941] 9pnet_fd: Insufficient options for proto=fd [ 51.885295][ T5945] lo speed is unknown, defaulting to 1000 [ 51.891222][ T5945] lo speed is unknown, defaulting to 1000 [ 51.897403][ T5945] lo speed is unknown, defaulting to 1000 [ 51.903488][ T5945] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.911144][ T5945] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 51.920371][ T5945] lo speed is unknown, defaulting to 1000 [ 51.926595][ T5945] lo speed is unknown, defaulting to 1000 [ 51.932725][ T5945] lo speed is unknown, defaulting to 1000 [ 51.938691][ T5945] lo speed is unknown, defaulting to 1000 [ 51.944913][ T5945] lo speed is unknown, defaulting to 1000 [ 52.310636][ T5949] loop7: detected capacity change from 0 to 128 [ 52.347374][ T31] Buffer I/O error on dev loop7, logical block 298, lost async page write [ 52.356385][ T31] Buffer I/O error on dev loop7, logical block 299, lost async page write [ 52.365999][ T31] Buffer I/O error on dev loop7, logical block 300, lost async page write [ 52.375126][ T31] Buffer I/O error on dev loop7, logical block 301, lost async page write [ 52.383901][ T31] Buffer I/O error on dev loop7, logical block 302, lost async page write [ 52.393670][ T31] Buffer I/O error on dev loop7, logical block 303, lost async page write [ 52.402390][ T31] Buffer I/O error on dev loop7, logical block 304, lost async page write [ 52.432184][ T5957] vlan2: entered allmulticast mode [ 52.437660][ T5957] dummy0: entered allmulticast mode [ 52.490616][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 52.490633][ T29] audit: type=1326 audit(52.467:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.5.944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f07da3d5ba7 code=0x0 [ 52.531849][ T5975] loop2: detected capacity change from 0 to 512 [ 52.540667][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.571853][ T29] audit: type=1400 audit(52.547:1168): avc: denied { ioctl } for pid=5974 comm="syz.2.947" path="/204/file1/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.617889][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.659001][ T5984] loop7: detected capacity change from 0 to 512 [ 52.684546][ T29] audit: type=1400 audit(52.657:1169): avc: denied { mounton } for pid=5985 comm="syz.2.949" path="/205/file0" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.685643][ T5984] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.707017][ T29] audit: type=1400 audit(52.657:1170): avc: denied { mount } for pid=5985 comm="syz.2.949" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.717423][ T5984] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 52.750140][ T5984] EXT4-fs (loop7): 1 truncate cleaned up [ 52.750537][ T5988] loop2: detected capacity change from 0 to 512 [ 52.756276][ T5984] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.947987][ T29] audit: type=1400 audit(52.927:1171): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.087752][ T5992] Set syz1 is full, maxelem 65536 reached [ 53.134140][ T5984] ================================================================== [ 53.142504][ T5984] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 53.150557][ T5984] [ 53.152872][ T5984] write to 0xffff8881163c19a8 of 8 bytes by task 5997 on cpu 1: [ 53.160495][ T5984] filemap_splice_read+0x4f4/0x740 [ 53.165622][ T5984] ext4_file_splice_read+0x8f/0xb0 [ 53.170748][ T5984] splice_direct_to_actor+0x26c/0x680 [ 53.176132][ T5984] do_splice_direct+0xda/0x150 [ 53.180902][ T5984] do_sendfile+0x380/0x650 [ 53.185341][ T5984] __x64_sys_sendfile64+0x105/0x150 [ 53.190603][ T5984] x64_sys_call+0x2bb0/0x2ff0 [ 53.195296][ T5984] do_syscall_64+0xd2/0x200 [ 53.199898][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.205798][ T5984] [ 53.208154][ T5984] write to 0xffff8881163c19a8 of 8 bytes by task 5984 on cpu 0: [ 53.215864][ T5984] filemap_splice_read+0x4f4/0x740 [ 53.220989][ T5984] ext4_file_splice_read+0x8f/0xb0 [ 53.226136][ T5984] splice_direct_to_actor+0x26c/0x680 [ 53.231527][ T5984] do_splice_direct+0xda/0x150 [ 53.236308][ T5984] do_sendfile+0x380/0x650 [ 53.240844][ T5984] __x64_sys_sendfile64+0x105/0x150 [ 53.246061][ T5984] x64_sys_call+0x2bb0/0x2ff0 [ 53.250756][ T5984] do_syscall_64+0xd2/0x200 [ 53.255272][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.261168][ T5984] [ 53.263489][ T5984] value changed: 0x0000000000025000 -> 0x00000000000251f5 [ 53.270583][ T5984] [ 53.272887][ T5984] Reported by Kernel Concurrency Sanitizer on: [ 53.279114][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.7.951 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.290301][ T5984] Tainted: [W]=WARN [ 53.294092][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.304129][ T5984] ================================================================== [ 53.389769][ T4761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.