last executing test programs: 42.85721969s ago: executing program 0 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 42.8310477s ago: executing program 0 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000780)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x4) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x48200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x2000, 0x0, 0x9, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 42.420697682s ago: executing program 0 (id=849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r4}, 0x18) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="e8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="81", 0x1}], 0x1}}], 0x2, 0x20004050) 42.367180323s ago: executing program 0 (id=852): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 42.054663444s ago: executing program 0 (id=867): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 41.835004256s ago: executing program 0 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 41.800936746s ago: executing program 32 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 3.175881811s ago: executing program 4 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffd31, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.942466112s ago: executing program 4 (id=1337): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5b1d071468882d03, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 2.838000893s ago: executing program 4 (id=1339): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(r0) 1.983576048s ago: executing program 4 (id=1347): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.920622109s ago: executing program 3 (id=1349): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffd31, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.75191482s ago: executing program 1 (id=1350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getrandom(&(0x7f0000000340)=""/179, 0xb3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc0, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x94, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xc0}}, 0x24040084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x2f, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.67908099s ago: executing program 1 (id=1351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 1.113520593s ago: executing program 3 (id=1353): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5b1d071468882d03, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 1.103762614s ago: executing program 4 (id=1354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x8) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) 1.100505654s ago: executing program 1 (id=1364): socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @remote, 0x3}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.049262794s ago: executing program 3 (id=1355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 964.750204ms ago: executing program 3 (id=1359): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 941.427104ms ago: executing program 1 (id=1360): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = gettid() ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 761.458925ms ago: executing program 5 (id=1362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getrandom(&(0x7f0000000340)=""/179, 0xb3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc0, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x94, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xc0}}, 0x24040084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x2f, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 750.443236ms ago: executing program 3 (id=1365): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) 695.503266ms ago: executing program 3 (id=1366): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) ioperm(0x2, 0x7fb, 0x100) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 694.800016ms ago: executing program 5 (id=1376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r4, 0x25, 0x4}, 0x14) 636.572426ms ago: executing program 5 (id=1368): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100203, 0x20, 0xfffffffb, 0x0, 0x0, 0xec, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) unshare(0x22020400) 569.254137ms ago: executing program 5 (id=1369): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5b1d071468882d03, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 568.699847ms ago: executing program 1 (id=1370): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008500000023"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) 554.227767ms ago: executing program 5 (id=1371): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 497.694597ms ago: executing program 5 (id=1373): socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @remote, 0x3}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 497.440848ms ago: executing program 2 (id=1374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 497.001337ms ago: executing program 1 (id=1384): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 428.687738ms ago: executing program 2 (id=1375): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f00000008c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0xea54}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4011}, 0x4008030) 398.813377ms ago: executing program 2 (id=1377): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 332.876878ms ago: executing program 2 (id=1378): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000580)={r1, 0x2, 0x6}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x2a) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 186.691539ms ago: executing program 4 (id=1379): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$evdev(0x0, 0x1, 0x2002) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 133.262329ms ago: executing program 2 (id=1380): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000014c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x493, &(0x7f0000000540)={0x0, 0x5664, 0x400, 0x3, 0x47, 0x0, r0}, &(0x7f00000004c0)=0x0, &(0x7f0000001500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 0s ago: executing program 2 (id=1381): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): to 512 [ 52.328794][ T4183] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.353360][ T4183] EXT4-fs (loop0): 1 orphan inode deleted [ 52.359710][ T4183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.372509][ T265] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 52.384426][ T4183] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.423528][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.447574][ T4191] netlink: 176 bytes leftover after parsing attributes in process `syz.3.265'. [ 52.505772][ T4197] loop3: detected capacity change from 0 to 2048 [ 52.523196][ T4197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.548314][ T4197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 52.558952][ T4197] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 52.584205][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.745580][ T4210] netlink: 'syz.0.278': attribute type 30 has an invalid length. [ 52.762491][ T4209] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 52.770220][ T4209] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 52.777933][ T4209] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.269'. [ 52.788475][ T4209] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 52.796232][ T4209] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 52.803955][ T4209] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.269'. [ 52.816768][ T4212] netlink: 'syz.4.270': attribute type 7 has an invalid length. [ 52.824502][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 52.851150][ T4210] Zero length message leads to an empty skb [ 52.894746][ T4217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4217 comm=syz.3.271 [ 53.215352][ T4228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 53.253827][ T4231] loop2: detected capacity change from 0 to 128 [ 53.276905][ T4233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.280'. [ 53.291926][ T4231] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.318951][ T4231] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.463821][ T4241] bridge: RTM_NEWNEIGH with invalid ether address [ 53.784554][ T29] kauditd_printk_skb: 1112 callbacks suppressed [ 53.784570][ T29] audit: type=1400 audit(1762600646.727:2159): avc: denied { setopt } for pid=4257 comm="syz.3.291" lport=57802 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 53.816778][ T4262] sctp: [Deprecated]: syz.3.291 (pid 4262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.816778][ T4262] Use struct sctp_sack_info instead [ 53.926222][ T29] audit: type=1400 audit(1762600646.867:2160): avc: denied { create } for pid=4270 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.974286][ T29] audit: type=1400 audit(1762600646.897:2161): avc: denied { sys_admin } for pid=4270 comm="syz.4.297" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 54.043977][ T4281] netlink: 96 bytes leftover after parsing attributes in process `syz.3.308'. [ 54.090837][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.145166][ T29] audit: type=1400 audit(1762600647.087:2162): avc: denied { mount } for pid=4286 comm="syz.4.301" name="/" dev="ramfs" ino=7625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.478333][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 54.487609][ T4301] hsr_slave_0: left promiscuous mode [ 54.493709][ T29] audit: type=1400 audit(1762600647.417:2163): avc: denied { associate } for pid=4299 comm="syz.3.305" name="134" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.521493][ T4301] hsr_slave_1: left promiscuous mode [ 54.740944][ T29] audit: type=1400 audit(1762600647.677:2164): avc: denied { create } for pid=4309 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 54.840091][ T29] audit: type=1400 audit(1762600647.777:2165): avc: denied { write } for pid=4315 comm="syz.4.312" path="socket:[7711]" dev="sockfs" ino=7711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.246208][ T4331] loop4: detected capacity change from 0 to 1764 [ 55.255552][ T29] audit: type=1326 audit(1762600648.197:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 55.279015][ T29] audit: type=1326 audit(1762600648.197:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 55.316504][ T29] audit: type=1326 audit(1762600648.247:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4329 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 55.454905][ T4343] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 55.462445][ T4343] vhci_hcd: invalid port number 96 [ 55.467576][ T4343] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 55.478132][ T4338] loop2: detected capacity change from 0 to 512 [ 55.510377][ T4338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.531057][ T4338] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.561263][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.769398][ T4366] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 55.830747][ T4370] wg2: entered promiscuous mode [ 55.835769][ T4370] wg2: entered allmulticast mode [ 55.961772][ T4379] sctp: [Deprecated]: syz.0.336 (pid 4379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.961772][ T4379] Use struct sctp_sack_info instead [ 56.897668][ T4472] __nla_validate_parse: 3 callbacks suppressed [ 56.897741][ T4472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'. [ 57.016074][ T4476] loop1: detected capacity change from 0 to 1024 [ 57.034514][ T4476] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.045572][ T4476] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.097120][ T4476] JBD2: no valid journal superblock found [ 57.103047][ T4476] EXT4-fs (loop1): Could not load journal inode [ 57.591056][ T4507] netlink: 64 bytes leftover after parsing attributes in process `syz.0.364'. [ 57.656854][ T4511] ip6gretap0: entered promiscuous mode [ 57.668167][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 57.679281][ T4511] ip6gretap0 (unregistering): left promiscuous mode [ 57.873353][ T4525] $Hÿ: renamed from bond0 [ 57.889889][ T4525] $Hÿ: entered promiscuous mode [ 57.895113][ T4525] bond_slave_0: entered promiscuous mode [ 57.901013][ T4525] bond_slave_1: entered promiscuous mode [ 58.198338][ T4547] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.398430][ T4566] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 58.471998][ T4574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.391'. [ 58.480943][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 58.493349][ T4574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.391'. [ 58.502617][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 58.794088][ T29] kauditd_printk_skb: 1084 callbacks suppressed [ 58.794102][ T29] audit: type=1326 audit(1762600651.737:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1327076567 code=0x7ffc0000 [ 58.823760][ T29] audit: type=1326 audit(1762600651.737:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132701b779 code=0x7ffc0000 [ 58.847052][ T29] audit: type=1326 audit(1762600651.737:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 58.895152][ T29] audit: type=1326 audit(1762600651.787:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1327076567 code=0x7ffc0000 [ 58.918630][ T29] audit: type=1326 audit(1762600651.787:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132701b779 code=0x7ffc0000 [ 58.941973][ T29] audit: type=1326 audit(1762600651.787:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 58.965448][ T29] audit: type=1326 audit(1762600651.797:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1327076567 code=0x7ffc0000 [ 58.988804][ T29] audit: type=1326 audit(1762600651.797:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132701b779 code=0x7ffc0000 [ 59.012125][ T29] audit: type=1326 audit(1762600651.797:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 59.035482][ T29] audit: type=1326 audit(1762600651.807:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1327076567 code=0x7ffc0000 [ 59.152669][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 59.222256][ T4615] sd 0:0:1:0: device reset [ 59.255943][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 59.305053][ T4622] bridge: RTM_NEWNEIGH with invalid ether address [ 59.370435][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 59.388727][ T4436] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.407379][ T4436] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.431616][ T4634] loop2: detected capacity change from 0 to 1024 [ 59.439705][ T4436] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.455768][ T4436] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.481080][ T4634] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 59.492935][ T4634] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 59.517103][ T4634] EXT4-fs (loop2): failed to initialize system zone (-117) [ 59.524438][ T4634] EXT4-fs (loop2): mount failed [ 59.550337][ T4634] loop2: detected capacity change from 0 to 512 [ 59.577278][ T4634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.593204][ T4634] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.648718][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.713034][ T4665] netlink: 'syz.4.427': attribute type 7 has an invalid length. [ 59.899433][ T4675] netlink: 'syz.4.431': attribute type 10 has an invalid length. [ 59.921814][ T4675] team0: Port device dummy0 added [ 59.932049][ T4675] netlink: 'syz.4.431': attribute type 10 has an invalid length. [ 59.942456][ T4675] team0: Port device dummy0 removed [ 59.950604][ T4675] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 60.172233][ T4695] lo speed is unknown, defaulting to 1000 [ 60.178014][ T4695] lo speed is unknown, defaulting to 1000 [ 60.184071][ T4695] lo speed is unknown, defaulting to 1000 [ 60.190080][ T4695] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.197871][ T4695] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 60.207761][ T4695] lo speed is unknown, defaulting to 1000 [ 60.214194][ T4695] lo speed is unknown, defaulting to 1000 [ 60.220357][ T4695] lo speed is unknown, defaulting to 1000 [ 60.226627][ T4695] lo speed is unknown, defaulting to 1000 [ 60.239383][ T4695] lo speed is unknown, defaulting to 1000 [ 60.251791][ T4701] veth1_macvtap: left promiscuous mode [ 60.257290][ T4701] macsec0: entered allmulticast mode [ 60.275858][ T4701] veth1_macvtap: entered promiscuous mode [ 60.281631][ T4701] veth1_macvtap: entered allmulticast mode [ 60.287541][ T4701] macsec0: entered promiscuous mode [ 60.336515][ T4709] bridge: RTM_NEWNEIGH with invalid ether address [ 60.362189][ T4711] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 60.402250][ T4711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.419808][ T4711] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 60.419987][ T4716] loop3: detected capacity change from 0 to 512 [ 60.436827][ T4716] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.437053][ T4711] bond3 (unregistering): Released all slaves [ 60.463658][ T4716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.489955][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.613067][ T4739] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 60.929181][ T4764] loop2: detected capacity change from 0 to 512 [ 60.943132][ T4764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.956347][ T4764] ext4 filesystem being mounted at /88/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.965564][ T4768] veth4: entered promiscuous mode [ 60.971810][ T4768] veth4: entered allmulticast mode [ 61.007436][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.057291][ T4776] loop1: detected capacity change from 0 to 128 [ 61.065602][ T4776] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.078155][ T4776] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.456137][ T4787] : renamed from bond_slave_0 (while UP) [ 61.802909][ T4818] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.823204][ T4820] loop3: detected capacity change from 0 to 128 [ 61.915733][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.000369][ T4818] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.119915][ T4839] syzkaller0: entered promiscuous mode [ 62.135574][ T4818] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.150005][ T4832] lo speed is unknown, defaulting to 1000 [ 62.187407][ T4818] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.278462][ T4436] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.293483][ T4436] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.303745][ T4436] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.315118][ T4436] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.342321][ T4862] __nla_validate_parse: 6 callbacks suppressed [ 62.342347][ T4862] netlink: 64 bytes leftover after parsing attributes in process `syz.2.506'. [ 62.403693][ T4870] netlink: 'syz.2.510': attribute type 10 has an invalid length. [ 62.418381][ T4870] team0: Port device dummy0 added [ 62.428351][ T4870] netlink: 'syz.2.510': attribute type 10 has an invalid length. [ 62.437875][ T4870] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.465365][ T4870] team0: Failed to send options change via netlink (err -105) [ 62.473329][ T4870] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.482904][ T4870] team0: Port device dummy0 removed [ 62.491802][ T4870] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.537476][ T4875] lo speed is unknown, defaulting to 1000 [ 62.700511][ T4891] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 62.714937][ T4891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.724760][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 62.736035][ T4891] bond1 (unregistering): Released all slaves [ 62.844050][ T4899] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 62.858219][ T4899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.871546][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 62.882468][ T4899] bond1 (unregistering): Released all slaves [ 63.023120][ T4906] bridge_slave_0: left allmulticast mode [ 63.028849][ T4906] bridge_slave_0: left promiscuous mode [ 63.034660][ T4906] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.044155][ T4906] bridge_slave_1: left allmulticast mode [ 63.049838][ T4906] bridge_slave_1: left promiscuous mode [ 63.055559][ T4906] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.065807][ T4906] bond0: (slave 30): Releasing backup interface [ 63.075697][ T4906] bond0: (slave bond_slave_1): Releasing backup interface [ 63.091592][ T4906] team0: Port device team_slave_0 removed [ 63.103796][ T4906] team0: Port device team_slave_1 removed [ 63.110951][ T4906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.118634][ T4906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.128195][ T4906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.135678][ T4906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.149924][ T1040] lo speed is unknown, defaulting to 1000 [ 63.590430][ T4938] bridge: RTM_NEWNEIGH with invalid ether address [ 63.614314][ T4942] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 63.646326][ T4942] bond1: (slave bridge3): making interface the new active one [ 63.661749][ T4942] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 63.955988][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 63.968974][ T4964] netlink: 236 bytes leftover after parsing attributes in process `syz.4.549'. [ 64.112275][ T4970] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.119824][ T4970] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 64.144640][ T4966] loop1: detected capacity change from 0 to 512 [ 64.153453][ T4966] EXT4-fs: Ignoring removed i_version option [ 64.175455][ T4966] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 64.185767][ T4966] System zones: 0-2, 18-18, 34-35 [ 64.302537][ T4966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.329339][ T4966] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.428753][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.739107][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 64.739124][ T29] audit: type=1400 audit(1762600657.677:3701): avc: denied { read } for pid=4992 comm="syz.2.560" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.106626][ T29] audit: type=1400 audit(1762600658.047:3702): avc: denied { write } for pid=4990 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 65.238515][ T5016] mmap: syz.4.569 (5016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.304873][ T29] audit: type=1400 audit(1762600658.247:3703): avc: denied { listen } for pid=5021 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.357557][ T5012] loop2: detected capacity change from 0 to 1024 [ 65.408420][ T5024] loop4: detected capacity change from 0 to 1024 [ 65.436428][ T5024] EXT4-fs: Ignoring removed oldalloc option [ 65.442645][ T5024] EXT4-fs: Ignoring removed bh option [ 65.448460][ T5012] EXT4-fs: Ignoring removed orlov option [ 65.454361][ T5012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.511471][ T5024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.524756][ T5012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.662852][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.684708][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.963960][ T29] audit: type=1400 audit(1762600658.837:3704): avc: denied { cmd } for pid=5040 comm="syz.1.578" path="socket:[10870]" dev="sockfs" ino=10870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.085915][ T5018] Set syz1 is full, maxelem 65536 reached [ 66.128877][ T29] audit: type=1400 audit(1762600659.067:3705): avc: denied { watch } for pid=5054 comm="syz.0.584" path="pipe:[9841]" dev="pipefs" ino=9841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 66.154747][ T29] audit: type=1400 audit(1762600659.097:3706): avc: denied { watch watch_reads } for pid=5056 comm="syz.3.585" path="/103/file0" dev="tmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.205742][ T5061] netlink: 'syz.3.586': attribute type 4 has an invalid length. [ 66.213654][ T29] audit: type=1400 audit(1762600659.147:3707): avc: denied { name_bind } for pid=5060 comm="syz.3.586" src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 66.277832][ T29] audit: type=1326 audit(1762600659.157:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 66.301602][ T29] audit: type=1326 audit(1762600659.157:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 66.325321][ T29] audit: type=1326 audit(1762600659.157:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.1.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 66.326674][ T5068] loop2: detected capacity change from 0 to 8192 [ 66.615161][ T5093] SELinux: ebitmap: truncated map [ 66.638059][ T5093] SELinux: failed to load policy [ 66.829632][ T5121] netlink: 'syz.2.612': attribute type 4 has an invalid length. [ 66.903398][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 66.975278][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 67.154078][ T5148] netlink: 96 bytes leftover after parsing attributes in process `syz.2.623'. [ 67.214025][ T5153] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 67.253017][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 67.271172][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 67.745377][ T5183] tipc: New replicast peer: 255.255.255.83 [ 67.751352][ T5183] tipc: Enabled bearer , priority 10 [ 67.762545][ T5185] wg2: entered promiscuous mode [ 67.767538][ T5185] wg2: entered allmulticast mode [ 67.844688][ T5189] vlan0: entered allmulticast mode [ 67.849875][ T5189] bridge_slave_0: entered allmulticast mode [ 67.936815][ T5191] lo speed is unknown, defaulting to 1000 [ 68.267293][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 68.309312][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 68.331274][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 68.360241][ T5205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 68.428757][ T5207] netlink: 'syz.4.648': attribute type 30 has an invalid length. [ 68.544870][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 68.571107][ T5216] netlink: 'syz.3.651': attribute type 10 has an invalid length. [ 68.595519][ T5213] bond1: entered promiscuous mode [ 68.600716][ T5213] bond1: entered allmulticast mode [ 68.608321][ T5213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.623879][ T5219] netlink: 'syz.3.651': attribute type 10 has an invalid length. [ 68.633616][ T5213] bond1 (unregistering): Released all slaves [ 68.679597][ T5216] team0: Port device dummy0 added [ 68.685848][ T5219] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 68.698862][ T5219] team0: Failed to send options change via netlink (err -105) [ 68.706845][ T5219] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 68.716225][ T5219] team0: Port device dummy0 removed [ 68.726393][ T5219] dummy0: entered promiscuous mode [ 68.733673][ T5219] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 68.905129][ T36] tipc: Node number set to 50632655 [ 69.018576][ T5231] loop3: detected capacity change from 0 to 1024 [ 69.045866][ T5231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.105478][ T5231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.139010][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.200194][ T5238] netlink: 96 bytes leftover after parsing attributes in process `syz.3.659'. [ 69.234911][ T5241] netlink: 332 bytes leftover after parsing attributes in process `syz.2.661'. [ 69.272619][ T5249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 69.282675][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 69.304616][ T5249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5249 comm=syz.2.664 [ 69.320683][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 69.697508][ T5282] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.751318][ T29] kauditd_printk_skb: 696 callbacks suppressed [ 69.751336][ T29] audit: type=1326 audit(1762600662.697:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.2.679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e439cf6c9 code=0x0 [ 69.780782][ T29] audit: type=1326 audit(1762600662.717:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.1.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 69.807255][ T5282] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.836288][ T5290] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 69.850028][ T5290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.863039][ T5282] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.877708][ T5290] bond2 (unregistering): Released all slaves [ 69.932844][ T5282] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.012728][ T29] audit: type=1400 audit(1762600662.957:4409): avc: denied { setopt } for pid=5295 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.040282][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.068059][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.084407][ T29] audit: type=1326 audit(1762600663.017:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5bfbf6c9 code=0x7ffc0000 [ 70.090346][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.107820][ T29] audit: type=1326 audit(1762600663.017:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5bfbf6c9 code=0x7ffc0000 [ 70.116148][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.139334][ T29] audit: type=1326 audit(1762600663.017:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbd5bfbf6c9 code=0x7ffc0000 [ 70.139372][ T29] audit: type=1326 audit(1762600663.017:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5bfbf6c9 code=0x7ffc0000 [ 70.194996][ T29] audit: type=1326 audit(1762600663.017:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5bfbf6c9 code=0x7ffc0000 [ 70.218359][ T29] audit: type=1326 audit(1762600663.017:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd5bfbf6c9 code=0x7ffc0000 [ 70.241810][ T29] audit: type=1326 audit(1762600663.017:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5bfbf6c9 code=0x7ffc0000 [ 70.349371][ T5305] loop1: detected capacity change from 0 to 1024 [ 70.357734][ T5305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.383896][ T5305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.410852][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.453290][ T5315] netlink: 'syz.1.691': attribute type 12 has an invalid length. [ 70.817916][ T5354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5354 comm=syz.0.708 [ 70.881981][ T5356] netlink: 'syz.0.710': attribute type 10 has an invalid length. [ 70.904405][ T5356] team0: Port device dummy0 added [ 70.935053][ T5356] netlink: 'syz.0.710': attribute type 10 has an invalid length. [ 70.963872][ T5356] team0: Port device dummy0 removed [ 70.977437][ T5356] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.071720][ T5367] wg2: left promiscuous mode [ 71.076388][ T5367] wg2: left allmulticast mode [ 71.095442][ T5367] wg2: entered promiscuous mode [ 71.100331][ T5367] wg2: entered allmulticast mode [ 71.191622][ T5375] netlink: 'syz.0.716': attribute type 12 has an invalid length. [ 72.287781][ T5409] veth1_macvtap: left promiscuous mode [ 72.293433][ T5409] macsec0: entered allmulticast mode [ 72.311503][ T5409] veth1_macvtap: entered promiscuous mode [ 72.317296][ T5409] veth1_macvtap: entered allmulticast mode [ 72.323902][ T5409] macsec0: entered promiscuous mode [ 72.362009][ T5411] veth4: entered promiscuous mode [ 72.367089][ T5411] veth4: entered allmulticast mode [ 72.415823][ T5418] netlink: 'syz.4.734': attribute type 12 has an invalid length. [ 72.454942][ T5420] lo speed is unknown, defaulting to 1000 [ 72.580487][ T5430] bond0: entered promiscuous mode [ 72.585607][ T5430] bond0: entered allmulticast mode [ 72.591043][ T5430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.600794][ T5430] bond0 (unregistering): Released all slaves [ 72.611047][ T5433] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.715921][ T5441] loop2: detected capacity change from 0 to 128 [ 72.883614][ T5441] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 72.891520][ T5441] FAT-fs (loop2): Filesystem has been set read-only [ 72.898459][ T5441] bio_check_eod: 37 callbacks suppressed [ 72.898478][ T5441] syz.2.743: attempt to access beyond end of device [ 72.898478][ T5441] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 72.918645][ T5441] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 72.926567][ T5441] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 72.934688][ T5441] syz.2.743: attempt to access beyond end of device [ 72.934688][ T5441] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.948187][ T5441] syz.2.743: attempt to access beyond end of device [ 72.948187][ T5441] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.961535][ T5441] syz.2.743: attempt to access beyond end of device [ 72.961535][ T5441] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.974941][ T5441] syz.2.743: attempt to access beyond end of device [ 72.974941][ T5441] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.988328][ T5441] syz.2.743: attempt to access beyond end of device [ 72.988328][ T5441] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 73.001576][ T5441] syz.2.743: attempt to access beyond end of device [ 73.001576][ T5441] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 73.014761][ T5441] syz.2.743: attempt to access beyond end of device [ 73.014761][ T5441] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 73.028039][ T5441] syz.2.743: attempt to access beyond end of device [ 73.028039][ T5441] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 73.041295][ T5441] syz.2.743: attempt to access beyond end of device [ 73.041295][ T5441] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 73.739810][ T5478] lo speed is unknown, defaulting to 1000 [ 73.959307][ T5495] loop1: detected capacity change from 0 to 164 [ 74.350649][ T5515] loop3: detected capacity change from 0 to 2048 [ 74.362854][ T5515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.422369][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.752982][ T5533] block device autoloading is deprecated and will be removed. [ 74.837607][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 74.837625][ T29] audit: type=1400 audit(1762600667.777:5021): avc: denied { ioctl } for pid=5532 comm="syz.0.776" path="/173/file0" dev="tmpfs" ino=918 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.003043][ T5540] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 75.013260][ T29] audit: type=1400 audit(1762600667.957:5022): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file0" dev="tmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.062573][ T5540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.073990][ T29] audit: type=1400 audit(1762600667.957:5023): avc: denied { read } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.096861][ T29] audit: type=1400 audit(1762600667.957:5024): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.120171][ T29] audit: type=1400 audit(1762600667.957:5025): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=626 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.151147][ T5538] loop1: detected capacity change from 0 to 8192 [ 75.190365][ T5543] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 75.202638][ T29] audit: type=1326 audit(1762600668.147:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 75.226920][ T5543] bond2 (unregistering): Released all slaves [ 75.230976][ T29] audit: type=1326 audit(1762600668.147:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 75.256342][ T29] audit: type=1326 audit(1762600668.147:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 75.281372][ T5545] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.363086][ T5545] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.399129][ T5551] loop3: detected capacity change from 0 to 512 [ 75.423053][ T5545] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.435397][ T29] audit: type=1326 audit(1762600668.377:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 75.480410][ T5551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.494288][ T5545] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.510143][ T5551] ext4 filesystem being mounted at /143/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.530765][ T5561] loop1: detected capacity change from 0 to 1024 [ 75.547823][ T29] audit: type=1326 audit(1762600668.377:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 75.571940][ T5561] EXT4-fs: inline encryption not supported [ 75.601368][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.633629][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.636900][ T5561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.661357][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.669557][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.813220][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.299769][ T5591] __nla_validate_parse: 6 callbacks suppressed [ 76.299784][ T5591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.796'. [ 76.315022][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 76.324743][ T5591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.796'. [ 76.333694][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 76.345151][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.382989][ T5598] bond0: (slave dummy0): Releasing backup interface [ 76.396611][ T5598] bridge_slave_0: left allmulticast mode [ 76.402499][ T5598] bridge_slave_0: left promiscuous mode [ 76.408253][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.426347][ T5598] bridge_slave_1: left allmulticast mode [ 76.432354][ T5598] bridge_slave_1: left promiscuous mode [ 76.438054][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.477068][ T5598] bond0: (slave bond_slave_0): Releasing backup interface [ 76.501647][ T5598] bond0: (slave bond_slave_1): Releasing backup interface [ 76.551719][ T5598] team0: Port device team_slave_0 removed [ 76.558710][ T5598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.566263][ T5598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.585926][ T5598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.593528][ T5598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.617564][ T5598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.862757][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 76.887533][ T5639] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 76.957103][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 76.986374][ T5645] netlink: 64 bytes leftover after parsing attributes in process `syz.3.819'. [ 76.997028][ T5639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.010491][ T5647] loop0: detected capacity change from 0 to 1024 [ 77.017486][ T5647] EXT4-fs: Ignoring removed orlov option [ 77.025398][ T5641] bond2 (unregistering): Released all slaves [ 77.043679][ T5647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.148836][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.250771][ T5660] lo speed is unknown, defaulting to 1000 [ 77.421841][ T5667] bond0: (slave dummy0): Releasing backup interface [ 77.435661][ T5667] bridge_slave_0: left allmulticast mode [ 77.441522][ T5667] bridge_slave_0: left promiscuous mode [ 77.447286][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.457226][ T5667] bridge_slave_1: left allmulticast mode [ 77.463035][ T5667] bridge_slave_1: left promiscuous mode [ 77.468785][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.478999][ T5667] bond0: (slave bond_slave_0): Releasing backup interface [ 77.489214][ T5667] bond0: (slave bond_slave_1): Releasing backup interface [ 77.520263][ T5667] team0: Port device team_slave_0 removed [ 77.544176][ T5667] team0: Port device team_slave_1 removed [ 77.551375][ T5667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.558807][ T5667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.568127][ T5667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.575621][ T5667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.586235][ T5667] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.605836][ T5665] lo speed is unknown, defaulting to 1000 [ 77.693435][ T5681] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 77.720764][ T5681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.734909][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 77.762230][ T5681] bond3 (unregistering): Released all slaves [ 77.865851][ T5692] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.885655][ T5690] lo speed is unknown, defaulting to 1000 [ 77.916314][ T5693] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.353947][ T5714] lo speed is unknown, defaulting to 1000 [ 78.439782][ T5719] lo speed is unknown, defaulting to 1000 [ 78.728093][ T5732] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 78.766548][ T5732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.781756][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 78.793020][ T5732] bond3 (unregistering): Released all slaves [ 78.869914][ T5738] loop0: detected capacity change from 0 to 512 [ 78.905973][ T5738] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.942230][ T5738] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.852: bad orphan inode 13 [ 78.961254][ T5738] ext4_test_bit(bit=12, block=18) = 1 [ 78.966813][ T5738] is_bad_inode(inode)=0 [ 78.971173][ T5738] NEXT_ORPHAN(inode)=2130706432 [ 78.976036][ T5738] max_ino=32 [ 78.979323][ T5738] i_nlink=1 [ 78.984098][ T5738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.063103][ T3320] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 79.095827][ T3320] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 79.408272][ T5763] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.417325][ T5763] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 79.441514][ T5759] loop4: detected capacity change from 0 to 512 [ 79.451305][ T5759] EXT4-fs: Ignoring removed i_version option [ 79.494931][ T4413] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.507359][ T5769] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 79.526567][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.540176][ T5759] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 79.549857][ T4413] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.561599][ T5759] System zones: 0-2, 18-18, 34-35 [ 79.568335][ T5759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.584683][ T5769] bond0: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 79.603034][ T5759] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.613641][ T5769] bond0: entered allmulticast mode [ 79.624114][ T5781] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 79.637119][ T4413] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.662112][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.673361][ T5764] lo speed is unknown, defaulting to 1000 [ 79.711344][ T4413] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.766613][ T5791] loop4: detected capacity change from 0 to 4096 [ 79.773691][ T5791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.785042][ T5791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.790442][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 80.151270][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 80.151361][ T29] audit: type=1400 audit(1762600929.101:5194): avc: denied { append } for pid=5790 comm="syz.4.869" path="/190/file0/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.543889][ T4413] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 80.554209][ T4413] bond0 (unregistering): Released all slaves [ 80.571989][ T5807] $Hÿ: (slave dummy0): Releasing backup interface [ 80.579339][ T5807] dummy0: left promiscuous mode [ 80.587894][ T5807] bridge_slave_0: left allmulticast mode [ 80.593658][ T5807] bridge_slave_0: left promiscuous mode [ 80.599372][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.608078][ T5807] bridge_slave_1: left allmulticast mode [ 80.614104][ T5807] bridge_slave_1: left promiscuous mode [ 80.620259][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.644096][ T5807] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 80.656961][ T5807] bond_slave_0: left promiscuous mode [ 80.664235][ T5807] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 80.681628][ T5807] bond_slave_1: left promiscuous mode [ 80.688156][ T5807] team0: Port device team_slave_0 removed [ 80.694233][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.702307][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.723749][ T5799] syz.4.869 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 80.738024][ T5799] CPU: 1 UID: 0 PID: 5799 Comm: syz.4.869 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.738125][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.738142][ T5799] Call Trace: [ 80.738150][ T5799] [ 80.738159][ T5799] __dump_stack+0x1d/0x30 [ 80.738190][ T5799] dump_stack_lvl+0xe8/0x140 [ 80.738217][ T5799] dump_stack+0x15/0x1b [ 80.738257][ T5799] dump_header+0x81/0x220 [ 80.738283][ T5799] oom_kill_process+0x342/0x400 [ 80.738329][ T5799] out_of_memory+0x979/0xb80 [ 80.738373][ T5799] try_charge_memcg+0x610/0xa10 [ 80.738496][ T5799] obj_cgroup_charge_pages+0xa6/0x150 [ 80.738600][ T5799] __memcg_kmem_charge_page+0x9f/0x170 [ 80.738628][ T5799] __alloc_frozen_pages_noprof+0x188/0x360 [ 80.738727][ T5799] alloc_pages_mpol+0xb3/0x260 [ 80.738807][ T5799] alloc_pages_noprof+0x90/0x130 [ 80.738830][ T5799] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 80.738882][ T5799] __kvmalloc_node_noprof+0x483/0x670 [ 80.738919][ T5799] ? ip_set_alloc+0x24/0x30 [ 80.738953][ T5799] ? ip_set_alloc+0x24/0x30 [ 80.738986][ T5799] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 80.739087][ T5799] ip_set_alloc+0x24/0x30 [ 80.739194][ T5799] hash_netiface_create+0x282/0x740 [ 80.739232][ T5799] ? __pfx_hash_netiface_create+0x10/0x10 [ 80.739331][ T5799] ip_set_create+0x3cc/0x970 [ 80.739361][ T5799] ? __nla_parse+0x40/0x60 [ 80.739386][ T5799] nfnetlink_rcv_msg+0x4c6/0x590 [ 80.739436][ T5799] netlink_rcv_skb+0x123/0x220 [ 80.739532][ T5799] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 80.739568][ T5799] nfnetlink_rcv+0x167/0x16c0 [ 80.739597][ T5799] ? kmem_cache_free+0xe4/0x3d0 [ 80.739657][ T5799] ? __kfree_skb+0x109/0x150 [ 80.739691][ T5799] ? nlmon_xmit+0x4f/0x60 [ 80.739716][ T5799] ? consume_skb+0x49/0x150 [ 80.739749][ T5799] ? nlmon_xmit+0x4f/0x60 [ 80.739783][ T5799] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 80.739822][ T5799] ? __dev_queue_xmit+0x1200/0x2000 [ 80.739840][ T5799] ? __dev_queue_xmit+0x182/0x2000 [ 80.739861][ T5799] ? ref_tracker_free+0x37d/0x3e0 [ 80.740028][ T5799] ? __netlink_deliver_tap+0x4dc/0x500 [ 80.740069][ T5799] netlink_unicast+0x5c0/0x690 [ 80.740109][ T5799] netlink_sendmsg+0x58b/0x6b0 [ 80.740182][ T5799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.740203][ T5799] __sock_sendmsg+0x145/0x180 [ 80.740230][ T5799] ____sys_sendmsg+0x31e/0x4e0 [ 80.740302][ T5799] ___sys_sendmsg+0x17b/0x1d0 [ 80.740334][ T5799] __x64_sys_sendmsg+0xd4/0x160 [ 80.740360][ T5799] x64_sys_call+0x191e/0x3000 [ 80.740399][ T5799] do_syscall_64+0xd2/0x200 [ 80.740497][ T5799] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.740539][ T5799] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.740576][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.740598][ T5799] RIP: 0033:0x7fc5adfbf6c9 [ 80.740638][ T5799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.740658][ T5799] RSP: 002b:00007fc5ac9fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.740678][ T5799] RAX: ffffffffffffffda RBX: 00007fc5ae216090 RCX: 00007fc5adfbf6c9 [ 80.740691][ T5799] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 80.740704][ T5799] RBP: 00007fc5ae041f91 R08: 0000000000000000 R09: 0000000000000000 [ 80.740717][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.740784][ T5799] R13: 00007fc5ae216128 R14: 00007fc5ae216090 R15: 00007ffcf5492018 [ 80.740823][ T5799] [ 80.740850][ T5799] memory: usage 307200kB, limit 307200kB, failcnt 208 [ 80.781010][ T5810] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 80.784925][ T5799] memory+swap: usage 309444kB, limit 9007199254740988kB, failcnt 0 [ 80.841359][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 81.112013][ T5799] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 81.119317][ T5799] Memory cgroup stats for /syz4: [ 81.119525][ T5799] cache 40960 [ 81.127747][ T5799] rss 4096 [ 81.130821][ T5799] shmem 0 [ 81.133798][ T5799] mapped_file 0 [ 81.137257][ T5799] dirty 0 [ 81.140187][ T5799] writeback 0 [ 81.143483][ T5799] workingset_refault_anon 62 [ 81.148073][ T5799] workingset_refault_file 27 [ 81.152679][ T5799] swap 2297856 [ 81.156049][ T5799] swapcached 12288 [ 81.159790][ T5799] pgpgin 60193 [ 81.163179][ T5799] pgpgout 60180 [ 81.166635][ T5799] pgfault 79450 [ 81.170094][ T5799] pgmajfault 44 [ 81.173560][ T5799] inactive_anon 12288 [ 81.177535][ T5799] active_anon 0 [ 81.181015][ T5799] inactive_file 32768 [ 81.185129][ T5799] active_file 8192 [ 81.188886][ T5799] unevictable 0 [ 81.192367][ T5799] hierarchical_memory_limit 314572800 [ 81.197730][ T5799] hierarchical_memsw_limit 9223372036854771712 [ 81.203921][ T5799] total_cache 40960 [ 81.207721][ T5799] total_rss 4096 [ 81.211281][ T5799] total_shmem 0 [ 81.214736][ T5799] total_mapped_file 0 [ 81.218708][ T5799] total_dirty 0 [ 81.222176][ T5799] total_writeback 0 [ 81.226005][ T5799] total_workingset_refault_anon 62 [ 81.231138][ T5799] total_workingset_refault_file 27 [ 81.236241][ T5799] total_swap 2297856 [ 81.240129][ T5799] total_swapcached 12288 [ 81.244390][ T5799] total_pgpgin 60193 [ 81.248276][ T5799] total_pgpgout 60180 [ 81.252300][ T5799] total_pgfault 79450 [ 81.256276][ T5799] total_pgmajfault 44 [ 81.260253][ T5799] total_inactive_anon 12288 [ 81.264785][ T5799] total_active_anon 0 [ 81.268844][ T5799] total_inactive_file 32768 [ 81.273361][ T5799] total_active_file 8192 [ 81.277672][ T5799] total_unevictable 0 [ 81.281667][ T5799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.869,pid=5790,uid=0 [ 81.296252][ T5799] Memory cgroup out of memory: Killed process 5790 (syz.4.869) total-vm:96004kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 81.313740][ T5807] bond0: (slave ip6gretap0): Releasing active interface [ 81.327305][ T4413] tipc: Disabling bearer [ 81.332503][ T4413] tipc: Left network mode [ 81.347525][ T5810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.372136][ T4413] veth1_macvtap: left promiscuous mode [ 81.378264][ T4413] veth0_macvtap: left promiscuous mode [ 81.468691][ T5791] syz.4.869 (5791) used greatest stack depth: 9016 bytes left [ 81.548763][ T5811] bond2 (unregistering): Released all slaves [ 81.565155][ T3401] lo speed is unknown, defaulting to 1000 [ 81.565401][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.571087][ T3401] infiniband syz0: ib_query_port failed (-19) [ 81.578104][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.594261][ T5818] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.605575][ T5818] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 81.605650][ T5764] bridge_slave_0: entered allmulticast mode [ 81.622769][ T5817] loop3: detected capacity change from 0 to 512 [ 81.629435][ T5817] EXT4-fs: Ignoring removed i_version option [ 81.631785][ T5764] bridge_slave_0: entered promiscuous mode [ 81.646507][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.651834][ T5817] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 81.653716][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.669076][ T5817] System zones: 0-2, 18-18, 34-35 [ 81.674970][ T5799] syz.4.869 (5799) used greatest stack depth: 6136 bytes left [ 81.682808][ T5764] bridge_slave_1: entered allmulticast mode [ 81.686804][ T5817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.689384][ T5764] bridge_slave_1: entered promiscuous mode [ 81.712189][ T5817] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.727500][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.746941][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.767333][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.779804][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.807339][ T5764] team0: Port device team_slave_0 added [ 81.821305][ T5764] team0: Port device team_slave_1 added [ 81.853697][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.860690][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.886675][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.908892][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.915937][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.941996][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.989828][ T5764] hsr_slave_0: entered promiscuous mode [ 81.997915][ T5764] hsr_slave_1: entered promiscuous mode [ 82.005091][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 82.010978][ T5764] Cannot create hsr debugfs directory [ 82.105546][ T5764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.117810][ T5764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.118597][ T29] audit: type=1326 audit(1762600931.061:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x50000 [ 82.147658][ T29] audit: type=1326 audit(1762600931.061:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x50000 [ 82.170725][ T29] audit: type=1326 audit(1762600931.061:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x50000 [ 82.193933][ T29] audit: type=1326 audit(1762600931.061:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x50000 [ 82.216990][ T29] audit: type=1326 audit(1762600931.061:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x50000 [ 82.240157][ T29] audit: type=1326 audit(1762600931.061:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x50000 [ 82.263273][ T29] audit: type=1326 audit(1762600931.061:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x50000 [ 82.286389][ T29] audit: type=1326 audit(1762600931.061:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x50000 [ 82.309632][ T29] audit: type=1326 audit(1762600931.061:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5835 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x50000 [ 82.334857][ T5764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.347775][ T5764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.415639][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.422786][ T5764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.450547][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.460686][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.486930][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.506902][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.514016][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.543011][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.550120][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.597312][ T5764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.607739][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.714923][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.934013][ T5764] veth0_vlan: entered promiscuous mode [ 82.951031][ T5764] veth1_vlan: entered promiscuous mode [ 82.973213][ T5764] veth0_macvtap: entered promiscuous mode [ 82.988780][ T5764] veth1_macvtap: entered promiscuous mode [ 83.006028][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.032592][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.052405][ T5877] netlink: 'syz.3.890': attribute type 1 has an invalid length. [ 83.066996][ T5877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.104227][ T4413] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.186659][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 83.218520][ T4413] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.234217][ T5877] bond1 (unregistering): Released all slaves [ 83.334781][ T4413] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.361108][ T4413] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.444543][ T5892] netlink: 'syz.3.896': attribute type 7 has an invalid length. [ 83.452321][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 84.452591][ T5915] loop5: detected capacity change from 0 to 128 [ 84.508346][ T5915] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 84.517312][ T5918] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.528628][ T5918] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 84.555243][ T5911] loop2: detected capacity change from 0 to 512 [ 84.562361][ T5911] EXT4-fs: Ignoring removed i_version option [ 84.573375][ T5911] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 84.581494][ T5911] System zones: 0-2, 18-18, 34-35 [ 84.588762][ T5911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.602046][ T5911] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.628182][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.046301][ T5946] ip6erspan0: entered promiscuous mode [ 85.189739][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 85.189757][ T29] audit: type=1326 audit(1762600934.131:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2292bc6567 code=0x7ffc0000 [ 85.219395][ T29] audit: type=1326 audit(1762600934.131:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2292b6b779 code=0x7ffc0000 [ 85.242813][ T29] audit: type=1326 audit(1762600934.131:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2292bc6567 code=0x7ffc0000 [ 85.266186][ T29] audit: type=1326 audit(1762600934.131:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2292b6b779 code=0x7ffc0000 [ 85.289518][ T29] audit: type=1326 audit(1762600934.131:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 85.312941][ T29] audit: type=1326 audit(1762600934.131:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 85.336362][ T29] audit: type=1326 audit(1762600934.131:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 85.359835][ T29] audit: type=1326 audit(1762600934.131:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2292bc6567 code=0x7ffc0000 [ 85.383152][ T29] audit: type=1326 audit(1762600934.131:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2292b6b779 code=0x7ffc0000 [ 85.406547][ T29] audit: type=1326 audit(1762600934.131:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.3.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2292bc6567 code=0x7ffc0000 [ 85.652264][ T5957] loop3: detected capacity change from 0 to 1024 [ 85.687470][ T5957] EXT4-fs: Ignoring removed nobh option [ 85.717056][ T5957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.823293][ T5957] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 85.906309][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.036057][ T5967] loop3: detected capacity change from 0 to 1024 [ 86.043270][ T5967] EXT4-fs: Ignoring removed orlov option [ 86.049163][ T5967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.064029][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.087694][ T5969] bridge_slave_0: left allmulticast mode [ 86.093457][ T5969] bridge_slave_0: left promiscuous mode [ 86.099187][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.107014][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.118520][ T5969] bridge_slave_1: left allmulticast mode [ 86.124252][ T5969] bridge_slave_1: left promiscuous mode [ 86.129999][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.144239][ T5969] bond0: (slave bond_slave_0): Releasing backup interface [ 86.159729][ T5969] bond0: (slave bond_slave_1): Releasing backup interface [ 86.174054][ T5969] team0: Port device team_slave_0 removed [ 86.183722][ T5969] team0: Port device team_slave_1 removed [ 86.190810][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.198272][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.206956][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.214405][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.224872][ T5969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.242699][ T5976] netlink: 96 bytes leftover after parsing attributes in process `syz.3.923'. [ 86.383137][ T5996] netlink: 128 bytes leftover after parsing attributes in process `syz.1.933'. [ 86.394048][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 86.601893][ T6014] loop1: detected capacity change from 0 to 1024 [ 86.609264][ T6014] EXT4-fs: Ignoring removed orlov option [ 86.615106][ T6014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.635135][ T6014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.666995][ T6019] tmpfs: Bad value for 'mpol' [ 86.736401][ T6019] loop2: detected capacity change from 0 to 512 [ 86.795072][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.827967][ T6019] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 86.841144][ T6019] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.849211][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.943'. [ 86.858675][ T6019] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.940: corrupted inode contents [ 86.871074][ T6019] EXT4-fs (loop2): Remounting filesystem read-only [ 86.877941][ T6019] EXT4-fs (loop2): 1 truncate cleaned up [ 86.883969][ T4451] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.894604][ T4451] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 86.905589][ T4451] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 86.918714][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 86.919466][ T6027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.938611][ T6019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.975486][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.987516][ T6029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.996113][ T6029] bond3: (slave bond4): Enslaving as an active interface with an up link [ 87.006598][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 87.017792][ T6027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.042891][ T6029] bond3 (unregistering): (slave bond4): Releasing backup interface [ 87.055756][ T6029] bond3 (unregistering): Released all slaves [ 87.074767][ T6027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.159247][ T6027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.238530][ T4411] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.250381][ T4411] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.263320][ T4411] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.275297][ T4411] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.147340][ T6062] loop4: detected capacity change from 0 to 1024 [ 88.190852][ T6062] EXT4-fs: Ignoring removed orlov option [ 88.196809][ T6062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.920007][ T6062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.157983][ T6068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.193644][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.227214][ T6068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.396537][ T6068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.613847][ T6068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.692546][ T4411] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.728568][ T4411] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.823483][ T4411] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.914866][ T4411] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.291577][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 90.291672][ T29] audit: type=1400 audit(1762600939.241:5321): avc: denied { append } for pid=6073 comm="syz.3.957" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 90.347972][ T6076] netlink: 96 bytes leftover after parsing attributes in process `syz.2.958'. [ 91.140542][ T29] audit: type=1326 audit(1762600940.081:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 91.276805][ T29] audit: type=1326 audit(1762600940.111:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 91.300391][ T29] audit: type=1326 audit(1762600940.111:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 91.323714][ T29] audit: type=1326 audit(1762600940.111:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 91.347044][ T29] audit: type=1326 audit(1762600940.111:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 91.370380][ T29] audit: type=1326 audit(1762600940.111:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 91.393762][ T29] audit: type=1326 audit(1762600940.111:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 91.417103][ T29] audit: type=1326 audit(1762600940.111:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 91.440672][ T29] audit: type=1326 audit(1762600940.111:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.3.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 91.568375][ T6117] tipc: New replicast peer: 255.255.255.255 [ 91.574445][ T6117] tipc: Enabled bearer , priority 10 [ 91.801325][ T6133] veth0_vlan: entered allmulticast mode [ 91.840069][ T6133] ÿÿÿÿÿÿ: renamed from vlan1 [ 92.510546][ T6149] loop3: detected capacity change from 0 to 2048 [ 92.682124][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.754416][ T6156] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.764247][ T6156] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.872584][ T6156] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.882497][ T6156] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.955016][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.966200][ T6156] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.976112][ T6156] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.988042][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 93.013316][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 93.102956][ T6156] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.113004][ T6156] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.178745][ T4433] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.187089][ T4433] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.265338][ T4433] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.273634][ T4433] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.286489][ T4433] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.294875][ T4433] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.304227][ T4433] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.312476][ T4433] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.384230][ T6192] xt_hashlimit: max too large, truncated to 1048576 [ 93.451900][ T6196] Cannot find add_set index 0 as target [ 93.584469][ T6199] geneve2: entered promiscuous mode [ 93.589798][ T6199] geneve2: entered allmulticast mode [ 93.710002][ T6201] netlink: 'syz.2.1007': attribute type 1 has an invalid length. [ 93.725062][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1008'. [ 93.744656][ T6201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.788498][ T6201] veth9: entered promiscuous mode [ 93.803348][ T6201] bond2: (slave veth9): Enslaving as an active interface with a down link [ 93.825358][ T6203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6203 comm=syz.4.1008 [ 93.840154][ T6205] bond2: entered allmulticast mode [ 94.409833][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.418515][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.445150][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1020'. [ 94.515941][ T6237] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.534156][ T6239] netlink: 'syz.3.1023': attribute type 12 has an invalid length. [ 95.172516][ T6275] loop2: detected capacity change from 0 to 512 [ 95.191629][ T6275] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.213480][ T6275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.295110][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.358293][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 95.358309][ T29] audit: type=1400 audit(1762600944.291:5525): avc: denied { setopt } for pid=6285 comm="syz.2.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.440922][ T29] audit: type=1400 audit(1762600944.361:5526): avc: denied { mount } for pid=6286 comm="syz.3.1042" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 95.523589][ T6298] loop3: detected capacity change from 0 to 128 [ 95.566110][ T6300] capability: warning: `syz.2.1046' uses 32-bit capabilities (legacy support in use) [ 95.709270][ T29] audit: type=1400 audit(1762600944.641:5527): avc: denied { create } for pid=6303 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.729000][ T29] audit: type=1400 audit(1762600944.641:5528): avc: denied { bind } for pid=6303 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.732537][ T6306] Falling back ldisc for ttyS3. [ 95.792915][ T6309] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=6309 comm=syz.3.1049 [ 95.806622][ T29] audit: type=1400 audit(1762600944.671:5529): avc: denied { setopt } for pid=6305 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.842640][ T6311] loop2: detected capacity change from 0 to 128 [ 95.846897][ T29] audit: type=1326 audit(1762600944.781:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e439cf6c9 code=0x7ffc0000 [ 95.872488][ T29] audit: type=1326 audit(1762600944.781:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e439cf6c9 code=0x7ffc0000 [ 95.895947][ T29] audit: type=1326 audit(1762600944.791:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e439cf6c9 code=0x7ffc0000 [ 95.919486][ T29] audit: type=1326 audit(1762600944.791:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e439cf703 code=0x7ffc0000 [ 95.942784][ T29] audit: type=1326 audit(1762600944.791:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.2.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e439ce17f code=0x7ffc0000 [ 95.973933][ T6311] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 95.987418][ T6313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6313 comm=syz.1.1052 [ 96.000455][ T6311] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.054783][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.164672][ T6325] netlink: 'syz.2.1057': attribute type 5 has an invalid length. [ 96.180022][ T6325] batman_adv: batadv0: Adding interface: vxlan0 [ 96.186437][ T6325] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.212107][ T6325] batman_adv: batadv0: Interface activated: vxlan0 [ 96.218918][ T4433] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.228689][ T4433] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.271070][ T4433] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.295319][ T4433] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.374341][ T6337] netlink: 'syz.5.1062': attribute type 1 has an invalid length. [ 96.382409][ T6341] loop4: detected capacity change from 0 to 1024 [ 96.382781][ T6341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.399265][ T6343] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1066'. [ 96.408913][ T6341] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.424386][ T6343] netlink: zone id is out of range [ 96.429570][ T6343] netlink: zone id is out of range [ 96.433910][ T6341] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1065: Invalid block bitmap block 0 in block_group 0 [ 96.448115][ T6343] netlink: zone id is out of range [ 96.448137][ T6343] netlink: zone id is out of range [ 96.448270][ T6343] netlink: del zone limit has 8 unknown bytes [ 96.454668][ T6341] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1065: Failed to acquire dquot type 0 [ 96.477092][ T6341] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.1065: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.501304][ T6341] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1065: Invalid inode bitmap blk 0 in block_group 0 [ 96.514621][ T6341] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 96.523578][ T6341] EXT4-fs (loop4): 1 orphan inode deleted [ 96.529850][ T6341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.576291][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 96.595896][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.644890][ T6349] tipc: Enabling of bearer rejected, failed to enable media [ 96.733222][ T6360] netlink: 'syz.4.1072': attribute type 12 has an invalid length. [ 96.759418][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 96.878627][ T6370] kernel profiling enabled (shift: 9) [ 96.909235][ T6373] loop4: detected capacity change from 0 to 1024 [ 96.916144][ T6373] EXT4-fs: Ignoring removed orlov option [ 96.963042][ T6373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.711916][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.359771][ T6415] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 98.379871][ T6415] bond3: (slave bridge2): making interface the new active one [ 98.387721][ T6415] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 98.457507][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1101'. [ 98.555316][ T6424] loop1: detected capacity change from 0 to 128 [ 98.571434][ T6424] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 98.584633][ T6424] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.631507][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.645718][ T6431] loop2: detected capacity change from 0 to 512 [ 98.658445][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.667967][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.677192][ T6431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.690605][ T6431] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.750435][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.807259][ T6445] loop1: detected capacity change from 0 to 128 [ 98.820321][ T6445] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 98.828220][ T6445] FAT-fs (loop1): Filesystem has been set read-only [ 98.843163][ T6445] bio_check_eod: 13857 callbacks suppressed [ 98.843183][ T6445] syz.1.1100: attempt to access beyond end of device [ 98.843183][ T6445] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 98.880376][ T6445] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 98.888317][ T6445] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 98.901717][ T6445] syz.1.1100: attempt to access beyond end of device [ 98.901717][ T6445] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.915348][ T6445] syz.1.1100: attempt to access beyond end of device [ 98.915348][ T6445] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.929060][ T6445] syz.1.1100: attempt to access beyond end of device [ 98.929060][ T6445] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.945251][ T6445] syz.1.1100: attempt to access beyond end of device [ 98.945251][ T6445] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.958828][ T6445] syz.1.1100: attempt to access beyond end of device [ 98.958828][ T6445] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.972269][ T6445] syz.1.1100: attempt to access beyond end of device [ 98.972269][ T6445] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.985779][ T6445] syz.1.1100: attempt to access beyond end of device [ 98.985779][ T6445] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.999216][ T6445] syz.1.1100: attempt to access beyond end of device [ 98.999216][ T6445] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.012803][ T6445] syz.1.1100: attempt to access beyond end of device [ 99.012803][ T6445] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.592421][ T6450] loop4: detected capacity change from 0 to 2048 [ 99.614894][ T6450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.687572][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.721394][ T6463] loop2: detected capacity change from 0 to 128 [ 99.914449][ T6477] loop4: detected capacity change from 0 to 512 [ 99.935587][ T6477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.948392][ T6477] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.009610][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.361772][ T29] kauditd_printk_skb: 1641 callbacks suppressed [ 100.361785][ T29] audit: type=1326 audit(1762600949.311:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13270b1f85 code=0x7ffc0000 [ 100.391496][ T29] audit: type=1326 audit(1762600949.311:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13270b1f85 code=0x7ffc0000 [ 100.415075][ T29] audit: type=1326 audit(1762600949.311:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13270b1f85 code=0x7ffc0000 [ 100.438571][ T29] audit: type=1326 audit(1762600949.311:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13270b1f85 code=0x7ffc0000 [ 100.462004][ T29] audit: type=1326 audit(1762600949.311:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13270b1f85 code=0x7ffc0000 [ 100.485433][ T29] audit: type=1326 audit(1762600949.311:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13270b1f85 code=0x7ffc0000 [ 100.508836][ T29] audit: type=1326 audit(1762600949.311:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13270b1f85 code=0x7ffc0000 [ 100.532266][ T29] audit: type=1326 audit(1762600949.311:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13270b1f85 code=0x7ffc0000 [ 100.555818][ T29] audit: type=1326 audit(1762600949.321:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba3dc46567 code=0x7ffc0000 [ 100.579130][ T29] audit: type=1326 audit(1762600949.321:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6482 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba3dbeb779 code=0x7ffc0000 [ 100.630143][ T6493] loop1: detected capacity change from 0 to 2048 [ 100.642356][ T6493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.677157][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.851409][ T6507] loop4: detected capacity change from 0 to 128 [ 100.904616][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1130'. [ 100.913806][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 100.942978][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1130'. [ 100.952129][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 101.087944][ T6527] loop4: detected capacity change from 0 to 1024 [ 101.094717][ T6527] EXT4-fs: Ignoring removed orlov option [ 101.125580][ T6527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.229291][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.353911][ T6534] loop4: detected capacity change from 0 to 8192 [ 101.495496][ T6548] loop4: detected capacity change from 0 to 1024 [ 101.499147][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1144'. [ 101.511325][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 101.524292][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1144'. [ 101.533413][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 101.562974][ T6548] EXT4-fs: inline encryption not supported [ 101.572639][ T6548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.195857][ T6572] IPv6: Can't replace route, no match found [ 102.282231][ T6574] loop2: detected capacity change from 0 to 8192 [ 102.289931][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.370328][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1153'. [ 102.405013][ T6582] bridge_slave_0: entered allmulticast mode [ 102.892957][ T6611] loop2: detected capacity change from 0 to 1024 [ 102.909938][ T6611] EXT4-fs: inline encryption not supported [ 102.961418][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.198993][ T6623] loop1: detected capacity change from 0 to 512 [ 103.248667][ T6623] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.266743][ T6623] EXT4-fs (loop1): 1 truncate cleaned up [ 103.282320][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.393290][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.676453][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.910708][ T6672] netlink: 664 bytes leftover after parsing attributes in process `gtp'. [ 103.931023][ T6667] Cannot find del_set index 3 as target [ 103.993016][ T6678] loop4: detected capacity change from 0 to 1024 [ 104.001078][ T6678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.016647][ T6678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.856626][ T6681] syz.4.1184 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 104.870819][ T6681] CPU: 1 UID: 0 PID: 6681 Comm: syz.4.1184 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.870856][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.870878][ T6681] Call Trace: [ 104.870888][ T6681] [ 104.870899][ T6681] __dump_stack+0x1d/0x30 [ 104.870950][ T6681] dump_stack_lvl+0xe8/0x140 [ 104.871025][ T6681] dump_stack+0x15/0x1b [ 104.871051][ T6681] dump_header+0x81/0x220 [ 104.871076][ T6681] oom_kill_process+0x342/0x400 [ 104.871130][ T6681] out_of_memory+0x979/0xb80 [ 104.871177][ T6681] try_charge_memcg+0x610/0xa10 [ 104.871219][ T6681] obj_cgroup_charge_pages+0xa6/0x150 [ 104.871250][ T6681] __memcg_kmem_charge_page+0x9f/0x170 [ 104.871351][ T6681] __alloc_frozen_pages_noprof+0x188/0x360 [ 104.871378][ T6681] alloc_pages_mpol+0xb3/0x260 [ 104.871407][ T6681] ? alloc_pages_noprof+0x61/0x130 [ 104.871438][ T6681] alloc_pages_noprof+0x90/0x130 [ 104.871516][ T6681] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 104.871576][ T6681] __kvmalloc_node_noprof+0x483/0x670 [ 104.871639][ T6681] ? ip_set_alloc+0x24/0x30 [ 104.871677][ T6681] ? ip_set_alloc+0x24/0x30 [ 104.871733][ T6681] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 104.871777][ T6681] ip_set_alloc+0x24/0x30 [ 104.871813][ T6681] hash_netiface_create+0x282/0x740 [ 104.871938][ T6681] ? __pfx_hash_netiface_create+0x10/0x10 [ 104.871986][ T6681] ip_set_create+0x3cc/0x970 [ 104.872021][ T6681] ? __nla_parse+0x40/0x60 [ 104.872044][ T6681] nfnetlink_rcv_msg+0x4c6/0x590 [ 104.872158][ T6681] netlink_rcv_skb+0x123/0x220 [ 104.872215][ T6681] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 104.872262][ T6681] nfnetlink_rcv+0x167/0x16c0 [ 104.872356][ T6681] ? kmem_cache_free+0xe4/0x3d0 [ 104.872400][ T6681] ? __kfree_skb+0x109/0x150 [ 104.872447][ T6681] ? nlmon_xmit+0x4f/0x60 [ 104.872472][ T6681] ? consume_skb+0x49/0x150 [ 104.872506][ T6681] ? nlmon_xmit+0x4f/0x60 [ 104.872539][ T6681] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 104.872635][ T6681] ? __dev_queue_xmit+0x1200/0x2000 [ 104.872692][ T6681] ? __dev_queue_xmit+0x182/0x2000 [ 104.872773][ T6681] ? ref_tracker_free+0x37d/0x3e0 [ 104.872827][ T6681] ? __netlink_deliver_tap+0x4dc/0x500 [ 104.872877][ T6681] netlink_unicast+0x5c0/0x690 [ 104.873044][ T6681] netlink_sendmsg+0x58b/0x6b0 [ 104.873070][ T6681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.873096][ T6681] __sock_sendmsg+0x145/0x180 [ 104.873131][ T6681] ____sys_sendmsg+0x31e/0x4e0 [ 104.873194][ T6681] ___sys_sendmsg+0x17b/0x1d0 [ 104.873230][ T6681] __x64_sys_sendmsg+0xd4/0x160 [ 104.873253][ T6681] x64_sys_call+0x191e/0x3000 [ 104.873283][ T6681] do_syscall_64+0xd2/0x200 [ 104.873383][ T6681] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.873413][ T6681] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.873454][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.873514][ T6681] RIP: 0033:0x7fc5adfbf6c9 [ 104.873533][ T6681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.873559][ T6681] RSP: 002b:00007fc5ac9fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.873586][ T6681] RAX: ffffffffffffffda RBX: 00007fc5ae216090 RCX: 00007fc5adfbf6c9 [ 104.873656][ T6681] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 104.873669][ T6681] RBP: 00007fc5ae041f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.873681][ T6681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.873693][ T6681] R13: 00007fc5ae216128 R14: 00007fc5ae216090 R15: 00007ffcf5492018 [ 104.873711][ T6681] [ 105.217108][ T6681] memory: usage 307200kB, limit 307200kB, failcnt 780 [ 105.224106][ T6681] memory+swap: usage 308096kB, limit 9007199254740988kB, failcnt 0 [ 105.232056][ T6681] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 105.239333][ T6681] Memory cgroup stats for /syz4: [ 105.241219][ T6681] cache 32768 [ 105.249589][ T6681] rss 0 [ 105.252386][ T6681] shmem 0 [ 105.255329][ T6681] mapped_file 0 [ 105.258780][ T6681] dirty 0 [ 105.261812][ T6681] writeback 0 [ 105.265110][ T6681] workingset_refault_anon 128 [ 105.269821][ T6681] workingset_refault_file 565 [ 105.274535][ T6681] swap 917504 [ 105.277896][ T6681] swapcached 0 [ 105.281393][ T6681] pgpgin 108445 [ 105.284947][ T6681] pgpgout 108437 [ 105.288553][ T6681] pgfault 107205 [ 105.292137][ T6681] pgmajfault 173 [ 105.295731][ T6681] inactive_anon 0 [ 105.299360][ T6681] active_anon 0 [ 105.302980][ T6681] inactive_file 28672 [ 105.307016][ T6681] active_file 4096 [ 105.310754][ T6681] unevictable 0 [ 105.314324][ T6681] hierarchical_memory_limit 314572800 [ 105.319741][ T6681] hierarchical_memsw_limit 9223372036854771712 [ 105.326002][ T6681] total_cache 32768 [ 105.329903][ T6681] total_rss 0 [ 105.333202][ T6681] total_shmem 0 [ 105.336695][ T6681] total_mapped_file 0 [ 105.340680][ T6681] total_dirty 0 [ 105.344293][ T6681] total_writeback 0 [ 105.348110][ T6681] total_workingset_refault_anon 128 [ 105.353423][ T6681] total_workingset_refault_file 565 [ 105.358725][ T6681] total_swap 917504 [ 105.362590][ T6681] total_swapcached 0 [ 105.366500][ T6681] total_pgpgin 108445 [ 105.370474][ T6681] total_pgpgout 108437 [ 105.374579][ T6681] total_pgfault 107205 [ 105.378654][ T6681] total_pgmajfault 173 [ 105.382757][ T6681] total_inactive_anon 0 [ 105.387006][ T6681] total_active_anon 0 [ 105.391007][ T6681] total_inactive_file 28672 [ 105.395550][ T6681] total_active_file 4096 [ 105.399781][ T6681] total_unevictable 0 [ 105.403801][ T6681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1184,pid=6677,uid=0 [ 105.418409][ T6681] Memory cgroup out of memory: Killed process 6677 (syz.4.1184) total-vm:94088kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 105.577100][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.599638][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 105.599653][ T29] audit: type=1326 audit(1762600954.541:7447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 105.629556][ T29] audit: type=1326 audit(1762600954.541:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 105.653061][ T29] audit: type=1326 audit(1762600954.551:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 105.676859][ T29] audit: type=1326 audit(1762600954.551:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 105.700600][ T29] audit: type=1326 audit(1762600954.551:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 105.724136][ T29] audit: type=1326 audit(1762600954.551:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 105.747750][ T29] audit: type=1326 audit(1762600954.551:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 105.771237][ T29] audit: type=1326 audit(1762600954.551:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 105.794656][ T29] audit: type=1326 audit(1762600954.551:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 105.818240][ T29] audit: type=1326 audit(1762600954.551:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.4.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5adfbf6c9 code=0x7ffc0000 [ 106.211566][ T6708] Bluetooth: hci0: Frame reassembly failed (-90) [ 106.222047][ T4438] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.562523][ T6721] Cannot find add_set index 0 as target [ 106.625245][ T6724] loop3: detected capacity change from 0 to 1024 [ 106.666076][ T6724] EXT4-fs: Ignoring removed orlov option [ 106.703183][ T6724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.128450][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.407273][ T6745] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 107.421612][ T6745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.436609][ T6745] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 107.446658][ T6745] bond2: entered allmulticast mode [ 107.459850][ T6745] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 107.796345][ T6757] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.803424][ T6757] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.230917][ T6709] Bluetooth: hci0: command 0x1003 tx timeout [ 108.231100][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.236918][ T6798] netlink: 'syz.2.1221': attribute type 1 has an invalid length. [ 111.250815][ T6798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.266151][ T6798] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 111.278900][ T6798] bond3: entered allmulticast mode [ 111.291186][ T6798] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 111.310084][ T6808] loop3: detected capacity change from 0 to 512 [ 111.318935][ T6808] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.367978][ T6808] EXT4-fs (loop3): 1 truncate cleaned up [ 111.391608][ T6808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.448920][ T6818] netlink: 'syz.2.1227': attribute type 7 has an invalid length. [ 111.456792][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 111.486693][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.613277][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1230'. [ 111.649798][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 111.649900][ T29] audit: type=1326 audit(1762600960.591:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 111.679644][ T29] audit: type=1326 audit(1762600960.591:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 111.686030][ T6828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6828 comm=syz.3.1230 [ 111.703692][ T29] audit: type=1326 audit(1762600960.651:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 111.739281][ T29] audit: type=1326 audit(1762600960.651:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 111.762801][ T29] audit: type=1326 audit(1762600960.651:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 111.786760][ T29] audit: type=1326 audit(1762600960.731:7772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 111.810296][ T29] audit: type=1326 audit(1762600960.731:7773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 111.833764][ T29] audit: type=1326 audit(1762600960.731:7774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 111.872848][ T6831] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1232'. [ 111.883861][ T29] audit: type=1326 audit(1762600960.781:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 111.907441][ T29] audit: type=1326 audit(1762600960.781:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6809 comm="syz.1.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132707f6c9 code=0x7ffc0000 [ 112.051149][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1239'. [ 112.196107][ T4438] Bluetooth: hci0: Frame reassembly failed (-90) [ 112.331733][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1249'. [ 112.366548][ T6874] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1251'. [ 112.441910][ T6872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6872 comm=syz.4.1249 [ 113.024802][ T6898] ip6erspan0: entered promiscuous mode [ 113.110921][ T6900] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1271'. [ 113.319919][ T6913] sit0: entered promiscuous mode [ 113.325099][ T6913] sit0: entered allmulticast mode [ 113.444862][ T6919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.499712][ T6924] tmpfs: Bad value for 'mpol' [ 113.516132][ T6924] loop4: detected capacity change from 0 to 512 [ 113.532837][ T6924] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 113.541087][ T6924] EXT4-fs (loop4): orphan cleanup on readonly fs [ 113.549888][ T6924] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1270: corrupted inode contents [ 113.562113][ T6924] EXT4-fs (loop4): Remounting filesystem read-only [ 113.568784][ T6924] EXT4-fs (loop4): 1 truncate cleaned up [ 113.574796][ T4431] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.585459][ T4431] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 113.603620][ T4431] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 113.677091][ T6924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.715701][ T6882] syz.5.1254 (6882) used greatest stack depth: 6088 bytes left [ 113.744427][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.790482][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 113.800718][ T6934] tipc: Started in network mode [ 113.805743][ T6934] tipc: Node identity ac14140f, cluster identity 4711 [ 113.812948][ T6934] tipc: New replicast peer: 255.255.255.255 [ 113.819033][ T6934] tipc: Enabled bearer , priority 10 [ 114.066235][ T6895] Set syz1 is full, maxelem 65536 reached [ 114.145737][ T6952] syzkaller0: entered allmulticast mode [ 114.158440][ T6952] syzkaller0: entered promiscuous mode [ 114.177069][ T6952] syzkaller0 (unregistering): left allmulticast mode [ 114.183940][ T6952] syzkaller0 (unregistering): left promiscuous mode [ 114.221043][ T6709] Bluetooth: hci0: command 0x1003 tx timeout [ 114.220963][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.257118][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 114.342955][ T6961] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 114.351752][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.360170][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.368886][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.384159][ T6963] loop2: detected capacity change from 0 to 1024 [ 114.392011][ T6963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.399801][ T6957] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 114.420199][ T6963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.462872][ T6957] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 114.524546][ T6957] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 114.635155][ T4438] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.643971][ T4438] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.661005][ T4438] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.674226][ T4438] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 114.703718][ T6980] bond1: (slave geneve2): Releasing backup interface [ 114.719158][ T4438] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 114.727771][ T4438] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 114.748392][ T4438] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 114.768698][ T4438] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 114.790225][ T4431] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.799441][ T6987] Bluetooth: hci0: Frame reassembly failed (-90) [ 114.811062][ T36] tipc: Node number set to 2886997007 [ 114.920196][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1297'. [ 115.130708][ T7000] loop1: detected capacity change from 0 to 4096 [ 115.146703][ T7000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.400117][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.512283][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.581924][ T7014] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 115.681760][ T7021] loop1: detected capacity change from 0 to 1024 [ 115.688477][ T7021] EXT4-fs: Ignoring removed orlov option [ 115.699134][ T7021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.952137][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.002867][ T7028] loop3: detected capacity change from 0 to 2048 [ 116.010960][ T7028] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 64 [ 116.190522][ T7044] tipc: Started in network mode [ 116.195653][ T7044] tipc: Node identity ac14140f, cluster identity 4711 [ 116.203195][ T7044] tipc: New replicast peer: 255.255.255.255 [ 116.209474][ T7044] tipc: Enabled bearer , priority 10 [ 116.344870][ T7056] loop1: detected capacity change from 0 to 1024 [ 116.357734][ T7056] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.368966][ T7056] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.399170][ T7056] JBD2: no valid journal superblock found [ 116.404977][ T7056] EXT4-fs (loop1): Could not load journal inode [ 116.659453][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 116.659472][ T29] audit: type=1326 audit(1762600965.601:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.689674][ T29] audit: type=1326 audit(1762600965.601:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.713304][ T29] audit: type=1326 audit(1762600965.601:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.736736][ T29] audit: type=1326 audit(1762600965.601:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.760222][ T29] audit: type=1326 audit(1762600965.601:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.783892][ T29] audit: type=1326 audit(1762600965.611:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.807528][ T29] audit: type=1326 audit(1762600965.641:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.831270][ T29] audit: type=1326 audit(1762600965.641:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.854742][ T29] audit: type=1326 audit(1762600965.641:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.878390][ T29] audit: type=1326 audit(1762600965.641:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7067 comm="syz.3.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2292bcf6c9 code=0x7ffc0000 [ 116.881417][ T6709] Bluetooth: hci0: command 0x1003 tx timeout [ 116.902117][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.210985][ T3401] tipc: Node number set to 2886997007 [ 117.406172][ T7078] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.416002][ T7078] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.507433][ T7078] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.517484][ T7078] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.574753][ T7078] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.584670][ T7078] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.625872][ T7078] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.635860][ T7078] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.680289][ T4438] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.688628][ T4438] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.707497][ T4438] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.715918][ T4438] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.741024][ T4438] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.749267][ T4438] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.766180][ T4438] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.774556][ T4438] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.910709][ T7092] loop4: detected capacity change from 0 to 2048 [ 117.938353][ T7092] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 64 [ 118.283022][ T7102] geneve2: entered promiscuous mode [ 118.288269][ T7102] geneve2: entered allmulticast mode [ 120.074430][ T7143] loop2: detected capacity change from 0 to 1024 [ 120.081374][ T7143] EXT4-fs: Ignoring removed orlov option [ 120.091479][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.110446][ T7148] bond_slave_1: mtu less than device minimum [ 120.222140][ T7162] netlink: 'syz.5.1358': attribute type 12 has an invalid length. [ 120.233445][ T7160] __nla_validate_parse: 2 callbacks suppressed [ 120.233466][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1359'. [ 120.345812][ T7160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7160 comm=syz.3.1359 [ 120.536381][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.651427][ T7187] bond_slave_1: mtu less than device minimum [ 120.681240][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 120.700508][ T7195] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.755313][ T7201] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 120.764071][ T4433] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.775159][ T7195] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.786869][ T4433] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.792425][ T7203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1377'. [ 120.813921][ T7203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7203 comm=syz.2.1377 [ 120.843540][ T7205] syzkaller0: entered allmulticast mode [ 120.850710][ T7205] syzkaller0: entered promiscuous mode [ 120.858073][ T7205] syzkaller0 (unregistering): left allmulticast mode [ 120.864905][ T7205] syzkaller0 (unregistering): left promiscuous mode [ 120.997540][ T7207] loop4: detected capacity change from 0 to 1024 [ 121.004579][ T7207] EXT4-fs: Ignoring removed orlov option [ 121.013691][ T7207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.182598][ T7211] ================================================================== [ 121.190735][ T7211] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 121.199993][ T7211] [ 121.202332][ T7211] write to 0xffff888100606008 of 4 bytes by task 7207 on cpu 0: [ 121.209980][ T7211] writeback_single_inode+0x150/0x3f0 [ 121.215388][ T7211] sync_inode_metadata+0x5b/0x90 [ 121.220349][ T7211] generic_buffers_fsync_noflush+0xd9/0x120 [ 121.226261][ T7211] ext4_sync_file+0x1ab/0x690 [ 121.230956][ T7211] vfs_fsync_range+0x10d/0x130 [ 121.235741][ T7211] ext4_buffered_write_iter+0x34f/0x3c0 [ 121.241298][ T7211] ext4_file_write_iter+0x387/0xf60 [ 121.246523][ T7211] iter_file_splice_write+0x666/0xa60 [ 121.251925][ T7211] direct_splice_actor+0x156/0x2a0 [ 121.257056][ T7211] splice_direct_to_actor+0x312/0x680 [ 121.262443][ T7211] do_splice_direct+0xda/0x150 [ 121.267235][ T7211] do_sendfile+0x380/0x650 [ 121.271670][ T7211] __x64_sys_sendfile64+0x105/0x150 [ 121.276885][ T7211] x64_sys_call+0x2bb4/0x3000 [ 121.281580][ T7211] do_syscall_64+0xd2/0x200 [ 121.286107][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.292030][ T7211] [ 121.294362][ T7211] read to 0xffff888100606008 of 4 bytes by task 7211 on cpu 1: [ 121.301994][ T7211] generic_buffers_fsync_noflush+0x80/0x120 [ 121.308167][ T7211] ext4_sync_file+0x1ab/0x690 [ 121.312851][ T7211] vfs_fsync_range+0x10d/0x130 [ 121.317715][ T7211] ext4_buffered_write_iter+0x34f/0x3c0 [ 121.323267][ T7211] ext4_file_write_iter+0x387/0xf60 [ 121.328472][ T7211] iter_file_splice_write+0x666/0xa60 [ 121.333855][ T7211] direct_splice_actor+0x156/0x2a0 [ 121.338980][ T7211] splice_direct_to_actor+0x312/0x680 [ 121.344515][ T7211] do_splice_direct+0xda/0x150 [ 121.349300][ T7211] do_sendfile+0x380/0x650 [ 121.353741][ T7211] __x64_sys_sendfile64+0x105/0x150 [ 121.358965][ T7211] x64_sys_call+0x2bb4/0x3000 [ 121.363697][ T7211] do_syscall_64+0xd2/0x200 [ 121.368212][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.374118][ T7211] [ 121.376452][ T7211] value changed: 0x00000070 -> 0x00000002 [ 121.382260][ T7211] [ 121.384590][ T7211] Reported by Kernel Concurrency Sanitizer on: [ 121.390797][ T7211] CPU: 1 UID: 0 PID: 7211 Comm: syz.4.1379 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.400529][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.410607][ T7211] ================================================================== [ 121.512052][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.312270][ T7195] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.322078][ T7195] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 122.372230][ T7195] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.382567][ T7195] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 122.426543][ T4431] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 122.434956][ T4431] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.446563][ T4431] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 122.454931][ T4431] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.470291][ T4431] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 122.478709][ T4431] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 122.490135][ T4431] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 122.498502][ T4431] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0