last executing test programs: 1m55.647300271s ago: executing program 2 (id=912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m55.563815529s ago: executing program 2 (id=915): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) 1m55.554564029s ago: executing program 2 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='rpm_return_int\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 1m55.481523756s ago: executing program 2 (id=919): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x2, 0xffffffffffffffff, r3, 0x0, 0xee00, 0x122, 0x3}, 0x400, 0x7ad9df5f, 0x1, 0xed, r1, r2, 0xd}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000003c0)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") sendfile(r0, r0, 0x0, 0x800000009) 1m55.21374715s ago: executing program 2 (id=921): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000080b703000000000000a50000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m54.910277097s ago: executing program 2 (id=924): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.910086597s ago: executing program 32 (id=924): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.881844863s ago: executing program 5 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) 1m38.877940303s ago: executing program 5 (id=1338): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x8000000000}, 0x18) 1m38.495473978s ago: executing program 5 (id=1346): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='tlb_flush\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m38.104864763s ago: executing program 5 (id=1374): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) add_key$keyring(&(0x7f0000000300), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 1m36.828529377s ago: executing program 5 (id=1390): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x449) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x4000000) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x80000006) utime(&(0x7f0000000000)='./file0\x00', 0x0) 1m36.550037542s ago: executing program 5 (id=1395): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) open_by_handle_at(r0, 0x0, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c0001400000"], 0x104}}, 0x0) 1m36.549700592s ago: executing program 33 (id=1395): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) open_by_handle_at(r0, 0x0, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c0001400000"], 0x104}}, 0x0) 6.092880454s ago: executing program 6 (id=3487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.092211554s ago: executing program 6 (id=3488): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20002017}) close_range(r2, 0xffffffffffffffff, 0x0) 6.02619371s ago: executing program 6 (id=3489): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x0, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu<20\t||') 6.0258248s ago: executing program 6 (id=3490): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 6.014856411s ago: executing program 6 (id=3491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 5.817821689s ago: executing program 6 (id=3498): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000009000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5.790431771s ago: executing program 34 (id=3498): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000009000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.042079988s ago: executing program 0 (id=3541): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.999358551s ago: executing program 0 (id=3542): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0xa940, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) 2.877862172s ago: executing program 0 (id=3543): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.631415654s ago: executing program 0 (id=3545): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/16, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000002800000002000000000000000000000300000200000002000000000000000100000000000001"], 0x0, 0x42, 0x0, 0x0, 0xfffffff8}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.45687375s ago: executing program 0 (id=3551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 2.396737365s ago: executing program 0 (id=3554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) 1.130526819s ago: executing program 7 (id=3599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.086662263s ago: executing program 4 (id=3600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r3, 0x0, 0x80000001}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 1.086070613s ago: executing program 7 (id=3601): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x2000000}) 1.081297433s ago: executing program 4 (id=3602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 1.069173194s ago: executing program 7 (id=3603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004891}, 0x40084) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = syz_open_dev$loop(&(0x7f0000001400), 0xfffffffffffffffb, 0x5480) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000001440)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.039512587s ago: executing program 7 (id=3605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) 992.140391ms ago: executing program 4 (id=3608): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x400000}, 0x18) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r2, 0xffffffffffffffff, 0x0) 916.740998ms ago: executing program 4 (id=3612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x43, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 891.55688ms ago: executing program 7 (id=3613): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp(0x0, 0x0, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x7ec62c73}], 0x1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 526.166823ms ago: executing program 3 (id=3629): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 525.819413ms ago: executing program 3 (id=3630): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 516.882434ms ago: executing program 3 (id=3631): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x24}}, 0x0) 486.323037ms ago: executing program 3 (id=3632): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x3a) 309.832473ms ago: executing program 3 (id=3635): openat$ptmx(0xffffffffffffff9c, 0x0, 0x410040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2b4, &(0x7f00000013c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40047211, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101042, 0x0) 309.639272ms ago: executing program 3 (id=3636): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x803, 0x0, &(0x7f0000001480)=0x4, 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) 264.900176ms ago: executing program 1 (id=3639): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) 230.956769ms ago: executing program 1 (id=3640): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 218.41433ms ago: executing program 1 (id=3641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0xf}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00009100bbbbbbbbbbbbaaaaaaaaaa88a8"], 0x36) 188.701723ms ago: executing program 1 (id=3642): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x7f8404caeb85699d}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_io_uring_setup(0xa71, &(0x7f0000000100)={0x0, 0x5a84, 0x800, 0x1, 0xd1}, &(0x7f00000014c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x351e, 0xeede, 0x0, 0x0, 0x0) 116.92141ms ago: executing program 1 (id=3643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x8001) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 49.015686ms ago: executing program 4 (id=3644): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff41, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x58}}, 0x8000) 48.310226ms ago: executing program 1 (id=3645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r2 = epoll_create(0xaf2) r3 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f}) 814.07µs ago: executing program 4 (id=3646): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020692400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069bf0000850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c) syz_emit_ethernet(0x1298, &(0x7f0000001a80)=ANY=[], 0x0) 0s ago: executing program 7 (id=3647): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) rename(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) kernel console output (not intermixed with test programs): filesystem 00000000-0000-0000-0000-000000000000. [ 97.358115][ T8200] loop3: detected capacity change from 0 to 512 [ 97.380057][ T8200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 97.414873][ T8200] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.1722: Unimplemented hash flags: 0x0001 [ 97.426587][ T8200] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1722: Corrupt directory, running e2fsck is recommended [ 97.473413][ T8200] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.1722: Unimplemented hash flags: 0x0001 [ 97.485160][ T8200] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1722: Corrupt directory, running e2fsck is recommended [ 97.539421][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.637928][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 97.638016][ T29] audit: type=1400 audit(98.611:4003): avc: denied { create } for pid=8225 comm="syz.3.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 97.839668][ T8235] netlink: 'syz.3.1734': attribute type 13 has an invalid length. [ 97.904504][ T29] audit: type=1400 audit(98.881:4004): avc: denied { read write } for pid=8238 comm="syz.0.1737" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.966319][ T29] audit: type=1400 audit(98.881:4005): avc: denied { open } for pid=8238 comm="syz.0.1737" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.990064][ T29] audit: type=1400 audit(98.881:4006): avc: denied { ioctl } for pid=8238 comm="syz.0.1737" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.866780][ T29] audit: type=1326 audit(99.821:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 98.885061][ T8242] net_ratelimit: 24 callbacks suppressed [ 98.885078][ T8242] Set syz1 is full, maxelem 65536 reached [ 98.889700][ T29] audit: type=1326 audit(99.831:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 98.923777][ T29] audit: type=1326 audit(99.831:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 98.946746][ T29] audit: type=1326 audit(99.831:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 98.969678][ T29] audit: type=1326 audit(99.831:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 98.992387][ T29] audit: type=1326 audit(99.831:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 99.071170][ T2021] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.088881][ T2021] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.104203][ T2021] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.114992][ T2021] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.189651][ T8263] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1749'. [ 99.217844][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 99.281413][ T8269] Invalid argument reading file caps for ./file0 [ 99.342334][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 99.384713][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.411485][ T8274] bridge_slave_1 (unregistering): left allmulticast mode [ 99.418897][ T8274] bridge_slave_1 (unregistering): left promiscuous mode [ 99.426001][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.133471][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'. [ 100.146577][ T2021] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.623400][ T8316] loop6: detected capacity change from 0 to 2048 [ 100.665997][ T3312] Alternate GPT is invalid, using primary GPT. [ 100.672544][ T3312] loop6: p2 p3 p7 [ 100.683258][ T8316] Alternate GPT is invalid, using primary GPT. [ 100.689628][ T8316] loop6: p2 p3 p7 [ 100.796741][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 100.812098][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 100.838303][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 101.002284][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 101.212762][ T8358] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.432246][ T8379] lo speed is unknown, defaulting to 1000 [ 101.770716][ T8391] team0: Port device vlan2 added [ 101.840979][ T8393] tipc: Started in network mode [ 101.846013][ T8393] tipc: Node identity be406e8fa9de, cluster identity 4711 [ 101.853471][ T8393] tipc: Enabled bearer , priority 0 [ 101.888244][ T8393] tipc: Disabling bearer [ 102.212817][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.212914][ T3551] Bluetooth: hci0: command 0x1003 tx timeout [ 102.284421][ T8409] xt_hashlimit: max too large, truncated to 1048576 [ 102.314484][ T8409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.441071][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 102.535739][ T8420] lo speed is unknown, defaulting to 1000 [ 102.798438][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 102.798452][ T29] audit: type=1400 audit(102.760:4073): avc: denied { setopt } for pid=8424 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.899384][ T29] audit: type=1400 audit(102.830:4074): avc: denied { create } for pid=8428 comm="syz.3.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.918462][ T29] audit: type=1400 audit(102.830:4075): avc: denied { setopt } for pid=8428 comm="syz.3.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.986251][ T8430] loop4: detected capacity change from 0 to 512 [ 103.083163][ T8423] Set syz1 is full, maxelem 65536 reached [ 103.090539][ T8430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.193647][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.282587][ T29] audit: type=1400 audit(103.240:4076): avc: denied { mounton } for pid=8449 comm="syz.0.1826" path="/374/file0" dev="proc" ino=4026532503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 103.362565][ T29] audit: type=1400 audit(103.280:4077): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 103.381838][ T29] audit: type=1326 audit(103.280:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 103.404875][ T29] audit: type=1326 audit(103.280:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 103.428000][ T29] audit: type=1326 audit(103.280:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 103.445233][ T8451] loop4: detected capacity change from 0 to 32768 [ 103.450980][ T29] audit: type=1326 audit(103.280:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 103.480552][ T29] audit: type=1326 audit(103.280:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8452 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 103.543686][ T8451] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 103.553222][ T8451] loop4: p1 start 460800 is beyond EOD, truncated [ 103.559811][ T8451] loop4: p2 size 83886080 extends beyond EOD, truncated [ 103.594230][ T8451] loop4: p5 start 460800 is beyond EOD, truncated [ 103.600731][ T8451] loop4: p6 size 83886080 extends beyond EOD, truncated [ 103.722978][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 103.729162][ T4207] udevd[4207]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 103.734479][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 103.744134][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 103.890110][ T8468] loop4: detected capacity change from 0 to 2048 [ 103.926537][ T8468] Alternate GPT is invalid, using primary GPT. [ 103.933077][ T8468] loop4: p2 p3 p7 [ 103.961282][ T3009] Alternate GPT is invalid, using primary GPT. [ 103.967907][ T3009] loop4: p2 p3 p7 [ 104.010684][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 104.179761][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 104.319827][ T8500] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1848'. [ 104.328979][ T8500] 0ªX¹¦À: renamed from caif0 [ 104.336623][ T8500] 0ªX¹¦À: entered allmulticast mode [ 104.341853][ T8500] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 104.395128][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 104.395804][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1850'. [ 104.517554][ T8515] lo speed is unknown, defaulting to 1000 [ 104.849654][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1858'. [ 104.965674][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1861'. [ 105.029026][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1864'. [ 105.042611][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.055046][ T8540] bridge_slave_1 (unregistering): left allmulticast mode [ 105.062176][ T8540] bridge_slave_1 (unregistering): left promiscuous mode [ 105.069354][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.326061][ T8558] syzkaller0: entered promiscuous mode [ 105.331663][ T8558] syzkaller0: entered allmulticast mode [ 105.967040][ T8597] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1886'. [ 106.245241][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1887'. [ 106.505923][ T8627] loop6: detected capacity change from 0 to 1024 [ 106.515011][ T8627] EXT4-fs: Ignoring removed bh option [ 106.543049][ T8627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.584828][ T7252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.756787][ T8646] 0ªX¹¦À: renamed from caif0 [ 106.763397][ T8646] 0ªX¹¦À: entered allmulticast mode [ 106.768692][ T8646] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 107.005949][ T8662] lo speed is unknown, defaulting to 1000 [ 107.145953][ T8674] 0ªX¹¦À: renamed from caif0 [ 107.157538][ T8674] 0ªX¹¦À: entered allmulticast mode [ 107.162899][ T8674] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 107.240166][ T8685] netlink: 'syz.3.1923': attribute type 1 has an invalid length. [ 107.274531][ T8685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.301825][ T8690] bond2 (unregistering): Released all slaves [ 107.606953][ T8716] netlink: 'syz.4.1935': attribute type 13 has an invalid length. [ 107.964118][ T8727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8727 comm=syz.1.1937 [ 108.050863][ T8729] loop3: detected capacity change from 0 to 512 [ 108.231177][ T8729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.426843][ T29] kauditd_printk_skb: 792 callbacks suppressed [ 108.426858][ T29] audit: type=1400 audit(108.380:4875): avc: denied { read append open } for pid=8728 comm="syz.3.1940" path="/361/file0/cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.473905][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.657342][ T8716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.721691][ T8742] loop3: detected capacity change from 0 to 512 [ 108.735430][ T8716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.780317][ T8742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.021420][ T36] lo speed is unknown, defaulting to 1000 [ 109.027329][ T36] syz2: Port: 1 Link DOWN [ 109.031851][ T8727] __nla_validate_parse: 3 callbacks suppressed [ 109.031862][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1937'. [ 109.073453][ T1854] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.081836][ T1854] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.114465][ T29] audit: type=1400 audit(109.070:4876): avc: denied { shutdown } for pid=8760 comm="syz.6.1944" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.136721][ T1854] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.145142][ T1854] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.202537][ T29] audit: type=1400 audit(109.110:4877): avc: denied { watch_reads } for pid=8762 comm="syz.4.1945" path="/392" dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 109.217697][ T1854] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.233060][ T1854] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.287654][ T1854] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.296112][ T1854] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.324728][ T29] audit: type=1400 audit(109.260:4878): avc: denied { write } for pid=8773 comm="syz.4.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.452771][ T29] audit: type=1400 audit(109.410:4879): avc: denied { create } for pid=8778 comm="syz.4.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.483181][ T8779] netlink: 'syz.4.1953': attribute type 32 has an invalid length. [ 109.503248][ T29] audit: type=1400 audit(109.450:4880): avc: denied { write } for pid=8778 comm="syz.4.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.522912][ T29] audit: type=1400 audit(109.450:4881): avc: denied { nlmsg_write } for pid=8778 comm="syz.4.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.558766][ T8735] Set syz1 is full, maxelem 65536 reached [ 109.561638][ T8785] netlink: 'syz.6.1954': attribute type 30 has an invalid length. [ 109.595220][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.990743][ T8805] syzkaller0: entered promiscuous mode [ 109.996468][ T8805] syzkaller0: entered allmulticast mode [ 110.192554][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1972'. [ 110.201536][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1972'. [ 110.263054][ T5024] tipc: Subscription rejected, illegal request [ 110.302969][ T29] audit: type=1400 audit(110.270:4882): avc: denied { getopt } for pid=8841 comm="syz.1.1977" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.373968][ T29] audit: type=1326 audit(110.330:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 110.405248][ T29] audit: type=1326 audit(110.360:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.0.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 110.904636][ T8878] lo speed is unknown, defaulting to 1000 [ 111.539865][ T8926] tipc: Started in network mode [ 111.545028][ T8926] tipc: Node identity ac14140f, cluster identity 4711 [ 111.566172][ T8926] tipc: New replicast peer: 255.255.255.255 [ 111.572344][ T8926] tipc: Enabled bearer , priority 10 [ 112.239021][ T8950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2023'. [ 112.390833][ T8958] loop6: detected capacity change from 0 to 128 [ 112.530367][ T8971] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 112.561124][ T8971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2033'. [ 112.570157][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 112.579185][ T8741] tipc: Node number set to 2886997007 [ 112.590407][ T8973] loop4: detected capacity change from 0 to 512 [ 112.655987][ T8973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.683357][ T8954] Set syz1 is full, maxelem 65536 reached [ 112.722139][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.819146][ T8991] loop4: detected capacity change from 0 to 512 [ 112.829473][ T8991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.840678][ T8991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 112.848969][ T8991] System zones: 1-12 [ 112.853662][ T8991] EXT4-fs (loop4): 1 truncate cleaned up [ 112.859934][ T8991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.912127][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.651030][ T9105] loop4: detected capacity change from 0 to 2048 [ 113.656722][ T9112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2050'. [ 113.680205][ T9107] loop6: detected capacity change from 0 to 512 [ 113.693139][ T9105] loop4: p2 < > p4 [ 113.704042][ T9105] loop4: p4 size 262144 extends beyond EOD, truncated [ 113.704733][ T9107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.727549][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 113.727564][ T29] audit: type=1400 audit(113.690:4946): avc: denied { write } for pid=9104 comm="syz.4.2049" name="loop4p2" dev="devtmpfs" ino=892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.799415][ T7252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.819024][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 113.833129][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 113.904594][ T29] audit: type=1326 audit(113.870:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 113.980174][ T29] audit: type=1326 audit(113.900:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 114.002925][ T29] audit: type=1326 audit(113.900:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 114.025910][ T29] audit: type=1326 audit(113.900:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 114.048676][ T29] audit: type=1326 audit(113.900:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 114.071593][ T29] audit: type=1326 audit(113.900:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 114.094425][ T29] audit: type=1326 audit(113.900:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 114.117247][ T29] audit: type=1400 audit(113.900:4954): avc: denied { getopt } for pid=9142 comm="syz.0.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.136672][ T29] audit: type=1326 audit(113.900:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9142 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 114.208327][ T9168] lo speed is unknown, defaulting to 1000 [ 114.462564][ T9183] futex_wake_op: syz.6.2066 tries to shift op by -1; fix this program [ 114.711508][ T9198] loop4: detected capacity change from 0 to 256 [ 114.723212][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 114.734647][ T9168] ip6gre1: entered allmulticast mode [ 114.758426][ T9198] msdos: Bad value for 'uid' [ 114.763084][ T9198] msdos: Bad value for 'uid' [ 114.779159][ T2021] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.788504][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 114.826423][ T9201] ip6gre1: entered allmulticast mode [ 115.047695][ T9220] netlink: 'syz.0.2082': attribute type 1 has an invalid length. [ 115.063170][ T9220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.101145][ T9220] bond1: (slave veth11): Enslaving as an active interface with a down link [ 115.140973][ T9220] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 115.154195][ T9220] bond1: (slave batadv1): making interface the new active one [ 115.179599][ T9220] batadv1: entered promiscuous mode [ 115.192650][ T9220] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 115.232694][ T9214] Set syz1 is full, maxelem 65536 reached [ 115.305360][ T9238] netlink: 'syz.1.2089': attribute type 4 has an invalid length. [ 115.328645][ T9240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2090'. [ 115.337781][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 115.502118][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 115.863575][ T9292] Set syz1 is full, maxelem 65536 reached [ 116.833504][ T9302] Process accounting resumed [ 116.850169][ T9347] syz_tun: entered allmulticast mode [ 116.852580][ T3551] Bluetooth: hci0: command 0x1003 tx timeout [ 116.858910][ T9347] dvmrp9: entered allmulticast mode [ 116.861634][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.868847][ T9346] syz_tun: left allmulticast mode [ 116.977764][ T9362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9362 comm=syz.0.2135 [ 117.032591][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2145'. [ 117.338282][ T9391] netlink: 'syz.3.2153': attribute type 10 has an invalid length. [ 117.346478][ T9391] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2153'. [ 117.518387][ T9416] netlink: 'syz.6.2164': attribute type 1 has an invalid length. [ 117.551972][ T9416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.584602][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2164'. [ 117.593603][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2164'. [ 117.635817][ T9416] macsec1: entered promiscuous mode [ 117.641185][ T9416] bond0: entered promiscuous mode [ 117.646378][ T9416] macsec1: entered allmulticast mode [ 117.651669][ T9416] bond0: entered allmulticast mode [ 117.689620][ T9425] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2166'. [ 118.267157][ T9481] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 118.281529][ T9481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.328419][ T9481] bond2: (slave veth9): Enslaving as an active interface with a down link [ 118.365382][ T9488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.394732][ T9488] bond2: (slave batadv0): making interface the new active one [ 118.441747][ T9488] batadv0: entered promiscuous mode [ 118.456295][ T9488] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 118.843154][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 118.843169][ T29] audit: type=1400 audit(118.810:5097): avc: denied { append } for pid=9531 comm="syz.4.2178" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.995535][ T9540] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 119.021549][ T29] audit: type=1326 audit(118.980:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 119.044471][ T29] audit: type=1326 audit(118.980:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 119.067426][ T29] audit: type=1326 audit(118.980:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 119.090346][ T29] audit: type=1326 audit(118.980:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 119.113230][ T29] audit: type=1326 audit(118.980:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 119.136014][ T29] audit: type=1326 audit(118.980:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 119.158832][ T29] audit: type=1326 audit(118.980:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 119.181737][ T29] audit: type=1326 audit(118.980:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 119.204541][ T29] audit: type=1326 audit(118.980:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 119.628625][ T9565] vlan0: entered allmulticast mode [ 119.652298][ T9565] dummy0: entered allmulticast mode [ 120.524700][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'. [ 120.539343][ T9616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2214'. [ 120.600706][ T9624] loop3: detected capacity change from 0 to 4096 [ 120.607883][ T9624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.621370][ T9624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.646547][ T9624] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 120.703834][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.747335][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'. [ 120.763838][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2224'. [ 121.210047][ T9689] veth12: entered promiscuous mode [ 121.215318][ T9689] veth12: entered allmulticast mode [ 121.330129][ T9703] bridge0: port 2(gretap0) entered blocking state [ 121.336852][ T9703] bridge0: port 2(gretap0) entered disabled state [ 121.367177][ T9703] gretap0: entered allmulticast mode [ 121.375441][ T9703] gretap0: entered promiscuous mode [ 121.385345][ T9703] bridge0: port 2(gretap0) entered blocking state [ 121.391955][ T9703] bridge0: port 2(gretap0) entered forwarding state [ 121.415188][ T9709] gretap0: left allmulticast mode [ 121.420278][ T9709] gretap0: left promiscuous mode [ 121.425393][ T9709] bridge0: port 2(gretap0) entered disabled state [ 121.476961][ T9714] loop6: detected capacity change from 0 to 128 [ 121.540639][ T1854] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.698276][ T9723] SELinux: failed to load policy [ 121.887169][ T9737] loop3: detected capacity change from 0 to 512 [ 121.934738][ T9737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.980228][ T9745] 9p: Bad value for 'rfdno' [ 122.139160][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.314944][ T5024] Bluetooth: hci1: Frame reassembly failed (-84) [ 122.657936][ T9791] loop4: detected capacity change from 0 to 2048 [ 122.673597][ T9791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.714448][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 122.746008][ T9796] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2288: bg 0: block 345: padding at end of block bitmap is not set [ 122.760574][ T9796] EXT4-fs (loop4): Remounting filesystem read-only [ 122.767592][ T5024] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 123.440679][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.572753][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.857803][ T9831] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2304'. [ 124.329000][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 124.329013][ T29] audit: type=1326 audit(124.290:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266baef749 code=0x7ffc0000 [ 124.357526][ T29] audit: type=1326 audit(124.290:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f266baef749 code=0x7ffc0000 [ 124.379815][ T29] audit: type=1326 audit(124.290:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266baef749 code=0x7ffc0000 [ 124.380003][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 124.402420][ T29] audit: type=1326 audit(124.290:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f266baef749 code=0x7ffc0000 [ 124.402443][ T29] audit: type=1326 audit(124.290:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266baef749 code=0x7ffc0000 [ 124.402514][ T29] audit: type=1326 audit(124.290:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266baef749 code=0x7ffc0000 [ 124.423055][ T3551] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 124.613012][ T9856] loop4: detected capacity change from 0 to 2048 [ 125.023589][ T29] audit: type=1400 audit(124.980:5205): avc: denied { read } for pid=9879 comm="syz.6.2323" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.046232][ T29] audit: type=1400 audit(124.980:5206): avc: denied { open } for pid=9879 comm="syz.6.2323" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.069799][ T29] audit: type=1400 audit(124.980:5207): avc: denied { ioctl } for pid=9879 comm="syz.6.2323" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.150712][ T9885] loop6: detected capacity change from 0 to 2048 [ 125.259380][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2328'. [ 125.301734][ T9892] team1: entered promiscuous mode [ 125.306836][ T9892] team1: entered allmulticast mode [ 125.325022][ T9892] 8021q: adding VLAN 0 to HW filter on device team1 [ 125.456826][ T29] audit: type=1400 audit(125.420:5208): avc: denied { setopt } for pid=9898 comm="syz.3.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.478224][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 125.498114][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 125.508906][ T9901] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2332'. [ 125.674852][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2348'. [ 125.924992][ T9920] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 125.924992][ T9920] program syz.6.2350 not setting count and/or reply_len properly [ 126.472698][ T5010] batadv1: left promiscuous mode [ 126.576080][ T9946] smc: net device bond0 applied user defined pnetid SYZ0 [ 126.583510][ T9946] smc: net device bond0 erased user defined pnetid SYZ0 [ 126.871845][ T9962] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2361'. [ 126.971930][ T9969] lo speed is unknown, defaulting to 1000 [ 127.039036][ T9977] pimreg: entered allmulticast mode [ 127.056607][ T9977] pimreg: left allmulticast mode [ 127.216461][ T9990] loop4: detected capacity change from 0 to 1024 [ 127.239572][ T9990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.277440][ T9990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.342317][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.391802][T10000] lo speed is unknown, defaulting to 1000 [ 127.616681][T10017] bridge: RTM_NEWNEIGH with invalid ether address [ 127.653465][T10020] lo speed is unknown, defaulting to 1000 [ 127.663558][T10025] netlink: 'syz.4.2387': attribute type 1 has an invalid length. [ 127.689675][T10026] bridge0: port 2(gretap0) entered blocking state [ 127.696522][T10026] bridge0: port 2(gretap0) entered disabled state [ 127.711882][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2388'. [ 127.716443][T10026] gretap0: entered allmulticast mode [ 127.737922][T10026] gretap0: entered promiscuous mode [ 127.866057][T10030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.051054][T10045] Set syz1 is full, maxelem 65536 reached [ 128.265731][T10053] lo speed is unknown, defaulting to 1000 [ 128.488182][T10082] netlink: 'syz.6.2411': attribute type 7 has an invalid length. [ 128.496010][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2411'. [ 128.567701][T10085] SELinux: failed to load policy [ 129.332860][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 129.332874][ T29] audit: type=1326 audit(129.270:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5277972005 code=0x7ffc0000 [ 129.362426][ T29] audit: type=1326 audit(129.270:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5277972005 code=0x7ffc0000 [ 129.385355][ T29] audit: type=1326 audit(129.270:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5277972005 code=0x7ffc0000 [ 129.408352][ T29] audit: type=1326 audit(129.270:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5277972005 code=0x7ffc0000 [ 129.431247][ T29] audit: type=1326 audit(129.270:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5277972005 code=0x7ffc0000 [ 129.454203][ T29] audit: type=1326 audit(129.270:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 129.477179][ T29] audit: type=1326 audit(129.280:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5277972005 code=0x7ffc0000 [ 129.500314][ T29] audit: type=1326 audit(129.280:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5277972005 code=0x7ffc0000 [ 129.523396][ T29] audit: type=1326 audit(129.280:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5277972005 code=0x7ffc0000 [ 129.546423][ T29] audit: type=1326 audit(129.280:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.6.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5277972005 code=0x7ffc0000 [ 129.862704][ T4993] batadv0: left promiscuous mode [ 129.920498][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2450'. [ 130.345558][T10204] loop6: detected capacity change from 0 to 1024 [ 130.445311][T10208] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2461'. [ 130.464849][T10204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 130.543791][ T7252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 130.716165][T10230] lo speed is unknown, defaulting to 1000 [ 131.669251][T10273] netlink: 'syz.6.2488': attribute type 13 has an invalid length. [ 131.681822][T10273] gretap0: refused to change device tx_queue_len [ 131.688702][T10273] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.723400][T10277] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2490'. [ 131.732460][T10277] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 131.739747][T10277] 0ªî{X¹¦: entered allmulticast mode [ 131.745890][T10277] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 131.766674][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x0 [ 131.774508][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x0 [ 131.782581][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x0 [ 131.790871][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x0 [ 131.798737][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x0 [ 131.806615][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x0 [ 131.814456][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x1 [ 131.822276][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x0 [ 131.830280][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x0 [ 131.838117][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: unknown main item tag 0x0 [ 131.847008][ T8741] hid-generic 0000:0000:FFFFFFFC.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 131.871832][T10281] fido_id[10281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.997279][T10294] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2498'. [ 132.017031][T10294] netem: change failed [ 132.113118][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2494'. [ 132.614760][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 132.657708][T10331] team1: entered promiscuous mode [ 132.662950][T10331] team1: entered allmulticast mode [ 132.690274][T10331] 8021q: adding VLAN 0 to HW filter on device team1 [ 132.797373][T10335] ip6gre0: entered promiscuous mode [ 132.803714][T10335] team0: Device ip6gre0 is of different type [ 132.923892][T10339] lo speed is unknown, defaulting to 1000 [ 132.960056][T10342] bridge0: port 1(gretap0) entered blocking state [ 132.966648][T10342] bridge0: port 1(gretap0) entered disabled state [ 133.014701][T10342] gretap0: entered allmulticast mode [ 133.041347][T10342] gretap0: entered promiscuous mode [ 133.193758][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'. [ 133.202961][T10346] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2514'. [ 133.212059][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'. [ 133.220998][T10346] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2514'. [ 133.238690][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'. [ 133.287811][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'. [ 133.417424][T10357] netlink: 'syz.4.2518': attribute type 4 has an invalid length. [ 133.557896][T10377] loop4: detected capacity change from 0 to 512 [ 133.578515][T10377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.618679][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.248131][T10393] loop6: detected capacity change from 0 to 8192 [ 134.258132][T10393] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.379177][ T29] kauditd_printk_skb: 857 callbacks suppressed [ 134.379193][ T29] audit: type=1400 audit(134.340:6258): avc: denied { connect } for pid=10395 comm="syz.0.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.468865][T10399] lo speed is unknown, defaulting to 1000 [ 134.491698][ T29] audit: type=1400 audit(134.450:6259): avc: denied { bind } for pid=10404 comm="syz.1.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.544757][ T29] audit: type=1400 audit(134.490:6260): avc: denied { setopt } for pid=10404 comm="syz.1.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.669733][T10417] netlink: 'syz.0.2540': attribute type 10 has an invalid length. [ 134.687972][T10417] dummy0: entered promiscuous mode [ 134.693181][T10417] dummy0: entered allmulticast mode [ 134.701584][ T29] audit: type=1400 audit(134.670:6261): avc: denied { mounton } for pid=10418 comm="syz.4.2541" path="/522/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 134.708962][T10417] bridge0: port 2(dummy0) entered blocking state [ 134.729630][T10417] bridge0: port 2(dummy0) entered disabled state [ 134.738760][T10417] bridge0: port 2(dummy0) entered blocking state [ 134.745229][T10417] bridge0: port 2(dummy0) entered forwarding state [ 134.747035][ T29] audit: type=1400 audit(134.720:6262): avc: denied { unmount } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 135.144308][ T8741] kernel write not supported for file /uhid (pid: 8741 comm: kworker/1:13) [ 135.349948][ T29] audit: type=1400 audit(135.310:6263): avc: denied { mounton } for pid=10453 comm="syz.6.2556" path="/proc/517/task" dev="proc" ino=32273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 135.373306][ T29] audit: type=1400 audit(135.310:6264): avc: denied { mount } for pid=10453 comm="syz.6.2556" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 135.878868][ T29] audit: type=1400 audit(135.840:6265): avc: denied { mounton } for pid=10478 comm="syz.6.2565" path="/229/file0" dev="tmpfs" ino=1199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 136.015925][T10486] loop6: detected capacity change from 0 to 1024 [ 136.058394][T10486] EXT4-fs: Ignoring removed bh option [ 136.071812][T10486] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 136.105803][T10486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.124845][ T29] audit: type=1400 audit(136.090:6266): avc: denied { mounton } for pid=10485 comm="syz.6.2569" path="/231/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.149606][ T29] audit: type=1400 audit(136.120:6267): avc: denied { mount } for pid=10485 comm="syz.6.2569" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 136.172414][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.182854][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.193270][ T7252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.299836][T10521] netlink: 'syz.1.2580': attribute type 30 has an invalid length. [ 136.531328][T10546] block device autoloading is deprecated and will be removed. [ 136.576891][T10552] netlink: 'LX[X': attribute type 13 has an invalid length. [ 136.596378][T10552] gretap0: refused to change device tx_queue_len [ 136.604198][T10552] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 136.902678][T10587] netlink: 'syz.6.2609': attribute type 39 has an invalid length. [ 137.041494][T10585] lo speed is unknown, defaulting to 1000 [ 137.458502][T10642] netlink: 'syz.6.2631': attribute type 10 has an invalid length. [ 137.466420][T10642] __nla_validate_parse: 13 callbacks suppressed [ 137.466433][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2631'. [ 137.482892][T10642] dummy0: entered promiscuous mode [ 137.488121][T10642] dummy0: entered allmulticast mode [ 137.494646][T10642] bridge0: port 2(dummy0) entered blocking state [ 137.501130][T10642] bridge0: port 2(dummy0) entered disabled state [ 137.540408][T10642] bridge0: port 2(dummy0) entered blocking state [ 137.546886][T10642] bridge0: port 2(dummy0) entered forwarding state [ 137.959958][T10677] netem: change failed [ 138.341143][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 138.496223][T10708] lo speed is unknown, defaulting to 1000 [ 138.833432][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b178e00: rx timeout, send abort [ 139.333377][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b178200: rx timeout, send abort [ 139.342466][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b178e00: abort rx timeout. Force session deactivation [ 139.372758][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2661'. [ 139.406157][T10724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10724 comm=syz.3.2662 [ 139.790173][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 139.790190][ T29] audit: type=1326 audit(139.750:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 139.819641][ T29] audit: type=1326 audit(139.750:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 139.841597][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b178200: abort rx timeout. Force session deactivation [ 139.842601][ T29] audit: type=1326 audit(139.750:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 139.875895][ T29] audit: type=1326 audit(139.750:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 139.898767][ T29] audit: type=1326 audit(139.750:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 139.921732][ T29] audit: type=1326 audit(139.750:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 139.944606][ T29] audit: type=1326 audit(139.750:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 139.967768][ T29] audit: type=1326 audit(139.750:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 139.990720][ T29] audit: type=1326 audit(139.750:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 140.013775][ T29] audit: type=1326 audit(139.750:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.6.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 140.145010][T10761] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2676'. [ 140.323576][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2681'. [ 140.665766][T10796] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.715908][T10803] loop6: detected capacity change from 0 to 1024 [ 140.724850][T10796] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.735943][T10803] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2692: bad orphan inode 134217728 [ 140.747274][T10803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.774491][T10796] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.854370][T10796] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.961223][ T5003] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.984863][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 140.985506][ T5003] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.045659][ T5003] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.067315][ T5003] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.111095][T10827] netlink: 'syz.3.2701': attribute type 1 has an invalid length. [ 141.173093][T10827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.197222][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 141.226924][T10839] bond3 (unregistering): Released all slaves [ 141.237952][ T7252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.379745][T10857] lo speed is unknown, defaulting to 1000 [ 141.406654][T10861] netlink: 'syz.3.2717': attribute type 7 has an invalid length. [ 141.414490][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 141.670640][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'. [ 141.885247][T10899] loop4: detected capacity change from 0 to 1024 [ 141.897472][T10899] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2734: bad orphan inode 134217728 [ 141.911746][T10899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.184208][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.509861][T10933] blktrace: Concurrent blktraces are not allowed on loop6 [ 142.755233][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2756'. [ 142.773550][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'. [ 142.837139][T10961] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.874745][T10961] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.934629][T10961] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.024853][T10961] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.136790][T10982] ref_ctr_offset mismatch. inode: 0xca6 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 143.344444][T10999] loop4: detected capacity change from 0 to 512 [ 143.355082][T10999] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm ÿ: inode #0: comm ÿ: iget: illegal inode # [ 143.368136][T10999] EXT4-fs (loop4): Remounting filesystem read-only [ 143.374781][T10999] EXT4-fs (loop4): get orphan inode failed [ 143.381424][T10999] EXT4-fs (loop4): mount failed [ 143.457737][T11008] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2780'. [ 143.572847][T11013] loop4: detected capacity change from 0 to 164 [ 143.582721][T11013] Unable to read rock-ridge attributes [ 143.593197][T11013] Unable to read rock-ridge attributes [ 144.549346][T11029] loop6: detected capacity change from 0 to 512 [ 144.563917][T11029] EXT4-fs error (device loop6): ext4_init_orphan_info:583: comm ÿ: inode #0: comm ÿ: iget: illegal inode # [ 144.582675][T11029] EXT4-fs (loop6): Remounting filesystem read-only [ 144.589240][T11029] EXT4-fs (loop6): get orphan inode failed [ 144.603612][ T4995] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.619314][ T4995] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.628260][T11029] EXT4-fs (loop6): mount failed [ 144.642568][ T5007] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.663410][ T5007] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.845140][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 144.845154][ T29] audit: type=1400 audit(144.800:6710): avc: denied { bind } for pid=11053 comm="syz.0.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.870254][ T29] audit: type=1400 audit(144.800:6711): avc: denied { name_bind } for pid=11053 comm="syz.0.2800" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 144.890860][ T29] audit: type=1400 audit(144.800:6712): avc: denied { node_bind } for pid=11053 comm="syz.0.2800" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 144.913222][T11054] loop3: detected capacity change from 0 to 764 [ 144.926565][T11054] rock: directory entry would overflow storage [ 144.932865][T11054] rock: sig=0x4f50, size=4, remaining=3 [ 144.938439][T11054] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 144.971722][T11061] loop0: detected capacity change from 0 to 1024 [ 145.029442][T11061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.065664][T11061] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2803: Allocating blocks 449-513 which overlap fs metadata [ 145.086943][T11060] EXT4-fs (loop0): pa ffff888107196230: logic 48, phys. 177, len 21 [ 145.095347][T11060] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 145.133340][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.203106][T11080] loop0: detected capacity change from 0 to 512 [ 145.233728][T11080] EXT4-fs error (device loop0): ext4_init_orphan_info:583: comm ÿ: inode #0: comm ÿ: iget: illegal inode # [ 145.278907][T11086] pim6reg: entered allmulticast mode [ 145.285067][T11086] pim6reg: left allmulticast mode [ 145.285454][T11080] EXT4-fs (loop0): Remounting filesystem read-only [ 145.296865][T11080] EXT4-fs (loop0): get orphan inode failed [ 145.322418][T11080] EXT4-fs (loop0): mount failed [ 145.367673][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2811'. [ 145.449279][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 145.590096][T11094] loop4: detected capacity change from 0 to 8192 [ 145.628200][T11096] loop0: detected capacity change from 0 to 512 [ 145.663281][T11096] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.699089][T11096] EXT4-fs (loop0): 1 truncate cleaned up [ 145.731486][T11096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.764837][T11096] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 145.786883][T11096] SELinux: failed to load policy [ 145.812380][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.869955][T11123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2828'. [ 145.881936][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 145.891228][T11121] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2827'. [ 145.900931][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 145.910479][T11121] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2827'. [ 145.969116][T11132] bridge0: entered promiscuous mode [ 145.981877][T11132] bridge0: port 1(macsec0) entered blocking state [ 145.988702][T11132] bridge0: port 1(macsec0) entered disabled state [ 145.996488][T11132] macsec0: entered allmulticast mode [ 146.001806][T11132] bridge0: entered allmulticast mode [ 146.010089][ T29] audit: type=1400 audit(145.980:6713): avc: denied { read } for pid=11131 comm="syz.6.2829" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 146.032805][ T29] audit: type=1400 audit(145.980:6714): avc: denied { open } for pid=11131 comm="syz.6.2829" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 146.055984][T11132] macsec0: left allmulticast mode [ 146.061052][T11132] bridge0: left allmulticast mode [ 146.067844][T11132] bridge0: left promiscuous mode [ 146.151777][ T29] audit: type=1326 audit(146.110:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 146.174780][ T29] audit: type=1326 audit(146.110:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 146.197860][ T29] audit: type=1326 audit(146.110:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 146.220814][ T29] audit: type=1326 audit(146.110:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 146.243744][ T29] audit: type=1326 audit(146.110:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.1.2834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 146.270855][T11145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11145 comm=syz.3.2836 [ 146.289405][T11141] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.357911][T11141] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.404444][T11141] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.474572][T11141] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.540702][ T4995] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.560604][ T4995] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.569392][ T4995] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.602427][ T4995] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.655102][T11165] bridge0: entered promiscuous mode [ 146.662340][T11165] bridge0: port 3(macsec2) entered blocking state [ 146.668935][T11165] bridge0: port 3(macsec2) entered disabled state [ 146.676468][T11165] macsec2: entered allmulticast mode [ 146.681819][T11165] bridge0: entered allmulticast mode [ 146.688924][T11165] macsec2: left allmulticast mode [ 146.694066][T11165] bridge0: left allmulticast mode [ 146.700546][T11165] bridge0: left promiscuous mode [ 146.989648][T11173] loop0: detected capacity change from 0 to 512 [ 147.023243][T11173] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.041347][T11173] EXT4-fs (loop0): orphan cleanup on readonly fs [ 147.051577][T11173] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2847: Allocating blocks 41-42 which overlap fs metadata [ 147.067376][T11173] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2847: Allocating blocks 41-42 which overlap fs metadata [ 147.083615][T11173] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2847: Failed to acquire dquot type 1 [ 147.096656][T11173] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 147.112165][T11173] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2847: corrupted inode contents [ 147.135410][T11173] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.2847: mark_inode_dirty error [ 147.148175][T11173] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2847: corrupted inode contents [ 147.211220][T11173] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.2847: mark_inode_dirty error [ 147.229248][T11173] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2847: corrupted inode contents [ 147.243178][T11173] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 147.253557][T11173] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.2847: corrupted inode contents [ 147.266811][T11173] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.2847: mark_inode_dirty error [ 147.280144][T11173] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 147.290017][T11173] EXT4-fs (loop0): 1 truncate cleaned up [ 147.297032][T11173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.385569][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.397700][T11167] Set syz1 is full, maxelem 65536 reached [ 147.447088][T11185] loop0: detected capacity change from 0 to 164 [ 147.514032][T11185] Unable to read rock-ridge attributes [ 147.528800][T11185] Unable to read rock-ridge attributes [ 147.665389][ T3388] Process accounting resumed [ 147.686884][T11202] netlink: 'syz.0.2858': attribute type 15 has an invalid length. [ 147.723380][T11208] netlink: 'syz.6.2861': attribute type 1 has an invalid length. [ 147.747091][T11208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.759881][T11208] bond1 (unregistering): Released all slaves [ 147.765761][T11209] __nla_validate_parse: 28 callbacks suppressed [ 147.765776][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 147.781268][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 147.872680][T11218] loop0: detected capacity change from 0 to 8192 [ 147.896532][T11221] loop6: detected capacity change from 0 to 164 [ 147.905217][T11221] Unable to read rock-ridge attributes [ 147.927694][T11221] Unable to read rock-ridge attributes [ 148.006931][T11227] pimreg: entered allmulticast mode [ 148.013425][T11227] pimreg: left allmulticast mode [ 148.461269][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'. [ 148.769570][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 148.771139][T11284] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 148.992403][T11293] loop4: detected capacity change from 0 to 1024 [ 149.004453][T11293] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2897: bad orphan inode 134217728 [ 149.031109][T11293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.300202][T11310] loop0: detected capacity change from 0 to 128 [ 149.337227][T11312] ref_ctr_offset mismatch. inode: 0xb62 offset: 0x0 ref_ctr_offset(old): 0x72 ref_ctr_offset(new): 0x0 [ 149.349193][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.943735][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.955853][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.983943][T11337] ref_ctr_offset mismatch. inode: 0xb05 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 150.063627][T11343] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.2913'. [ 150.072845][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2913'. [ 150.644147][T11365] tipc: Enabling of bearer rejected, already enabled [ 150.809733][T11377] loop3: detected capacity change from 0 to 512 [ 150.825060][T11377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.848299][T11377] EXT4-fs (loop3): 1 truncate cleaned up [ 150.863161][T11377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.892997][T11382] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 150.915484][T11382] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 150.983882][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 150.983909][ T29] audit: type=1400 audit(150.950:7034): avc: denied { map } for pid=11376 comm="syz.3.2930" path="/544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_wait_time_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 151.144210][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.297867][T11398] netlink: 'syz.0.2938': attribute type 16 has an invalid length. [ 151.305919][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2938'. [ 151.333619][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2940'. [ 151.337298][T11398] bridge0: port 2(dummy0) entered disabled state [ 151.360893][T11398] bridge_slave_0: left promiscuous mode [ 151.367234][T11398] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.704686][T11434] loop0: detected capacity change from 0 to 764 [ 151.715235][T11434] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 151.738928][ T29] audit: type=1400 audit(151.700:7035): avc: denied { mounton } for pid=11433 comm="syz.0.2950" path="/568/file3/file0" dev="loop0" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 151.819084][ T29] audit: type=1326 audit(151.780:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 151.843341][ T29] audit: type=1326 audit(151.810:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 151.866262][ T29] audit: type=1326 audit(151.810:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 151.889273][ T29] audit: type=1326 audit(151.810:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 151.912111][ T29] audit: type=1326 audit(151.810:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 151.935001][ T29] audit: type=1326 audit(151.810:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 151.957943][ T29] audit: type=1326 audit(151.810:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 151.981205][ T29] audit: type=1326 audit(151.810:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11437 comm="syz.0.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f946afcf749 code=0x7ffc0000 [ 152.043671][T11445] loop3: detected capacity change from 0 to 128 [ 152.051822][T11445] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.054576][T11443] lo speed is unknown, defaulting to 1000 [ 152.165036][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.119018][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2972'. [ 153.127989][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2972'. [ 153.139642][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2972'. [ 153.394079][T11496] loop4: detected capacity change from 0 to 1024 [ 153.410381][T11496] EXT4-fs: Ignoring removed nobh option [ 153.435087][T11496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.459628][T11505] siw: device registration error -23 [ 153.791056][T11510] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2977: Allocating blocks 497-513 which overlap fs metadata [ 153.815894][T11510] EXT4-fs (loop4): pa ffff8881071963f0: logic 256, phys. 385, len 8 [ 153.823964][T11510] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 154.031559][T11531] Invalid argument reading file caps for ./file0 [ 154.044838][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.106902][ T3388] Process accounting resumed [ 154.288079][ T23] Process accounting resumed [ 154.937170][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3009'. [ 155.498410][T11611] netlink: 'syz.3.3022': attribute type 12 has an invalid length. [ 155.573528][T11615] sd 0:0:1:0: device reset [ 155.587320][T11615] siw: device registration error -23 [ 155.767422][T11629] random: crng reseeded on system resumption [ 155.825264][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'. [ 155.834318][T11632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3032'. [ 155.843365][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'. [ 155.860892][T11632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3032'. [ 155.869992][T11632] netlink: 'syz.1.3032': attribute type 6 has an invalid length. [ 156.312916][T11650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3039'. [ 156.326939][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 156.326954][ T29] audit: type=1326 audit(156.290:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.366104][T11648] SET target dimension over the limit! [ 156.402542][ T29] audit: type=1326 audit(156.290:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.425581][ T29] audit: type=1326 audit(156.330:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.448560][ T29] audit: type=1326 audit(156.330:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.471781][ T29] audit: type=1326 audit(156.330:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.494641][ T29] audit: type=1326 audit(156.330:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.517552][ T29] audit: type=1326 audit(156.330:7490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.540729][ T29] audit: type=1326 audit(156.330:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.563679][ T29] audit: type=1326 audit(156.330:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.586640][ T29] audit: type=1326 audit(156.330:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 156.812590][T11672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11672 comm=syz.3.3048 [ 156.931619][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'. [ 156.950893][T11683] loop4: detected capacity change from 0 to 512 [ 156.968404][T11683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.013868][T11683] EXT4-fs (loop4): 1 truncate cleaned up [ 157.040774][T11694] tipc: Enabling of bearer rejected, failed to enable media [ 157.059092][T11683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.193538][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.569161][T11731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.597397][T11735] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 157.887874][T11758] loop0: detected capacity change from 0 to 512 [ 157.941877][T11758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 158.074943][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 158.218345][T11785] ref_ctr increment failed for inode: 0xe19 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811b9baf40 [ 158.235981][T11784] uprobe: syz.1.3089:11784 failed to unregister, leaking uprobe [ 158.296078][T11793] loop0: detected capacity change from 0 to 1024 [ 158.316747][T11793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.372316][T11802] __nla_validate_parse: 1 callbacks suppressed [ 158.372329][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3095'. [ 158.398321][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.423725][T11804] loop6: detected capacity change from 0 to 128 [ 158.434610][T11804] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.495509][ T7252] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.799131][T11844] loop4: detected capacity change from 0 to 4096 [ 158.810629][T11844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.855324][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.914992][T11854] loop0: detected capacity change from 0 to 1024 [ 158.935965][T11854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.962147][T11854] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.3118: Allocating blocks 449-513 which overlap fs metadata [ 158.983182][T11853] EXT4-fs (loop0): pa ffff8881071963f0: logic 48, phys. 177, len 21 [ 158.991261][T11853] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 159.009142][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.058784][T11861] ip6gre3: entered promiscuous mode [ 159.064102][T11861] ip6gre3: entered allmulticast mode [ 159.707050][ T5013] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.765233][T11935] pim6reg: entered allmulticast mode [ 159.786119][T11935] pim6reg: left allmulticast mode [ 159.869454][T11939] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3151'. [ 160.475375][T11963] loop6: detected capacity change from 0 to 1024 [ 160.505183][T11963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.578308][T11963] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.3163: Allocating blocks 449-513 which overlap fs metadata [ 160.653553][T11962] EXT4-fs (loop6): pa ffff8881072a8700: logic 48, phys. 177, len 21 [ 160.661845][T11962] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 160.687533][ T7252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.752403][T11972] @: renamed from vlan0 (while UP) [ 160.868096][T11991] loop6: detected capacity change from 0 to 128 [ 160.883812][T11991] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.960958][ T7252] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.993454][T12000] netlink: 'syz.6.3176': attribute type 1 has an invalid length. [ 161.001598][T12000] netlink: 'syz.6.3176': attribute type 4 has an invalid length. [ 161.009459][T12000] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3176'. [ 161.024113][T12000] netlink: 'syz.6.3176': attribute type 1 has an invalid length. [ 161.031880][T12000] netlink: 'syz.6.3176': attribute type 4 has an invalid length. [ 161.039675][T12000] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3176'. [ 161.062325][T12003] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12003 comm=syz.4.3178 [ 161.100290][T12008] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3180'. [ 161.409770][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 161.409783][ T29] audit: type=1326 audit(161.370:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 161.440019][ T29] audit: type=1326 audit(161.390:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 161.463287][ T29] audit: type=1326 audit(161.410:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 161.486780][ T29] audit: type=1326 audit(161.410:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 161.509811][ T29] audit: type=1326 audit(161.410:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 161.532780][ T29] audit: type=1326 audit(161.440:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 161.556168][ T29] audit: type=1326 audit(161.440:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 161.579266][ T29] audit: type=1326 audit(161.440:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 161.602709][ T29] audit: type=1326 audit(161.440:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.1.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 161.626109][ T29] audit: type=1326 audit(161.460:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.3196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 161.732793][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 161.738994][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.278179][T12068] netlink: 'syz.6.3203': attribute type 1 has an invalid length. [ 162.810595][T12103] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 163.053150][T12120] netlink: 'syz.3.3225': attribute type 30 has an invalid length. [ 163.397394][T12127] vlan0: entered allmulticast mode [ 163.767601][T12160] netlink: 'syz.1.3240': attribute type 1 has an invalid length. [ 163.906832][T12177] netem: change failed [ 164.268819][T12194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3254'. [ 164.470550][T12165] syz.6.3243 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 164.484747][T12165] CPU: 0 UID: 0 PID: 12165 Comm: syz.6.3243 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.484842][T12165] Tainted: [W]=WARN [ 164.484850][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.484955][T12165] Call Trace: [ 164.484976][T12165] [ 164.484986][T12165] __dump_stack+0x1d/0x30 [ 164.485009][T12165] dump_stack_lvl+0x95/0xd0 [ 164.485029][T12165] dump_stack+0x15/0x1b [ 164.485052][T12165] dump_header+0x81/0x240 [ 164.485075][T12165] oom_kill_process+0x295/0x350 [ 164.485100][T12165] out_of_memory+0x97b/0xb80 [ 164.485122][T12165] try_charge_memcg+0x610/0xa10 [ 164.485164][T12165] obj_cgroup_charge_pages+0xa6/0x150 [ 164.485195][T12165] __memcg_kmem_charge_page+0x9f/0x170 [ 164.485275][T12165] __alloc_frozen_pages_noprof+0x18f/0x360 [ 164.485308][T12165] alloc_pages_mpol+0xb3/0x260 [ 164.485477][T12165] alloc_pages_noprof+0x90/0x130 [ 164.485507][T12165] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 164.485546][T12165] __kvmalloc_node_noprof+0x492/0x6b0 [ 164.485572][T12165] ? ip_set_alloc+0x24/0x30 [ 164.485614][T12165] ? ip_set_alloc+0x24/0x30 [ 164.485645][T12165] ip_set_alloc+0x24/0x30 [ 164.485674][T12165] hash_netiface_create+0x282/0x740 [ 164.485836][T12165] ? __pfx_hash_netiface_create+0x10/0x10 [ 164.485880][T12165] ip_set_create+0x3cc/0x970 [ 164.485911][T12165] ? __nla_parse+0x40/0x60 [ 164.485938][T12165] nfnetlink_rcv_msg+0x4c6/0x590 [ 164.485988][T12165] netlink_rcv_skb+0x123/0x220 [ 164.486051][T12165] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 164.486084][T12165] nfnetlink_rcv+0x167/0x16c0 [ 164.486190][T12165] ? kmem_cache_free+0xe3/0x3a0 [ 164.486215][T12165] ? __kfree_skb+0x109/0x150 [ 164.486236][T12165] ? nlmon_xmit+0x4f/0x60 [ 164.486301][T12165] ? consume_skb+0x49/0x150 [ 164.486327][T12165] ? nlmon_xmit+0x4f/0x60 [ 164.486347][T12165] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 164.486440][T12165] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 164.486470][T12165] ? __dev_queue_xmit+0x148/0x1ee0 [ 164.486574][T12165] ? ref_tracker_free+0x37d/0x3e0 [ 164.486602][T12165] ? __netlink_deliver_tap+0x4dc/0x500 [ 164.486675][T12165] netlink_unicast+0x5c0/0x690 [ 164.486727][T12165] netlink_sendmsg+0x58b/0x6b0 [ 164.486759][T12165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.486843][T12165] __sock_sendmsg+0x145/0x180 [ 164.486865][T12165] ____sys_sendmsg+0x31e/0x4a0 [ 164.486904][T12165] ___sys_sendmsg+0x17b/0x1d0 [ 164.486980][T12165] ? __bpf_get_stackid+0x6f6/0x7d0 [ 164.487030][T12165] __x64_sys_sendmsg+0xd4/0x160 [ 164.487058][T12165] x64_sys_call+0x17ba/0x3000 [ 164.487085][T12165] do_syscall_64+0xca/0x2b0 [ 164.487121][T12165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.487156][T12165] RIP: 0033:0x7f527793f749 [ 164.487173][T12165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.487192][T12165] RSP: 002b:00007f52763a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.487213][T12165] RAX: ffffffffffffffda RBX: 00007f5277b95fa0 RCX: 00007f527793f749 [ 164.487227][T12165] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 164.487241][T12165] RBP: 00007f52779c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.487265][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.487278][T12165] R13: 00007f5277b96038 R14: 00007f5277b95fa0 R15: 00007ffca958ed98 [ 164.487299][T12165] [ 164.487315][T12165] memory: usage 307200kB, limit 307200kB, failcnt 296 [ 164.564316][T12200] netlink: 'syz.3.3255': attribute type 1 has an invalid length. [ 164.567825][T12165] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 164.572634][T12200] netlink: 'syz.3.3255': attribute type 2 has an invalid length. [ 164.573901][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 164.577618][T12165] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 164.577634][T12165] Memory cgroup stats for /syz6: [ 164.577901][T12165] cache 0 [ 164.877672][T12165] rss 32768 [ 164.880833][T12165] shmem 0 [ 164.883901][T12165] mapped_file 0 [ 164.887366][T12165] dirty 0 [ 164.890389][T12165] writeback 0 [ 164.893751][T12165] workingset_refault_anon 66 [ 164.898348][T12165] workingset_refault_file 0 [ 164.902875][T12165] swap 278528 [ 164.906163][T12165] swapcached 0 [ 164.909549][T12165] pgpgin 118611 [ 164.913084][T12165] pgpgout 118603 [ 164.916630][T12165] pgfault 125739 [ 164.920236][T12165] pgmajfault 129 [ 164.923852][T12165] inactive_anon 16384 [ 164.927954][T12165] active_anon 16384 [ 164.931756][T12165] inactive_file 0 [ 164.935436][T12165] active_file 0 [ 164.938895][T12165] unevictable 0 [ 164.942347][T12165] hierarchical_memory_limit 314572800 [ 164.947752][T12165] hierarchical_memsw_limit 9223372036854771712 [ 164.953938][T12165] total_cache 0 [ 164.957392][T12165] total_rss 32768 [ 164.961130][T12165] total_shmem 0 [ 164.964607][T12165] total_mapped_file 0 [ 164.968585][T12165] total_dirty 0 [ 164.972030][T12165] total_writeback 0 [ 164.975867][T12165] total_workingset_refault_anon 66 [ 164.981008][T12165] total_workingset_refault_file 0 [ 164.986072][T12165] total_swap 278528 [ 164.989935][T12165] total_swapcached 0 [ 164.994077][T12165] total_pgpgin 118611 [ 164.998178][T12165] total_pgpgout 118603 [ 165.002321][T12165] total_pgfault 125739 [ 165.006580][T12165] total_pgmajfault 129 [ 165.010646][T12165] total_inactive_anon 16384 [ 165.015173][T12165] total_active_anon 16384 [ 165.019663][T12165] total_inactive_file 0 [ 165.023852][T12165] total_active_file 0 [ 165.027916][T12165] total_unevictable 0 [ 165.031925][T12165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3243,pid=12163,uid=0 [ 165.046672][T12165] Memory cgroup out of memory: Killed process 12163 (syz.6.3243) total-vm:93968kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 165.204679][T12218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3262'. [ 165.302478][T12227] lo speed is unknown, defaulting to 1000 [ 165.385028][T12232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12232 comm=syz.6.3268 [ 165.418230][T12237] netlink: 'syz.6.3270': attribute type 7 has an invalid length. [ 165.426114][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3270'. [ 165.707991][T12257] loop4: detected capacity change from 0 to 1024 [ 165.747968][T12257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.800670][T12257] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3278: bg 0: block 112: padding at end of block bitmap is not set [ 165.890963][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 166.494902][T12288] 9pnet: p9_errstr2errno: server reported unknown error [ 166.554072][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 166.554087][ T29] audit: type=1400 audit(166.520:7892): avc: denied { append } for pid=12295 comm="syz.6.3293" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.699388][T12313] loop6: detected capacity change from 0 to 512 [ 166.737478][T12313] EXT4-fs: Ignoring removed orlov option [ 166.743295][T12313] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.759929][T12313] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.3302: corrupted in-inode xattr: e_value size too large [ 166.779824][T12313] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3302: couldn't read orphan inode 15 (err -117) [ 166.792934][T12313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.807616][T12317] 9pnet: p9_errstr2errno: server reported unknown error [ 166.822628][ T29] audit: type=1400 audit(166.780:7893): avc: denied { write } for pid=12312 comm="syz.6.3302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 166.856468][ T7252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.089056][ T29] audit: type=1400 audit(167.050:7894): avc: denied { map } for pid=12341 comm="syz.6.3314" path="socket:[38883]" dev="sockfs" ino=38883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.111975][ T29] audit: type=1400 audit(167.050:7895): avc: denied { read } for pid=12341 comm="syz.6.3314" path="socket:[38883]" dev="sockfs" ino=38883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.139295][T12346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3316'. [ 167.173916][T12348] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3318'. [ 167.180824][T12350] loop4: detected capacity change from 0 to 512 [ 167.183147][T12348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3318'. [ 167.212387][T12350] EXT4-fs: Ignoring removed orlov option [ 167.218270][T12350] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.228298][T12350] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3319: corrupted in-inode xattr: e_value size too large [ 167.243709][T12350] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3319: couldn't read orphan inode 15 (err -117) [ 167.261545][T12350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.299980][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.320974][T12359] lo speed is unknown, defaulting to 1000 [ 167.347830][T12358] 9pnet: p9_errstr2errno: server reported unknown error [ 167.473074][T12368] netlink: 'syz.3.3323': attribute type 1 has an invalid length. [ 167.529192][T12368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.579631][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'. [ 167.624463][ T29] audit: type=1400 audit(167.580:7896): avc: denied { bind } for pid=12371 comm="syz.4.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 167.655705][T12368] bond3 (unregistering): Released all slaves [ 167.818081][ T29] audit: type=1326 audit(167.780:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.3.3331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07df7df749 code=0x0 [ 167.855630][T12393] bridge0: port 3(vlan2) entered blocking state [ 167.861956][T12393] bridge0: port 3(vlan2) entered disabled state [ 167.879975][T12393] vlan2: entered allmulticast mode [ 167.885257][T12393] bridge0: entered allmulticast mode [ 167.891127][T12393] vlan2: left allmulticast mode [ 167.896151][T12393] bridge0: left allmulticast mode [ 167.940911][T12405] netlink: 'syz.0.3339': attribute type 10 has an invalid length. [ 167.948866][T12405] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3339'. [ 167.958119][T12405] team0: entered promiscuous mode [ 167.963297][T12405] team_slave_0: entered promiscuous mode [ 167.969065][T12405] team_slave_1: entered promiscuous mode [ 168.038815][T12413] loop4: detected capacity change from 0 to 512 [ 168.060104][T12413] EXT4-fs (loop4): 1 truncate cleaned up [ 168.075487][T12413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.101274][T12418] loop6: detected capacity change from 0 to 2048 [ 168.108559][T12418] EXT4-fs (loop6): #clusters per group too big: 16384 [ 168.175695][T12424] loop0: detected capacity change from 0 to 512 [ 168.189245][T12424] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.210826][T12423] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3343: bg 0: block 465: padding at end of block bitmap is not set [ 168.229092][T12424] EXT4-fs error (device loop0): ext4_init_orphan_info:620: comm syz.0.3346: orphan file block 0: bad magic [ 168.241140][T12423] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1656 with error 117 [ 168.242426][T12424] EXT4-fs (loop0): Remounting filesystem read-only [ 168.253840][T12423] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.253840][T12423] [ 168.260359][T12424] EXT4-fs (loop0): mount failed [ 168.306222][T12436] loop6: detected capacity change from 0 to 512 [ 168.313693][T12436] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.344365][T12436] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 168.370244][T12436] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3352: bg 0: block 248: padding at end of block bitmap is not set [ 168.386830][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.402857][T12436] Quota error (device loop6): write_blk: dquota write failed [ 168.410305][T12436] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 168.420718][T12436] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3352: Failed to acquire dquot type 1 [ 168.432931][T12436] EXT4-fs (loop6): 1 truncate cleaned up [ 168.439182][T12436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 168.472752][ T7252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 168.481950][ T4989] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 168.491234][ T4989] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:26: Failed to release dquot type 1 [ 168.614373][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3359'. [ 168.830634][ T29] audit: type=1326 audit(168.790:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12470 comm="syz.1.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef938f749 code=0x7ffc0000 [ 169.114369][T12501] loop0: detected capacity change from 0 to 128 [ 169.122324][T12501] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 169.163760][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.434770][T12531] netlink: 'syz.0.3393': attribute type 1 has an invalid length. [ 169.448380][T12531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.464789][T12531] __nla_validate_parse: 4 callbacks suppressed [ 169.464806][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 169.483979][T12531] bond2 (unregistering): Released all slaves [ 169.576330][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3395'. [ 169.601967][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3396'. [ 169.625790][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3396'. [ 169.746805][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3401'. [ 169.761537][T12557] delete_channel: no stack [ 169.817565][T12567] netlink: 'syz.1.3406': attribute type 1 has an invalid length. [ 169.831192][T12567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.855140][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3406'. [ 169.868717][T12567] bond1 (unregistering): Released all slaves [ 169.882179][ T3506] hid_parser_main: 19 callbacks suppressed [ 169.882195][ T3506] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 169.896037][ T3506] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 169.907333][ T3506] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 169.915811][ T3506] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 170.079228][T12598] lo speed is unknown, defaulting to 1000 [ 170.315310][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3416'. [ 170.389012][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3416'. [ 170.803774][T12726] 9p: Bad value for 'rfdno' [ 171.565335][T12787] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.616690][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 171.616706][ T29] audit: type=1400 audit(171.580:8286): avc: denied { read } for pid=12790 comm="syz.0.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.655328][T12795] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3444'. [ 171.958367][ T29] audit: type=1326 audit(171.920:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 172.022521][ T29] audit: type=1326 audit(171.940:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 172.024974][T12823] dvmrp6: entered allmulticast mode [ 172.045585][ T29] audit: type=1326 audit(171.940:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 172.073708][ T29] audit: type=1326 audit(171.950:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 172.096700][ T29] audit: type=1326 audit(171.950:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 172.119647][ T29] audit: type=1326 audit(171.950:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 172.142656][ T29] audit: type=1326 audit(171.950:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 172.165765][ T29] audit: type=1326 audit(171.950:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 172.188753][ T29] audit: type=1326 audit(171.950:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz.6.3453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527793f749 code=0x7ffc0000 [ 173.158570][T12858] program syz.6.3468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.193532][T12866] veth0: entered promiscuous mode [ 173.199106][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'. [ 173.252707][T12876] tipc: Enabling of bearer rejected, failed to enable media [ 173.309220][T12886] IPVS: Unknown mcast interface: [ 173.630879][T12919] loop0: detected capacity change from 0 to 1024 [ 173.637976][T12919] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 173.649059][T12919] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 173.660197][T12919] JBD2: no valid journal superblock found [ 173.666008][T12919] EXT4-fs (loop0): Could not load journal inode [ 173.777024][T12938] SELinux: Context Ü is not valid (left unmapped). [ 173.825575][T12927] lo speed is unknown, defaulting to 1000 [ 173.899999][T12954] loop4: detected capacity change from 0 to 128 [ 173.964952][T12927] chnl_net:caif_netlink_parms(): no params data found [ 173.974749][T12959] netlink: 'syz.0.3511': attribute type 27 has an invalid length. [ 173.985181][ T4989] bio_check_eod: 11 callbacks suppressed [ 173.985195][ T4989] kworker/u8:26: attempt to access beyond end of device [ 173.985195][ T4989] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 174.004431][ T4989] kworker/u8:26: attempt to access beyond end of device [ 174.004431][ T4989] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 174.018217][ T4989] kworker/u8:26: attempt to access beyond end of device [ 174.018217][ T4989] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 174.031852][ T4989] kworker/u8:26: attempt to access beyond end of device [ 174.031852][ T4989] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 174.045749][ T4989] kworker/u8:26: attempt to access beyond end of device [ 174.045749][ T4989] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 174.059413][ T4989] kworker/u8:26: attempt to access beyond end of device [ 174.059413][ T4989] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 174.073083][ T4989] kworker/u8:26: attempt to access beyond end of device [ 174.073083][ T4989] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 174.086568][ T4989] kworker/u8:26: attempt to access beyond end of device [ 174.086568][ T4989] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 174.100051][ T4989] kworker/u8:26: attempt to access beyond end of device [ 174.100051][ T4989] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 174.105284][T12959] team0: left promiscuous mode [ 174.113530][ T4989] kworker/u8:26: attempt to access beyond end of device [ 174.113530][ T4989] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 174.118277][T12959] team_slave_0: left promiscuous mode [ 174.137502][T12959] team_slave_1: left promiscuous mode [ 174.144719][T12959] dummy0: left promiscuous mode [ 174.149612][T12959] dummy0: left allmulticast mode [ 174.169546][T12959] 0ªX¹¦À: left allmulticast mode [ 174.196041][T12959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.209198][T12959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.236833][T12959] macsec0: left promiscuous mode [ 174.247355][T12959] ip6gre1: left allmulticast mode [ 174.257894][T12959] veth12: left promiscuous mode [ 174.262983][T12959] veth12: left allmulticast mode [ 174.268398][T12959] ip6gre3: left promiscuous mode [ 174.273389][T12959] ip6gre3: left allmulticast mode [ 174.291262][T12960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.299354][T12960] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.308496][T12960] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 174.324565][T12970] netlink: 'syz.3.3516': attribute type 30 has an invalid length. [ 174.333580][ T4990] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.349468][ T4990] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.370606][ T4990] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.390184][T12927] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.397520][T12927] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.417461][T12989] syz.0.3521: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 174.432120][T12989] CPU: 0 UID: 0 PID: 12989 Comm: syz.0.3521 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.432161][T12989] Tainted: [W]=WARN [ 174.432169][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.432183][T12989] Call Trace: [ 174.432190][T12989] [ 174.432357][T12989] __dump_stack+0x1d/0x30 [ 174.432445][T12989] dump_stack_lvl+0x95/0xd0 [ 174.432468][T12989] dump_stack+0x15/0x1b [ 174.432494][T12989] warn_alloc+0x12b/0x1a0 [ 174.432518][T12989] ? __schedule+0x85f/0xcd0 [ 174.432571][T12989] ? __rcu_read_unlock+0x4f/0x70 [ 174.432590][T12989] __vmalloc_node_range_noprof+0xa0/0x1310 [ 174.432670][T12989] ? __futex_wait+0x1fa/0x260 [ 174.432689][T12989] ? __pfx_futex_wake_mark+0x10/0x10 [ 174.432744][T12989] ? __rcu_read_unlock+0x4f/0x70 [ 174.432815][T12989] ? avc_has_perm_noaudit+0xab/0x130 [ 174.432835][T12989] ? should_fail_ex+0x30/0x280 [ 174.432913][T12989] ? should_failslab+0x8c/0xb0 [ 174.432925][T12989] vmalloc_user_noprof+0x7d/0xb0 [ 174.432939][T12989] ? xskq_create+0x80/0xe0 [ 174.432949][T12989] xskq_create+0x80/0xe0 [ 174.433097][T12989] xsk_init_queue+0x95/0xf0 [ 174.433113][T12989] xsk_setsockopt+0x477/0x640 [ 174.433129][T12989] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.433192][T12989] __sys_setsockopt+0x184/0x200 [ 174.433208][T12989] __x64_sys_setsockopt+0x64/0x80 [ 174.433295][T12989] x64_sys_call+0x21d5/0x3000 [ 174.433308][T12989] do_syscall_64+0xca/0x2b0 [ 174.433327][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.433345][T12989] RIP: 0033:0x7f946afcf749 [ 174.433355][T12989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.433365][T12989] RSP: 002b:00007f9469a2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.433377][T12989] RAX: ffffffffffffffda RBX: 00007f946b225fa0 RCX: 00007f946afcf749 [ 174.433388][T12989] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 174.433395][T12989] RBP: 00007f946b053f91 R08: 0000000000000004 R09: 0000000000000000 [ 174.433401][T12989] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 174.433408][T12989] R13: 00007f946b226038 R14: 00007f946b225fa0 R15: 00007ffdd9a432c8 [ 174.433419][T12989] [ 174.462671][T12927] bridge_slave_0: entered allmulticast mode [ 174.465116][T12989] Mem-Info: [ 174.470150][T12927] bridge_slave_0: entered promiscuous mode [ 174.473918][T12989] active_anon:37030 inactive_anon:7 isolated_anon:0 [ 174.473918][T12989] active_file:22867 inactive_file:2642 isolated_file:0 [ 174.473918][T12989] unevictable:0 dirty:303 writeback:0 [ 174.473918][T12989] slab_reclaimable:3752 slab_unreclaimable:48188 [ 174.473918][T12989] mapped:28884 shmem:33611 pagetables:1148 [ 174.473918][T12989] sec_pagetables:0 bounce:0 [ 174.473918][T12989] kernel_misc_reclaimable:0 [ 174.473918][T12989] free:1657672 free_pcp:47482 free_cma:0 [ 174.474013][T12989] Node 0 active_anon:148120kB inactive_anon:28kB active_file:91468kB inactive_file:10568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115536kB dirty:1212kB writeback:0kB shmem:134444kB kernel_stack:4848kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.474074][T12989] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.479405][ T4990] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.482614][T12989] lowmem_reserve[]: 0 2880 [ 174.487738][T12927] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.492092][T12989] 7859 7859 [ 174.492112][T12989] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 174.498007][T12927] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.502657][T12989] lowmem_reserve[]: 0 0 4978 4978 [ 174.508405][T12927] bridge_slave_1: entered allmulticast mode [ 174.513076][T12989] [ 174.513108][T12989] Node 0 Normal free:3669440kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148120kB inactive_anon:28kB active_file:91468kB inactive_file:10568kB unevictable:0kB writepending:1212kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:186384kB local_pcp:163324kB free_cma:0kB [ 174.519145][T12927] bridge_slave_1: entered promiscuous mode [ 174.523254][T12989] lowmem_reserve[]: 0 0 0 0 [ 174.893604][T12989] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.906411][T12989] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 174.922714][T12989] Node 0 Normal: 1030*4kB (UME) 723*8kB (UME) 892*16kB (UME) 1041*32kB (UM) 825*64kB (UM) 472*128kB (UME) 270*256kB (UME) 170*512kB (UME) 102*1024kB (UME) 53*2048kB (UME) 764*4096kB (UM) = 3669200kB [ 174.942695][T12989] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.952229][T12989] 59110 total pagecache pages [ 174.956974][T12989] 10 pages in swap cache [ 174.961213][T12989] Free swap = 56836kB [ 174.965312][T12989] Total swap = 124996kB [ 174.969548][T12989] 2097051 pages RAM [ 174.973370][T12989] 0 pages HighMem/MovableOnly [ 174.978042][T12989] 81271 pages reserved [ 175.001555][T12927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.030853][T13021] lo speed is unknown, defaulting to 1000 [ 175.043270][T12927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.105196][T12927] team0: Port device team_slave_0 added [ 175.123634][T12927] team0: Port device team_slave_1 added [ 175.170486][T12927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.177583][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.203688][T12927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.248713][T13061] loop4: detected capacity change from 0 to 2048 [ 175.254840][T12927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.262046][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.288167][T12927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.301906][T13061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 175.361721][T12927] hsr_slave_0: entered promiscuous mode [ 175.371558][T12927] hsr_slave_1: entered promiscuous mode [ 175.387583][T12927] debugfs: 'hsr0' already exists in 'hsr' [ 175.393419][T12927] Cannot create hsr debugfs directory [ 175.430533][T13069] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.546358][T13082] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 230 with error 28 [ 175.558946][T13082] EXT4-fs (loop4): This should not happen!! Data will be lost [ 175.558946][T13082] [ 175.568647][T13082] EXT4-fs (loop4): Total free blocks count 0 [ 175.574666][T13082] EXT4-fs (loop4): Free/Dirty block details [ 175.580639][T13082] EXT4-fs (loop4): free_blocks=2415919104 [ 175.586481][T13082] EXT4-fs (loop4): dirty_blocks=240 [ 175.591699][T13082] EXT4-fs (loop4): Block reservation details [ 175.597732][T13082] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 175.687453][T12927] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 175.717062][T12927] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 175.732275][T12927] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 175.746195][T12927] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 175.838585][T12927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.897528][T12927] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.909559][ T5008] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.916748][ T5008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.937667][T12927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.948176][T12927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.962130][ T5008] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.969232][ T5008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.071904][T12927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.377304][T12927] veth0_vlan: entered promiscuous mode [ 176.394452][T12927] veth1_vlan: entered promiscuous mode [ 176.430340][T12927] veth0_macvtap: entered promiscuous mode [ 176.450809][T12927] veth1_macvtap: entered promiscuous mode [ 176.475102][T12927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.498843][T12927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.516598][ T5000] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.529967][ T5000] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.549193][ T5000] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.558309][ T5000] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.594271][T13192] netlink: 'syz.0.3543': attribute type 3 has an invalid length. [ 176.602041][T13192] netlink: 'syz.0.3543': attribute type 1 has an invalid length. [ 176.609930][T13192] __nla_validate_parse: 3 callbacks suppressed [ 176.609944][T13192] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3543'. [ 176.628876][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 176.628890][ T29] audit: type=1400 audit(176.600:8720): avc: denied { add_name } for pid=12927 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 176.629873][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 176.635144][ T29] audit: type=1400 audit(176.600:8721): avc: denied { create } for pid=12927 comm="syz-executor" name="syz7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 176.688172][ T29] audit: type=1400 audit(176.600:8722): avc: denied { associate } for pid=12927 comm="syz-executor" name="syz7" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 176.710681][ T29] audit: type=1326 audit(176.660:8723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.3.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07df7d65e7 code=0x7ffc0000 [ 176.733607][ T29] audit: type=1326 audit(176.660:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.3.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07df77b829 code=0x7ffc0000 [ 176.756691][ T29] audit: type=1326 audit(176.660:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.3.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 176.779622][ T29] audit: type=1326 audit(176.680:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.3.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07df7d65e7 code=0x7ffc0000 [ 176.802576][ T29] audit: type=1326 audit(176.680:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.3.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07df77b829 code=0x7ffc0000 [ 176.825392][ T29] audit: type=1326 audit(176.680:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.3.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f07df7df749 code=0x7ffc0000 [ 176.857313][ T29] audit: type=1326 audit(176.730:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.3.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07df7d65e7 code=0x7ffc0000 [ 177.445833][T13236] tipc: New replicast peer: 255.255.255.255 [ 177.452009][T13236] tipc: Enabled bearer , priority 10 [ 177.459090][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3562'. [ 177.468109][T13236] tipc: Disabling bearer [ 177.977320][T13274] bridge0: entered allmulticast mode [ 177.992424][T13271] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3577'. [ 178.002368][T13271] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3577'. [ 178.100066][T13290] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3585'. [ 178.110053][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3585'. [ 178.119023][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3585'. [ 178.131039][T13290] dummy0: entered promiscuous mode [ 178.140784][T13290] macsec1: entered promiscuous mode [ 178.146124][T13290] macsec1: entered allmulticast mode [ 178.151486][T13290] dummy0: entered allmulticast mode [ 178.229741][T13298] netlink: 'syz.1.3588': attribute type 10 has an invalid length. [ 178.237730][T13298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3588'. [ 178.374573][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3599'. [ 178.383635][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3599'. [ 178.476874][T13338] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 178.984630][T13393] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 179.511738][T13430] ================================================================== [ 179.519841][T13430] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 179.527722][T13430] [ 179.530032][T13430] write to 0xffff88812f3baa48 of 8 bytes by task 13431 on cpu 0: [ 179.537731][T13430] cpu_map_kthread_run+0x529/0x1560 [ 179.542924][T13430] kthread+0x489/0x510 [ 179.546992][T13430] ret_from_fork+0x149/0x290 [ 179.551572][T13430] ret_from_fork_asm+0x1a/0x30 [ 179.556332][T13430] [ 179.558640][T13430] read to 0xffff88812f3baa48 of 8 bytes by task 13430 on cpu 1: [ 179.566253][T13430] bq_flush_to_queue+0x124/0x350 [ 179.571178][T13430] cpu_map_enqueue+0x1a6/0x1c0 [ 179.575938][T13430] xdp_do_redirect_frame+0x27c/0x560 [ 179.581296][T13430] bpf_test_run_xdp_live+0x98c/0x11d0 [ 179.586671][T13430] bpf_prog_test_run_xdp+0x525/0x970 [ 179.591960][T13430] bpf_prog_test_run+0x204/0x340 [ 179.596903][T13430] __sys_bpf+0x4c0/0x7c0 [ 179.601140][T13430] __x64_sys_bpf+0x41/0x50 [ 179.605567][T13430] x64_sys_call+0x28e1/0x3000 [ 179.610337][T13430] do_syscall_64+0xca/0x2b0 [ 179.614854][T13430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.620774][T13430] [ 179.623099][T13430] value changed: 0xffff88814905d070 -> 0x0000000000000000 [ 179.630193][T13430] [ 179.632502][T13430] Reported by Kernel Concurrency Sanitizer on: [ 179.638663][T13430] CPU: 1 UID: 0 PID: 13430 Comm: wg1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.649608][T13430] Tainted: [W]=WARN [ 179.653439][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.663666][T13430] ================================================================== [ 182.885544][ T5019] bridge_slave_1: left allmulticast mode [ 182.891190][ T5019] bridge_slave_1: left promiscuous mode [ 182.896856][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.904478][ T5019] bridge_slave_0: left allmulticast mode [ 182.910132][ T5019] bridge_slave_0: left promiscuous mode [ 182.915766][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.934929][ T5019] dvmrp8 (unregistering): left allmulticast mode [ 183.054199][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.063544][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.072381][ T5019] bond0 (unregistering): Released all slaves [ 183.141573][ T5019] hsr_slave_0: left promiscuous mode [ 183.147414][ T5019] hsr_slave_1: left promiscuous mode [ 183.153069][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.160474][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.192901][ T5019] team0 (unregistering): Port device team_slave_1 removed [ 183.202685][ T5019] team0 (unregistering): Port device team_slave_0 removed