last executing test programs: 2m38.460158097s ago: executing program 3 (id=108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0xff}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 2m38.365190258s ago: executing program 3 (id=112): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2m38.323210529s ago: executing program 3 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0xffff}, {@in=@rand_addr=0x64010101, 0x2, 0x32}, @in6=@loopback, {0x0, 0x3, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2m38.2653639s ago: executing program 3 (id=118): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@sysvgroups}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, &(0x7f00000002c0)="85b63583d9d432ff2d70a8ea6b95965a084c8d9ee47d61244ed498769deef6ce4adfa3ffad724030133fd28811f8308b3ad04f4cacf28506d0a7977af17513c7200a8e1da6d9d5dad4600b614448b176b30b808fc8049c9d5d35cfc60ee47a39", 0x60) 2m37.878094745s ago: executing program 3 (id=134): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x410b0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 2m37.573395429s ago: executing program 3 (id=147): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000040, 0x8, 0x1b, 0xfe, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6ffbc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa92cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c83e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20c4306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 2m37.522707199s ago: executing program 32 (id=147): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000040, 0x8, 0x1b, 0xfe, &(0x7f00000000c0)="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"}) 46.362341777s ago: executing program 1 (id=4191): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) pwrite64(r0, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 45.816623325s ago: executing program 1 (id=4200): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 45.779074405s ago: executing program 1 (id=4204): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 45.747825226s ago: executing program 1 (id=4206): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 45.652722307s ago: executing program 1 (id=4209): openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000680)=@usbdevfs_disconnect={0x100}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = syz_io_uring_setup(0x147e, &(0x7f0000000080)={0x0, 0x1010b6, 0x80, 0x400002, 0x403ae}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r0, 0x1ae0, 0x4, 0x48, 0x0, 0x0) 45.39733199s ago: executing program 1 (id=4214): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) 45.36020034s ago: executing program 33 (id=4214): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) 730.12969ms ago: executing program 2 (id=5459): socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) r0 = syz_io_uring_setup(0x5ce, &(0x7f00000000c0)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 646.228231ms ago: executing program 2 (id=5465): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 596.269062ms ago: executing program 2 (id=5468): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 545.823362ms ago: executing program 6 (id=5469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) 544.860032ms ago: executing program 4 (id=5471): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) 542.281403ms ago: executing program 5 (id=5472): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 484.867423ms ago: executing program 0 (id=5474): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 475.749293ms ago: executing program 6 (id=5475): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 468.550504ms ago: executing program 4 (id=5476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 459.481624ms ago: executing program 5 (id=5477): r0 = syz_io_uring_setup(0x1727, &(0x7f0000000080)={0x0, 0x6086, 0x0, 0x404002, 0x129}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x1}) io_uring_enter(r0, 0x1ae0, 0x4, 0x48, 0x0, 0x0) 431.430264ms ago: executing program 0 (id=5478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 415.521634ms ago: executing program 6 (id=5479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000869000/0x1000)=nil) 398.903214ms ago: executing program 5 (id=5480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$tun(r0, &(0x7f0000000400)={@val={0x2000, 0x88a2}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @remote}, {0x600, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xbc, 0x100, @void}}}}}}}}, 0x32) 382.616265ms ago: executing program 4 (id=5481): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000050000000600000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 364.503325ms ago: executing program 0 (id=5482): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0xfffffffd, 0x216}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 342.511085ms ago: executing program 6 (id=5483): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) 336.224095ms ago: executing program 4 (id=5484): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 314.647525ms ago: executing program 5 (id=5485): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 292.473106ms ago: executing program 0 (id=5486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 278.145376ms ago: executing program 4 (id=5487): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 263.643676ms ago: executing program 5 (id=5488): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) unshare(0x68040200) mmap(&(0x7f00006a4000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffb000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010427bd7000ffdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 245.944586ms ago: executing program 0 (id=5489): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 228.568756ms ago: executing program 6 (id=5490): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 197.912157ms ago: executing program 0 (id=5491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 186.404537ms ago: executing program 4 (id=5492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x400002, 0x9c}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) unshare(0x28000600) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r2, 0x264b, 0x4, 0x1, 0x0, 0x0) 170.885668ms ago: executing program 2 (id=5493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x2e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) 152.319308ms ago: executing program 6 (id=5494): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 90.258829ms ago: executing program 2 (id=5495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1.54607ms ago: executing program 2 (id=5496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 0s ago: executing program 5 (id=5497): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r2, 0x1) kernel console output (not intermixed with test programs): 032852][ T1039] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.040500][ T1039] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.047987][ T1039] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.055507][ T1039] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.063128][ T1039] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.070589][ T1039] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.078068][ T1039] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.087363][ T1039] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.02 Device [syz0] on syz1 [ 115.100515][T10916] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 115.134405][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 115.145307][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 115.239832][ T6668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 115.339412][T10950] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 115.732070][T11003] 9pnet_fd: Insufficient options for proto=fd [ 115.906443][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3074'. [ 115.934609][ T6628] smc: removing ib device syz2 [ 115.940964][T11027] bond0: (slave bond_slave_0): Releasing backup interface [ 115.951667][T11031] loop1: detected capacity change from 0 to 2048 [ 115.972820][ T3379] syz2: Port: 1 Link DOWN [ 115.990291][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 115.997816][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.005386][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.017504][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.025145][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.032791][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.040343][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.047807][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.055299][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.062801][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.070256][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.071803][T11031] loop1: p1 < > p4 < > [ 116.077683][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.077712][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.114566][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.122061][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.129591][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.137082][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.144507][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.151967][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.159464][ T3383] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 116.175898][ T3383] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.02 Device [syz0] on syz1 [ 116.297736][ T6629] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 116.426799][T11059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.460107][T11059] net_ratelimit: 281 callbacks suppressed [ 116.460149][T11059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.727120][T11101] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 117.117386][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 117.117405][ T29] audit: type=1326 audit(1746473577.406:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.5.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a8cfe969 code=0x7fc00000 [ 117.147841][ T29] audit: type=1400 audit(1746473577.427:4905): avc: denied { read } for pid=11142 comm="syz.5.3129" path="socket:[29336]" dev="sockfs" ino=29336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.171124][ T29] audit: type=1326 audit(1746473577.427:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.5.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd3a8cfe969 code=0x7fc00000 [ 117.194785][ T29] audit: type=1326 audit(1746473577.427:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.5.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a8cfe969 code=0x7fc00000 [ 117.218400][ T29] audit: type=1326 audit(1746473577.427:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.5.3129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a8cfe969 code=0x7fc00000 [ 117.242580][ T29] audit: type=1326 audit(1746473577.532:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.0.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 117.266337][ T29] audit: type=1326 audit(1746473577.532:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.0.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 117.358950][ T29] audit: type=1400 audit(1746473577.658:4911): avc: denied { mounton } for pid=11169 comm="syz.0.3140" path="/698/file0" dev="tmpfs" ino=3602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.382695][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 117.408566][T11172] macvtap0: entered promiscuous mode [ 117.439102][ T29] audit: type=1400 audit(1746473577.710:4912): avc: denied { read } for pid=11174 comm="syz.5.3142" name="cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 117.465984][ T29] audit: type=1400 audit(1746473577.710:4913): avc: denied { open } for pid=11174 comm="syz.5.3142" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 117.469935][ T6628] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 117.502738][T11172] macvtap0: left promiscuous mode [ 117.605198][T11191] netlink: 'syz.0.3150': attribute type 3 has an invalid length. [ 118.093772][ T3379] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 118.101491][ T3379] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 118.109003][ T3379] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 118.137683][ T3379] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz1 [ 118.367655][T11260] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3189'. [ 118.546058][T11290] bridge: RTM_NEWNEIGH with invalid ether address [ 118.590569][T11294] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3195'. [ 118.601145][ T6628] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.350671][T11318] xt_CT: No such helper "syz0" [ 119.528874][ T3369] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 119.536531][ T3369] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 119.544092][ T3369] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 119.573604][ T3369] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 119.650795][ T6647] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.667139][T11345] loop1: detected capacity change from 0 to 512 [ 119.682654][T11352] loop9: detected capacity change from 0 to 7 [ 119.689795][T11345] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.700407][T11352] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.708606][T11352] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.716475][T11352] loop9: unable to read partition table [ 119.731120][T11352] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 119.731120][T11352] U) failed (rc=-5) [ 119.756074][T11345] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.3219: corrupted xattr entries [ 119.773321][T11345] EXT4-fs (loop1): 1 truncate cleaned up [ 119.784262][T11345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.826810][T11365] netlink: 1076 bytes leftover after parsing attributes in process `syz.5.3226'. [ 119.893224][ T6326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.954739][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 119.965470][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 119.979496][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'. [ 120.019501][T11393] batman_adv: batadv0: Adding interface: dummy0 [ 120.025975][T11393] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.107013][T11393] batman_adv: batadv0: Interface activated: dummy0 [ 120.118705][T11393] batadv0: mtu less than device minimum [ 120.124751][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.135469][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.146367][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.157081][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.167771][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.178673][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.189380][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.200342][T11393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.276119][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 120.528507][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3261'. [ 120.562533][T11446] team0 (unregistering): Port device team_slave_0 removed [ 120.594444][T11446] team0 (unregistering): Port device team_slave_1 removed [ 120.736241][ T6629] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 120.753720][T11470] rdma_op ffff88811df63d80 conn xmit_rdma 0000000000000000 [ 120.795156][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3271'. [ 120.883489][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'. [ 120.895286][T11487] batman_adv: batadv0: Removing interface: team0 [ 120.906613][T11487] team0 (unregistering): Port device C removed [ 120.915161][T11487] team0 (unregistering): Port device team_slave_1 removed [ 120.995768][T11496] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 121.064159][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 121.074464][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 121.365651][T11540] batman_adv: batadv0: Interface deactivated: dummy0 [ 121.372656][T11540] batman_adv: batadv0: Removing interface: dummy0 [ 121.419736][T11540] bridge_slave_0: left promiscuous mode [ 121.425602][T11540] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.438613][T11540] bridge_slave_1: left allmulticast mode [ 121.444451][T11540] bridge_slave_1: left promiscuous mode [ 121.450408][T11540] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.459715][T11540] bond0: (slave bond_slave_0): Releasing backup interface [ 121.470662][T11540] bond0: (slave bond_slave_1): Releasing backup interface [ 121.480188][T11540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.506523][T11540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.519606][T11540] bond1: (slave vcan1): Releasing backup interface [ 121.529582][T11540] bond2: (slave gretap1): Releasing active interface [ 121.674666][T11557] xt_hashlimit: size too large, truncated to 1048576 [ 121.786587][ T6675] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.889213][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 121.889228][ T29] audit: type=1326 audit(1746473582.414:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3a8cf5927 code=0x7ffc0000 [ 121.934496][ T29] audit: type=1326 audit(1746473582.446:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3a8c9ab39 code=0x7ffc0000 [ 121.958222][ T29] audit: type=1326 audit(1746473582.446:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fd3a8cfe969 code=0x7ffc0000 [ 121.981823][ T29] audit: type=1326 audit(1746473582.446:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3a8cf5927 code=0x7ffc0000 [ 122.005459][ T29] audit: type=1326 audit(1746473582.446:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3a8c9ab39 code=0x7ffc0000 [ 122.028928][ T29] audit: type=1326 audit(1746473582.446:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fd3a8cfe969 code=0x7ffc0000 [ 122.052573][ T29] audit: type=1326 audit(1746473582.456:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3a8cf5927 code=0x7ffc0000 [ 122.076135][ T29] audit: type=1326 audit(1746473582.456:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3a8c9ab39 code=0x7ffc0000 [ 122.099632][ T29] audit: type=1326 audit(1746473582.456:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fd3a8cfe969 code=0x7ffc0000 [ 122.124001][ T29] audit: type=1326 audit(1746473582.467:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.5.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3a8cf5927 code=0x7ffc0000 [ 122.406802][T11596] loop1: detected capacity change from 0 to 164 [ 122.577221][T11618] xt_hashlimit: size too large, truncated to 1048576 [ 122.668099][T11626] bridge0: entered promiscuous mode [ 122.681497][T11626] bridge0: port 1(macvlan2) entered blocking state [ 122.688122][T11626] bridge0: port 1(macvlan2) entered disabled state [ 122.712130][T11626] macvlan2: entered allmulticast mode [ 122.717697][T11626] bridge0: entered allmulticast mode [ 122.735028][T11626] macvlan2: left allmulticast mode [ 122.740313][T11626] bridge0: left allmulticast mode [ 122.745936][T11626] bridge0: left promiscuous mode [ 122.937246][ T6647] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 122.947125][T11654] loop5: detected capacity change from 0 to 164 [ 123.083324][T11672] loop1: detected capacity change from 0 to 128 [ 123.092606][ T3369] kernel write not supported for file /685/attr/exec (pid: 3369 comm: kworker/0:2) [ 123.121861][T11672] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.153622][T11672] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.249822][ T6326] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.671136][ T3369] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 60 sec [ 123.862745][T11746] loop5: detected capacity change from 0 to 512 [ 123.913369][T11746] EXT4-fs (loop5): 1 orphan inode deleted [ 123.925769][T11746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.940540][ T6629] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 123.980498][T11746] ext4 filesystem being mounted at /641/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.016923][T11756] bridge0: entered promiscuous mode [ 124.051216][ T6675] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.065108][T11756] bridge0: port 3(macvlan2) entered blocking state [ 124.071964][T11756] bridge0: port 3(macvlan2) entered disabled state [ 124.100477][T11756] macvlan2: entered allmulticast mode [ 124.105939][T11756] bridge0: entered allmulticast mode [ 124.113966][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.127340][ T6629] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 124.158713][T11756] macvlan2: left allmulticast mode [ 124.163913][T11756] bridge0: left allmulticast mode [ 124.190259][T11756] bridge0: left promiscuous mode [ 124.284627][T11779] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 124.368167][ T3382] kernel write not supported for file /804/attr/exec (pid: 3382 comm: kworker/0:4) [ 124.432063][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 124.466737][T11803] ALSA: seq fatal error: cannot create timer (-22) [ 124.515869][T11800] syz.0.3414 (11800) used greatest stack depth: 8776 bytes left [ 124.588159][T11818] loop1: detected capacity change from 0 to 128 [ 124.615407][T11818] FAT-fs (loop1): Directory bread(block 162) failed [ 124.622781][T11818] FAT-fs (loop1): Directory bread(block 163) failed [ 124.638221][T11818] FAT-fs (loop1): Directory bread(block 164) failed [ 124.658916][T11818] FAT-fs (loop1): Directory bread(block 165) failed [ 124.692280][T11818] FAT-fs (loop1): Directory bread(block 166) failed [ 124.707070][T11830] rdma_op ffff88812ac46d80 conn xmit_rdma 0000000000000000 [ 124.708299][T11818] FAT-fs (loop1): Directory bread(block 167) failed [ 124.737525][T11818] FAT-fs (loop1): Directory bread(block 168) failed [ 124.745997][T11818] FAT-fs (loop1): Directory bread(block 169) failed [ 124.752274][T11831] bridge_slave_0: left allmulticast mode [ 124.758412][T11831] bridge_slave_0: left promiscuous mode [ 124.764091][T11831] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.778527][T11818] FAT-fs (loop1): Directory bread(block 162) failed [ 124.795992][T11818] FAT-fs (loop1): Directory bread(block 163) failed [ 124.804591][T11831] bridge_slave_1: left allmulticast mode [ 124.806117][T11818] syz.1.3422: attempt to access beyond end of device [ 124.806117][T11818] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 124.810296][T11831] bridge_slave_1: left promiscuous mode [ 124.829355][T11831] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.845609][T11831] bond0: (slave bond_slave_1): Releasing backup interface [ 124.847325][T11818] syz.1.3422: attempt to access beyond end of device [ 124.847325][T11818] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 124.875957][T11831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.883649][T11831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.893213][T11831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.900735][T11831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.959828][T11831] bond1: (slave ip6gretap1): Releasing active interface [ 124.974197][T11831] bond2: (slave wireguard0): Releasing backup interface [ 125.001874][T11835] hsr0: entered promiscuous mode [ 125.176725][T11864] __nla_validate_parse: 3 callbacks suppressed [ 125.176760][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3442'. [ 125.210384][T11864] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 125.412606][T11885] random: crng reseeded on system resumption [ 125.478124][T11890] tipc: Started in network mode [ 125.483176][T11890] tipc: Node identity ac14140f, cluster identity 4711 [ 125.490106][T11890] tipc: New replicast peer: 255.255.255.255 [ 125.496281][T11890] tipc: Enabled bearer , priority 10 [ 125.642021][T11909] IPv6: sit2: Disabled Multicast RS [ 125.648345][T11909] sit2: entered allmulticast mode [ 125.664717][T11911] bridge0: port 3(macvlan2) entered blocking state [ 125.671411][T11911] bridge0: port 3(macvlan2) entered disabled state [ 125.678149][T11911] macvlan2: entered allmulticast mode [ 125.683591][T11911] bridge0: entered allmulticast mode [ 125.689467][T11911] macvlan2: left allmulticast mode [ 125.694596][T11911] bridge0: left allmulticast mode [ 125.940717][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3476'. [ 125.959313][T11942] rdma_op ffff88812ac44980 conn xmit_rdma 0000000000000000 [ 125.970968][T11944] bridge0: entered promiscuous mode [ 125.977596][T11944] bridge0: port 1(macvlan2) entered blocking state [ 125.984394][T11944] bridge0: port 1(macvlan2) entered disabled state [ 125.991597][T11944] macvlan2: entered allmulticast mode [ 125.997125][T11944] bridge0: entered allmulticast mode [ 126.003735][T11944] macvlan2: left allmulticast mode [ 126.008948][T11944] bridge0: left allmulticast mode [ 126.014809][T11944] bridge0: left promiscuous mode [ 126.481137][T11985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.494345][T11985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.555709][ T3369] tipc: Node number set to 2886997007 [ 126.753825][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 126.753842][ T29] audit: type=1326 audit(1746473587.517:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 126.784184][ T29] audit: type=1326 audit(1746473587.517:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 126.807830][ T29] audit: type=1326 audit(1746473587.517:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 126.831437][ T29] audit: type=1326 audit(1746473587.517:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 126.855240][ T29] audit: type=1326 audit(1746473587.517:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 126.878819][ T29] audit: type=1326 audit(1746473587.517:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 126.902583][ T29] audit: type=1326 audit(1746473587.517:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 126.926142][ T29] audit: type=1326 audit(1746473587.517:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 126.950420][ T29] audit: type=1326 audit(1746473587.517:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 126.974021][ T29] audit: type=1326 audit(1746473587.517:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12017 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 127.121326][T12039] sd 0:0:1:0: device reset [ 127.146574][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3521'. [ 127.167324][T12046] tipc: Started in network mode [ 127.172342][T12046] tipc: Node identity ac14140f, cluster identity 4711 [ 127.179946][T12046] tipc: New replicast peer: 255.255.255.255 [ 127.186216][T12046] tipc: Enabled bearer , priority 10 [ 127.274554][T12056] bridge_slave_0: left promiscuous mode [ 127.280347][T12056] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.292488][T12056] bridge_slave_1: left allmulticast mode [ 127.298228][T12056] bridge_slave_1: left promiscuous mode [ 127.303936][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.313529][T12056] bond0: (slave bond_slave_0): Releasing backup interface [ 127.321301][T12056] bond_slave_0: left allmulticast mode [ 127.328164][T12056] team0: Port device team_slave_0 removed [ 127.334658][T12056] team0: Port device team_slave_1 removed [ 127.340920][T12056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.348945][T12056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.931040][T12087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3546'. [ 127.961903][T12089] IPv6: sit2: Disabled Multicast RS [ 127.969791][T12089] sit2: entered allmulticast mode [ 127.998255][T12091] hsr0: entered promiscuous mode [ 128.093041][T12096] tipc: Enabling of bearer rejected, failed to enable media [ 128.250959][ T1039] tipc: Node number set to 2886997007 [ 128.259635][T12115] loop5: detected capacity change from 0 to 128 [ 128.411473][T12123] bridge_slave_0: left promiscuous mode [ 128.417515][T12123] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.441025][T12126] random: crng reseeded on system resumption [ 128.460060][T12123] bridge_slave_1: left allmulticast mode [ 128.466020][T12123] bridge_slave_1: left promiscuous mode [ 128.472027][T12123] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.527871][T12123] bond0: (slave bond_slave_0): Releasing backup interface [ 128.548142][T12123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.555749][T12123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.566802][T12123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.574347][T12123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.603027][T12123] bond1: (slave vcan1): Releasing backup interface [ 128.647127][T12123] bond2: (slave wireguard0): Releasing backup interface [ 128.837992][T12162] loop5: detected capacity change from 0 to 512 [ 128.865804][T12162] EXT4-fs (loop5): 1 orphan inode deleted [ 128.872080][T12162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.885817][ T6628] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 128.885966][T12162] ext4 filesystem being mounted at /681/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.963147][T12162] EXT4-fs error (device loop5): ext4_lookup:1789: inode #14: comm syz.5.3582: iget: bogus i_mode (0) [ 128.996410][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.031159][T12179] bridge_slave_0: left allmulticast mode [ 129.037150][T12179] bridge_slave_0: left promiscuous mode [ 129.042923][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.052909][T12179] bridge_slave_1: left allmulticast mode [ 129.058668][T12179] bridge_slave_1: left promiscuous mode [ 129.064389][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.074503][T12179] bond0: (slave bond_slave_1): Releasing backup interface [ 129.092995][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.100603][T12179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.110782][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.118283][T12179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.139083][T12179] bond1: (slave batadv1): Releasing active interface [ 129.149993][T12179] bond2: (slave vcan1): Releasing backup interface [ 129.162195][T12179] bond3: (slave wireguard0): Releasing backup interface [ 129.195362][T12183] netlink: 'syz.5.3589': attribute type 1 has an invalid length. [ 129.203141][T12183] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3589'. [ 129.263531][T12188] pimreg: entered allmulticast mode [ 129.280565][T12188] pimreg: left allmulticast mode [ 130.351987][T12319] loop1: detected capacity change from 0 to 512 [ 130.382463][T12319] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.419107][T12319] EXT4-fs (loop1): 1 truncate cleaned up [ 130.435185][T12319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.480735][T12340] netlink: 'syz.4.3618': attribute type 13 has an invalid length. [ 130.651110][ T6326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.735093][T12359] loop1: detected capacity change from 0 to 256 [ 130.754326][T12359] syz.1.3626: attempt to access beyond end of device [ 130.754326][T12359] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 130.889838][T12384] netlink: 'syz.5.3634': attribute type 13 has an invalid length. [ 130.928436][T12390] netlink: 'syz.2.3639': attribute type 1 has an invalid length. [ 130.936212][T12390] netlink: 'syz.2.3639': attribute type 4 has an invalid length. [ 130.944049][T12390] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3639'. [ 131.005568][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3642'. [ 131.128058][T12384] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.136485][T12384] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.145011][T12384] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.153423][T12384] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.170569][T12404] program syz.2.3646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.753849][T12435] netlink: 'syz.1.3660': attribute type 13 has an invalid length. [ 131.811716][T12439] loop1: detected capacity change from 0 to 512 [ 131.824669][T12439] EXT4-fs (loop1): 1 orphan inode deleted [ 131.830795][T12439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.843575][ T6668] __quota_error: 602 callbacks suppressed [ 131.843591][ T6668] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 131.859203][ T6668] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:46: Failed to release dquot type 1 [ 131.861803][T12439] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.888715][ T29] audit: type=1326 audit(1746473592.903:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bc4fe969 code=0x7ffc0000 [ 131.891356][T12439] EXT4-fs error (device loop1): ext4_lookup:1789: inode #14: comm syz.1.3661: iget: bogus i_mode (0) [ 131.912384][ T29] audit: type=1326 audit(1746473592.903:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bc4fe969 code=0x7ffc0000 [ 131.946701][ T29] audit: type=1326 audit(1746473592.903:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f94bc4fe969 code=0x7ffc0000 [ 131.970116][ T29] audit: type=1326 audit(1746473592.945:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bc4fe969 code=0x7ffc0000 [ 131.993691][ T29] audit: type=1326 audit(1746473592.945:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bc4fe969 code=0x7ffc0000 [ 132.018895][ T6326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.042580][T12446] SELinux: failed to load policy [ 132.047596][ T29] audit: type=1400 audit(1746473593.071:6680): avc: denied { load_policy } for pid=12445 comm="syz.1.3663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 132.361513][ T29] audit: type=1400 audit(1746473593.407:6681): avc: denied { write } for pid=12463 comm="syz.0.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 132.400449][ T29] audit: type=1326 audit(1746473593.438:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12462 comm="syz.1.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bc4fe969 code=0x7ffc0000 [ 132.424164][ T29] audit: type=1326 audit(1746473593.438:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12462 comm="syz.1.3671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bc4fe969 code=0x7ffc0000 [ 132.898968][T12496] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3685'. [ 133.038084][T12500] hub 9-0:1.0: USB hub found [ 133.058521][T12500] hub 9-0:1.0: 8 ports detected [ 133.316294][T12514] netlink: 'syz.2.3691': attribute type 13 has an invalid length. [ 133.404827][T12512] Falling back ldisc for ttyS3. [ 133.590409][T12514] hsr0: left promiscuous mode [ 133.615595][T12514] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.615670][T12514] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.615704][T12514] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.615731][T12514] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.406837][T12581] netlink: 'syz.0.3714': attribute type 13 has an invalid length. [ 134.582938][T12581] hsr0: left promiscuous mode [ 134.631919][T12609] loop5: detected capacity change from 0 to 1024 [ 134.638570][T12581] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.647067][T12581] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.655578][T12581] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.664032][T12581] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.674998][T12609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.689549][T12603] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 134.714913][T12611] pim6reg1: entered promiscuous mode [ 134.720548][T12611] pim6reg1: entered allmulticast mode [ 134.758319][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.814353][T12628] sch_fq: defrate 0 ignored. [ 134.845209][T12635] loop9: detected capacity change from 0 to 7 [ 134.851840][T12635] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.859722][T12635] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.867713][T12635] loop9: unable to read partition table [ 134.873774][T12635] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 134.873774][T12635] U) failed (rc=-5) [ 134.923976][T12646] netlink: 'syz.1.3743': attribute type 12 has an invalid length. [ 135.110147][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3754'. [ 135.233162][T12681] hub 9-0:1.0: USB hub found [ 135.238225][T12679] vhci_hcd: invalid port number 96 [ 135.243482][T12679] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 135.256832][T12681] hub 9-0:1.0: 8 ports detected [ 135.315645][T12691] netlink: 'syz.4.3764': attribute type 13 has an invalid length. [ 135.367819][T12698] bridge: RTM_NEWNEIGH with invalid ether address [ 135.523530][T12721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3778'. [ 135.606471][T12730] vhci_hcd: invalid port number 236 [ 135.803928][T12757] SELinux: failed to load policy [ 135.841505][T12764] bridge: RTM_NEWNEIGH with invalid ether address [ 136.101216][T12769] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3798'. [ 136.150324][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3801'. [ 136.159568][T12775] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 136.447116][T12790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3808'. [ 136.645127][T12806] loop5: detected capacity change from 0 to 2048 [ 136.697060][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 136.697079][ T29] audit: type=1326 audit(1746473597.953:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 136.729239][ T29] audit: type=1326 audit(1746473597.953:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 136.752726][ T29] audit: type=1326 audit(1746473597.953:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 136.776311][ T29] audit: type=1326 audit(1746473597.953:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 136.801480][T12806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.802981][ T29] audit: type=1326 audit(1746473597.953:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 136.803010][ T29] audit: type=1326 audit(1746473597.953:7081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 136.862680][ T29] audit: type=1326 audit(1746473597.953:7082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 136.886583][ T29] audit: type=1326 audit(1746473597.953:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 136.910179][ T29] audit: type=1326 audit(1746473597.963:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12809 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 136.934179][ T29] audit: type=1400 audit(1746473598.163:7085): avc: denied { append } for pid=12805 comm="syz.5.3816" path="/733/file0/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.046903][T12806] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3816: bg 0: block 234: padding at end of block bitmap is not set [ 137.071596][T12806] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1068 with error 117 [ 137.084375][T12806] EXT4-fs (loop5): This should not happen!! Data will be lost [ 137.084375][T12806] [ 137.191057][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.682155][T12903] SELinux: failed to load policy [ 137.769886][T12921] smc: net device bond0 applied user defined pnetid SYZ2 [ 137.787572][T12921] smc: net device bond0 erased user defined pnetid SYZ2 [ 137.936720][T12951] netlink: 'syz.4.3879': attribute type 27 has an invalid length. [ 137.963117][T12951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.973099][T12951] net_ratelimit: 11 callbacks suppressed [ 137.973136][T12951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.066576][T12963] netem: change failed [ 138.092227][T12968] netlink: 'syz.1.3886': attribute type 4 has an invalid length. [ 138.100225][T12968] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3886'. [ 138.124938][T12968] : renamed from bond0 [ 138.253922][T12979] vhci_hcd: invalid port number 236 [ 138.380889][T12990] bridge: RTM_NEWNEIGH with invalid ether address [ 138.488540][T12534] kernel write not supported for file /1028/attr/exec (pid: 12534 comm: kworker/1:9) [ 138.548638][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'. [ 138.628063][T13012] loop1: detected capacity change from 0 to 4096 [ 138.662375][T13012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.712098][T13012] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.3906: corrupted inode contents [ 138.740664][T13012] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #15: comm syz.1.3906: mark_inode_dirty error [ 138.784718][T13012] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.3906: corrupted inode contents [ 138.823268][T13012] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.3906: mark_inode_dirty error [ 138.834887][T13012] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.3906: corrupted inode contents [ 138.852303][T13012] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.3906: mark_inode_dirty error [ 138.873105][T13012] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.3906: corrupted inode contents [ 138.885940][T13012] EXT4-fs error (device loop1): ext4_truncate:4255: inode #15: comm syz.1.3906: mark_inode_dirty error [ 138.897496][T13012] EXT4-fs error (device loop1) in ext4_setattr:5628: Corrupt filesystem [ 138.908228][T13022] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #15: comm syz.1.3906: corrupted inode contents [ 138.950045][ T6326] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 138.962764][ T6326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.464898][T13090] loop5: detected capacity change from 0 to 256 [ 139.577804][T13105] netlink: 848 bytes leftover after parsing attributes in process `syz.5.3944'. [ 139.587067][T13105] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3944'. [ 139.709289][T13124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13124 comm=syz.2.3956 [ 139.746563][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3958'. [ 139.895248][T13146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3965'. [ 140.028975][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3972'. [ 140.257890][T13198] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 140.340722][T13204] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.349047][T13204] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.357487][T13204] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.365677][T13204] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.384098][T13204] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.392711][T13204] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.401168][T13204] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.409580][T13204] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.904185][T13255] vlan2: entered allmulticast mode [ 140.909460][T13255] bond0: entered allmulticast mode [ 141.038022][T13264] __nla_validate_parse: 6 callbacks suppressed [ 141.038043][T13264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4019'. [ 141.128208][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4025'. [ 141.144104][T13278] tipc: New replicast peer: 255.255.255.255 [ 141.150279][T13278] tipc: Enabled bearer , priority 10 [ 141.259693][T13285] tipc: Enabling of bearer rejected, failed to enable media [ 141.280310][T13289] bridge0: port 1(vlan2) entered blocking state [ 141.288416][T13289] bridge0: port 1(vlan2) entered disabled state [ 141.297730][T13289] vlan2: entered allmulticast mode [ 141.302941][T13289] bridge0: entered allmulticast mode [ 141.309419][T13289] vlan2: left allmulticast mode [ 141.314313][T13289] bridge0: left allmulticast mode [ 141.393660][T13292] loop5: detected capacity change from 0 to 1024 [ 141.412379][T13292] EXT4-fs: Ignoring removed nobh option [ 141.423651][T13292] ext2: Unknown parameter 'dont_hash' [ 141.444795][T13292] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 141.509358][T13304] SELinux: failed to load policy [ 141.647123][T13312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4041'. [ 141.657409][T13312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4041'. [ 141.751263][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 141.751282][ T29] audit: type=1400 audit(1746473603.265:7305): avc: denied { bind } for pid=13316 comm="syz.1.4044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.794797][T13319] netlink: 'syz.2.4045': attribute type 4 has an invalid length. [ 141.887978][ T29] audit: type=1400 audit(1746473603.402:7306): avc: denied { mount } for pid=13324 comm="syz.2.4048" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 142.003453][ T29] audit: type=1400 audit(1746473603.517:7307): avc: denied { mounton } for pid=13324 comm="syz.2.4048" path="/866/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 142.093980][ T29] audit: type=1400 audit(1746473603.601:7308): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 142.315235][ T29] audit: type=1400 audit(1746473603.843:7309): avc: denied { create } for pid=13338 comm="syz.4.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.399791][T13342] netlink: 'syz.1.4056': attribute type 10 has an invalid length. [ 142.408892][T13342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4056'. [ 142.435678][ T29] audit: type=1400 audit(1746473603.885:7310): avc: denied { bind } for pid=13338 comm="syz.4.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.456464][ T29] audit: type=1400 audit(1746473603.885:7311): avc: denied { connect } for pid=13338 comm="syz.4.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.477551][ T29] audit: type=1326 audit(1746473603.979:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.4.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 142.481076][T13342] dummy0: entered promiscuous mode [ 142.502591][ T29] audit: type=1326 audit(1746473603.979:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.4.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 142.535711][ T29] audit: type=1326 audit(1746473603.979:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13347 comm="syz.4.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 142.562461][T13342] bridge0: port 1(dummy0) entered blocking state [ 142.570325][T13342] bridge0: port 1(dummy0) entered disabled state [ 142.578451][T13342] dummy0: entered allmulticast mode [ 142.681952][T13356] netlink: 'syz.4.4065': attribute type 11 has an invalid length. [ 142.689844][T13356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4065'. [ 142.785614][T13368] netlink: 552 bytes leftover after parsing attributes in process `syz.5.4069'. [ 142.812960][T13368] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 142.839914][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4072'. [ 142.851348][T13369] SELinux: failed to load policy [ 143.088384][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4072'. [ 143.383320][T13419] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 143.383320][T13419] program syz.2.4092 not setting count and/or reply_len properly [ 143.781116][T13454] xt_hashlimit: size too large, truncated to 1048576 [ 143.878344][T13458] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.886677][T13458] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.894930][T13458] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.903187][T13458] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.956256][T13465] bridge0: entered allmulticast mode [ 143.975516][T13469] xt_hashlimit: size too large, truncated to 1048576 [ 144.144187][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4118'. [ 144.427880][T13509] loop1: detected capacity change from 0 to 512 [ 144.480554][T13509] EXT4-fs (loop1): 1 orphan inode deleted [ 144.493423][T13517] batadv_slave_0: entered allmulticast mode [ 144.499659][ T6629] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 144.501319][T13517] batadv_slave_0: left allmulticast mode [ 144.522229][T13509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.560694][T13509] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.580510][T13522] loop9: detected capacity change from 0 to 7 [ 144.588311][T13522] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.634889][T13522] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.644132][T13522] loop9: unable to read partition table [ 144.674485][T13524] SELinux: failed to load policy [ 144.682308][T13522] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 144.682308][T13522] U) failed (rc=-5) [ 144.724855][ T6326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.396324][T13591] xt_hashlimit: size too large, truncated to 1048576 [ 145.556470][T13607] bridge0: entered allmulticast mode [ 145.659386][T13616] loop5: detected capacity change from 0 to 512 [ 145.674908][T13616] EXT4-fs (loop5): 1 orphan inode deleted [ 145.681047][T13616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.695345][ T6630] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 1 [ 145.699951][T13616] ext4 filesystem being mounted at /793/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.897910][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.064177][T13651] __nla_validate_parse: 7 callbacks suppressed [ 146.064197][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4197'. [ 146.135488][T13654] xt_hashlimit: size too large, truncated to 1048576 [ 146.143588][T13652] loop5: detected capacity change from 0 to 512 [ 146.222671][T13652] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.436972][T13652] EXT4-fs (loop5): 1 truncate cleaned up [ 146.482137][T13652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.658982][T13664] loop1: detected capacity change from 0 to 256 [ 146.745508][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 146.745546][ T29] audit: type=1326 audit(1746473608.505:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 146.837713][ T29] audit: type=1326 audit(1746473608.547:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 146.861361][ T29] audit: type=1326 audit(1746473608.547:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 146.884932][ T29] audit: type=1326 audit(1746473608.547:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 146.908481][ T29] audit: type=1326 audit(1746473608.547:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 146.932475][ T29] audit: type=1326 audit(1746473608.547:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 146.956189][ T29] audit: type=1326 audit(1746473608.557:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 146.979836][ T29] audit: type=1326 audit(1746473608.557:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 147.003430][ T29] audit: type=1326 audit(1746473608.557:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 147.027450][ T29] audit: type=1326 audit(1746473608.557:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.0.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 147.056379][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.278939][T13694] loop1: detected capacity change from 0 to 1024 [ 147.292710][T13694] EXT4-fs: inline encryption not supported [ 147.298873][T13694] EXT4-fs: Ignoring removed nobh option [ 147.305832][T13694] EXT4-fs: Ignoring removed bh option [ 147.323538][T13694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.459789][T10721] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.960030][T13722] chnl_net:caif_netlink_parms(): no params data found [ 148.064379][T13722] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.071553][T13722] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.080090][T13722] bridge_slave_0: entered allmulticast mode [ 148.087256][T13722] bridge_slave_0: entered promiscuous mode [ 148.095849][T13722] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.104523][T13722] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.114694][T13722] bridge_slave_1: entered allmulticast mode [ 148.122602][T13722] bridge_slave_1: entered promiscuous mode [ 148.179048][T13722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.191294][T13722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.218348][T13722] team0: Port device team_slave_0 added [ 148.225281][T13722] team0: Port device team_slave_1 added [ 148.267374][T13722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.274432][T13722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.300505][T13722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.354548][T13750] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4226'. [ 148.366094][T13722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.373205][T13722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.399224][T13722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.506087][T13722] hsr_slave_0: entered promiscuous mode [ 148.519580][T13722] hsr_slave_1: entered promiscuous mode [ 148.529068][T13722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.536729][T13722] Cannot create hsr debugfs directory [ 148.748779][T13722] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.768007][T13722] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.780417][T13722] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 148.791613][T13722] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.849286][T13722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.868484][T13722] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.884186][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.891347][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.931139][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.938272][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.056428][T13722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.288914][T13722] veth0_vlan: entered promiscuous mode [ 149.325142][T13722] veth1_vlan: entered promiscuous mode [ 149.411487][T13722] veth0_macvtap: entered promiscuous mode [ 149.419271][T13722] veth1_macvtap: entered promiscuous mode [ 149.430789][T13722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.441281][T13722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.451917][T13722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.462847][T13722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.473410][T13722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.488139][T13722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.496706][T13722] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.505603][T13722] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.514335][T13722] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.523124][T13722] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.607455][T13810] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4242'. [ 149.845963][T13833] xt_hashlimit: size too large, truncated to 1048576 [ 149.941664][T13836] loop6: detected capacity change from 0 to 128 [ 150.159727][T13843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.294265][T13843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.323361][T13852] loop9: detected capacity change from 0 to 7 [ 150.332719][T13852] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.348105][T13852] Buffer I/O error on dev loop9, logical block 0, async page read [ 150.356061][T13852] loop9: unable to read partition table [ 150.366675][T13852] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 150.366675][T13852] U) failed (rc=-5) [ 151.268245][T13843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.335027][T13874] sch_fq: defrate 0 ignored. [ 151.415077][T13876] Falling back ldisc for ttyS3. [ 151.482994][ T1039] page_pool_release_retry() stalled pool shutdown: id 70, 1 inflight 60 sec [ 151.581306][T13893] netlink: 'syz.5.4274': attribute type 12 has an invalid length. [ 151.612796][T13897] No such timeout policy "syz0" [ 151.650434][T13901] lo: entered promiscuous mode [ 151.655331][T13901] lo: entered allmulticast mode [ 151.791281][T13917] pimreg: entered allmulticast mode [ 151.798415][T13917] pimreg: left allmulticast mode [ 152.238179][T13843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.479593][T13843] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.491173][T13843] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.502463][T13843] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.514325][T13843] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.926376][T13964] loop5: detected capacity change from 0 to 128 [ 153.013214][T13976] sch_fq: defrate 0 ignored. [ 153.054594][T13986] loop5: detected capacity change from 0 to 128 [ 153.132511][T13996] loop5: detected capacity change from 0 to 128 [ 153.194386][T14005] loop5: detected capacity change from 0 to 1024 [ 153.203532][T14005] EXT4-fs: Ignoring removed oldalloc option [ 153.209859][T14005] EXT4-fs: Ignoring removed orlov option [ 153.217792][T14005] EXT4-fs (loop5): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 153.246628][T14005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.283893][T14011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4317'. [ 153.305203][T14005] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 153.310335][ T3369] page_pool_release_retry() stalled pool shutdown: id 81, 1 inflight 60 sec [ 153.332887][T14005] EXT4-fs (loop5): Remounting filesystem read-only [ 153.362088][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.700557][T14044] hub 9-0:1.0: USB hub found [ 153.712055][T14044] hub 9-0:1.0: 8 ports detected [ 153.791982][T14059] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4341'. [ 153.837970][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 153.837986][ T29] audit: type=1326 audit(1746473615.949:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 153.867962][ T29] audit: type=1326 audit(1746473615.959:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 153.891424][ T29] audit: type=1326 audit(1746473615.959:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 153.915205][ T29] audit: type=1326 audit(1746473615.959:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 153.938824][ T29] audit: type=1326 audit(1746473615.959:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 153.962311][ T29] audit: type=1326 audit(1746473615.959:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 153.985993][ T29] audit: type=1326 audit(1746473615.959:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 154.009703][ T29] audit: type=1326 audit(1746473615.959:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 154.010191][T14067] bridge: RTM_NEWNEIGH with invalid ether address [ 154.033264][ T29] audit: type=1326 audit(1746473615.959:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 154.033345][ T29] audit: type=1326 audit(1746473615.959:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.2.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 154.111501][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4347'. [ 154.123729][T14075] pimreg: entered allmulticast mode [ 154.133234][T14075] pimreg: left allmulticast mode [ 154.150156][T14078] loop5: detected capacity change from 0 to 128 [ 154.156782][T14076] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 154.204466][T14083] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 154.244810][T14089] netlink: 'syz.6.4353': attribute type 12 has an invalid length. [ 154.412222][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4361'. [ 154.653643][T14116] pimreg: entered allmulticast mode [ 154.670987][T14116] pimreg: left allmulticast mode [ 154.813851][T14128] bridge: RTM_NEWNEIGH with invalid ether address [ 154.849024][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.857916][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.018060][T14152] hub 9-0:1.0: USB hub found [ 155.024914][T14152] hub 9-0:1.0: 8 ports detected [ 155.059948][T14159] pimreg: entered allmulticast mode [ 155.071672][T14159] pimreg: left allmulticast mode [ 155.780806][T14244] loop6: detected capacity change from 0 to 512 [ 155.794311][T14244] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.4430: Invalid inode bitmap blk 4 in block_group 0 [ 155.821131][T14244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.937468][T14262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4429'. [ 155.947737][T13722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.225575][T14291] vhci_hcd: invalid port number 236 [ 156.286867][T14300] bridge: RTM_NEWNEIGH with invalid ether address [ 156.364353][T14307] SELinux: failed to load policy [ 156.393860][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4460'. [ 156.409499][T14315] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 156.550393][T14333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.562397][T14337] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4456'. [ 156.575925][T14333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.602596][T14335] SELinux: failed to load policy [ 156.726430][T14354] smc: net device bond0 applied user defined pnetid SYZ2 [ 156.738263][T14354] smc: net device bond0 erased user defined pnetid SYZ2 [ 157.410745][T14422] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 157.419404][T14422] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.098209][T14432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.130944][T14432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.639465][T14494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4525'. [ 158.924020][T14524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4549'. [ 158.938570][T14526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14526 comm=syz.5.4538 [ 159.036799][T14532] SELinux: failed to load policy [ 159.125109][T14552] smc: net device bond0 applied user defined pnetid SYZ2 [ 159.134131][T14552] smc: net device bond0 erased user defined pnetid SYZ2 [ 159.345175][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4559'. [ 159.422125][T14579] netlink: 848 bytes leftover after parsing attributes in process `syz.2.4561'. [ 159.432572][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4561'. [ 159.696504][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.707797][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.951129][T14616] netlink: 'syz.0.4577': attribute type 27 has an invalid length. [ 159.962436][T14616] wg2: left promiscuous mode [ 159.967069][T14616] wg2: left allmulticast mode [ 159.976050][T14616] bridge1: left promiscuous mode [ 159.982573][T14616] bridge1: left allmulticast mode [ 159.989201][T14616] bond1: left promiscuous mode [ 159.994092][T14616] batadv1: left promiscuous mode [ 160.000422][T14616] batadv1: left allmulticast mode [ 160.030515][T14616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.042102][T14616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.248096][T14629] smc: net device bond0 applied user defined pnetid SYZ2 [ 160.267127][T14629] smc: net device bond0 erased user defined pnetid SYZ2 [ 160.346455][T14642] netlink: 'syz.5.4589': attribute type 4 has an invalid length. [ 160.347693][T14643] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.354387][T14642] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4589'. [ 160.378451][T14642] : renamed from bond0 [ 160.401812][T14647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4592'. [ 160.417258][T14647] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.427002][T14647] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.436712][T14647] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.440702][T14649] vhci_hcd: invalid port number 236 [ 160.445064][T14647] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.461541][T14647] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.471399][T14647] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.480999][T14647] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.489891][T14647] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.501867][T14643] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.593403][T14653] loop5: detected capacity change from 0 to 4096 [ 160.601571][T14643] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.637409][T14653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.652199][T14643] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.662668][T14653] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #15: comm syz.5.4597: corrupted inode contents [ 160.664796][T14653] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #15: comm syz.5.4597: mark_inode_dirty error [ 160.690347][T14653] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #15: comm syz.5.4597: corrupted inode contents [ 160.713298][T14653] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.4597: mark_inode_dirty error [ 160.728981][T14660] bridge: RTM_NEWNEIGH with invalid ether address [ 160.740959][T14653] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #15: comm syz.5.4597: corrupted inode contents [ 160.757851][T14653] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.4597: mark_inode_dirty error [ 160.772382][T14653] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #15: comm syz.5.4597: corrupted inode contents [ 160.785449][T14653] EXT4-fs error (device loop5): ext4_truncate:4255: inode #15: comm syz.5.4597: mark_inode_dirty error [ 160.798099][T14653] EXT4-fs error (device loop5) in ext4_setattr:5628: Corrupt filesystem [ 160.808495][T14659] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #15: comm syz.5.4597: corrupted inode contents [ 160.837095][T14643] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.850430][T14643] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.860636][ T3789] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 160.866360][T14643] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.881449][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.884241][T14643] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.144693][T14667] smc: net device bond0 applied user defined pnetid SYZ2 [ 161.185728][T14667] smc: net device bond0 erased user defined pnetid SYZ2 [ 161.256177][T14681] netlink: 'syz.6.4605': attribute type 4 has an invalid length. [ 161.265496][T14681] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4605'. [ 161.281964][T14681] : renamed from bond0 (while UP) [ 161.322237][T14683] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 161.344287][T14686] vhci_hcd: invalid port number 236 [ 161.362343][T14690] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.371213][T14690] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.504108][T14702] tipc: Enabling of bearer rejected, failed to enable media [ 161.661807][T14713] netlink: 'syz.0.4620': attribute type 4 has an invalid length. [ 161.669938][T14713] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4620'. [ 161.734263][T14713] : renamed from bond0 (while UP) [ 161.782413][T14716] bridge0: port 1(vlan2) entered blocking state [ 161.788832][T14716] bridge0: port 1(vlan2) entered disabled state [ 161.811899][T14716] vlan2: entered allmulticast mode [ 161.818559][T14716] bridge0: entered allmulticast mode [ 161.843482][T14716] vlan2: left allmulticast mode [ 161.849869][T14716] bridge0: left allmulticast mode [ 161.859260][T14723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4623'. [ 161.886200][T14726] netlink: 'syz.5.4624': attribute type 4 has an invalid length. [ 162.134921][T14743] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 162.143788][T14743] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.260604][T14755] loop6: detected capacity change from 0 to 256 [ 162.268844][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 162.268873][ T29] audit: type=1400 audit(1746473624.810:7717): avc: denied { cmd } for pid=14753 comm="syz.4.4632" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1 [ 162.357084][T14760] netlink: 'syz.4.4639': attribute type 10 has an invalid length. [ 162.394616][T14760] dummy0: entered promiscuous mode [ 162.416997][T14760] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 162.508421][ T29] audit: type=1326 audit(1746473625.051:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.4.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 162.533455][ T29] audit: type=1326 audit(1746473625.051:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.4.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 162.620543][ T29] audit: type=1326 audit(1746473625.114:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.4.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 162.644292][ T29] audit: type=1326 audit(1746473625.114:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.4.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 162.669140][ T29] audit: type=1326 audit(1746473625.114:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14768 comm="syz.4.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 162.847686][ T29] audit: type=1326 audit(1746473625.408:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.0.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 162.878147][ T29] audit: type=1326 audit(1746473625.408:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.0.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 162.942794][ T29] audit: type=1326 audit(1746473625.440:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.0.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 162.969115][ T29] audit: type=1326 audit(1746473625.440:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.0.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 163.019283][T14810] netlink: 'syz.5.4656': attribute type 27 has an invalid length. [ 163.031716][T14810] wg2: left promiscuous mode [ 163.037880][T14810] wg2: left allmulticast mode [ 163.093325][T14810] 8021q: adding VLAN 0 to HW filter on device  [ 163.103653][T14810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.180898][T14823] netlink: 'syz.6.4671': attribute type 27 has an invalid length. [ 163.242482][T14823] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.249797][T14823] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.325033][T14823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.335481][T14823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.414736][T14823] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.424524][T14823] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.432961][T14823] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.442877][T14823] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.502813][T14828] 8021q: adding VLAN 0 to HW filter on device  [ 163.514400][T14828] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.524541][T14828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.605350][T14854] loop6: detected capacity change from 0 to 512 [ 163.623998][T14854] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 163.638903][T14854] EXT4-fs (loop6): 1 truncate cleaned up [ 163.679949][T14854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.715673][T13722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.894260][T14878] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 163.894260][T14878] program syz.4.4683 not setting count and/or reply_len properly [ 164.398540][T14918] netlink: 'syz.2.4700': attribute type 27 has an invalid length. [ 164.417667][T14918] lo: left promiscuous mode [ 164.422437][T14918] lo: left allmulticast mode [ 164.429391][T14918] ip6gretap0: left promiscuous mode [ 164.434635][T14918] ip6gretap0: left allmulticast mode [ 164.445930][T14918] geneve0: left allmulticast mode [ 164.490087][T14923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14923 comm=syz.4.4715 [ 164.523058][T14918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.533094][T14918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.550860][T14928] __nla_validate_parse: 3 callbacks suppressed [ 164.550878][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4704'. [ 164.671989][T14945] netlink: 848 bytes leftover after parsing attributes in process `syz.6.4708'. [ 164.682524][T14945] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4708'. [ 164.811833][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 164.822050][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 164.831382][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 165.085449][T14977] loop5: detected capacity change from 0 to 8192 [ 165.132597][T14982] block device autoloading is deprecated and will be removed. [ 165.174401][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4730'. [ 165.305767][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4747'. [ 165.426486][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4740'. [ 165.435463][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4740'. [ 165.699351][T15036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.713084][T15036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.515731][T15052] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.525560][T15052] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.535025][T15052] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.543418][T15052] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.554619][T15052] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.564514][T15052] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.574544][T15052] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.583076][T15052] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.708418][T15071] loop4: detected capacity change from 0 to 256 [ 166.733186][T15073] tipc: Enabling of bearer rejected, failed to enable media [ 166.780152][T15082] loop4: detected capacity change from 0 to 1024 [ 166.786890][T15082] EXT4-fs: Ignoring removed nobh option [ 166.792813][T15082] ext2: Unknown parameter 'dont_hash' [ 166.809228][T15082] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 166.881648][T15090] netlink: 'syz.2.4777': attribute type 10 has an invalid length. [ 166.925975][T15093] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.934531][T15093] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.942783][T15093] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.951032][T15093] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.965907][T15093] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.975762][T15093] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.985205][T15093] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.993628][T15093] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.032141][T15100] netlink: 'syz.4.4782': attribute type 4 has an invalid length. [ 167.159119][T15110] tipc: Enabling of bearer rejected, failed to enable media [ 167.220884][T15098] loop5: detected capacity change from 0 to 128 [ 167.231222][T15098] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.048910][T15119] netlink: 'syz.0.4791': attribute type 10 has an invalid length. [ 168.058458][T15119] dummy0: entered promiscuous mode [ 168.072431][T15119] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 168.145773][T15126] netlink: 'syz.0.4796': attribute type 4 has an invalid length. [ 168.375749][T15139] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 168.514986][T15149] loop5: detected capacity change from 0 to 256 [ 168.527167][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 168.527183][ T29] audit: type=1326 audit(1746473631.372:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.536392][T15154] netlink: 'syz.6.4805': attribute type 11 has an invalid length. [ 168.559589][ T29] audit: type=1326 audit(1746473631.372:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.563331][ T29] audit: type=1326 audit(1746473631.414:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.640654][ T29] audit: type=1326 audit(1746473631.487:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.665701][ T29] audit: type=1326 audit(1746473631.487:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.690630][ T29] audit: type=1326 audit(1746473631.487:7795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.714309][ T29] audit: type=1326 audit(1746473631.487:7796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.739108][ T29] audit: type=1326 audit(1746473631.487:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.764084][ T29] audit: type=1326 audit(1746473631.498:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.788872][ T29] audit: type=1326 audit(1746473631.498:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz.2.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 168.857975][T15166] netlink: 'syz.6.4808': attribute type 10 has an invalid length. [ 168.886626][T15166] dummy0: entered promiscuous mode [ 168.894260][T15166] bridge0: port 3(dummy0) entered blocking state [ 168.900716][T15166] bridge0: port 3(dummy0) entered disabled state [ 168.916688][T15166] dummy0: entered allmulticast mode [ 168.916925][T15174] loop5: detected capacity change from 0 to 512 [ 168.922918][T15166] bridge0: port 3(dummy0) entered blocking state [ 168.922957][T15166] bridge0: port 3(dummy0) entered forwarding state [ 168.964059][T15174] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.980437][T15174] EXT4-fs (loop5): 1 truncate cleaned up [ 168.986552][T15174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.015792][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.097359][T15191] vlan2: entered allmulticast mode [ 169.103909][T15191] bond0: entered allmulticast mode [ 169.134152][T15195] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 169.211809][T15198] tipc: Enabling of bearer rejected, failed to enable media [ 169.261503][T15203] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 169.261503][T15203] program syz.5.4822 not setting count and/or reply_len properly [ 169.429241][T15225] xt_hashlimit: size too large, truncated to 1048576 [ 169.437772][T15226] bridge0: port 3(dummy0) entered disabled state [ 169.444265][T15226] bridge0: entered allmulticast mode [ 169.453654][T15226] dummy0: left allmulticast mode [ 169.460284][T15226] bridge0: port 3(dummy0) entered disabled state [ 169.469743][T15226] bridge_slave_1: left allmulticast mode [ 169.476734][T15226] bridge_slave_1: left promiscuous mode [ 169.482648][T15226] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.643628][T15226] bridge_slave_0: left allmulticast mode [ 169.650783][T15226] bridge_slave_0: left promiscuous mode [ 169.658082][T15226] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.877060][T15233] loop6: detected capacity change from 0 to 512 [ 169.898628][T15236] bridge0: entered allmulticast mode [ 169.917228][T15233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.941643][T15233] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.985909][T13722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.052736][T15245] __nla_validate_parse: 18 callbacks suppressed [ 170.052754][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4841'. [ 170.253216][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4846'. [ 170.267777][T15261] erspan0: entered promiscuous mode [ 170.274755][T15261] macvtap1: entered promiscuous mode [ 170.280212][T15261] macvtap1: entered allmulticast mode [ 170.287151][T15261] erspan0: entered allmulticast mode [ 170.318144][T15264] erspan0: left allmulticast mode [ 170.324484][T15264] erspan0: left promiscuous mode [ 170.521040][T15273] xt_hashlimit: size too large, truncated to 1048576 [ 170.535728][T15277] loop4: detected capacity change from 0 to 256 [ 170.823485][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 170.846609][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 170.876593][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 170.917386][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 171.655443][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4861'. [ 171.688975][T15300] erspan0: entered promiscuous mode [ 171.696603][T15300] macvtap1: entered promiscuous mode [ 171.702131][T15300] macvtap1: entered allmulticast mode [ 171.707644][T15300] erspan0: entered allmulticast mode [ 171.727596][T15300] erspan0: left allmulticast mode [ 171.734271][T15300] erspan0: left promiscuous mode [ 171.792171][T15310] loop6: detected capacity change from 0 to 2048 [ 171.802913][T15310] EXT4-fs: Ignoring removed bh option [ 171.829768][T15310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.008562][T15316] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 172.077944][T15322] No such timeout policy "syz0" [ 172.122748][T15327] lo: entered promiscuous mode [ 172.127701][T15327] lo: entered allmulticast mode [ 172.282018][ T6630] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 172.295435][ T6630] EXT4-fs (loop6): This should not happen!! Data will be lost [ 172.295435][ T6630] [ 172.305219][ T6630] EXT4-fs (loop6): Total free blocks count 0 [ 172.311265][ T6630] EXT4-fs (loop6): Free/Dirty block details [ 172.317231][ T6630] EXT4-fs (loop6): free_blocks=2415919104 [ 172.323014][ T6630] EXT4-fs (loop6): dirty_blocks=8224 [ 172.328324][ T6630] EXT4-fs (loop6): Block reservation details [ 172.335847][ T6630] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 172.479061][ T6628] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 172.773169][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4882'. [ 172.799314][T15355] xt_connbytes: Forcing CT accounting to be enabled [ 172.806181][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4882'. [ 172.817225][T15355] Cannot find set identified by id 0 to match [ 172.901044][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4888'. [ 173.101312][T15382] SELinux: failed to load policy [ 173.454093][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 173.454112][ T29] audit: type=1400 audit(1746473636.537:7844): avc: denied { map } for pid=15420 comm="syz.2.4914" path="socket:[44001]" dev="sockfs" ino=44001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.590171][T15431] SELinux: failed to load policy [ 173.618816][ T29] audit: type=1400 audit(1746473636.726:7845): avc: denied { connect } for pid=15433 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.656401][ T29] audit: type=1400 audit(1746473636.758:7846): avc: denied { map } for pid=15436 comm="syz.4.4922" path="socket:[44365]" dev="sockfs" ino=44365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 173.709564][T15441] pim6reg: entered allmulticast mode [ 173.716834][T15441] pim6reg: left allmulticast mode [ 173.970228][T15452] pim6reg: entered allmulticast mode [ 173.976124][T15452] pim6reg: left allmulticast mode [ 174.024958][ T29] audit: type=1400 audit(1746473637.146:7847): avc: denied { read } for pid=15453 comm="syz.4.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 174.482514][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118a0d600: rx timeout, send abort [ 174.492382][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888118a0d600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.556311][ T29] audit: type=1400 audit(1746473637.703:7848): avc: denied { listen } for pid=15502 comm="syz.6.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 174.605850][ T29] audit: type=1400 audit(1746473637.745:7849): avc: denied { write } for pid=15500 comm="syz.0.4948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.658878][T15510] serio: Serial port ptm1 [ 174.675261][ T29] audit: type=1326 audit(1746473637.829:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 174.700289][ T29] audit: type=1326 audit(1746473637.829:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 174.725862][ T29] audit: type=1326 audit(1746473637.829:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 174.768705][ T29] audit: type=1326 audit(1746473637.829:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15517 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457f0e969 code=0x7ffc0000 [ 174.925735][T15544] syzkaller0: entered allmulticast mode [ 174.935690][T15544] syzkaller0 (unregistering): left allmulticast mode [ 174.957755][T15549] loop4: detected capacity change from 0 to 512 [ 174.968245][T15549] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.990045][T15549] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.016282][ T7395] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 175.153620][T15574] random: crng reseeded on system resumption [ 175.403672][T15593] __nla_validate_parse: 2 callbacks suppressed [ 175.403695][T15593] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4991'. [ 175.575299][T15620] syzkaller0: entered allmulticast mode [ 175.591087][T15620] syzkaller0 (unregistering): left allmulticast mode [ 175.853641][T15640] syzkaller0: entered allmulticast mode [ 175.870201][T15640] syzkaller0 (unregistering): left allmulticast mode [ 176.237478][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'. [ 176.263273][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'. [ 176.291028][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'. [ 176.304573][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'. [ 176.515077][T15679] random: crng reseeded on system resumption [ 176.652779][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5032'. [ 176.664252][T15698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5035'. [ 176.664343][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5032'. [ 176.690167][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5032'. [ 176.700863][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5032'. [ 177.038760][T15729] serio: Serial port ptm0 [ 177.357832][T15739] loop5: detected capacity change from 0 to 512 [ 177.378597][T15739] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.421269][T15739] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.489873][ T3789] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 177.970875][T15802] loop5: detected capacity change from 0 to 1024 [ 177.990705][T15802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.019942][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.242710][T15811] loop5: detected capacity change from 0 to 512 [ 178.253988][T15811] EXT4-fs (loop5): orphan cleanup on readonly fs [ 178.261799][T15811] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.5083: bad orphan inode 13 [ 178.272248][T15811] ext4_test_bit(bit=12, block=18) = 1 [ 178.279261][T15811] is_bad_inode(inode)=0 [ 178.285067][T15811] NEXT_ORPHAN(inode)=2130706432 [ 178.290093][T15811] max_ino=32 [ 178.294433][T15811] i_nlink=1 [ 178.298246][T15811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.316281][T15811] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 178.331598][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 178.331615][ T29] audit: type=1400 audit(1746473641.672:7919): avc: denied { shutdown } for pid=15815 comm="syz.2.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.365988][T15811] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5083: bg 0: block 248: padding at end of block bitmap is not set [ 178.397262][T15811] Quota error (device loop5): write_blk: dquota write failed [ 178.406065][T15811] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 178.406407][T15820] syzkaller1: entered promiscuous mode [ 178.417488][T15811] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5083: Failed to acquire dquot type 1 [ 178.422925][T15820] syzkaller1: entered allmulticast mode [ 178.443778][T15811] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 178.521145][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.632645][ T29] audit: type=1326 audit(1746473641.987:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15844 comm="syz.4.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 178.679998][ T29] audit: type=1326 audit(1746473641.987:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15844 comm="syz.4.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 178.704094][ T29] audit: type=1326 audit(1746473641.987:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15844 comm="syz.4.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 178.727688][ T29] audit: type=1326 audit(1746473641.987:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15844 comm="syz.4.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 178.754065][ T29] audit: type=1326 audit(1746473642.018:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15844 comm="syz.4.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac47dde969 code=0x7ffc0000 [ 179.423742][ T29] audit: type=1326 audit(1746473642.805:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.5.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a8cfe969 code=0x7ffc0000 [ 179.448666][ T29] audit: type=1326 audit(1746473642.805:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.5.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a8cfe969 code=0x7ffc0000 [ 179.504787][T15906] loop5: detected capacity change from 0 to 512 [ 179.541850][T15906] EXT4-fs: Ignoring removed orlov option [ 179.563913][T15906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.581255][T15906] ext4 filesystem being mounted at /987/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.686182][ T3789] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.184118][T15927] __nla_validate_parse: 15 callbacks suppressed [ 180.184153][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 180.203306][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 180.218219][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 180.228739][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 180.406445][T15933] xt_CT: No such helper "pptp" [ 180.529277][T15946] loop6: detected capacity change from 0 to 256 [ 181.047283][T15978] loop5: detected capacity change from 0 to 512 [ 181.057110][T15978] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 181.073587][T15978] EXT4-fs (loop5): mount failed [ 181.266618][T15988] 9pnet: p9_errstr2errno: server reported unknown error ../file0 [ 181.388219][T16000] loop6: detected capacity change from 0 to 512 [ 181.455721][T16000] EXT4-fs: Ignoring removed orlov option [ 181.579866][T16000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.657860][T16000] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.710131][T13722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.241003][T16050] smc: net device bond0 applied user defined pnetid SYZ2 [ 182.252732][T16050] smc: net device bond0 erased user defined pnetid SYZ2 [ 182.424477][T16069] loop4: detected capacity change from 0 to 764 [ 182.438844][T16069] rock: directory entry would overflow storage [ 182.445057][T16069] rock: sig=0x4f50, size=4, remaining=3 [ 182.452107][T16069] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 182.683297][T16089] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 182.717724][T16095] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5203'. [ 182.795720][T16106] pim6reg1: entered promiscuous mode [ 182.802568][T16106] pim6reg1: entered allmulticast mode [ 182.814845][T16109] loop9: detected capacity change from 0 to 7 [ 182.821496][T16109] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.830595][T16109] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.838582][T16109] loop9: unable to read partition table [ 182.844420][T16109] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 182.844420][T16109] U) failed (rc=-5) [ 183.079810][T16122] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 183.187208][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 183.187236][ T29] audit: type=1326 audit(1746473646.764:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 183.292555][ T29] audit: type=1326 audit(1746473646.806:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 183.317481][ T29] audit: type=1326 audit(1746473646.827:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 183.341196][ T29] audit: type=1326 audit(1746473646.827:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 183.366699][ T29] audit: type=1326 audit(1746473646.827:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 183.391709][ T29] audit: type=1326 audit(1746473646.827:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 183.416635][ T29] audit: type=1326 audit(1746473646.827:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc16ea55927 code=0x7ffc0000 [ 183.441565][ T29] audit: type=1326 audit(1746473646.827:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc16e9fab39 code=0x7ffc0000 [ 183.467169][ T29] audit: type=1326 audit(1746473646.827:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc16ea55927 code=0x7ffc0000 [ 183.492247][ T29] audit: type=1326 audit(1746473646.827:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.0.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc16e9fab39 code=0x7ffc0000 [ 183.547998][T16128] chnl_net:caif_netlink_parms(): no params data found [ 183.629257][T16128] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.636391][T16128] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.666750][T16128] bridge_slave_0: entered allmulticast mode [ 183.682282][T16128] bridge_slave_0: entered promiscuous mode [ 183.759349][T16128] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.768132][T16128] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.777789][T16128] bridge_slave_1: entered allmulticast mode [ 183.784597][T16128] bridge_slave_1: entered promiscuous mode [ 183.867606][T16128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.948184][T16128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.985575][T16169] loop6: detected capacity change from 0 to 1024 [ 184.003946][T16128] team0: Port device team_slave_0 added [ 184.014495][T16128] team0: Port device team_slave_1 added [ 184.068752][T16169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.083560][T16128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.091892][T16128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.117940][T16128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.139688][T16169] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.217191][T16128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.224290][T16128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.251713][T16128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.396352][T16169] EXT4-fs (loop6): shut down requested (2) [ 184.442946][T16128] hsr_slave_0: entered promiscuous mode [ 184.452276][T16128] hsr_slave_1: entered promiscuous mode [ 184.466899][T16128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.505091][T16128] Cannot create hsr debugfs directory [ 184.537157][T13722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.982869][T16128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.021098][T16128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.032753][T16128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.055210][T16216] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16216 comm=syz.5.5251 [ 185.067938][T16216] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16216 comm=syz.5.5251 [ 185.082832][T16128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.159573][T16128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.175313][T16128] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.187142][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.194394][ T6675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.209496][T16230] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5256'. [ 185.212104][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.225656][ T6647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.283903][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5258'. [ 185.313406][T16128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.429702][T16232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.435154][T16128] veth0_vlan: entered promiscuous mode [ 185.446381][T16232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.452972][T16128] veth1_vlan: entered promiscuous mode [ 185.473862][T16128] veth0_macvtap: entered promiscuous mode [ 185.481914][T16128] veth1_macvtap: entered promiscuous mode [ 185.492387][T16128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.504401][T16128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.516849][T16128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.552479][T16128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.564338][T16128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.576575][T16128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.599562][T16128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.609729][T16128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.620000][T16128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.628792][T16128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.715276][T16282] loop4: detected capacity change from 0 to 512 [ 185.735321][T16282] EXT4-fs (loop4): 1 orphan inode deleted [ 185.743980][T16282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.763241][T16282] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.775852][ T6675] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:52: Failed to release dquot type 1 [ 185.869382][T16128] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.007341][T16314] vlan2: entered allmulticast mode [ 186.013610][T16314] bond0: entered allmulticast mode [ 186.018935][T16314] bond_slave_0: entered allmulticast mode [ 186.024770][T16314] bond_slave_1: entered allmulticast mode [ 186.101987][T16321] SELinux: failed to load policy [ 186.128894][T16325] netlink: 36 bytes leftover after parsing attributes in process `'. [ 186.328849][T16349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16349 comm=syz.2.5297 [ 186.349526][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5300'. [ 186.362105][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5300'. [ 186.396889][T16351] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5301'. [ 186.833181][T16359] loop6: detected capacity change from 0 to 4096 [ 187.766560][T16370] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 187.974844][T16400] syzkaller1: entered promiscuous mode [ 187.982010][T16400] syzkaller1: entered allmulticast mode [ 188.048583][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 188.048602][ T29] audit: type=1326 audit(1746473651.877:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.079986][ T29] audit: type=1326 audit(1746473651.877:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.105041][ T29] audit: type=1326 audit(1746473651.877:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.129795][ T29] audit: type=1326 audit(1746473651.877:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.153366][ T29] audit: type=1326 audit(1746473651.877:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.178212][ T29] audit: type=1326 audit(1746473651.877:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.203317][ T29] audit: type=1326 audit(1746473651.877:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.228156][ T29] audit: type=1326 audit(1746473651.877:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.252086][ T29] audit: type=1326 audit(1746473651.929:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.276984][ T29] audit: type=1326 audit(1746473651.929:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.0.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16ea5e969 code=0x7ffc0000 [ 188.304810][T16406] batadv_slave_0: entered allmulticast mode [ 188.310898][T16406] batadv_slave_0: left allmulticast mode [ 188.364466][T16420] ip6t_srh: unknown srh invflags 7D00 [ 188.626796][T16450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5344'. [ 188.740018][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5346'. [ 188.780748][T16458] bond0: (slave bond_slave_0): Releasing backup interface [ 188.853305][T16458] bond_slave_0 (unregistering): left allmulticast mode [ 188.993740][T16472] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.5354'. [ 189.117743][T16479] SELinux: failed to load policy [ 189.191974][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5359'. [ 189.264773][T16492] netlink: 'syz.0.5363': attribute type 4 has an invalid length. [ 189.278364][T16492] netlink: 'syz.0.5363': attribute type 4 has an invalid length. [ 189.826608][T16526] netlink: 'syz.0.5378': attribute type 1 has an invalid length. [ 189.855171][T16526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.879865][T16526] bond0: entered promiscuous mode [ 190.026746][T16544] __nla_validate_parse: 3 callbacks suppressed [ 190.026763][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5385'. [ 190.088353][T16556] program syz.2.5390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.099255][T16556] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 190.325718][T16575] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 190.774911][T16590] netlink: 'syz.6.5406': attribute type 4 has an invalid length. [ 190.836080][T16593] netlink: 'syz.6.5406': attribute type 4 has an invalid length. [ 190.887481][T16596] loop5: detected capacity change from 0 to 128 [ 190.904093][T16596] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.924696][T16596] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.975802][ T6629] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.009442][T16550] Set syz1 is full, maxelem 65536 reached [ 191.031550][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 191.074707][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.129485][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5417'. [ 191.140182][T16604] loop6: detected capacity change from 0 to 8192 [ 191.150970][T16604] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.270387][T16633] loop6: detected capacity change from 0 to 512 [ 191.291100][T16633] EXT4-fs warning (device loop6): dx_probe:863: inode #2: comm syz.6.5424: dx entry: limit 1024 != root limit 124 [ 191.304516][T16633] EXT4-fs warning (device loop6): dx_probe:936: inode #2: comm syz.6.5424: Corrupt directory, running e2fsck is recommended [ 191.320867][T16633] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 191.335770][T16633] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.5424: corrupted in-inode xattr: invalid ea_ino [ 191.353024][T16633] EXT4-fs (loop6): Remounting filesystem read-only [ 191.360007][T16633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.379088][T16633] EXT4-fs warning (device loop6): dx_probe:863: inode #2: comm syz.6.5424: dx entry: limit 1024 != root limit 124 [ 191.392611][T16633] EXT4-fs warning (device loop6): dx_probe:936: inode #2: comm syz.6.5424: Corrupt directory, running e2fsck is recommended [ 191.425427][T13722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.732671][T16666] rdma_op ffff888164ca3180 conn xmit_rdma 0000000000000000 [ 191.796172][T16672] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 191.828902][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5443'. [ 191.915966][T16677] netlink: 'syz.4.5444': attribute type 2 has an invalid length. [ 191.925071][T16677] netlink: 'syz.4.5444': attribute type 1 has an invalid length. [ 191.934046][T16677] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.5444'. [ 192.041400][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5450'. [ 192.070299][T16687] hsr_slave_1 (unregistering): left promiscuous mode [ 192.079622][T16695] netlink: 'syz.4.5452': attribute type 5 has an invalid length. [ 192.474770][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5472'. [ 192.486987][T16744] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 192.819984][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5488'. [ 192.870675][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5488'. [ 192.951492][T16799] sd 0:0:1:0: device reset [ 193.014705][T16786] ================================================================== [ 193.022839][T16786] BUG: KCSAN: data-race in do_select / pollwake [ 193.029114][T16786] [ 193.031449][T16786] write to 0xffffc90007707a00 of 4 bytes by interrupt on cpu 0: [ 193.039093][T16786] pollwake+0xb6/0x100 [ 193.043222][T16786] __wake_up+0x63/0xb0 [ 193.047328][T16786] bpf_ringbuf_notify+0x22/0x30 [ 193.052211][T16786] irq_work_run+0xdf/0x2d0 [ 193.056649][T16786] __sysvec_irq_work+0x22/0x170 [ 193.061540][T16786] sysvec_irq_work+0x66/0x80 [ 193.066162][T16786] asm_sysvec_irq_work+0x1a/0x20 [ 193.071122][T16786] native_apic_msr_write+0x3d/0x60 [ 193.076261][T16786] x2apic_send_IPI_self+0x10/0x20 [ 193.081316][T16786] arch_irq_work_raise+0x46/0x50 [ 193.086286][T16786] __irq_work_queue_local+0x80/0x1b0 [ 193.091599][T16786] irq_work_queue+0x70/0x100 [ 193.096208][T16786] bpf_ringbuf_discard+0xd3/0xf0 [ 193.101167][T16786] bpf_prog_fe0ed97373b08409+0x47/0x4b [ 193.106648][T16786] bpf_trace_run3+0x10c/0x1d0 [ 193.111338][T16786] __traceiter_kmem_cache_free+0x35/0x60 [ 193.116990][T16786] kmem_cache_free+0x246/0x2f0 [ 193.121763][T16786] putname+0xda/0x100 [ 193.125758][T16786] io_mkdirat_cleanup+0x1f/0x30 [ 193.130623][T16786] io_clean_op+0x97/0x2a0 [ 193.134971][T16786] __io_submit_flush_completions+0x98f/0xa00 [ 193.140969][T16786] ctx_flush_and_put+0x9b/0x150 [ 193.145833][T16786] io_handle_tw_list+0x1a9/0x1c0 [ 193.150787][T16786] tctx_task_work_run+0x6d/0x1a0 [ 193.155742][T16786] tctx_task_work+0x3f/0x80 [ 193.160257][T16786] task_work_run+0x12e/0x1a0 [ 193.164853][T16786] get_signal+0xe13/0xf70 [ 193.169198][T16786] arch_do_signal_or_restart+0x97/0x480 [ 193.174762][T16786] syscall_exit_to_user_mode+0x68/0xb0 [ 193.180244][T16786] do_syscall_64+0xdd/0x1a0 [ 193.184755][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.190655][T16786] [ 193.192980][T16786] read to 0xffffc90007707a00 of 4 bytes by task 16786 on cpu 1: [ 193.200616][T16786] do_select+0xe41/0xf40 [ 193.204869][T16786] core_sys_select+0x3b2/0x600 [ 193.209642][T16786] __se_sys_pselect6+0x216/0x280 [ 193.214593][T16786] __x64_sys_pselect6+0x78/0x90 [ 193.219454][T16786] x64_sys_call+0x1caa/0x2fb0 [ 193.224145][T16786] do_syscall_64+0xd0/0x1a0 [ 193.228656][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.234562][T16786] [ 193.236887][T16786] value changed: 0x00000000 -> 0x00000001 [ 193.242606][T16786] [ 193.244928][T16786] Reported by Kernel Concurrency Sanitizer on: [ 193.251095][T16786] CPU: 1 UID: 0 PID: 16786 Comm: syz.0.5491 Tainted: G W 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 193.265175][T16786] Tainted: [W]=WARN [ 193.268978][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.279045][T16786] ==================================================================