last executing test programs: 2m34.413447636s ago: executing program 3 (id=2203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.273862098s ago: executing program 3 (id=2207): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) 2m34.273586788s ago: executing program 3 (id=2208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 2m33.960469176s ago: executing program 3 (id=2212): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m33.759804804s ago: executing program 2 (id=2222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2m33.746388945s ago: executing program 3 (id=2223): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) 2m33.718973258s ago: executing program 2 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) r3 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x18a) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) 2m33.685487991s ago: executing program 2 (id=2225): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 2m33.454236231s ago: executing program 3 (id=2233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) inotify_init() bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000000)={0x17a6, 0x1, [{0x1, 0x1}]}) 2m33.439401832s ago: executing program 32 (id=2233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) inotify_init() bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000000)={0x17a6, 0x1, [{0x1, 0x1}]}) 2m33.408941905s ago: executing program 2 (id=2235): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m33.387262887s ago: executing program 2 (id=2237): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 2m33.0127703s ago: executing program 2 (id=2238): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000003000000000000000000850000007b00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x64, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 2m33.01258207s ago: executing program 33 (id=2238): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000003000000000000000000850000007b00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x64, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 8.475542859s ago: executing program 1 (id=6189): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000700)=0xfffff7f8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) 7.610211606s ago: executing program 1 (id=6223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 7.56380235s ago: executing program 1 (id=6224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 7.56342629s ago: executing program 1 (id=6225): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) add_key$keyring(&(0x7f0000000300), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 6.691500427s ago: executing program 1 (id=6241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 5.677892647s ago: executing program 1 (id=6258): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xeffffffffffffffd}, 0x18) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 5.677694037s ago: executing program 34 (id=6258): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xeffffffffffffffd}, 0x18) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.771036504s ago: executing program 6 (id=6345): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) close(r0) 1.715748488s ago: executing program 6 (id=6346): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.712862748s ago: executing program 4 (id=6356): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000f028ce24850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x2000021f, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r3, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='tlb_flush\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.564513212s ago: executing program 6 (id=6348): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfd04, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000740)='sys_enter\x00', r1, 0x0, 0x400}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x3, &(0x7f0000003080)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000280)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x2, r2, 0x0, 0x0, 0x5}]) 1.229218201s ago: executing program 6 (id=6349): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 1.158592327s ago: executing program 6 (id=6350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) open_tree(0xffffffffffffff9c, 0x0, 0x80800) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x3f00, 0x3f00, 0x0, 0x0}) 1.039640578s ago: executing program 4 (id=6351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) syz_io_uring_setup(0xb05, 0x0, &(0x7f0000000280), 0x0) 992.657412ms ago: executing program 4 (id=6352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 885.690842ms ago: executing program 4 (id=6353): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x84}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 818.990788ms ago: executing program 5 (id=6357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x18) listen(r2, 0x3) 800.061319ms ago: executing program 5 (id=6358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb946643589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x38}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 797.790459ms ago: executing program 6 (id=6359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) 764.999452ms ago: executing program 4 (id=6360): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mprotect(&(0x7f0000ede000/0x4000)=nil, 0x4000, 0x5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) membarrier(0x2, 0x0) 721.544736ms ago: executing program 5 (id=6361): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) close(r2) 721.091896ms ago: executing program 5 (id=6362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r0}, &(0x7f00000010c0), &(0x7f0000001100)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40) 703.293938ms ago: executing program 5 (id=6363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@nodioread_nolock}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") close_range(r0, 0xffffffffffffffff, 0x0) 509.643045ms ago: executing program 7 (id=6365): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x3}, &(0x7f0000000580)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r1, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 287.585095ms ago: executing program 7 (id=6366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a300000000005000740080000001400000011000100"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 246.689068ms ago: executing program 7 (id=6368): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x16}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 215.740671ms ago: executing program 5 (id=6369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x100000000000000) 213.135231ms ago: executing program 7 (id=6370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 191.628953ms ago: executing program 7 (id=6371): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044000) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x1ff, 0x7f, 0x0, 0x1}) 114.06377ms ago: executing program 0 (id=6373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 79.214713ms ago: executing program 0 (id=6374): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sched_getaffinity(0x0, 0x8, &(0x7f00000000c0)) 58.940715ms ago: executing program 4 (id=6375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 46.466316ms ago: executing program 0 (id=6376): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$binfmt_elf32(r0, &(0x7f00000016c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 32.217578ms ago: executing program 0 (id=6377): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@tcx}, 0x1c) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 18.427448ms ago: executing program 0 (id=6378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 5.28764ms ago: executing program 7 (id=6379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x4000215, 0x40000021, 0x0) 0s ago: executing program 0 (id=6380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) kernel console output (not intermixed with test programs): e=4, remaining=3 [ 183.423151][T14189] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 183.473348][T14192] syz.4.4258: attempt to access beyond end of device [ 183.473348][T14192] loop4: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 183.494534][T14192] syz.4.4258: attempt to access beyond end of device [ 183.494534][T14192] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 183.509707][T14192] syz.4.4258: attempt to access beyond end of device [ 183.509707][T14192] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 183.524458][T14192] syz.4.4258: attempt to access beyond end of device [ 183.524458][T14192] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 183.538464][T14192] syz.4.4258: attempt to access beyond end of device [ 183.538464][T14192] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 183.553204][T14192] syz.4.4258: attempt to access beyond end of device [ 183.553204][T14192] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 183.569968][T14192] syz.4.4258: attempt to access beyond end of device [ 183.569968][T14192] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 183.583692][T14192] syz.4.4258: attempt to access beyond end of device [ 183.583692][T14192] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 183.679176][T14214] loop7: detected capacity change from 0 to 7 [ 183.685607][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.695188][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.703379][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.712978][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 183.725912][T14214] loop7: unable to read partition table [ 183.732058][T14214] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 183.854931][T14241] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 183.866451][T14240] IPVS: stopping master sync thread 14241 ... [ 183.917924][T14251] loop1: detected capacity change from 0 to 512 [ 183.924692][T14251] EXT4-fs: Ignoring removed oldalloc option [ 183.954995][T14257] $Hÿ: renamed from bond0 [ 183.961399][T14257] $Hÿ: entered promiscuous mode [ 183.993399][T14265] raw_sendmsg: syz.6.4289 forgot to set AF_INET. Fix it! [ 184.148109][T14272] sch_fq: defrate 0 ignored. [ 184.520984][T14315] vlan2: entered allmulticast mode [ 185.351753][T14365] tipc: Started in network mode [ 185.356679][T14365] tipc: Node identity ac14140f, cluster identity 4711 [ 185.365808][T14365] tipc: New replicast peer: 255.255.255.32 [ 185.371749][T14365] tipc: Enabled bearer , priority 10 [ 185.580001][T14382] loop4: detected capacity change from 0 to 8192 [ 185.652259][ T3328] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 185.660210][ T3328] FAT-fs (loop4): Filesystem has been set read-only [ 185.801898][T14403] bridge0: port 2(batadv0) entered blocking state [ 185.808376][T14403] bridge0: port 2(batadv0) entered disabled state [ 185.840737][T14403] batadv0: entered allmulticast mode [ 185.852620][T14403] batadv0: entered promiscuous mode [ 185.875551][T14406] IPVS: Error connecting to the multicast addr [ 185.926634][T14412] vlan3: entered allmulticast mode [ 185.939122][T14410] lo speed is unknown, defaulting to 1000 [ 186.163198][T14435] loop5: detected capacity change from 0 to 512 [ 186.225133][T14435] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.266415][T14452] netlink: 'syz.1.4372': attribute type 1 has an invalid length. [ 186.300071][ T4678] batman_adv: batadv0: IGMP Querier appeared [ 186.306102][ T4678] batman_adv: batadv0: MLD Querier appeared [ 186.390098][ T5023] tipc: Node number set to 2886997007 [ 186.477441][T14470] __nla_validate_parse: 12 callbacks suppressed [ 186.477457][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 186.546051][T14472] lo speed is unknown, defaulting to 1000 [ 186.697307][T14487] ip6tnl1: entered promiscuous mode [ 186.736497][T14481] loop4: detected capacity change from 0 to 1024 [ 186.762448][T14481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 186.796060][T14481] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4384: bg 0: block 88: padding at end of block bitmap is not set [ 186.828054][T14508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4406'. [ 186.839328][T14508] IPVS: Error connecting to the multicast addr [ 186.948145][T14533] tipc: New replicast peer: 255.255.255.255 [ 186.954173][T14533] tipc: Enabled bearer , priority 10 [ 186.963086][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4409'. [ 187.035724][T14540] lo speed is unknown, defaulting to 1000 [ 187.200958][ T3485] IPVS: starting estimator thread 0... [ 187.206755][T14558] IPVS: dh: FWM 3 0x00000003 - no destination available [ 187.228298][T14563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4420'. [ 187.237549][T14563] team0: left allmulticast mode [ 187.242638][T14563] team_slave_0: left allmulticast mode [ 187.248167][T14563] team_slave_1: left allmulticast mode [ 187.253667][T14563] bridge2: left allmulticast mode [ 187.258685][T14563] team0: left promiscuous mode [ 187.263487][T14563] team_slave_0: left promiscuous mode [ 187.268970][T14563] team_slave_1: left promiscuous mode [ 187.274427][T14563] bridge2: left promiscuous mode [ 187.279585][T14563] bridge0: port 3(team0) entered disabled state [ 187.286563][T14563] bridge_slave_1: left allmulticast mode [ 187.292220][T14563] bridge_slave_1: left promiscuous mode [ 187.297870][T14563] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.300074][T14559] IPVS: using max 2592 ests per chain, 129600 per kthread [ 187.312794][T14563] bridge_slave_0: left promiscuous mode [ 187.318419][T14563] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.359181][T14569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4422'. [ 187.671864][T14598] bond3: invalid ARP target 0.0.0.0 specified for addition [ 187.679269][T14598] bond3: option arp_ip_target: invalid value (0) [ 187.703820][T14598] bond3 (unregistering): Released all slaves [ 187.945898][T14622] bridge0: port 1(batadv2) entered blocking state [ 187.952479][T14622] bridge0: port 1(batadv2) entered disabled state [ 187.970386][T14622] batadv2: entered allmulticast mode [ 187.983715][T14622] batadv2: entered promiscuous mode [ 187.997129][T14630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4437'. [ 188.030915][T14638] netlink: 'syz.1.4438': attribute type 4 has an invalid length. [ 188.430223][ T61] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 188.439515][ T61] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 189.228064][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 189.228077][ T29] audit: type=1400 audit(1767726685.459:8588): avc: denied { read } for pid=14771 comm="syz.4.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.282780][T14773] loop4: detected capacity change from 0 to 512 [ 189.310429][T14773] EXT4-fs (loop4): 1 truncate cleaned up [ 189.316605][T14773] EXT4-fs mount: 33 callbacks suppressed [ 189.316617][T14773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.482986][T14779] netlink: 'syz.0.4453': attribute type 4 has an invalid length. [ 189.501693][ T29] audit: type=1400 audit(1767726685.739:8589): avc: denied { ioctl } for pid=14780 comm="syz.1.4454" path="socket:[53972]" dev="sockfs" ino=53972 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.545036][ T29] audit: type=1400 audit(1767726685.779:8590): avc: denied { bind } for pid=14780 comm="syz.1.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.545414][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4454'. [ 189.574531][ T29] audit: type=1400 audit(1767726685.779:8591): avc: denied { setopt } for pid=14780 comm="syz.1.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.681527][ T29] audit: type=1400 audit(1767726685.919:8592): avc: denied { connect } for pid=14798 comm="syz.1.4463" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.722185][ T29] audit: type=1400 audit(1767726685.959:8593): avc: denied { connect } for pid=14800 comm="syz.5.4464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.929671][ T29] audit: type=1400 audit(1767726686.159:8594): avc: denied { mounton } for pid=14815 comm="syz.1.4469" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 189.991438][ T29] audit: type=1400 audit(1767726686.199:8595): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 190.081273][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.095366][T14822] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4473'. [ 190.127614][T14822] netlink: zone id is out of range [ 190.132884][T14822] netlink: zone id is out of range [ 190.156959][T14826] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4474'. [ 190.191437][T14822] netlink: set zone limit has 8 unknown bytes [ 190.206514][T14830] loop5: detected capacity change from 0 to 128 [ 190.245663][T14834] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 190.287188][T14838] xt_hashlimit: max too large, truncated to 1048576 [ 190.301063][T14843] netlink: 'syz.0.4481': attribute type 4 has an invalid length. [ 190.308816][T14843] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4481'. [ 190.344248][ T29] audit: type=1326 audit(1767726686.579:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14846 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 190.370201][ T29] audit: type=1326 audit(1767726686.579:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14846 comm="syz.6.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 190.370685][T14843] .`: renamed from $Hÿ [ 190.457890][T14858] loop1: detected capacity change from 0 to 512 [ 190.488889][T14858] EXT4-fs (loop1): 1 orphan inode deleted [ 190.500163][ T4678] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 1 [ 190.535807][T14858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.570058][T14858] ext4 filesystem being mounted at /842/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.658783][T14885] loop0: detected capacity change from 0 to 512 [ 190.684080][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.715137][T14885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.775229][T14894] netlink: 'syz.1.4503': attribute type 4 has an invalid length. [ 190.824818][T14885] ext4 filesystem being mounted at /931/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.851390][T14894] .`: renamed from bond0 (while UP) [ 190.870751][T14885] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.900159][T14885] vhci_hcd vhci_hcd.2: invalid port number 96 [ 190.906314][T14885] vhci_hcd vhci_hcd.2: default hub control req: 4000 vfffa i0060 l0 [ 190.985892][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.104441][T14906] loop0: detected capacity change from 0 to 128 [ 191.484631][T14940] loop1: detected capacity change from 0 to 128 [ 191.497732][T14944] __nla_validate_parse: 5 callbacks suppressed [ 191.497747][T14944] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4523'. [ 191.526339][T14946] netlink: 304 bytes leftover after parsing attributes in process `syz.6.4524'. [ 191.583731][T14960] loop1: detected capacity change from 0 to 512 [ 191.602105][T14960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.625432][T14960] ext4 filesystem being mounted at /851/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.701038][T14960] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 191.708757][T14960] vhci_hcd vhci_hcd.2: invalid port number 96 [ 191.714911][T14960] vhci_hcd vhci_hcd.2: default hub control req: 4000 vfffa i0060 l0 [ 191.771633][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.900751][T14974] loop4: detected capacity change from 0 to 128 [ 191.926447][T14977] loop1: detected capacity change from 0 to 128 [ 191.971671][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4541'. [ 191.989718][T14985] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 192.000869][T14985] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 192.062167][T14991] xt_hashlimit: max too large, truncated to 1048576 [ 192.090513][T14993] netlink: 'syz.4.4544': attribute type 1 has an invalid length. [ 192.106965][T14993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.134104][T14993] bond4: (slave veth11): Enslaving as an active interface with a down link [ 192.155657][T14993] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 192.165054][T14993] bond4: (slave batadv1): making interface the new active one [ 192.173716][T14993] batadv1: entered promiscuous mode [ 192.179750][T14993] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 192.191293][T14996] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.4545'. [ 192.200776][T14996] netlink: zone id is out of range [ 192.205960][T14996] netlink: zone id is out of range [ 192.213070][T14996] netlink: zone id is out of range [ 192.218562][T14996] netlink: del zone limit has 8 unknown bytes [ 192.267488][T15006] loop1: detected capacity change from 0 to 1024 [ 192.274839][T15005] futex_wake_op: syz.4.4551 tries to shift op by 144; fix this program [ 192.275224][T15006] EXT4-fs: Ignoring removed orlov option [ 192.311303][T15006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.354697][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4554'. [ 192.381528][T15020] netlink: 'syz.6.4558': attribute type 1 has an invalid length. [ 192.420902][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.444070][T15020] bond0: entered promiscuous mode [ 192.449133][T15020] bond0: entered allmulticast mode [ 192.460072][T15020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.477294][T15023] macvlan2: entered promiscuous mode [ 192.482644][T15023] macvlan2: entered allmulticast mode [ 192.489161][T15023] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.562847][T15035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4563'. [ 192.641813][T15042] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4566'. [ 192.724278][T15053] netlink: 'syz.4.4572': attribute type 1 has an invalid length. [ 192.777331][ T4708] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.882709][T15065] netlink: 'syz.0.4575': attribute type 1 has an invalid length. [ 192.895892][T15065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.936675][T15065] bond0: (slave veth15): Enslaving as an active interface with a down link [ 192.956988][T15065] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 192.965578][T15065] bond0: (slave batadv2): making interface the new active one [ 192.974017][T15065] batadv2: entered promiscuous mode [ 192.979570][T15065] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 193.009198][ T5023] hid_parser_main: 20 callbacks suppressed [ 193.009210][ T5023] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 193.022541][ T5023] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 193.029941][ T5023] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 193.037332][ T5023] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 193.044734][ T5023] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 193.053004][ T5023] hid-generic 00A0:0006:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 193.077362][T15071] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 193.360352][T15098] SELinux: failed to load policy [ 193.627612][T15111] lo speed is unknown, defaulting to 1000 [ 194.234567][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 194.234648][ T29] audit: type=1326 audit(1767726690.469:9332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89893b65e7 code=0x7ffc0000 [ 194.264228][ T29] audit: type=1326 audit(1767726690.469:9333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f898935b829 code=0x7ffc0000 [ 194.287666][ T29] audit: type=1326 audit(1767726690.469:9334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 194.311054][ T29] audit: type=1326 audit(1767726690.479:9335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89893b65e7 code=0x7ffc0000 [ 194.334429][ T29] audit: type=1326 audit(1767726690.479:9336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f898935b829 code=0x7ffc0000 [ 194.357883][ T29] audit: type=1326 audit(1767726690.479:9337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 194.381171][ T29] audit: type=1326 audit(1767726690.489:9338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89893b65e7 code=0x7ffc0000 [ 194.404799][ T29] audit: type=1326 audit(1767726690.489:9339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f898935b829 code=0x7ffc0000 [ 194.428194][ T29] audit: type=1326 audit(1767726690.489:9340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 194.451598][ T29] audit: type=1326 audit(1767726690.499:9341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.4.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89893b65e7 code=0x7ffc0000 [ 194.678911][T15146] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4611'. [ 194.832956][ T3683] Bluetooth: hci0: command 0x1003 tx timeout [ 194.839332][ T4173] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.126431][T15201] netlink: 'syz.1.4636': attribute type 1 has an invalid length. [ 195.145818][T15201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.211248][T15201] bond0: (slave veth11): Enslaving as an active interface with a down link [ 195.242722][T15209] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 195.273898][T15209] bond0: (slave batadv3): making interface the new active one [ 195.299478][T15209] batadv3: entered promiscuous mode [ 195.328223][T15209] bond0: (slave batadv3): Enslaving as an active interface with an up link [ 195.382178][T15219] lo speed is unknown, defaulting to 1000 [ 195.398039][T15223] set_capacity_and_notify: 1 callbacks suppressed [ 195.398052][T15223] loop1: detected capacity change from 0 to 128 [ 195.570522][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4652'. [ 195.701957][T15242] SELinux: failed to load policy [ 195.894321][T15277] loop2: detected capacity change from 0 to 7 [ 195.917641][T15277] loop2: [ 195.971923][T15293] netlink: 'syz.0.4677': attribute type 12 has an invalid length. [ 196.033363][T15301] lo speed is unknown, defaulting to 1000 [ 196.202030][T15317] loop5: detected capacity change from 0 to 128 [ 196.212182][T15317] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 196.259255][T15317] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.366518][ T8962] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.425089][T15341] loop5: detected capacity change from 0 to 1024 [ 196.434292][T15341] EXT4-fs: Ignoring removed orlov option [ 196.442419][T15341] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 196.462008][T15341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.501666][ T8962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.668794][T15368] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4707'. [ 196.712635][T15372] loop5: detected capacity change from 0 to 256 [ 196.721819][T15372] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.734398][T15372] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.897619][T15391] loop5: detected capacity change from 0 to 128 [ 196.920850][T15392] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4717'. [ 196.965930][T15398] netlink: 'syz.6.4720': attribute type 3 has an invalid length. [ 196.973805][T15398] netlink: 'syz.6.4720': attribute type 1 has an invalid length. [ 196.981732][T15398] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.4720'. [ 197.046464][ T3485] Process accounting resumed [ 197.276605][T15424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=15424 comm=syz.4.4728 [ 197.668780][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4743'. [ 197.731089][T15461] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 197.738475][T15461] vhci_hcd vhci_hcd.2: invalid port number 96 [ 197.744796][T15461] vhci_hcd vhci_hcd.2: default hub control req: 4000 vfffa i0060 l0 [ 197.890579][T15482] loop7: detected capacity change from 0 to 7 [ 197.896879][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.906578][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.914732][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.924291][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.932115][T15482] loop7: unable to read partition table [ 197.937844][T15482] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 198.073602][T15488] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 198.121505][T15492] bridge0: port 5(batadv3) entered blocking state [ 198.127982][T15492] bridge0: port 5(batadv3) entered disabled state [ 198.134946][T15492] batadv3: entered allmulticast mode [ 198.141070][T15492] batadv3: entered promiscuous mode [ 198.273051][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4762'. [ 198.310700][T15504] loop4: detected capacity change from 0 to 1024 [ 198.317544][T15504] EXT4-fs: inline encryption not supported [ 198.323491][T15504] EXT4-fs: Ignoring removed orlov option [ 198.330521][T15504] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 198.352946][T15504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 198.361377][T15504] System zones: 0-1, 3-12 [ 198.369230][T15504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.428538][T15517] loop0: detected capacity change from 0 to 1024 [ 198.435831][T15517] journal_path: Non-blockdev passed as './file1' [ 198.442257][T15517] EXT4-fs: error: could not find journal device path [ 198.462814][T15519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4769'. [ 198.596654][T15527] netlink: 'syz.0.4775': attribute type 30 has an invalid length. [ 198.620072][ T4707] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 198.629351][ T4707] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 198.667689][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.743381][T15536] SELinux: failed to load policy [ 198.777609][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4785'. [ 198.800264][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4787'. [ 198.849430][T15559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4784'. [ 198.963961][T15567] loop1: detected capacity change from 0 to 8192 [ 199.240197][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 199.240211][ T29] audit: type=1326 audit(1767726695.469:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.270485][ T29] audit: type=1326 audit(1767726695.479:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.294103][ T29] audit: type=1326 audit(1767726695.479:9630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.317723][ T29] audit: type=1326 audit(1767726695.479:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.341383][ T29] audit: type=1326 audit(1767726695.479:9632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.364973][ T29] audit: type=1326 audit(1767726695.479:9633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.388564][ T29] audit: type=1326 audit(1767726695.509:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.429578][ T29] audit: type=1326 audit(1767726695.509:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.453190][ T29] audit: type=1326 audit(1767726695.509:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.476686][ T29] audit: type=1326 audit(1767726695.509:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15606 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 199.522569][T15616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.561618][T15616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.593426][ T8962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.625598][T15629] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 199.639193][T15629] ip6gretap0: entered promiscuous mode [ 199.650441][T15629] ip6gretap0: left promiscuous mode [ 199.669975][T15631] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.688425][T15631] ext4 filesystem being mounted at /499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.726802][T15635] netlink: 'syz.0.4820': attribute type 10 has an invalid length. [ 199.745494][ T8962] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.152762][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4840'. [ 200.211295][T15685] netlink: 'syz.5.4842': attribute type 3 has an invalid length. [ 200.342177][T15699] wireguard0: entered promiscuous mode [ 200.347693][T15699] wireguard0: entered allmulticast mode [ 200.400375][T15704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.420216][T15704] ext4 filesystem being mounted at /988/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.436771][T15704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.683440][T15731] rdma_op ffff88811800c180 conn xmit_rdma 0000000000000000 [ 200.863940][T15763] 0ªî{X¹¦: renamed from gretap0 [ 200.870748][T15763] 0ªî{X¹¦: entered allmulticast mode [ 200.877688][T15763] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 201.002867][T15786] lo speed is unknown, defaulting to 1000 [ 201.245848][ T1002] Bluetooth: hci0: Frame reassembly failed (-84) [ 201.633644][T15821] lo speed is unknown, defaulting to 1000 [ 201.737098][T15827] FAT-fs (loop9): unable to read boot sector [ 202.811062][T15874] FAT-fs (loop11): unable to read boot sector [ 203.016743][T15875] set_capacity_and_notify: 3 callbacks suppressed [ 203.016760][T15875] loop0: detected capacity change from 0 to 32768 [ 203.060449][T15875] loop0: p1 p2 p3 < p5 p6 > [ 203.066247][T15875] loop0: p2 size 16775168 extends beyond EOD, truncated [ 203.079919][T15875] loop0: p5 start 4294970168 is beyond EOD, truncated [ 203.310481][ T3683] Bluetooth: hci0: command 0x1003 tx timeout [ 203.313838][ T4173] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.335137][T15910] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 203.533460][T15947] lo speed is unknown, defaulting to 1000 [ 203.650405][ T4686] batadv1: left promiscuous mode [ 203.741437][T15962] loop1: detected capacity change from 0 to 128 [ 203.750686][T15962] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 203.862343][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.963579][ T4705] Bluetooth: hci0: Frame reassembly failed (-84) [ 204.011676][T15982] __nla_validate_parse: 11 callbacks suppressed [ 204.011691][T15982] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4967'. [ 204.051846][T15984] lo speed is unknown, defaulting to 1000 [ 204.186837][T15992] lo speed is unknown, defaulting to 1000 [ 204.251614][ T2739] batadv2: left promiscuous mode [ 204.269214][T15996] ALSA: seq fatal error: cannot create timer (-19) [ 204.544168][T16004] blktrace: Concurrent blktraces are not allowed on loop12 [ 204.634995][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4978'. [ 204.683763][T16016] syzkaller1: entered promiscuous mode [ 204.689275][T16016] syzkaller1: entered allmulticast mode [ 204.767858][T16020] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 204.774437][T16020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.782007][T16020] vhci_hcd vhci_hcd.0: Device attached [ 204.789232][T16020] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 204.795726][T16020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.803340][T16020] vhci_hcd vhci_hcd.0: Device attached [ 204.809969][T16020] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 204.816478][T16020] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 204.824104][T16020] vhci_hcd vhci_hcd.0: Device attached [ 204.830758][T16020] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 204.837279][T16020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.844776][T16020] vhci_hcd vhci_hcd.0: Device attached [ 204.851351][T16020] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 204.857949][T16020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.865511][T16020] vhci_hcd vhci_hcd.0: Device attached [ 204.871975][T16020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.880736][T16020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.889593][T16020] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 204.896198][T16020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.903775][T16020] vhci_hcd vhci_hcd.0: Device attached [ 204.909766][T16031] vhci_hcd: connection closed [ 204.910440][T16027] vhci_hcd: connection closed [ 204.910596][ T2739] vhci_hcd vhci_hcd.4: stop threads [ 204.915205][T16025] vhci_hcd: connection closed [ 204.919871][ T2739] vhci_hcd vhci_hcd.4: release socket [ 204.919895][ T2739] vhci_hcd vhci_hcd.4: disconnect device [ 204.925348][T16023] vhci_hcd: connection closed [ 204.933495][T16029] vhci_hcd: connection closed [ 204.935517][T16021] vhci_hcd: connection closed [ 204.947163][ T29] kauditd_printk_skb: 884 callbacks suppressed [ 204.947177][ T29] audit: type=1326 audit(204.921:10522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 204.964345][ T2739] vhci_hcd vhci_hcd.4: stop threads [ 204.984323][ T29] audit: type=1326 audit(204.941:10523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 204.989218][ T2739] vhci_hcd vhci_hcd.4: release socket [ 205.012177][ T29] audit: type=1326 audit(204.941:10524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 205.017544][ T2739] vhci_hcd vhci_hcd.4: disconnect device [ 205.040466][ T29] audit: type=1326 audit(204.941:10525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 205.069049][ T29] audit: type=1326 audit(204.941:10526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 205.092044][ T29] audit: type=1326 audit(204.941:10527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 205.092361][ T2739] vhci_hcd vhci_hcd.4: stop threads [ 205.115016][ T29] audit: type=1326 audit(204.941:10528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 205.115109][ T29] audit: type=1326 audit(204.941:10529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 205.115130][ T29] audit: type=1326 audit(204.941:10530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 205.115150][ T29] audit: type=1326 audit(204.941:10531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15985 comm="syz.0.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7fc00000 [ 205.120351][ T2739] vhci_hcd vhci_hcd.4: release socket [ 205.120374][ T2739] vhci_hcd vhci_hcd.4: disconnect device [ 205.220052][ T3485] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 205.224053][ T2739] vhci_hcd vhci_hcd.4: stop threads [ 205.232602][T16022] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 205.235831][ T2739] vhci_hcd vhci_hcd.4: release socket [ 205.235854][ T2739] vhci_hcd vhci_hcd.4: disconnect device [ 205.253054][ T2739] vhci_hcd vhci_hcd.4: stop threads [ 205.258246][ T2739] vhci_hcd vhci_hcd.4: release socket [ 205.263691][ T2739] vhci_hcd vhci_hcd.4: disconnect device [ 205.269468][ T2739] vhci_hcd vhci_hcd.4: stop threads [ 205.274724][ T2739] vhci_hcd vhci_hcd.4: release socket [ 205.280100][ T2739] vhci_hcd vhci_hcd.4: disconnect device [ 205.397597][T16038] lo speed is unknown, defaulting to 1000 [ 205.526590][T16053] atomic_op ffff88810fc83928 conn xmit_atomic 0000000000000000 [ 205.563439][T16062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4993'. [ 205.585336][T16062] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4993'. [ 205.807022][T16111] netlink: 'syz.5.5006': attribute type 12 has an invalid length. [ 206.030096][ T4173] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 206.036317][ T3683] Bluetooth: hci0: command 0x1003 tx timeout [ 206.341400][T16177] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5019'. [ 206.350600][T16177] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5019'. [ 206.372836][T16215] loop1: detected capacity change from 0 to 512 [ 206.385333][T16215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.408108][T16215] SELinux: Context @ is not valid (left unmapped). [ 206.430512][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.690202][ T2739] batadv3: left promiscuous mode [ 206.754978][T16281] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5034'. [ 206.843004][T16291] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.867222][T16291] vhci_hcd vhci_hcd.2: invalid port number 96 [ 206.873366][T16291] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 206.973570][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5048'. [ 206.994252][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5048'. [ 207.107983][T16338] loop4: detected capacity change from 0 to 128 [ 207.143839][T16342] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 207.150444][T16342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.157981][T16342] vhci_hcd vhci_hcd.0: Device attached [ 207.166350][T16342] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 207.172921][T16342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.180477][T16342] vhci_hcd vhci_hcd.0: Device attached [ 207.189350][T16342] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 207.195883][T16342] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.203497][T16342] vhci_hcd vhci_hcd.0: Device attached [ 207.211751][T16342] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 207.218241][T16342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.219715][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5063'. [ 207.225742][T16342] vhci_hcd vhci_hcd.0: Device attached [ 207.237776][T16355] ip6gre2: entered allmulticast mode [ 207.253763][T16342] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 207.260441][T16342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.267994][T16342] vhci_hcd vhci_hcd.0: Device attached [ 207.275065][T16342] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.283850][T16342] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.293013][T16342] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 207.299616][T16342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.307166][T16342] vhci_hcd vhci_hcd.0: Device attached [ 207.314621][T16363] vhci_hcd: connection closed [ 207.314773][ T12] vhci_hcd vhci_hcd.1: stop threads [ 207.324796][ T12] vhci_hcd vhci_hcd.1: release socket [ 207.330345][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 207.340308][T16358] vhci_hcd: connection closed [ 207.340340][T16356] vhci_hcd: connection closed [ 207.340417][T16344] vhci_hcd: connection closed [ 207.345029][T16348] vhci_hcd: connection closed [ 207.355082][T16351] vhci_hcd: connection closed [ 207.360338][ T12] vhci_hcd vhci_hcd.1: stop threads [ 207.370239][ T12] vhci_hcd vhci_hcd.1: release socket [ 207.375740][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 207.395380][ T12] vhci_hcd vhci_hcd.1: stop threads [ 207.400706][ T12] vhci_hcd vhci_hcd.1: release socket [ 207.406133][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 207.411861][ T5020] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 207.419176][T16345] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 207.429776][ T12] vhci_hcd vhci_hcd.1: stop threads [ 207.435070][ T12] vhci_hcd vhci_hcd.1: release socket [ 207.440488][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 207.446606][ T12] vhci_hcd vhci_hcd.1: stop threads [ 207.451902][ T12] vhci_hcd vhci_hcd.1: release socket [ 207.457330][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 207.463453][ T12] vhci_hcd vhci_hcd.1: stop threads [ 207.468654][ T12] vhci_hcd vhci_hcd.1: release socket [ 207.474147][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 208.137756][T16428] loop4: detected capacity change from 0 to 1024 [ 208.150522][T16428] EXT4-fs: Ignoring removed bh option [ 208.165063][T16428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.197982][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.683477][T16509] loop0: detected capacity change from 0 to 128 [ 208.701423][T16509] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 208.748138][T16521] random: crng reseeded on system resumption [ 208.792869][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.142304][T16596] bridge: RTM_NEWNEIGH with invalid ether address [ 209.336333][T16610] lo speed is unknown, defaulting to 1000 [ 210.104469][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 210.104486][ T29] audit: type=1400 audit(216.084:10846): avc: denied { append } for pid=16653 comm="syz.1.5134" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 210.194636][T16660] __nla_validate_parse: 4 callbacks suppressed [ 210.194653][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5135'. [ 210.209744][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5135'. [ 210.251768][ T29] audit: type=1326 audit(216.234:10847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1937bf749 code=0x7ffc0000 [ 210.277333][ T3485] usb 9-1: enqueue for inactive port 0 [ 210.287542][ T3485] usb 9-1: enqueue for inactive port 0 [ 210.313008][ T29] audit: type=1326 audit(216.244:10848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1937bf749 code=0x7ffc0000 [ 210.336024][ T29] audit: type=1326 audit(216.244:10849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1937bf749 code=0x7ffc0000 [ 210.359027][ T29] audit: type=1326 audit(216.244:10850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1937bf749 code=0x7ffc0000 [ 210.381998][ T29] audit: type=1326 audit(216.244:10851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb1937bf749 code=0x7ffc0000 [ 210.404960][ T29] audit: type=1326 audit(216.244:10852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1937bf749 code=0x7ffc0000 [ 210.428049][ T29] audit: type=1326 audit(216.244:10853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1937bf749 code=0x7ffc0000 [ 210.451065][ T29] audit: type=1326 audit(216.244:10854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb1937bf749 code=0x7ffc0000 [ 210.473998][ T29] audit: type=1326 audit(216.244:10855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.1.5139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1937bf749 code=0x7ffc0000 [ 210.497045][ T3485] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 210.650654][T16674] lo: Caught tx_queue_len zero misconfig [ 210.831676][T16693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5152'. [ 210.866066][T16699] serio: Serial port ptm0 [ 210.891970][T16704] random: crng reseeded on system resumption [ 210.941959][T16704] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5158'. [ 210.951478][T16704] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5158'. [ 211.037714][T16699] serio: Serial port ptm0 [ 211.097771][T16719] netlink: 'syz.5.5164': attribute type 12 has an invalid length. [ 211.161991][T16725] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5167'. [ 211.227174][T16732] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 211.233785][T16732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.241399][T16732] vhci_hcd vhci_hcd.0: Device attached [ 211.256736][T16732] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 211.263270][T16732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.270836][T16732] vhci_hcd vhci_hcd.0: Device attached [ 211.321642][T16732] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 211.328256][T16732] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 211.335981][T16732] vhci_hcd vhci_hcd.0: Device attached [ 211.349845][T16732] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9) [ 211.356368][T16732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.363977][T16732] vhci_hcd vhci_hcd.0: Device attached [ 211.384976][T16732] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(11) [ 211.391610][T16732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.399183][T16732] vhci_hcd vhci_hcd.0: Device attached [ 211.411615][T16732] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 211.427518][T16732] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 211.442357][T16732] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 211.448972][T16732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.456586][T16732] vhci_hcd vhci_hcd.0: Device attached [ 211.471131][T16756] vhci_hcd: connection closed [ 211.471191][T16753] vhci_hcd: connection closed [ 211.471445][T16747] vhci_hcd: connection closed [ 211.476543][T16750] vhci_hcd: connection closed [ 211.481564][ T4684] vhci_hcd vhci_hcd.5: stop threads [ 211.489009][T16737] vhci_hcd: connection closed [ 211.490629][ T4684] vhci_hcd vhci_hcd.5: release socket [ 211.505905][ T4684] vhci_hcd vhci_hcd.5: disconnect device [ 211.510075][ T3494] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 211.511898][T16741] vhci_hcd: connection closed [ 211.519993][T16738] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 211.553277][ T4684] vhci_hcd vhci_hcd.5: stop threads [ 211.558597][ T4684] vhci_hcd vhci_hcd.5: release socket [ 211.564142][ T4684] vhci_hcd vhci_hcd.5: disconnect device [ 211.573370][ T4684] vhci_hcd vhci_hcd.5: stop threads [ 211.578719][ T4684] vhci_hcd vhci_hcd.5: release socket [ 211.584293][ T4684] vhci_hcd vhci_hcd.5: disconnect device [ 211.590323][ T4684] vhci_hcd vhci_hcd.5: stop threads [ 211.595600][ T4684] vhci_hcd vhci_hcd.5: release socket [ 211.601017][ T4684] vhci_hcd vhci_hcd.5: disconnect device [ 211.606787][ T4684] vhci_hcd vhci_hcd.5: stop threads [ 211.612027][ T4684] vhci_hcd vhci_hcd.5: release socket [ 211.617415][ T4684] vhci_hcd vhci_hcd.5: disconnect device [ 211.623410][ T4684] vhci_hcd vhci_hcd.5: stop threads [ 211.628613][ T4684] vhci_hcd vhci_hcd.5: release socket [ 211.634126][ T4684] vhci_hcd vhci_hcd.5: disconnect device [ 211.939543][T16706] syz.0.5159 (16706) used greatest stack depth: 6008 bytes left [ 211.956698][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5180'. [ 211.965693][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5180'. [ 212.004235][T16772] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5181'. [ 212.116969][T16782] lo speed is unknown, defaulting to 1000 [ 212.241697][T16796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5191'. [ 212.430084][ T5020] usb 3-1: enqueue for inactive port 0 [ 212.435828][ T5020] usb 3-1: enqueue for inactive port 0 [ 212.510202][ T5020] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 213.256938][T16854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16854 comm=syz.0.5214 [ 213.928857][T16884] syzkaller1: entered promiscuous mode [ 213.934400][T16884] syzkaller1: entered allmulticast mode [ 214.918693][T16941] loop0: detected capacity change from 0 to 512 [ 214.931945][T16941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.955433][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.006654][T16953] lo speed is unknown, defaulting to 1000 [ 215.032654][T16957] loop5: detected capacity change from 0 to 512 [ 215.049507][T16957] EXT4-fs: Ignoring removed nobh option [ 215.077467][T16957] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.094147][T16957] EXT4-fs (loop5): 1 truncate cleaned up [ 215.100204][T16957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.139921][T16969] IPv4: Oversized IP packet from 127.202.26.0 [ 215.227123][ T8962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.260509][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 215.260524][ T29] audit: type=1326 audit(221.244:10985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.321129][ T29] audit: type=1326 audit(221.274:10986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.344154][ T29] audit: type=1326 audit(221.274:10987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.367163][ T29] audit: type=1326 audit(221.274:10988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.390290][ T29] audit: type=1326 audit(221.274:10989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.413240][ T29] audit: type=1326 audit(221.274:10990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.437551][ T29] audit: type=1326 audit(221.384:10991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.460658][ T29] audit: type=1326 audit(221.384:10992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.498657][ T29] audit: type=1326 audit(221.434:10993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.521586][ T29] audit: type=1326 audit(221.434:10994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 215.644368][T16999] __nla_validate_parse: 3 callbacks suppressed [ 215.644383][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5271'. [ 215.659592][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5271'. [ 216.008775][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5290'. [ 216.032660][T17039] ip6gre3: entered allmulticast mode [ 216.592035][ T3494] usb 11-1: enqueue for inactive port 0 [ 216.612666][ T3494] usb 11-1: enqueue for inactive port 0 [ 216.694568][ T3494] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 217.092045][T17148] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.5330'. [ 217.101742][T17148] netlink: zone id is out of range [ 217.106851][T17148] netlink: zone id is out of range [ 217.120946][T17148] netlink: zone id is out of range [ 217.152815][T17148] netlink: set zone limit has 8 unknown bytes [ 217.304537][T17164] netlink: 'syz.4.5343': attribute type 1 has an invalid length. [ 217.339046][T17164] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.363049][T17164] bond5: (slave veth15): Enslaving as an active interface with a down link [ 217.378211][T17164] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 217.387662][T17164] bond5: (slave batadv2): making interface the new active one [ 217.396858][T17164] batadv2: entered promiscuous mode [ 217.402465][T17164] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 217.518050][T17179] SET target dimension over the limit! [ 217.584199][T17190] pimreg: entered allmulticast mode [ 217.591598][T17190] pimreg: left allmulticast mode [ 217.763369][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5359'. [ 217.772350][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5359'. [ 217.781856][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5359'. [ 217.987489][T17225] netlink: 'syz.4.5367': attribute type 4 has an invalid length. [ 217.995393][T17225] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5367'. [ 218.006015][T17225] .`: renamed from bond0 [ 218.090669][T17233] netlink: 'syz.0.5371': attribute type 13 has an invalid length. [ 218.213847][T17239] loop5: detected capacity change from 0 to 128 [ 218.327974][T17247] loop0: detected capacity change from 0 to 1024 [ 218.341235][T17247] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5375: bad orphan inode 134217728 [ 218.356069][T17247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.415996][T17254] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5380'. [ 218.571556][T17260] loop1: detected capacity change from 0 to 1024 [ 218.598447][T17260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.635306][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.709821][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.720610][T17321] loop4: detected capacity change from 0 to 4096 [ 219.727661][T17321] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.734347][T17321] EXT4-fs: test_dummy_encryption option not supported [ 219.821624][T17326] Invalid argument reading file caps for ./file0 [ 219.859537][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5416'. [ 219.894558][ T3494] kernel write not supported for file /uhid (pid: 3494 comm: kworker/0:9) [ 220.539042][ T29] kauditd_printk_skb: 813 callbacks suppressed [ 220.539055][ T29] audit: type=1326 audit(226.515:11808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 220.568506][ T29] audit: type=1326 audit(226.535:11809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 220.591987][ T29] audit: type=1326 audit(226.545:11810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa458cf783 code=0x7ffc0000 [ 220.614857][ T29] audit: type=1326 audit(226.545:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa458cf783 code=0x7ffc0000 [ 220.637784][ T29] audit: type=1326 audit(226.555:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 220.660741][ T29] audit: type=1326 audit(226.555:11813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 220.683699][ T29] audit: type=1326 audit(226.565:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 220.706717][ T29] audit: type=1326 audit(226.575:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 220.729791][ T29] audit: type=1326 audit(226.575:11816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 220.753314][ T29] audit: type=1326 audit(226.595:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17374 comm="syz.5.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 221.150081][ T4173] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.640162][T17419] netlink: 'syz.5.5446': attribute type 15 has an invalid length. [ 221.648012][T17419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5446'. [ 221.903714][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5453'. [ 221.938776][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5454'. [ 221.957174][T17441] team1: entered promiscuous mode [ 221.962247][T17441] team1: entered allmulticast mode [ 221.968002][T17441] 8021q: adding VLAN 0 to HW filter on device team1 [ 222.148645][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5465'. [ 222.174312][T17448] netlink: 'syz.6.5457': attribute type 1 has an invalid length. [ 222.252649][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5461'. [ 222.323304][T17465] process '/newroot/725/file0' started with executable stack [ 222.512513][T17484] netlink: 'syz.4.5472': attribute type 1 has an invalid length. [ 222.535445][T17484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.569631][T17484] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 222.581844][T17484] bond0: (slave batadv3): making interface the new active one [ 222.590845][T17484] bond0: (slave batadv3): Enslaving as an active interface with an up link [ 222.605828][T17484] netlink: 'syz.4.5472': attribute type 13 has an invalid length. [ 222.606896][T17488] pimreg: entered allmulticast mode [ 222.648383][T17488] pimreg: left allmulticast mode [ 222.654526][T17491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5475'. [ 222.679127][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5476'. [ 222.688400][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5476'. [ 222.697371][T17495] Invalid argument reading file caps for ./file0 [ 222.703878][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5476'. [ 222.714342][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5476'. [ 222.723413][T17493] netlink: 'syz.6.5476': attribute type 6 has an invalid length. [ 222.781417][T17509] IPVS: Unknown mcast interface: [ 222.798877][T17512] loop4: detected capacity change from 0 to 512 [ 222.835559][T17512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.863856][T17512] EXT4-fs (loop4): 1 truncate cleaned up [ 222.880343][T17512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.892769][T17520] loop0: detected capacity change from 0 to 128 [ 222.980659][T17520] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 223.207231][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.262647][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.332428][T17572] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 223.346146][T17572] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 223.430160][T17574] netlink: zone id is out of range [ 223.435319][T17574] netlink: zone id is out of range [ 223.450120][T17574] netlink: zone id is out of range [ 223.464833][T17574] netlink: set zone limit has 8 unknown bytes [ 223.562458][T17592] loop4: detected capacity change from 0 to 256 [ 223.596290][T17595] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 223.607323][T17595] bond4 (unregistering): Released all slaves [ 224.838607][T17644] loop1: detected capacity change from 0 to 256 [ 225.322173][ T3485] IPVS: starting estimator thread 0... [ 225.410172][T17668] IPVS: using max 3072 ests per chain, 153600 per kthread [ 226.063786][T17686] loop0: detected capacity change from 0 to 512 [ 226.093096][T17686] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 226.130691][T17686] EXT4-fs (loop0): 1 truncate cleaned up [ 226.150783][T17686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.170258][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 226.170272][ T29] audit: type=1400 audit(232.155:12003): avc: denied { read } for pid=17687 comm="syz.4.5540" lport=36554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.542154][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.317254][T17734] __nla_validate_parse: 6 callbacks suppressed [ 227.317270][T17734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5553'. [ 227.455960][T17738] netlink: 'syz.6.5555': attribute type 39 has an invalid length. [ 227.476860][ T29] audit: type=1326 audit(233.455:12004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7ffc0000 [ 227.499874][ T29] audit: type=1326 audit(233.455:12005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7ffc0000 [ 227.593198][ T29] audit: type=1326 audit(233.455:12006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbad23df749 code=0x7ffc0000 [ 227.616054][ T29] audit: type=1326 audit(233.455:12007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7ffc0000 [ 227.639020][ T29] audit: type=1326 audit(233.455:12008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7ffc0000 [ 227.662005][ T29] audit: type=1326 audit(233.455:12009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fbad23df749 code=0x7ffc0000 [ 227.684960][ T29] audit: type=1326 audit(233.455:12010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7ffc0000 [ 227.707934][ T29] audit: type=1326 audit(233.455:12011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbad23df749 code=0x7ffc0000 [ 227.791036][ T29] audit: type=1400 audit(233.775:12012): avc: denied { wake_alarm } for pid=17741 comm="syz.5.5556" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.201038][T17762] ip6gre0: left promiscuous mode [ 228.281340][T17762] syz_tun: left promiscuous mode [ 228.286592][T17762] $Hÿ: left promiscuous mode [ 228.330385][T17762] bond0: left promiscuous mode [ 228.335217][T17762] bond0: left allmulticast mode [ 228.364559][T17762] team1: left promiscuous mode [ 228.369440][T17762] team1: left allmulticast mode [ 228.400961][T17770] loop0: detected capacity change from 0 to 1024 [ 228.420780][T17770] EXT4-fs: Ignoring removed oldalloc option [ 228.452694][T17770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.509273][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.563452][T17789] netlink: 'syz.0.5574': attribute type 1 has an invalid length. [ 228.596547][T17789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.641658][T17789] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 228.650507][T17789] bond4: (slave batadv4): making interface the new active one [ 228.659140][T17789] bond4: (slave batadv4): Enslaving as an active interface with an up link [ 228.691118][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5580'. [ 228.720474][T17789] netlink: 'syz.0.5574': attribute type 13 has an invalid length. [ 228.721926][T17800] team2: entered promiscuous mode [ 228.733422][T17800] team2: entered allmulticast mode [ 228.738801][T17800] 8021q: adding VLAN 0 to HW filter on device team2 [ 229.110515][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5592'. [ 229.154612][T17834] infiniband syz!: set down [ 229.159147][T17834] infiniband syz!: added team_slave_0 [ 229.192708][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5596'. [ 229.201894][T17838] batadv3: left allmulticast mode [ 229.206951][T17838] batadv3: left promiscuous mode [ 229.212078][T17838] bridge0: port 5(batadv3) entered disabled state [ 229.212976][T17834] RDS/IB: syz!: added [ 229.222619][T17834] smc: adding ib device syz! with port count 1 [ 229.228779][T17834] smc: ib device syz! port 1 has no pnetid [ 229.236004][T17838] team0: left allmulticast mode [ 229.240987][T17838] team_slave_0: left allmulticast mode [ 229.246475][T17838] team_slave_1: left allmulticast mode [ 229.251993][T17838] bridge6: left allmulticast mode [ 229.257040][T17838] team0: left promiscuous mode [ 229.261815][T17838] team_slave_0: left promiscuous mode [ 229.267334][T17838] team_slave_1: left promiscuous mode [ 229.272805][T17838] bridge6: left promiscuous mode [ 229.277891][T17838] bridge0: port 4(team0) entered disabled state [ 229.285543][T17838] gretap0: left allmulticast mode [ 229.290746][T17838] gretap0: left promiscuous mode [ 229.295922][T17838] bridge0: port 3(gretap0) entered disabled state [ 229.303132][T17838] bridge_slave_1: left allmulticast mode [ 229.308754][T17838] bridge_slave_1: left promiscuous mode [ 229.314546][T17838] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.324595][T17838] bridge_slave_0: left promiscuous mode [ 229.330284][T17838] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.380936][T17845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5599'. [ 229.683106][T17876] loop1: detected capacity change from 0 to 2048 [ 229.711790][T17876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.788518][T17880] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5613: bg 0: block 345: padding at end of block bitmap is not set [ 229.803173][T17880] EXT4-fs (loop1): Remounting filesystem read-only [ 229.810276][ T4693] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 229.963437][T17888] syzkaller0: entered allmulticast mode [ 230.027893][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.037990][ T4693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.105418][T17891] syzkaller0: entered promiscuous mode [ 230.112053][T17895] loop0: detected capacity change from 0 to 128 [ 230.114861][T17893] loop1: detected capacity change from 0 to 2048 [ 230.127303][T17895] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 230.141247][T17893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.177697][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.187686][T17888] syzkaller0 (unregistering): left promiscuous mode [ 230.194378][T17888] syzkaller0 (unregistering): left allmulticast mode [ 230.209184][T17900] netlink: 'syz.6.5622': attribute type 1 has an invalid length. [ 230.226940][T17900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.227515][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.251476][T17900] bond1 (unregistering): Released all slaves [ 230.296376][T17905] loop0: detected capacity change from 0 to 512 [ 230.303600][T17905] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.316551][T17905] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.5623: invalid indirect mapped block 4294967295 (level 0) [ 230.330953][T17905] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.5623: invalid indirect mapped block 4294967295 (level 1) [ 230.345790][T17905] EXT4-fs (loop0): 1 orphan inode deleted [ 230.351648][T17905] EXT4-fs (loop0): 1 truncate cleaned up [ 230.367378][T17915] netlink: 'syz.5.5625': attribute type 30 has an invalid length. [ 230.379105][T17905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.396816][T17905] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 230.441493][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.562845][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5631'. [ 230.745364][T17949] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5636'. [ 230.769168][T17949] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5636'. [ 230.856502][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5640'. [ 230.878739][T17967] ip6gre1: entered allmulticast mode [ 231.310388][ T4696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.318643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.364741][T18067] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5657'. [ 231.397470][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 231.397486][ T29] audit: type=1400 audit(231.370:12140): avc: denied { getopt } for pid=18072 comm="syz.1.5658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.583856][ T29] audit: type=1326 audit(231.560:12141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.4.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 231.644589][ T29] audit: type=1326 audit(231.560:12142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.4.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 231.667609][ T29] audit: type=1326 audit(231.560:12143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.4.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 231.690708][ T29] audit: type=1326 audit(231.560:12144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.4.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 231.713800][ T29] audit: type=1326 audit(231.560:12145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.4.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 231.736871][ T29] audit: type=1326 audit(231.560:12146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.4.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 231.759841][ T29] audit: type=1326 audit(231.560:12147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.4.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 231.782846][ T29] audit: type=1326 audit(231.560:12148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.4.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 231.805887][ T29] audit: type=1326 audit(231.560:12149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.4.5668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 232.433669][T18159] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 2, id = 0 [ 232.462970][T18160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5674'. [ 233.075087][T18192] tipc: New replicast peer: 255.255.255.255 [ 233.081410][T18192] tipc: Enabled bearer , priority 10 [ 233.120896][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5689'. [ 233.129874][T18192] tipc: Disabling bearer [ 233.145727][T18196] netlink: 'syz.0.5690': attribute type 1 has an invalid length. [ 233.196199][T18196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.231735][T18196] bond5 (unregistering): Released all slaves [ 233.506103][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5709'. [ 233.516074][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5709'. [ 233.700133][T18253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.708472][T18253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.716816][T18253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.121906][T18286] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.5728'. [ 234.131097][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5728'. [ 234.163661][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5731'. [ 234.510802][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.594706][T18222] syz.6.5703 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 234.605492][T18222] CPU: 0 UID: 0 PID: 18222 Comm: syz.6.5703 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.605524][T18222] Tainted: [W]=WARN [ 234.605531][T18222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.605544][T18222] Call Trace: [ 234.605551][T18222] [ 234.605559][T18222] __dump_stack+0x1d/0x30 [ 234.605609][T18222] dump_stack_lvl+0x95/0xd0 [ 234.605630][T18222] dump_stack+0x15/0x1b [ 234.605648][T18222] dump_header+0x81/0x240 [ 234.605674][T18222] oom_kill_process+0x295/0x350 [ 234.605716][T18222] out_of_memory+0x97b/0xb80 [ 234.605740][T18222] try_charge_memcg+0x610/0xa10 [ 234.605778][T18222] charge_memcg+0x51/0xc0 [ 234.605805][T18222] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 234.605837][T18222] __read_swap_cache_async+0x17b/0x2d0 [ 234.605929][T18222] swap_cluster_readahead+0x262/0x3c0 [ 234.605962][T18222] swapin_readahead+0xde/0x820 [ 234.605989][T18222] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 234.606070][T18222] ? __rcu_read_unlock+0x34/0x70 [ 234.606086][T18222] ? __rcu_read_unlock+0x4f/0x70 [ 234.606164][T18222] ? swap_cache_get_folio+0x277/0x280 [ 234.606249][T18222] do_swap_page+0x2b4/0x21e0 [ 234.606281][T18222] ? __pfx_default_wake_function+0x10/0x10 [ 234.606351][T18222] handle_mm_fault+0x9d8/0x2c60 [ 234.606388][T18222] do_user_addr_fault+0x630/0x1080 [ 234.606419][T18222] exc_page_fault+0x62/0xa0 [ 234.606496][T18222] asm_exc_page_fault+0x26/0x30 [ 234.606535][T18222] RIP: 0033:0x7f68bf635a48 [ 234.606566][T18222] Code: e8 bd 97 fe ff 49 39 c4 73 a0 48 8d 1d 71 05 38 00 83 3d 76 23 38 00 00 48 8d ab 00 1e 00 00 0f 8e 7e fd ff ff 0f 1f 44 00 00 <80> 7b 20 00 49 89 d8 74 1f e8 da 9a ff ff 84 c0 74 0c 48 8d bb 98 [ 234.606647][T18222] RSP: 002b:00007ffd31274e40 EFLAGS: 00010202 [ 234.606663][T18222] RAX: 00000000000392d1 RBX: 00007f68bf9b5fa0 RCX: 0000000000039210 [ 234.606677][T18222] RDX: 00000000000000c1 RSI: 00007ffd31274e20 RDI: 0000000000000001 [ 234.606704][T18222] RBP: 00007f68bf9b7da0 R08: 000000000b902da3 R09: 7fffffffffffffff [ 234.606717][T18222] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000003929c [ 234.606730][T18222] R13: 00007ffd31274f30 R14: ffffffffffffffff R15: 00007ffd31274f50 [ 234.606750][T18222] [ 234.606757][T18222] memory: usage 307200kB, limit 307200kB, failcnt 510 [ 234.826307][T18222] memory+swap: usage 307884kB, limit 9007199254740988kB, failcnt 0 [ 234.834227][T18222] kmem: usage 237904kB, limit 9007199254740988kB, failcnt 0 [ 234.841524][T18222] Memory cgroup stats for /syz6: [ 234.865927][T18222] cache 67149824 [ 234.874446][T18222] rss 3801088 [ 234.877803][T18222] shmem 0 [ 234.880800][T18222] mapped_file 0 [ 234.884251][T18222] dirty 0 [ 234.887175][T18222] writeback 0 [ 234.890526][T18222] workingset_refault_anon 1021 [ 234.895312][T18222] workingset_refault_file 0 [ 234.899804][T18222] swap 700416 [ 234.903120][T18222] swapcached 0 [ 234.906480][T18222] pgpgin 215164 [ 234.909928][T18222] pgpgout 197840 [ 234.913502][T18222] pgfault 215628 [ 234.917044][T18222] pgmajfault 227 [ 234.920672][T18222] inactive_anon 0 [ 234.924286][T18222] active_anon 0 [ 234.927890][T18222] inactive_file 3809280 [ 234.932095][T18222] active_file 0 [ 234.935540][T18222] unevictable 67149824 [ 234.939591][T18222] hierarchical_memory_limit 314572800 [ 234.945032][T18222] hierarchical_memsw_limit 9223372036854771712 [ 234.951216][T18222] total_cache 67149824 [ 234.955274][T18222] total_rss 3801088 [ 234.959068][T18222] total_shmem 0 [ 234.962554][T18222] total_mapped_file 0 [ 234.966519][T18222] total_dirty 0 [ 234.969969][T18222] total_writeback 0 [ 234.973871][T18222] total_workingset_refault_anon 1021 [ 234.979145][T18222] total_workingset_refault_file 0 [ 234.984181][T18222] total_swap 700416 [ 234.988004][T18222] total_swapcached 0 [ 234.991974][T18222] total_pgpgin 215164 [ 234.995954][T18222] total_pgpgout 197840 [ 235.000020][T18222] total_pgfault 215628 [ 235.004077][T18222] total_pgmajfault 227 [ 235.008128][T18222] total_inactive_anon 0 [ 235.012298][T18222] total_active_anon 0 [ 235.016291][T18222] total_inactive_file 3809280 [ 235.020979][T18222] total_active_file 0 [ 235.024947][T18222] total_unevictable 67149824 [ 235.029533][T18222] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2579,pid=9862,uid=0 [ 235.044243][T18222] Memory cgroup out of memory: Killed process 9862 (syz.6.2579) total-vm:95884kB, anon-rss:1172kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 235.069522][ T8982] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 235.080495][ T8982] CPU: 1 UID: 0 PID: 8982 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.080561][ T8982] Tainted: [W]=WARN [ 235.080567][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.080578][ T8982] Call Trace: [ 235.080585][ T8982] [ 235.080594][ T8982] __dump_stack+0x1d/0x30 [ 235.080617][ T8982] dump_stack_lvl+0x95/0xd0 [ 235.080714][ T8982] dump_stack+0x15/0x1b [ 235.080734][ T8982] dump_header+0x81/0x240 [ 235.080755][ T8982] oom_kill_process+0x295/0x350 [ 235.080819][ T8982] out_of_memory+0x97b/0xb80 [ 235.080843][ T8982] try_charge_memcg+0x610/0xa10 [ 235.080923][ T8982] charge_memcg+0x51/0xc0 [ 235.080947][ T8982] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 235.080978][ T8982] __read_swap_cache_async+0x17b/0x2d0 [ 235.081006][ T8982] swap_cluster_readahead+0x362/0x3c0 [ 235.081082][ T8982] swapin_readahead+0xde/0x820 [ 235.081108][ T8982] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 235.081157][ T8982] ? __rcu_read_unlock+0x34/0x70 [ 235.081174][ T8982] ? __rcu_read_unlock+0x4f/0x70 [ 235.081189][ T8982] ? swap_cache_get_folio+0x277/0x280 [ 235.081215][ T8982] do_swap_page+0x2b4/0x21e0 [ 235.081373][ T8982] ? __pfx_default_wake_function+0x10/0x10 [ 235.081407][ T8982] handle_mm_fault+0x9d8/0x2c60 [ 235.081443][ T8982] do_user_addr_fault+0x630/0x1080 [ 235.081473][ T8982] exc_page_fault+0x62/0xa0 [ 235.081549][ T8982] asm_exc_page_fault+0x26/0x30 [ 235.081569][ T8982] RIP: 0033:0x7f68bf75f6a6 [ 235.081584][ T8982] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 235.081602][ T8982] RSP: 002b:00007ffd31275030 EFLAGS: 00010246 [ 235.081619][ T8982] RAX: 0000000000000bb8 RBX: 00000000000006e2 RCX: 00000000000392ee [ 235.081631][ T8982] RDX: 0000000000000bb8 RSI: 0000000000000000 RDI: 0000000000002710 [ 235.081699][ T8982] RBP: 00007ffd3127509c R08: 000000000d43fe69 R09: 0000000000000000 [ 235.081710][ T8982] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 235.081721][ T8982] R13: 00000000000927c0 R14: 00000000000390c8 R15: 00007ffd312750f0 [ 235.081737][ T8982] [ 235.081743][ T8982] memory: usage 307200kB, limit 307200kB, failcnt 529 [ 235.270662][T18319] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5744'. [ 235.275950][ T8982] memory+swap: usage 307712kB, limit 9007199254740988kB, failcnt 0 [ 235.319526][ T8982] kmem: usage 237876kB, limit 9007199254740988kB, failcnt 0 [ 235.326936][ T8982] Memory cgroup stats for /syz6: [ 235.327800][ T8982] cache 67149824 [ 235.336291][ T8982] rss 3801088 [ 235.339564][ T8982] shmem 0 [ 235.342569][ T8982] mapped_file 0 [ 235.346063][ T8982] dirty 0 [ 235.349008][ T8982] writeback 0 [ 235.352312][ T8982] workingset_refault_anon 1021 [ 235.357072][ T8982] workingset_refault_file 0 [ 235.361614][ T8982] swap 524288 [ 235.365006][ T8982] swapcached 0 [ 235.368467][ T8982] pgpgin 215164 [ 235.371948][ T8982] pgpgout 197840 [ 235.372508][T18322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.375574][ T8982] pgfault 215628 [ 235.383752][T18322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.387152][ T8982] pgmajfault 227 [ 235.387160][ T8982] inactive_anon 0 [ 235.387167][ T8982] active_anon 0 [ 235.387174][ T8982] inactive_file 3809280 [ 235.387180][ T8982] active_file 0 [ 235.387208][ T8982] unevictable 67149824 [ 235.387215][ T8982] hierarchical_memory_limit 314572800 [ 235.387223][ T8982] hierarchical_memsw_limit 9223372036854771712 [ 235.395465][T18322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.398806][ T8982] total_cache 67149824 [ 235.425541][T18322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.429071][ T8982] total_rss 3801088 [ 235.437288][T18322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.441247][ T8982] total_shmem 0 [ 235.441256][ T8982] total_mapped_file 0 [ 235.453788][T18322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.461178][ T8982] total_dirty 0 [ 235.461189][ T8982] total_writeback 0 [ 235.461197][ T8982] total_workingset_refault_anon 1021 [ 235.461206][ T8982] total_workingset_refault_file 0 [ 235.464853][T18322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.468597][ T8982] total_swap 524288 [ 235.468606][ T8982] total_swapcached 0 [ 235.477886][T18323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.480171][ T8982] total_pgpgin 215164 [ 235.484142][T18323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.489214][ T8982] total_pgpgout 197840 [ 235.489223][ T8982] total_pgfault 215628 [ 235.494459][T18323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.502350][ T8982] total_pgmajfault 227 [ 235.502360][ T8982] total_inactive_anon 0 [ 235.555007][ T8982] total_active_anon 0 [ 235.559013][ T8982] total_inactive_file 3809280 [ 235.563887][ T8982] total_active_file 0 [ 235.567845][ T8982] total_unevictable 67149824 [ 235.572477][ T8982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5703,pid=18222,uid=0 [ 235.587216][ T8982] Memory cgroup out of memory: Killed process 18222 (syz.6.5703) total-vm:96016kB, anon-rss:4972kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 235.733467][T18342] syzkaller0: entered allmulticast mode [ 235.739576][T18342] syzkaller0: entered promiscuous mode [ 235.747811][T18342] syzkaller0 (unregistering): left allmulticast mode [ 235.754697][T18342] syzkaller0 (unregistering): left promiscuous mode [ 236.291658][T18383] loop0: detected capacity change from 0 to 1024 [ 236.332744][T18383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.402579][T18382] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.5769: Allocating blocks 449-513 which overlap fs metadata [ 236.435296][T18381] EXT4-fs (loop0): pa ffff888107823e00: logic 48, phys. 177, len 21 [ 236.443373][T18381] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 236.467168][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.497395][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 236.497409][ T29] audit: type=1326 audit(236.470:12644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.543338][ T29] audit: type=1326 audit(236.510:12645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.566418][ T29] audit: type=1326 audit(236.510:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.589450][ T29] audit: type=1326 audit(236.510:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.612501][ T29] audit: type=1326 audit(236.510:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.635529][ T29] audit: type=1326 audit(236.510:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.658604][ T29] audit: type=1326 audit(236.510:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.681657][ T29] audit: type=1326 audit(236.510:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.704622][ T29] audit: type=1326 audit(236.510:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.727649][ T29] audit: type=1326 audit(236.510:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.4.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 236.894425][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5780'. [ 236.962071][T18420] netlink: 'syz.6.5783': attribute type 7 has an invalid length. [ 236.969855][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5783'. [ 238.184758][T18484] netlink: 'syz.6.5811': attribute type 10 has an invalid length. [ 238.192691][T18484] __nla_validate_parse: 1 callbacks suppressed [ 238.192703][T18484] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5811'. [ 238.237589][T18484] ipvlan2: entered promiscuous mode [ 238.264346][T18484] bridge0: port 1(ipvlan2) entered blocking state [ 238.270865][T18484] bridge0: port 1(ipvlan2) entered disabled state [ 238.279878][T18484] ipvlan2: entered allmulticast mode [ 238.285418][T18484] bridge0: entered allmulticast mode [ 238.291319][T18484] ipvlan2: left allmulticast mode [ 238.296361][T18484] bridge0: left allmulticast mode [ 238.311231][T18488] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 238.323016][T18488] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 238.346283][T18492] bridge: RTM_NEWNEIGH with invalid ether address [ 238.442165][T18504] loop1: detected capacity change from 0 to 2048 [ 238.502268][T18514] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5825'. [ 238.548487][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5826'. [ 238.595308][T18519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5827'. [ 238.631783][T18528] netlink: 660 bytes leftover after parsing attributes in process `syz.4.5831'. [ 238.707618][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5822'. [ 238.741122][T18537] vlan3: entered allmulticast mode [ 239.055760][T18561] netlink: 'syz.6.5846': attribute type 7 has an invalid length. [ 239.063583][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5846'. [ 239.392645][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5858'. [ 239.417421][T18587] ip6gre1: entered allmulticast mode [ 239.457835][T18592] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5861'. [ 239.516636][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5864'. [ 240.254419][T18658] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 240.608814][T18689] team1: entered promiscuous mode [ 240.613983][T18689] team1: entered allmulticast mode [ 240.619400][T18689] 8021q: adding VLAN 0 to HW filter on device team1 [ 241.175485][T18747] loop1: detected capacity change from 0 to 1024 [ 241.182339][T18747] EXT4-fs: Ignoring removed nobh option [ 241.187981][T18747] EXT4-fs: inline encryption not supported [ 241.240625][T18747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.341416][T18747] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.5922: Allocating blocks 385-513 which overlap fs metadata [ 241.408175][T18747] EXT4-fs (loop1): pa ffff888107823ee0: logic 16, phys. 129, len 24 [ 241.416277][T18747] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 241.430550][T18747] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 241.442821][T18747] EXT4-fs (loop1): This should not happen!! Data will be lost [ 241.442821][T18747] [ 241.452510][T18747] EXT4-fs (loop1): Total free blocks count 0 [ 241.458493][T18747] EXT4-fs (loop1): Free/Dirty block details [ 241.464430][T18747] EXT4-fs (loop1): free_blocks=128 [ 241.469756][T18747] EXT4-fs (loop1): dirty_blocks=0 [ 241.474895][T18747] EXT4-fs (loop1): Block reservation details [ 241.481016][T18747] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 241.551780][ T4693] net_ratelimit: 34 callbacks suppressed [ 241.551796][ T4693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.552851][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 241.552866][ T29] audit: type=1400 audit(241.530:12726): avc: denied { execute } for pid=18778 comm="syz.1.5933" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=65338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 241.567007][ T4693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.605793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.669586][T18792] ip6gre0: entered promiscuous mode [ 241.690259][T18792] team0: Port device ip6gre0 added [ 241.726765][ T29] audit: type=1326 audit(241.700:12727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.4.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 241.750313][T18797] loop1: detected capacity change from 0 to 1024 [ 241.764642][T18797] EXT4-fs: Ignoring removed bh option [ 241.776372][T18802] team1: entered promiscuous mode [ 241.781468][T18802] team1: entered allmulticast mode [ 241.788176][T18802] 8021q: adding VLAN 0 to HW filter on device team1 [ 241.797052][T18797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.845174][ T29] audit: type=1326 audit(241.700:12728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.4.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89893f2005 code=0x7ffc0000 [ 241.868284][ T29] audit: type=1326 audit(241.700:12729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.4.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 241.891550][ T29] audit: type=1326 audit(241.700:12730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.4.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89893f2005 code=0x7ffc0000 [ 241.914619][ T29] audit: type=1326 audit(241.700:12731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.4.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f89893bf749 code=0x7ffc0000 [ 241.937656][ T29] audit: type=1326 audit(241.700:12732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.4.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89893f2005 code=0x7ffc0000 [ 241.960681][ T29] audit: type=1326 audit(241.710:12733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.4.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89893f2005 code=0x7ffc0000 [ 241.983703][ T29] audit: type=1326 audit(241.710:12734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.4.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89893f2005 code=0x7ffc0000 [ 242.006720][ T29] audit: type=1326 audit(241.710:12735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18789 comm="syz.4.5939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89893f2005 code=0x7ffc0000 [ 242.032064][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.084811][T18808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.093139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.399778][T18833] dvmrp6: entered allmulticast mode [ 242.601895][T18846] tipc: Enabling of bearer rejected, failed to enable media [ 243.386792][T18897] netlink: 'syz.0.5985': attribute type 7 has an invalid length. [ 243.394673][T18897] __nla_validate_parse: 11 callbacks suppressed [ 243.394690][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5985'. [ 243.604295][T18903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18903 comm=syz.0.5987 [ 244.123969][T18945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6001'. [ 244.145949][T18947] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 244.186132][T18949] loop0: detected capacity change from 0 to 1024 [ 244.201994][T18949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.235995][T18949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.262549][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.694810][T18961] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6011'. [ 245.351362][T19012] netlink: 'syz.6.6033': attribute type 16 has an invalid length. [ 245.359229][T19012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6033'. [ 245.450876][T19016] netlink: 'syz.1.6034': attribute type 39 has an invalid length. [ 245.554474][T19025] netlink: 'syz.6.6038': attribute type 13 has an invalid length. [ 245.769091][T19036] vlan3: entered allmulticast mode [ 245.775504][T19036] dummy0: entered allmulticast mode [ 245.871621][T19042] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 245.979929][T19051] loop0: detected capacity change from 0 to 512 [ 245.994953][T19051] EXT4-fs: Ignoring removed orlov option [ 246.000718][T19051] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.015322][T19051] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.6050: corrupted in-inode xattr: e_value size too large [ 246.029621][T19051] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.6050: couldn't read orphan inode 15 (err -117) [ 246.042567][T19051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.079858][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.152404][T19066] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6057'. [ 246.515218][T19100] loop1: detected capacity change from 0 to 256 [ 246.650450][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 246.650466][ T29] audit: type=1400 audit(246.630:13327): avc: denied { mounton } for pid=19108 comm="syz.1.6072" path="/file0" dev="ramfs" ino=66814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 246.956254][T19124] netlink: 'syz.5.6078': attribute type 30 has an invalid length. [ 247.160290][ T29] audit: type=1326 audit(247.120:13328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.6.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 247.183424][ T29] audit: type=1326 audit(247.120:13329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.6.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 247.206530][ T29] audit: type=1326 audit(247.120:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.6.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 247.229556][ T29] audit: type=1326 audit(247.120:13331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.6.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 247.252633][ T29] audit: type=1326 audit(247.120:13332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.6.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 247.276109][ T29] audit: type=1326 audit(247.120:13333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.6.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 247.299178][ T29] audit: type=1326 audit(247.120:13334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.6.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 247.322487][ T29] audit: type=1326 audit(247.120:13335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.6.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 247.345472][ T29] audit: type=1326 audit(247.120:13336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19148 comm="syz.6.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f68bf75f749 code=0x7ffc0000 [ 247.653922][T19201] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6098'. [ 248.004058][T19274] ref_ctr_offset mismatch. inode: 0x11d9 offset: 0x0 ref_ctr_offset(old): 0x72 ref_ctr_offset(new): 0x0 [ 248.798935][T19339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6124'. [ 248.924190][T19357] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6128'. [ 248.958658][T19366] netlink: 'syz.4.6130': attribute type 16 has an invalid length. [ 248.966623][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6130'. [ 248.975661][T19366] batadv0: left allmulticast mode [ 248.980795][T19366] batadv0: left promiscuous mode [ 248.986030][T19366] bridge0: port 2(batadv0) entered disabled state [ 248.993532][T19366] team0: left allmulticast mode [ 248.998470][T19366] bridge5: left allmulticast mode [ 249.003592][T19366] team0: left promiscuous mode [ 249.008532][T19366] bridge5: left promiscuous mode [ 249.013704][T19366] bridge0: port 1(team0) entered disabled state [ 249.080856][T19382] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6136'. [ 249.089821][T19382] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6136'. [ 249.099381][T19382] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6136'. [ 249.108414][T19382] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6136'. [ 249.154294][T19389] tipc: Started in network mode [ 249.159194][T19389] tipc: Node identity ac14140f, cluster identity 4711 [ 249.166563][T19389] tipc: New replicast peer: 255.255.255.83 [ 249.172429][T19389] tipc: Enabled bearer , priority 10 [ 249.203470][T19393] blktrace: Concurrent blktraces are not allowed on loop8 [ 249.248002][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6143'. [ 249.710548][T19440] Falling back ldisc for ptm0. [ 250.200256][ T3485] tipc: Node number set to 2886997007 [ 250.308691][T19479] loop1: detected capacity change from 0 to 128 [ 250.439292][T19491] netlink: 'syz.6.6185': attribute type 1 has an invalid length. [ 250.447853][T19489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6184'. [ 250.466141][T19491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.541071][T19491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.551533][T19491] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 250.562612][T19491] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 250.763170][T19527] netlink: 'syz.0.6199': attribute type 13 has an invalid length. [ 250.777198][T19527] syz_tun: entered allmulticast mode [ 250.783063][T19526] syz_tun: left allmulticast mode [ 251.485469][T19592] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.6221'. [ 251.513108][T19593] loop1: detected capacity change from 0 to 512 [ 251.534808][T19593] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.6225: inode has both inline data and extents flags [ 251.549158][T19593] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6225: couldn't read orphan inode 15 (err -117) [ 251.572714][T19593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.668047][ T29] kauditd_printk_skb: 1408 callbacks suppressed [ 251.668062][ T29] audit: type=1400 audit(251.640:14745): avc: denied { mounton } for pid=19591 comm="syz.1.6225" path="/1118/file1/bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 251.740121][T19604] loop1: detected capacity change from 512 to 64 [ 251.747049][T19593] bio_check_eod: 99 callbacks suppressed [ 251.747062][T19593] syz.1.6225: attempt to access beyond end of device [ 251.747062][T19593] loop1: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 251.766200][T19593] Buffer I/O error on dev loop1, logical block 37, lost sync page write [ 251.777682][T19593] EXT4-fs error (device loop1): ext4_splice_branch:472: inode #18: block 37: comm syz.1.6225: IO error syncing itable block [ 251.793514][T19593] EXT4-fs error (device loop1): ext4_check_bdev_write_error:227: comm syz.1.6225: Error while async write back metadata [ 251.815030][T19593] syz.1.6225: attempt to access beyond end of device [ 251.815030][T19593] loop1: rw=8390659, sector=418, nr_sectors = 2 limit=64 [ 251.833067][T19593] EXT4-fs (loop1): discard request in group:0 block:208 count:1 failed with -5 [ 251.842961][T19593] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: IO failure [ 251.852595][T19593] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 18: block 209:freeing already freed block (bit 208); block bitmap corrupt. [ 251.867209][T19593] EXT4-fs (loop1): pa ffff888107a84af0: logic 72, phys. 209, len 23 [ 251.875423][T19593] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 23, pa_free 22 [ 251.880278][T19621] netlink: 'syz.6.6233': attribute type 1 has an invalid length. [ 251.886245][T19593] syz.1.6225: attempt to access beyond end of device [ 251.886245][T19593] loop1: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 251.906893][T19593] Buffer I/O error on dev loop1, logical block 37, lost sync page write [ 251.915608][T19593] EXT4-fs error (device loop1): ext4_free_data:978: inode #18: block 37: comm syz.1.6225: IO error syncing itable block [ 251.928406][T19593] EXT4-fs error (device loop1): ext4_check_bdev_write_error:227: comm syz.1.6225: Error while async write back metadata [ 251.941434][T19593] syz.1.6225: attempt to access beyond end of device [ 251.941434][T19593] loop1: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 251.947565][T19621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.954742][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 251.972460][T19593] Buffer I/O error on device loop1, logical block 41 [ 251.979127][T19593] Buffer I/O error on device loop1, logical block 42 [ 251.985779][T19593] Buffer I/O error on device loop1, logical block 43 [ 251.992431][T19593] Buffer I/O error on device loop1, logical block 44 [ 251.999214][T19593] syz.1.6225: attempt to access beyond end of device [ 251.999214][T19593] loop1: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 252.012488][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 252.023656][T19593] Buffer I/O error on device loop1, logical block 49 [ 252.030320][T19593] Buffer I/O error on device loop1, logical block 50 [ 252.036985][T19593] Buffer I/O error on device loop1, logical block 51 [ 252.043646][T19593] Buffer I/O error on device loop1, logical block 52 [ 252.050449][T19593] syz.1.6225: attempt to access beyond end of device [ 252.050449][T19593] loop1: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 252.063798][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 252.075175][T19593] Buffer I/O error on device loop1, logical block 57 [ 252.081935][T19593] Buffer I/O error on device loop1, logical block 58 [ 252.088807][T19593] syz.1.6225: attempt to access beyond end of device [ 252.088807][T19593] loop1: rw=2049, sector=130, nr_sectors = 8 limit=64 [ 252.102217][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 252.113642][T19593] syz.1.6225: attempt to access beyond end of device [ 252.113642][T19593] loop1: rw=2049, sector=90, nr_sectors = 8 limit=64 [ 252.114822][T19621] bond2 (unregistering): Released all slaves [ 252.126875][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 252.126941][T19593] syz.1.6225: attempt to access beyond end of device [ 252.126941][T19593] loop1: rw=2049, sector=106, nr_sectors = 8 limit=64 [ 252.157334][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 252.168663][T19593] syz.1.6225: attempt to access beyond end of device [ 252.168663][T19593] loop1: rw=2049, sector=122, nr_sectors = 8 limit=64 [ 252.182058][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 252.194112][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 252.206901][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 252.210733][T19625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19625 comm=syz.0.6234 [ 252.218775][T19593] EXT4-fs warning (device loop1): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 252.291369][T19631] loop0: detected capacity change from 0 to 512 [ 252.303129][T19631] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 252.315351][T19631] EXT4-fs (loop0): invalid journal inode [ 252.321792][T19631] EXT4-fs (loop0): can't get journal size [ 252.328188][T19631] EXT4-fs (loop0): 1 truncate cleaned up [ 252.334564][T19631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.347415][ T29] audit: type=1400 audit(252.320:14746): avc: denied { remove_name } for pid=3318 comm="syz-executor" name="bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.369716][ T29] audit: type=1400 audit(252.320:14747): avc: denied { unlink } for pid=3318 comm="syz-executor" name="bus" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.372279][ T3318] Buffer I/O error on dev loop1, logical block 36, lost sync page write [ 252.407097][ T3318] EXT4-fs error (device loop1): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz-executor: IO error syncing itable block [ 252.443699][ T3318] EXT4-fs error (device loop1) in ext4_delete_entry:2737: IO failure [ 252.491402][ T29] audit: type=1400 audit(252.470:14748): avc: denied { map } for pid=19630 comm="syz.0.6239" path="/1265/file0/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.721024][ T29] audit: type=1400 audit(252.670:14749): avc: denied { getopt } for pid=19646 comm="syz.5.6245" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.863160][T19653] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=19653 comm=syz.4.6244 [ 253.003305][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.196467][ T8627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.217281][ T29] audit: type=1326 audit(253.190:14750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19670 comm="syz.5.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 253.271693][ T29] audit: type=1326 audit(253.190:14751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19670 comm="syz.5.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 253.294728][ T29] audit: type=1326 audit(253.190:14752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19670 comm="syz.5.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 253.317805][ T29] audit: type=1326 audit(253.190:14753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19670 comm="syz.5.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 253.341075][ T29] audit: type=1326 audit(253.200:14754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19670 comm="syz.5.6257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 253.801881][T19708] __nla_validate_parse: 7 callbacks suppressed [ 253.801896][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6270'. [ 253.861776][T19677] chnl_net:caif_netlink_parms(): no params data found [ 254.071806][T19677] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.078980][T19677] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.110733][T19677] bridge_slave_0: entered allmulticast mode [ 254.137924][T19677] bridge_slave_0: entered promiscuous mode [ 254.170441][T19677] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.177529][T19677] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.219747][T19677] bridge_slave_1: entered allmulticast mode [ 254.241106][T19677] bridge_slave_1: entered promiscuous mode [ 254.283954][T19677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.324393][T19677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.428624][T19677] team0: Port device team_slave_0 added [ 254.450927][T19738] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19738 comm=syz.6.6281 [ 254.474562][T19677] team0: Port device team_slave_1 added [ 254.504537][T19677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.511568][T19677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.537549][T19677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.567417][T19677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.574498][T19677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.600569][T19677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.635134][T19677] hsr_slave_0: entered promiscuous mode [ 254.642500][T19677] hsr_slave_1: entered promiscuous mode [ 254.649418][T19677] debugfs: 'hsr0' already exists in 'hsr' [ 254.655224][T19677] Cannot create hsr debugfs directory [ 254.798498][T19677] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 254.812597][T19677] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 254.815730][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6288'. [ 254.831703][T19677] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 254.850444][T19677] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 254.951696][T19677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.997117][T19677] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.019016][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.026115][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.043385][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.050478][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.563250][T19677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.803611][T19803] netlink: 'syz.4.6297': attribute type 4 has an invalid length. [ 255.945258][T19677] veth0_vlan: entered promiscuous mode [ 255.962996][T19677] veth1_vlan: entered promiscuous mode [ 256.021127][T19677] veth0_macvtap: entered promiscuous mode [ 256.040744][T19677] veth1_macvtap: entered promiscuous mode [ 256.063051][T19833] veth12: entered promiscuous mode [ 256.068204][T19833] veth12: entered allmulticast mode [ 256.111783][T19677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.145759][T19831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.155948][T19677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.166969][ T4671] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.178690][ T4671] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.201022][T19835] IPVS: dh: FWM 3 0x00000003 - no destination available [ 256.211316][ T4671] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.240044][ T4706] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.414155][T19862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6320'. [ 256.580391][T19873] netlink: 'syz.6.6326': attribute type 4 has an invalid length. [ 257.179574][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6339'. [ 257.238874][T19916] netlink: 'syz.5.6343': attribute type 4 has an invalid length. [ 257.415704][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 257.415721][ T29] audit: type=1326 audit(257.390:14964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 257.506080][ T29] audit: type=1326 audit(257.390:14965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa45902005 code=0x7ffc0000 [ 257.529097][ T29] audit: type=1326 audit(257.390:14966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 257.552113][ T29] audit: type=1326 audit(257.390:14967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 257.575069][ T29] audit: type=1326 audit(257.390:14968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa45902005 code=0x7ffc0000 [ 257.598028][ T29] audit: type=1326 audit(257.390:14969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa45902005 code=0x7ffc0000 [ 257.621015][ T29] audit: type=1326 audit(257.410:14970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa45902005 code=0x7ffc0000 [ 257.644013][ T29] audit: type=1326 audit(257.410:14971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa45902005 code=0x7ffc0000 [ 257.666987][ T29] audit: type=1326 audit(257.430:14972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa45902005 code=0x7ffc0000 [ 257.690102][ T29] audit: type=1326 audit(257.430:14973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.5.6347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7faa458cf749 code=0x7ffc0000 [ 258.245240][T19950] bridge0: port 3(gretap0) entered blocking state [ 258.252009][T19950] bridge0: port 3(gretap0) entered disabled state [ 258.261493][T19950] gretap0: entered allmulticast mode [ 258.274455][T19950] gretap0: entered promiscuous mode [ 258.279891][T19950] bridge0: port 3(gretap0) entered blocking state [ 258.286498][T19950] bridge0: port 3(gretap0) entered forwarding state [ 258.370330][T19957] gretap0: left allmulticast mode [ 258.375438][T19957] gretap0: left promiscuous mode [ 258.380635][T19957] bridge0: port 3(gretap0) entered disabled state [ 258.745088][T19964] Set syz1 is full, maxelem 65536 reached [ 258.868542][T19985] loop7: detected capacity change from 0 to 4096 [ 258.875529][T19985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.891578][T19987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6372'. [ 258.901445][T19985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.930873][T19985] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 259.033857][T19677] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.055897][T20005] ================================================================== [ 259.063986][T20005] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 259.071866][T20005] [ 259.074176][T20005] write to 0xffff8881301ae440 of 8 bytes by task 20006 on cpu 0: [ 259.081875][T20005] cpu_map_kthread_run+0x529/0x1560 [ 259.087058][T20005] kthread+0x489/0x510 [ 259.091120][T20005] ret_from_fork+0x149/0x290 [ 259.095702][T20005] ret_from_fork_asm+0x1a/0x30 [ 259.100458][T20005] [ 259.102767][T20005] read to 0xffff8881301ae440 of 8 bytes by task 20005 on cpu 1: [ 259.110380][T20005] bq_flush_to_queue+0x124/0x350 [ 259.115307][T20005] cpu_map_enqueue+0x1a6/0x1c0 [ 259.120063][T20005] xdp_do_redirect_frame+0x27c/0x560 [ 259.125331][T20005] bpf_test_run_xdp_live+0x98c/0x11d0 [ 259.130693][T20005] bpf_prog_test_run_xdp+0x525/0x970 [ 259.135970][T20005] bpf_prog_test_run+0x204/0x340 [ 259.140894][T20005] __sys_bpf+0x4c0/0x7c0 [ 259.145120][T20005] __x64_sys_bpf+0x41/0x50 [ 259.149532][T20005] x64_sys_call+0x28e1/0x3000 [ 259.154200][T20005] do_syscall_64+0xca/0x2b0 [ 259.158697][T20005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.164573][T20005] [ 259.166877][T20005] value changed: 0xffff8881511af070 -> 0x0000000000000000 [ 259.173964][T20005] [ 259.176267][T20005] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 259.182405][T20005] CPU: 1 UID: 0 PID: 20005 Comm: syz.0.6380 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 259.193761][T20005] Tainted: [W]=WARN [ 259.197543][T20005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.207584][T20005] ================================================================== [ 259.483080][T16881] syz_tun (unregistering): left allmulticast mode [ 259.586708][ T4704] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.654367][ T4704] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.716437][ T4704] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.736720][T11226] syz_tun (unregistering): left allmulticast mode [ 259.772798][ T4704] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.841748][ T4704] bridge_slave_1: left allmulticast mode [ 259.847386][ T4704] bridge_slave_1: left promiscuous mode [ 259.853129][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.860701][ T4704] bridge_slave_0: left allmulticast mode [ 259.866317][ T4704] bridge_slave_0: left promiscuous mode [ 259.872043][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.962193][ T4704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.972361][ T4704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.982152][ T4704] bond0 (unregistering): Released all slaves [ 260.035702][ T4704] hsr_slave_0: left promiscuous mode [ 260.041430][ T4704] hsr_slave_1: left promiscuous mode [ 260.046908][ T4704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.054377][ T4704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.061940][ T4704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.069326][ T4704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.079868][ T4704] veth1_macvtap: left promiscuous mode [ 260.086253][ T4704] veth0_macvtap: left promiscuous mode [ 260.091787][ T4704] veth1_vlan: left promiscuous mode [ 260.096986][ T4704] veth0_vlan: left promiscuous mode [ 260.159410][ T4704] team0 (unregistering): Port device team_slave_1 removed [ 260.168449][ T4704] team0 (unregistering): Port device team_slave_0 removed [ 260.679079][ T4704] bond1 (unregistering): (slave ip6gretap0): Releasing active interface [ 260.741139][ T4704] team0: Port device bridge2 removed [ 260.921823][ T4704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.931082][ T4704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.939931][ T4704] bond0 (unregistering): Released all slaves [ 260.947891][ T4704] bond1 (unregistering): Released all slaves [ 260.955675][ T4704] bond2 (unregistering): Released all slaves [ 261.017683][ T4704] hsr_slave_0: left promiscuous mode [ 261.055617][ T4704] team0 (unregistering): Port device team_slave_1 removed [ 261.065514][ T4704] team0 (unregistering): Port device team_slave_0 removed [ 261.293284][ T4704] IPVS: stop unused estimator thread 0...