last executing test programs: 1m16.872048287s ago: executing program 1 (id=375): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0xffffffffffffffff) unshare(0x42000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") 1m16.614074547s ago: executing program 1 (id=380): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x56, 0x2000, 0xfffa, {0x0, 0x1a}, {0x1, 0x400}, @const={0x7, {0x0, 0xfffc, 0x0, 0x1}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m15.723621756s ago: executing program 1 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1m15.680686716s ago: executing program 1 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x484, &(0x7f0000000480), 0x1, 0xb95, &(0x7f00000017c0)="$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") 1m15.548277356s ago: executing program 1 (id=417): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010000000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="0006f80000000000140012800b00010067656e"], 0x48}, 0x1, 0x2}, 0x0) 1m15.336992725s ago: executing program 1 (id=422): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) link(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 1m15.292760906s ago: executing program 32 (id=422): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) link(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 58.751437454s ago: executing program 3 (id=854): r0 = syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, 0x0, 0x0, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 58.723717444s ago: executing program 3 (id=856): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x487a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 58.621865194s ago: executing program 3 (id=859): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7c1, &(0x7f0000001a00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1, 0x0, 0xb2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 58.525489204s ago: executing program 3 (id=862): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2804, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x8000d, 0x6a52, 0xfffffc00}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) 58.361285594s ago: executing program 3 (id=869): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000010"], 0x24}}, 0x0) 58.005645183s ago: executing program 3 (id=879): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020200f0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000eaff850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) flock(r1, 0x2) dup3(r1, r0, 0x0) 57.957252793s ago: executing program 33 (id=879): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020200f0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000eaff850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) flock(r1, 0x2) dup3(r1, r0, 0x0) 4.804076016s ago: executing program 6 (id=2537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {}, [], {}, [], {0x10, 0x6}}, 0x24, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103) 4.751616106s ago: executing program 6 (id=2540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r2, 0xffffd000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.655113196s ago: executing program 6 (id=2545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2c}}, 0x0) 4.609742336s ago: executing program 6 (id=2548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000de080000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 4.570523046s ago: executing program 6 (id=2552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.816403675s ago: executing program 2 (id=2588): move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0xb, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x10000000, 0x100000, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3.466093225s ago: executing program 4 (id=2594): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x4003, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='mm_vmscan_lru_isolate\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.179113725s ago: executing program 5 (id=2602): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r2) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) 3.160120804s ago: executing program 0 (id=2603): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_MOVE(0x4, r1, r0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) 3.122483384s ago: executing program 0 (id=2604): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.origin\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 327.800901ms ago: executing program 6 (id=2605): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000480)=[{r2, 0x80}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 327.327751ms ago: executing program 4 (id=2606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 326.94992ms ago: executing program 0 (id=2615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 326.149681ms ago: executing program 5 (id=2607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 325.600901ms ago: executing program 2 (id=2608): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='N'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 286.459811ms ago: executing program 4 (id=2609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="176f9e5cba39", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x61, 0x0, 0x0, 0x2, 0x0, @multicast2, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x0, 0x7}}}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r2) 285.821901ms ago: executing program 0 (id=2610): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300}) 252.80596ms ago: executing program 5 (id=2611): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 252.09827ms ago: executing program 2 (id=2612): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c00000020000180140002006d61637674617030000000000000000008000100", @ANYRES32=r5], 0x34}}, 0x0) 237.762111ms ago: executing program 0 (id=2613): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(0x0, &(0x7f00000000c0)={0xba3f, 0x5, 0xd60a, 0x1, 0x3, 0x1ff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 236.951161ms ago: executing program 4 (id=2614): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) write(r2, &(0x7f0000000740)='foo', 0x3) 215.421671ms ago: executing program 5 (id=2616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800060c}, 0x1c) listen(r0, 0x0) listen(r1, 0x0) 189.227361ms ago: executing program 4 (id=2617): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"}) 182.35861ms ago: executing program 5 (id=2618): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000080)='W', 0x1}], 0x1, 0x800be6b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 169.46963ms ago: executing program 2 (id=2619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10) sendmmsg(r2, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) close(r2) 148.296351ms ago: executing program 2 (id=2620): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) mount$tmpfs(0x0, 0x0, 0x0, 0x20020, &(0x7f0000000100)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 137.087231ms ago: executing program 4 (id=2621): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 126.763591ms ago: executing program 5 (id=2622): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, 0x0, 0x1800}}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) 71.365681ms ago: executing program 2 (id=2623): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 0s ago: executing program 0 (id=2624): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ptrace$pokeuser(0x6, r0, 0x358, 0x1000000) kernel console output (not intermixed with test programs): 2): mount failed [ 55.634994][ T5414] syzkaller0: entered promiscuous mode [ 55.652472][ T5402] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.668599][ T5402] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.680352][ T5402] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.704271][ T5402] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.771883][ T5427] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.830163][ T5427] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.859473][ T5427] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.909224][ T5427] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.963107][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.634'. [ 56.733813][ T5583] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 57.049632][ T5645] loop0: detected capacity change from 0 to 256 [ 57.062947][ T5645] FAT-fs (loop0): Directory bread(block 64) failed [ 57.069805][ T5645] FAT-fs (loop0): Directory bread(block 65) failed [ 57.076424][ T5645] FAT-fs (loop0): Directory bread(block 66) failed [ 57.083090][ T5645] FAT-fs (loop0): Directory bread(block 67) failed [ 57.090597][ T5645] FAT-fs (loop0): Directory bread(block 68) failed [ 57.097196][ T5645] FAT-fs (loop0): Directory bread(block 69) failed [ 57.104038][ T5645] FAT-fs (loop0): Directory bread(block 70) failed [ 57.110859][ T5645] FAT-fs (loop0): Directory bread(block 71) failed [ 57.117469][ T5645] FAT-fs (loop0): Directory bread(block 72) failed [ 57.124140][ T5645] FAT-fs (loop0): Directory bread(block 73) failed [ 57.127110][ T5647] netlink: 'syz.4.668': attribute type 4 has an invalid length. [ 57.140557][ T5645] syz.0.667: attempt to access beyond end of device [ 57.140557][ T5645] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 57.758237][ T5656] vxcan1: entered promiscuous mode [ 57.763488][ T5656] vlan2: entered promiscuous mode [ 57.769794][ T5656] vxcan1: left promiscuous mode [ 57.923988][ T5667] bpf_get_probe_write_proto: 14 callbacks suppressed [ 57.924003][ T5667] syz.5.676[5667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.931281][ T5667] syz.5.676[5667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.942683][ T5667] syz.5.676[5667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.054080][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 58.054099][ T29] audit: type=1400 audit(1736768045.804:858): avc: denied { wake_alarm } for pid=5684 comm="syz.0.683" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.116187][ T5689] loop4: detected capacity change from 0 to 512 [ 58.131468][ T5689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.152508][ T5689] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.177314][ T29] audit: type=1400 audit(1736768045.924:859): avc: denied { setattr } for pid=5688 comm="syz.4.685" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.200153][ T5689] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.685: corrupted inode contents [ 58.213016][ T5689] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.685: mark_inode_dirty error [ 58.225120][ T5689] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.685: corrupted inode contents [ 58.228835][ T5701] tipc: Started in network mode [ 58.237763][ T5702] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.685: corrupted inode contents [ 58.241782][ T5701] tipc: Node identity ac14140f, cluster identity 4711 [ 58.254102][ T5702] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.685: mark_inode_dirty error [ 58.260967][ T5701] tipc: New replicast peer: 10.1.1.2 [ 58.272833][ T5702] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.685: corrupted inode contents [ 58.276630][ T5701] tipc: Enabled bearer , priority 10 [ 58.320328][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.376645][ T5710] loop4: detected capacity change from 0 to 512 [ 58.383778][ T5710] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 58.392997][ T5710] EXT4-fs (loop4): invalid journal inode [ 58.398798][ T5710] EXT4-fs (loop4): can't get journal size [ 58.422608][ T5710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 58.430713][ T5710] System zones: 1-12, 13-13 [ 58.436890][ T5710] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.694: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 58.454498][ T5710] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.694: couldn't read orphan inode 15 (err -117) [ 58.467650][ T5710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.485374][ T29] audit: type=1400 audit(1736768046.244:860): avc: denied { load_policy } for pid=5709 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.487964][ T5710] SELinux: failed to load policy [ 58.568573][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.641760][ T5726] __nla_validate_parse: 2 callbacks suppressed [ 58.641779][ T5726] netlink: 76 bytes leftover after parsing attributes in process `syz.0.701'. [ 58.689235][ T5728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.702'. [ 58.756661][ T29] audit: type=1326 audit(1736768046.504:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 58.781162][ T29] audit: type=1326 audit(1736768046.504:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 58.804652][ T29] audit: type=1326 audit(1736768046.514:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 58.827971][ T29] audit: type=1326 audit(1736768046.514:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 58.851222][ T29] audit: type=1326 audit(1736768046.514:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 58.874535][ T29] audit: type=1326 audit(1736768046.514:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 58.897832][ T29] audit: type=1326 audit(1736768046.514:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 58.985763][ T5751] loop4: detected capacity change from 0 to 2048 [ 59.019526][ T5751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.068296][ T5764] netlink: 76 bytes leftover after parsing attributes in process `syz.5.717'. [ 59.087311][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.269103][ T5427] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.285727][ T5427] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.299213][ T5427] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.319167][ T5777] loop5: detected capacity change from 0 to 256 [ 59.338575][ T5427] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.362983][ T5777] FAT-fs (loop5): Directory bread(block 64) failed [ 59.369691][ T5777] FAT-fs (loop5): Directory bread(block 65) failed [ 59.380205][ T5777] FAT-fs (loop5): Directory bread(block 66) failed [ 59.387142][ T5777] FAT-fs (loop5): Directory bread(block 67) failed [ 59.393781][ T5777] FAT-fs (loop5): Directory bread(block 68) failed [ 59.400464][ T5777] FAT-fs (loop5): Directory bread(block 69) failed [ 59.408923][ T9] tipc: Node number set to 2886997007 [ 59.414580][ T5777] FAT-fs (loop5): Directory bread(block 70) failed [ 59.423184][ T5777] FAT-fs (loop5): Directory bread(block 71) failed [ 59.430946][ T5777] FAT-fs (loop5): Directory bread(block 72) failed [ 59.447415][ T5777] FAT-fs (loop5): Directory bread(block 73) failed [ 59.516350][ T5777] syz.5.722: attempt to access beyond end of device [ 59.516350][ T5777] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 59.590275][ T5795] loop5: detected capacity change from 0 to 512 [ 59.639178][ T5795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.668366][ T5795] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.775128][ T4790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.933284][ T5824] loop3: detected capacity change from 0 to 256 [ 59.957314][ T5824] FAT-fs (loop3): Directory bread(block 64) failed [ 59.964519][ T5824] FAT-fs (loop3): Directory bread(block 65) failed [ 59.971821][ T5824] FAT-fs (loop3): Directory bread(block 66) failed [ 59.978985][ T5824] FAT-fs (loop3): Directory bread(block 67) failed [ 59.985779][ T5824] FAT-fs (loop3): Directory bread(block 68) failed [ 59.993288][ T5824] FAT-fs (loop3): Directory bread(block 69) failed [ 59.999962][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.743'. [ 60.011207][ T5824] FAT-fs (loop3): Directory bread(block 70) failed [ 60.029076][ T5824] FAT-fs (loop3): Directory bread(block 71) failed [ 60.044078][ T5824] FAT-fs (loop3): Directory bread(block 72) failed [ 60.054392][ T5824] FAT-fs (loop3): Directory bread(block 73) failed [ 60.127446][ T5824] syz.3.742: attempt to access beyond end of device [ 60.127446][ T5824] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 60.233631][ T5842] geneve0: entered allmulticast mode [ 60.347955][ T5850] sd 0:0:1:0: device reset [ 60.506927][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 60.529582][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 60.543387][ T5879] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 60.559602][ T5882] syz.5.755[5882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.559737][ T5882] syz.5.755[5882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.578886][ T5879] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 60.618580][ T5882] syz.5.755[5882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.622391][ T5882] Process accounting resumed [ 60.737372][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 60.808714][ T5907] syz.4.762 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.832456][ T5910] loop3: detected capacity change from 0 to 128 [ 60.848609][ T5910] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.849158][ T5914] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 60.877170][ T5910] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.906659][ T5910] xt_hashlimit: size too large, truncated to 1048576 [ 60.943642][ T5921] syz.2.768[5921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.943706][ T5921] syz.2.768[5921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.960513][ T5921] syz.2.768[5921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.977535][ T5922] loop4: detected capacity change from 0 to 256 [ 61.069336][ T5937] syz.0.772[5937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.072042][ T5933] netlink: 68 bytes leftover after parsing attributes in process `syz.2.771'. [ 61.592112][ T5981] loop5: detected capacity change from 0 to 512 [ 61.640661][ T5981] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.785: corrupted in-inode xattr: invalid ea_ino [ 61.654745][ T5981] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.785: couldn't read orphan inode 15 (err -117) [ 61.667856][ T5981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.682969][ T5981] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.785: path /72/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 61.758152][ T5993] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 61.795812][ T4790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.919545][ T6010] netlink: 'syz.3.794': attribute type 13 has an invalid length. [ 61.930011][ T6010] syz_tun: refused to change device tx_queue_len [ 61.936391][ T6010] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 62.142959][ T6036] netem: change failed [ 62.177751][ T6042] ALSA: seq fatal error: cannot create timer (-22) [ 62.559801][ T6067] loop2: detected capacity change from 0 to 8192 [ 62.625910][ T6083] sg_write: data in/out 1048540/17 bytes for SCSI command 0x0-- guessing data in; [ 62.625910][ T6083] program syz.4.825 not setting count and/or reply_len properly [ 62.644945][ T6082] loop2: detected capacity change from 0 to 128 [ 62.812961][ T6096] loop4: detected capacity change from 0 to 512 [ 62.840536][ T6096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.854379][ T6096] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.878474][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.987734][ T6110] loop4: detected capacity change from 0 to 128 [ 62.994655][ T6110] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.019397][ T6110] xt_hashlimit: size too large, truncated to 1048576 [ 63.167268][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 63.167285][ T29] audit: type=1326 audit(1736768050.914:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 63.196856][ T29] audit: type=1326 audit(1736768050.914:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 63.258386][ T29] audit: type=1326 audit(1736768050.974:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 63.281679][ T29] audit: type=1326 audit(1736768050.974:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 63.305095][ T29] audit: type=1326 audit(1736768050.974:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 63.328391][ T29] audit: type=1326 audit(1736768050.974:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 63.351748][ T29] audit: type=1326 audit(1736768050.974:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 63.375125][ T29] audit: type=1326 audit(1736768050.974:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 63.398354][ T29] audit: type=1326 audit(1736768050.974:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.5.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 63.421714][ T29] audit: type=1400 audit(1736768051.014:1001): avc: denied { mount } for pid=6124 comm="syz.5.845" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.422878][ T6125] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.498924][ T6125] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.549029][ T6125] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.595422][ T6146] loop4: detected capacity change from 0 to 1024 [ 63.603625][ T6146] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 63.604457][ T6125] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.613495][ T6146] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.637365][ T6146] EXT4-fs (loop4): invalid journal inode [ 63.643147][ T6146] EXT4-fs (loop4): can't get journal size [ 63.650956][ T6146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.670299][ T6150] __nla_validate_parse: 8 callbacks suppressed [ 63.670318][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.855'. [ 63.710423][ T6125] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.722298][ T6125] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.734115][ T6125] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.745770][ T6125] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.749324][ T6157] loop3: detected capacity change from 0 to 764 [ 63.826347][ T6165] loop3: detected capacity change from 0 to 1024 [ 63.860230][ T6165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.878739][ T6172] ALSA: seq fatal error: cannot create timer (-19) [ 63.886721][ T6165] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.862: missing EA_INODE flag [ 63.895600][ T6175] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 63.909990][ T6165] EXT4-fs (loop3): Remounting filesystem read-only [ 63.914228][ T6175] loop0: detected capacity change from 0 to 512 [ 63.916585][ T6165] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.942017][ T6175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.962657][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 63.971649][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 63.980667][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 63.982350][ T6175] EXT4-fs (loop0): 1 truncate cleaned up [ 63.989595][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 63.995882][ T6175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.013307][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 64.024994][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 64.041137][ T6175] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.048442][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 64.059826][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 64.098707][ T3567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.128066][ T6189] loop2: detected capacity change from 0 to 764 [ 64.175419][ T6192] bpf_get_probe_write_proto: 5 callbacks suppressed [ 64.175440][ T6192] syz.2.874[6192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.189785][ T6192] syz.2.874[6192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.203329][ T6192] syz.2.874[6192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.254316][ T6199] loop0: detected capacity change from 0 to 1024 [ 64.278878][ T6199] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.293088][ T6199] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.877: Invalid block bitmap block 0 in block_group 0 [ 64.342949][ T6199] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.877: Failed to acquire dquot type 0 [ 64.369047][ T6199] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.877: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.393733][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.428086][ T6199] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.877: Invalid inode bitmap blk 0 in block_group 0 [ 64.458098][ T3551] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:54: Failed to release dquot type 0 [ 64.460743][ T6199] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 64.506801][ T6199] EXT4-fs (loop0): 1 orphan inode deleted [ 64.527722][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.596882][ T6222] loop2: detected capacity change from 0 to 512 [ 64.605268][ T6224] loop5: detected capacity change from 0 to 128 [ 64.636946][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.640571][ T6199] syz.0.877 (6199) used greatest stack depth: 9528 bytes left [ 64.651286][ T6222] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.661759][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.732989][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.788423][ T6210] chnl_net:caif_netlink_parms(): no params data found [ 64.864725][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'. [ 64.986198][ T6242] loop2: detected capacity change from 0 to 8192 [ 65.137362][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.144564][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.145435][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.165462][ T6210] bridge_slave_0: entered allmulticast mode [ 65.174112][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.192433][ T6210] bridge_slave_0: entered promiscuous mode [ 65.212689][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.219882][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.248802][ T6210] bridge_slave_1: entered allmulticast mode [ 65.265679][ T6210] bridge_slave_1: entered promiscuous mode [ 65.323939][ T6210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.350683][ T6210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.408749][ T6210] team0: Port device team_slave_0 added [ 65.415399][ T6210] team0: Port device team_slave_1 added [ 65.454382][ T6210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.461460][ T6210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.487412][ T6210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.499357][ T6210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.506317][ T6210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.532478][ T6210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.572850][ T6210] hsr_slave_0: entered promiscuous mode [ 65.579426][ T6210] hsr_slave_1: entered promiscuous mode [ 65.585558][ T6210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.593714][ T6210] Cannot create hsr debugfs directory [ 65.609426][ T6269] vlan0: entered allmulticast mode [ 65.678908][ T6210] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.688081][ T6210] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.697118][ T6210] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 65.707855][ T6210] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.788274][ T6210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.806003][ T6210] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.816781][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.823899][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.835752][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.842947][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.919415][ T6294] bridge0: port 3(bond0) entered blocking state [ 65.925911][ T6294] bridge0: port 3(bond0) entered disabled state [ 65.933149][ T6294] bond0: entered allmulticast mode [ 65.938492][ T6294] bond_slave_0: entered allmulticast mode [ 65.944453][ T6294] bond_slave_1: entered allmulticast mode [ 65.951568][ T6294] bond0: entered promiscuous mode [ 65.956663][ T6294] bond_slave_0: entered promiscuous mode [ 65.962507][ T6294] bond_slave_1: entered promiscuous mode [ 65.968740][ T6294] bridge0: port 3(bond0) entered blocking state [ 65.975026][ T6294] bridge0: port 3(bond0) entered forwarding state [ 65.988497][ T6210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.043328][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.915'. [ 66.097504][ T6316] netlink: 'syz.5.917': attribute type 39 has an invalid length. [ 66.106338][ T6316] veth1_macvtap: left promiscuous mode [ 66.130403][ T6210] veth0_vlan: entered promiscuous mode [ 66.139027][ T6210] veth1_vlan: entered promiscuous mode [ 66.155016][ T6210] veth0_macvtap: entered promiscuous mode [ 66.162761][ T6210] veth1_macvtap: entered promiscuous mode [ 66.174025][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.184631][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.196195][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.208108][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.218685][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.229755][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.238464][ T6210] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.247191][ T6210] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.256159][ T6210] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.264922][ T6210] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.628499][ T6345] loop4: detected capacity change from 0 to 128 [ 66.636629][ T6345] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 66.652084][ T6345] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 66.660080][ T6345] FAT-fs (loop4): Filesystem has been set read-only [ 66.669042][ T6345] syz.4.928: attempt to access beyond end of device [ 66.669042][ T6345] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 66.683376][ T6345] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 66.691297][ T6345] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 66.699712][ T6345] syz.4.928: attempt to access beyond end of device [ 66.699712][ T6345] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.713577][ T6345] syz.4.928: attempt to access beyond end of device [ 66.713577][ T6345] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.757606][ T6351] vlan0: entered allmulticast mode [ 66.849425][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 66.865701][ T6362] loop0: detected capacity change from 0 to 2048 [ 66.879759][ T6362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.899033][ T6360] syzkaller1: entered promiscuous mode [ 66.904610][ T6360] syzkaller1: entered allmulticast mode [ 66.917663][ T6367] syz.2.936[6367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.917776][ T6367] syz.2.936[6367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.929300][ T6367] syz.2.936[6367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.929741][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.006544][ T6373] netlink: 76 bytes leftover after parsing attributes in process `syz.0.940'. [ 67.063980][ T6377] loop4: detected capacity change from 0 to 512 [ 67.071259][ T6377] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.083028][ T6377] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.942: Invalid block bitmap block 0 in block_group 0 [ 67.106621][ T6377] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 67.116307][ T6377] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.942: attempt to clear invalid blocks 983261 len 1 [ 67.134418][ T6377] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm syz.4.942: Invalid inode table block 0 in block_group 0 [ 67.148095][ T6377] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 67.158130][ T6377] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 67.166933][ T6377] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm syz.4.942: Invalid inode table block 0 in block_group 0 [ 67.180638][ T6377] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 67.191040][ T6377] EXT4-fs error (device loop4): ext4_truncate:4240: inode #11: comm syz.4.942: mark_inode_dirty error [ 67.201966][ T6386] loop0: detected capacity change from 0 to 512 [ 67.203005][ T6377] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 67.209318][ T6386] EXT4-fs: Ignoring removed oldalloc option [ 67.219246][ T6377] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm syz.4.942: Invalid inode table block 0 in block_group 0 [ 67.235570][ T6386] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.946: Parent and EA inode have the same ino 15 [ 67.236182][ T6377] EXT4-fs (loop4): 1 truncate cleaned up [ 67.249756][ T6386] EXT4-fs (loop0): Remounting filesystem read-only [ 67.254530][ T6377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.260545][ T6386] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 67.281444][ T6386] EXT4-fs (loop0): 1 orphan inode deleted [ 67.288120][ T6386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.300407][ T6386] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 67.300939][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.317620][ T6386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.345983][ T6386] netlink: 2 bytes leftover after parsing attributes in process `syz.0.946'. [ 67.347077][ T6390] vlan0: entered allmulticast mode [ 67.394574][ T6394] loop2: detected capacity change from 0 to 1024 [ 67.401746][ T6394] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 67.411502][ T6394] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.424260][ T6394] EXT4-fs (loop2): invalid journal inode [ 67.430058][ T6394] EXT4-fs (loop2): can't get journal size [ 67.450848][ T6399] loop0: detected capacity change from 0 to 512 [ 67.457983][ T6399] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.469460][ T6399] EXT4-fs (loop0): 1 truncate cleaned up [ 67.479910][ T6399] tmpfs: Unknown parameter '' [ 67.506083][ T6404] xt_connbytes: Forcing CT accounting to be enabled [ 67.512877][ T6404] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 67.539923][ T6406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.954'. [ 67.549395][ T6406] netlink: 'syz.0.954': attribute type 10 has an invalid length. [ 67.558785][ T6406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.622674][ T6411] loop0: detected capacity change from 0 to 1024 [ 67.634230][ T6411] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.672781][ T6411] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 67.689006][ T6411] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.705975][ T6411] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 67.716645][ T6411] EXT4-fs (loop0): Remounting filesystem read-only [ 67.723658][ T6411] EXT4-fs (loop0): 1 orphan inode deleted [ 67.731089][ T6411] EXT4-fs mount: 3 callbacks suppressed [ 67.731161][ T6411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.756008][ T6411] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 67.767154][ T6411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.931731][ T6423] loop6: detected capacity change from 0 to 1024 [ 67.950130][ T6423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.962480][ T6423] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.989716][ T6210] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.181471][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.351773][ T6480] syzkaller0: entered promiscuous mode [ 68.357344][ T6480] syzkaller0: entered allmulticast mode [ 68.434659][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 68.434674][ T29] audit: type=1400 audit(1736768056.184:1190): avc: denied { write } for pid=6497 comm="syz.5.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.507842][ T29] audit: type=1400 audit(1736768056.264:1191): avc: denied { create } for pid=6509 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.527870][ T29] audit: type=1400 audit(1736768056.264:1192): avc: denied { setopt } for pid=6509 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.547436][ T29] audit: type=1400 audit(1736768056.264:1193): avc: denied { bind } for pid=6509 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.566805][ T29] audit: type=1400 audit(1736768056.264:1194): avc: denied { name_bind } for pid=6509 comm="syz.4.972" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.588630][ T29] audit: type=1400 audit(1736768056.264:1195): avc: denied { node_bind } for pid=6509 comm="syz.4.972" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 68.610399][ T29] audit: type=1400 audit(1736768056.264:1196): avc: denied { write } for pid=6509 comm="syz.4.972" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.631745][ T29] audit: type=1400 audit(1736768056.264:1197): avc: denied { connect } for pid=6509 comm="syz.4.972" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.653231][ T29] audit: type=1400 audit(1736768056.264:1198): avc: denied { name_connect } for pid=6509 comm="syz.4.972" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.675325][ T29] audit: type=1326 audit(1736768056.264:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6511 comm="syz.5.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 69.106324][ T6605] loop5: detected capacity change from 0 to 512 [ 69.119997][ T6605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.132846][ T6605] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.176565][ T6616] loop2: detected capacity change from 0 to 512 [ 69.188025][ T6616] EXT4-fs: Ignoring removed oldalloc option [ 69.195634][ T6616] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.986: Parent and EA inode have the same ino 15 [ 69.209051][ T6616] EXT4-fs (loop2): Remounting filesystem read-only [ 69.215610][ T6616] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 69.233874][ T6616] EXT4-fs (loop2): 1 orphan inode deleted [ 69.240273][ T6616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.252978][ T6616] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 69.261050][ T6616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.368384][ T4790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.564490][ T6653] syz.0.999[6653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.564566][ T6653] syz.0.999[6653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.597369][ T6653] syz.0.999[6653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.125440][ T6693] loop4: detected capacity change from 0 to 1024 [ 70.162060][ T6693] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 70.173346][ T6693] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 70.187312][ T6693] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 70.208580][ T6693] EXT4-fs (loop4): invalid journal inode [ 70.462432][ T6659] syz.2.995 (6659) used greatest stack depth: 7328 bytes left [ 70.917112][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.931406][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.071324][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.093985][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.327826][ T6810] bond1: entered promiscuous mode [ 71.332914][ T6810] bond1: entered allmulticast mode [ 71.333129][ T6815] random: crng reseeded on system resumption [ 71.338285][ T6810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.355047][ T6810] bond1 (unregistering): Released all slaves [ 71.519845][ T6841] loop2: detected capacity change from 0 to 164 [ 71.536905][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.536905][ T6841] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 71.553893][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.553893][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.581212][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.581212][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.596193][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.596193][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.610482][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.610482][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.624796][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.624796][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.652160][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.652160][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.677323][ T6841] bio_check_eod: 363 callbacks suppressed [ 71.677343][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.677343][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.707639][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.707639][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.722306][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.722306][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.736608][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.736608][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.751532][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.751532][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.766454][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.766454][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.780406][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.780406][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.819813][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.819813][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.833561][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.833561][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 71.863756][ T6841] syz.2.1057: attempt to access beyond end of device [ 71.863756][ T6841] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.458311][ T6942] bond1: entered promiscuous mode [ 72.463455][ T6942] bond1: entered allmulticast mode [ 72.478758][ T6942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.492484][ T6942] bond1 (unregistering): Released all slaves [ 72.600914][ T6958] loop2: detected capacity change from 0 to 512 [ 72.608422][ T6958] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.619591][ T6960] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.632024][ T6958] EXT4-fs (loop2): 1 truncate cleaned up [ 72.639682][ T6958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.652934][ T6958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.675566][ T6960] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.730949][ T6960] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.746459][ T6970] loop5: detected capacity change from 0 to 512 [ 72.747142][ T6969] macvlan2: entered promiscuous mode [ 72.753477][ T6970] EXT4-fs: Ignoring removed oldalloc option [ 72.758358][ T6969] bridge0: entered promiscuous mode [ 72.770386][ T6969] bridge0: port 3(macvlan2) entered blocking state [ 72.777031][ T6969] bridge0: port 3(macvlan2) entered disabled state [ 72.782534][ T6970] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.1069: Parent and EA inode have the same ino 15 [ 72.784157][ T6969] macvlan2: entered allmulticast mode [ 72.801370][ T6969] bridge0: entered allmulticast mode [ 72.808128][ T6969] macvlan2: left allmulticast mode [ 72.809381][ T6970] EXT4-fs (loop5): Remounting filesystem read-only [ 72.813367][ T6969] bridge0: left allmulticast mode [ 72.825755][ T6969] bridge0: left promiscuous mode [ 72.832698][ T6970] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -5) [ 72.842195][ T6970] EXT4-fs (loop5): 1 orphan inode deleted [ 72.848476][ T6970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.861029][ T6970] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 72.869079][ T6970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.869406][ T6960] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.929570][ T6970] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1069'. [ 72.939307][ T6970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.949840][ T6970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.962248][ T6970] batadv_slave_1: entered promiscuous mode [ 72.974539][ T6960] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.986779][ T6960] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.015622][ T6960] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.026210][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1074'. [ 73.050033][ T6960] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.062727][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 73.162101][ T6985] bond1: entered promiscuous mode [ 73.167288][ T6985] bond1: entered allmulticast mode [ 73.196758][ T6985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.278768][ T6985] bond1 (unregistering): Released all slaves [ 73.300058][ T6995] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.348728][ T6995] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.398809][ T6995] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.458693][ T6995] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.520909][ T6995] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.542575][ T6995] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.565469][ T7011] loop0: detected capacity change from 0 to 8192 [ 73.575178][ T6995] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.587282][ T6995] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.627521][ T7011] loop0: p1 p2 p3 p4 [ 73.631629][ T7011] loop0: p1 start 51379968 is beyond EOD, truncated [ 73.639322][ T7011] loop0: p3 size 100663552 extends beyond EOD, truncated [ 73.640046][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 73.640063][ T29] audit: type=1400 audit(1736768061.394:1333): avc: denied { bind } for pid=7012 comm="syz.4.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.646949][ T7011] loop0: p4 size 81920 extends beyond EOD, truncated [ 73.682589][ T7017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1088'. [ 73.701583][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1088'. [ 73.718218][ T29] audit: type=1400 audit(1736768061.474:1334): avc: denied { create } for pid=7010 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.811266][ T7023] bridge0: entered promiscuous mode [ 73.818027][ T7023] macvlan2: entered promiscuous mode [ 73.825703][ T7023] bridge0: port 3(macvlan2) entered blocking state [ 73.832385][ T7023] bridge0: port 3(macvlan2) entered disabled state [ 73.859821][ T7023] macvlan2: entered allmulticast mode [ 73.865275][ T7023] bridge0: entered allmulticast mode [ 73.877836][ T7023] macvlan2: left allmulticast mode [ 73.883101][ T7023] bridge0: left allmulticast mode [ 73.894476][ T7023] bridge0: left promiscuous mode [ 73.918270][ T7025] bond1: entered promiscuous mode [ 73.923396][ T7025] bond1: entered allmulticast mode [ 73.934111][ T7025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.956742][ T7025] bond1 (unregistering): Released all slaves [ 73.962934][ T29] audit: type=1326 audit(1736768061.704:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.6.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 73.986533][ T29] audit: type=1326 audit(1736768061.704:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.6.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 74.010022][ T29] audit: type=1326 audit(1736768061.704:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.6.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 74.033363][ T29] audit: type=1326 audit(1736768061.704:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.6.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 74.057319][ T29] audit: type=1326 audit(1736768061.704:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.6.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 74.080787][ T29] audit: type=1326 audit(1736768061.704:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.6.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 74.104275][ T29] audit: type=1326 audit(1736768061.704:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.6.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 74.128279][ T29] audit: type=1326 audit(1736768061.704:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.6.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 74.311598][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 74.320598][ T7043] netlink: 'syz.0.1099': attribute type 18 has an invalid length. [ 74.331792][ T7043] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.335996][ T7042] loop4: detected capacity change from 0 to 8192 [ 74.340114][ T7043] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.354772][ T7043] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.363133][ T7043] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.371569][ T7043] vxlan0: entered promiscuous mode [ 74.463376][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.478997][ T7053] loop6: detected capacity change from 0 to 8192 [ 74.480145][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.485720][ T7053] vfat: Unknown parameter 'ÿÿÿÿ00000000000000000004' [ 74.780492][ T7065] syzkaller0: entered allmulticast mode [ 74.798676][ T7065] syzkaller0 (unregistering): left allmulticast mode [ 75.039006][ T7067] bridge0: entered promiscuous mode [ 75.044518][ T7067] macvlan2: entered promiscuous mode [ 75.051942][ T7067] bridge0: port 3(macvlan2) entered blocking state [ 75.058660][ T7067] bridge0: port 3(macvlan2) entered disabled state [ 75.065644][ T7067] macvlan2: entered allmulticast mode [ 75.071120][ T7067] bridge0: entered allmulticast mode [ 75.077499][ T7067] macvlan2: left allmulticast mode [ 75.082791][ T7067] bridge0: left allmulticast mode [ 75.088896][ T7067] bridge0: left promiscuous mode [ 75.263539][ T7077] bond1: entered promiscuous mode [ 75.268821][ T7077] bond1: entered allmulticast mode [ 75.281861][ T7077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.312607][ T7077] bond1 (unregistering): Released all slaves [ 75.321123][ T7081] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.473642][ T7088] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1117'. [ 75.633827][ T7100] bridge0: entered promiscuous mode [ 75.639946][ T7100] macvlan2: entered promiscuous mode [ 75.646877][ T7100] bridge0: port 4(macvlan2) entered blocking state [ 75.653535][ T7100] bridge0: port 4(macvlan2) entered disabled state [ 75.667584][ T7100] macvlan2: entered allmulticast mode [ 75.673021][ T7100] bridge0: entered allmulticast mode [ 75.698010][ T7100] macvlan2: left allmulticast mode [ 75.703273][ T7100] bridge0: left allmulticast mode [ 75.711197][ T7100] bridge0: left promiscuous mode [ 75.722828][ T7104] bridge0: port 3(vlan0) entered blocking state [ 75.729417][ T7104] bridge0: port 3(vlan0) entered disabled state [ 75.736175][ T7104] vlan0: entered allmulticast mode [ 75.743058][ T7104] vlan0: left allmulticast mode [ 76.104874][ T7135] syzkaller0: entered promiscuous mode [ 76.110450][ T7135] syzkaller0: entered allmulticast mode [ 76.167767][ T7139] loop2: detected capacity change from 0 to 512 [ 76.174539][ T7139] EXT4-fs (loop2): bad s_want_extra_isize: 636 [ 76.184911][ T7139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1142'. [ 76.246562][ T7146] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.256566][ T7146] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.318857][ T7146] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.328843][ T7146] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.376737][ T7158] loop2: detected capacity change from 0 to 2048 [ 76.395557][ T7162] netlink: 'syz.5.1151': attribute type 3 has an invalid length. [ 76.403406][ T7162] netlink: 'syz.5.1151': attribute type 3 has an invalid length. [ 76.405653][ T7158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.411916][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1151'. [ 76.434325][ T7146] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.444424][ T7146] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.519178][ T7146] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.529023][ T7146] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.555747][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.605073][ T7174] syzkaller0: entered promiscuous mode [ 76.610620][ T7174] syzkaller0: entered allmulticast mode [ 76.629129][ T7146] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.637479][ T7146] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.649331][ T7146] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.657596][ T7146] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.677100][ T7146] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.685380][ T7146] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.697147][ T7146] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.705489][ T7146] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.718309][ T7180] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.726717][ T7180] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.735215][ T7180] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.743675][ T7180] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.879969][ T7186] netlink: 'syz.5.1161': attribute type 6 has an invalid length. [ 77.035476][ T7197] syzkaller1: entered promiscuous mode [ 77.041192][ T7197] syzkaller1: entered allmulticast mode [ 77.079900][ T7199] syzkaller1: entered promiscuous mode [ 77.085536][ T7199] syzkaller1: entered allmulticast mode [ 77.150707][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.159348][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.264591][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1173'. [ 77.470545][ T7215] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.731242][ T7224] hub 6-0:1.0: USB hub found [ 77.736037][ T7224] hub 6-0:1.0: 8 ports detected [ 77.910230][ T7252] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 77.923800][ T7252] SELinux: failed to load policy [ 77.968602][ T7264] loop0: detected capacity change from 0 to 1024 [ 77.975458][ T7264] EXT4-fs: Ignoring removed i_version option [ 77.981873][ T7264] EXT4-fs: Ignoring removed bh option [ 78.007774][ T7269] loop2: detected capacity change from 0 to 128 [ 78.010342][ T7266] syzkaller0: entered promiscuous mode [ 78.014487][ T7269] EXT4-fs: Ignoring removed nobh option [ 78.019634][ T7266] syzkaller0: entered allmulticast mode [ 78.039427][ T7264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.050407][ T7269] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.073300][ T7269] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.084566][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.107819][ T7274] bond_slave_1: entered promiscuous mode [ 78.114174][ T7274] bond_slave_1: left promiscuous mode [ 78.121449][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.345511][ T7318] loop0: detected capacity change from 0 to 164 [ 78.351473][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 78.370990][ T7318] Unable to read rock-ridge attributes [ 78.390707][ T7318] Unable to read rock-ridge attributes [ 78.403577][ T7318] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 78.445919][ T7330] syzkaller1: entered promiscuous mode [ 78.451603][ T7330] syzkaller1: entered allmulticast mode [ 78.636661][ T7370] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1223'. [ 78.804965][ T7391] loop0: detected capacity change from 0 to 128 [ 78.812390][ T7391] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 78.830733][ T7391] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.843499][ T7391] ext2 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.895993][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 78.896010][ T29] audit: type=1400 audit(1736768066.634:1496): avc: denied { append } for pid=7390 comm="syz.0.1227" path="/258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.961045][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.025370][ T7406] bond0: (slave dummy0): Releasing backup interface [ 79.074415][ T7406] bridge_slave_0: left allmulticast mode [ 79.080151][ T7406] bridge_slave_0: left promiscuous mode [ 79.085889][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.096512][ T7406] bridge_slave_1: left allmulticast mode [ 79.102304][ T7406] bridge_slave_1: left promiscuous mode [ 79.107977][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.129039][ T7406] bond0: (slave bond_slave_0): Releasing backup interface [ 79.137164][ T7406] bond0: (slave bond_slave_1): Releasing backup interface [ 79.145751][ T7406] team0: Port device team_slave_0 removed [ 79.162876][ T7406] team0: Port device team_slave_1 removed [ 79.172764][ T7406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.247001][ T29] audit: type=1400 audit(1736768066.994:1497): avc: denied { connect } for pid=7425 comm="syz.0.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.272547][ T7421] hub 6-0:1.0: USB hub found [ 79.284437][ T7421] hub 6-0:1.0: 8 ports detected [ 79.430400][ T7450] vlan0: entered allmulticast mode [ 79.435636][ T7450] bridge_slave_0: entered allmulticast mode [ 79.456014][ T7450] bridge_slave_0: left allmulticast mode [ 79.540154][ T7466] syzkaller0: entered allmulticast mode [ 79.548366][ T7466] syzkaller0 (unregistering): left allmulticast mode [ 79.569457][ T7472] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 79.569457][ T7472] program syz.2.1239 not setting count and/or reply_len properly [ 79.613585][ T7480] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1240'. [ 79.784714][ T29] audit: type=1400 audit(1736768067.534:1498): avc: denied { create } for pid=7510 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.805774][ T29] audit: type=1400 audit(1736768067.534:1499): avc: denied { bind } for pid=7510 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.825286][ T29] audit: type=1400 audit(1736768067.534:1500): avc: denied { name_bind } for pid=7510 comm="syz.0.1247" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 79.846148][ T29] audit: type=1400 audit(1736768067.534:1501): avc: denied { node_bind } for pid=7510 comm="syz.0.1247" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 79.867071][ T29] audit: type=1400 audit(1736768067.534:1502): avc: denied { listen } for pid=7510 comm="syz.0.1247" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.887683][ T29] audit: type=1400 audit(1736768067.534:1503): avc: denied { connect } for pid=7510 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.907306][ T29] audit: type=1400 audit(1736768067.534:1504): avc: denied { name_connect } for pid=7510 comm="syz.0.1247" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 79.929032][ T29] audit: type=1400 audit(1736768067.604:1505): avc: denied { accept } for pid=7510 comm="syz.0.1247" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 80.043441][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1255'. [ 80.192405][ T7553] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1262'. [ 80.390703][ T7566] syz.4.1266[7566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.390835][ T7566] syz.4.1266[7566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.407365][ T7566] syz.4.1266[7566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.536717][ T7579] loop6: detected capacity change from 0 to 8192 [ 80.564941][ T7581] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1276'. [ 80.597653][ T7579] loop6: p2 p4[EZD] [ 80.601715][ T7579] loop6: p2 size 2130706432 extends beyond EOD, truncated [ 80.610048][ T7579] loop6: p4 size 65536 extends beyond EOD, truncated [ 80.782678][ T7600] netlink: 'syz.6.1284': attribute type 6 has an invalid length. [ 80.870824][ T3373] kernel write not supported for file /133/attr/exec (pid: 3373 comm: kworker/1:3) [ 80.884060][ T7629] sd 0:0:1:0: device reset [ 80.962075][ T7626] loop0: detected capacity change from 0 to 8192 [ 80.979190][ T7631] bridge_slave_0: left allmulticast mode [ 80.984909][ T7631] bridge_slave_0: left promiscuous mode [ 80.990783][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.002652][ T7631] bridge_slave_1: left allmulticast mode [ 81.008475][ T7631] bridge_slave_1: left promiscuous mode [ 81.014190][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.030019][ T7631] bond0: (slave bond_slave_0): Releasing backup interface [ 81.043956][ T7631] bond0: (slave bond_slave_1): Releasing backup interface [ 81.058332][ T7631] team0: Port device team_slave_0 removed [ 81.068470][ T7631] team0: Port device team_slave_1 removed [ 81.075576][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.083110][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.092333][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.099891][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.134623][ T7637] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 81.341097][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1316'. [ 81.362415][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1316'. [ 81.389714][ T7672] bridge_slave_0: left allmulticast mode [ 81.395553][ T7672] bridge_slave_0: left promiscuous mode [ 81.401330][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.411006][ T7672] bridge_slave_1: left allmulticast mode [ 81.416724][ T7672] bridge_slave_1: left promiscuous mode [ 81.422575][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.434603][ T7672] bond0: (slave bond_slave_0): Releasing backup interface [ 81.445425][ T7672] bond0: (slave bond_slave_1): Releasing backup interface [ 81.459220][ T7672] team0: Port device team_slave_0 removed [ 81.482264][ T7672] team0: Port device team_slave_1 removed [ 81.566372][ T7688] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.580241][ T7690] loop4: detected capacity change from 0 to 128 [ 81.588013][ T7690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 81.596032][ T7690] System zones: 1-3, 19-19, 35-36 [ 81.602783][ T7690] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.626252][ T7690] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.661249][ T7697] xt_TPROXY: Can be used only with -p tcp or -p udp [ 81.671473][ T7697] loop2: detected capacity change from 0 to 512 [ 81.671900][ T7688] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.694618][ T7701] loop0: detected capacity change from 0 to 512 [ 81.701688][ T7701] EXT4-fs: inline encryption not supported [ 81.704006][ T7697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.720432][ T7697] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.735559][ T7697] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 81.750242][ T7697] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 81.759079][ T7701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.762726][ T7697] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.762726][ T7697] [ 81.762745][ T7697] EXT4-fs (loop2): Total free blocks count 0 [ 81.776925][ T7701] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.784873][ T7697] EXT4-fs (loop2): Free/Dirty block details [ 81.784891][ T7697] EXT4-fs (loop2): free_blocks=65280 [ 81.784906][ T7697] EXT4-fs (loop2): dirty_blocks=33 [ 81.784918][ T7697] EXT4-fs (loop2): Block reservation details [ 81.784929][ T7697] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 81.809171][ T7688] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.831353][ T7701] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.1330: corrupted inode contents [ 81.842964][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.852572][ T7701] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.1330: mark_inode_dirty error [ 81.873246][ T7701] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.1330: corrupted inode contents [ 81.886750][ T7707] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.1330: corrupted inode contents [ 81.899547][ T7707] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.1330: mark_inode_dirty error [ 81.911313][ T7707] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.1330: corrupted inode contents [ 81.925408][ T7707] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1330: mark_inode_dirty error [ 81.940542][ T7707] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.1330: corrupted inode contents [ 81.952844][ T7707] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.1330: mark_inode_dirty error [ 81.978921][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.005717][ T7688] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.042833][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.064118][ T7688] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.082941][ T7688] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.095363][ T7688] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.108121][ T7688] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.171346][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1338'. [ 82.191420][ T7726] netlink: 'syz.2.1336': attribute type 6 has an invalid length. [ 82.278708][ T7731] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1342'. [ 82.378195][ T9] IPVS: starting estimator thread 0... [ 82.382514][ T7741] bridge_slave_0: left allmulticast mode [ 82.389390][ T7741] bridge_slave_0: left promiscuous mode [ 82.395053][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.415760][ T7741] bridge_slave_1: left allmulticast mode [ 82.421624][ T7741] bridge_slave_1: left promiscuous mode [ 82.427384][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.450182][ T7748] xt_hashlimit: max too large, truncated to 1048576 [ 82.460244][ T7748] Cannot find set identified by id 0 to match [ 82.466912][ T7741] bond0: (slave bond_slave_0): Releasing backup interface [ 82.474253][ T7744] IPVS: using max 2448 ests per chain, 122400 per kthread [ 82.501986][ T7741] bond0: (slave bond_slave_1): Releasing backup interface [ 82.509059][ T7753] vhci_hcd: invalid port number 236 [ 82.514458][ T7753] vhci_hcd: default hub control req: 7f06 v0301 i00ec l0 [ 82.527128][ T7741] team0: Port device team_slave_0 removed [ 82.542204][ T7741] team0: Port device team_slave_1 removed [ 82.599577][ T9] kernel write not supported for file /564/attr/exec (pid: 9 comm: kworker/0:1) [ 82.619164][ T7755] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.631789][ T7755] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.736244][ T7770] loop5: detected capacity change from 0 to 2048 [ 82.825497][ T7770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.869113][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.878562][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.950871][ T4790] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.971741][ T35] kernel write not supported for file /440/attr/exec (pid: 35 comm: kworker/1:1) [ 83.270058][ T7833] loop4: detected capacity change from 0 to 512 [ 83.276830][ T7833] EXT4-fs: inline encryption not supported [ 83.289699][ T7833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.302505][ T7833] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.332665][ T7833] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1386: corrupted inode contents [ 83.344858][ T7833] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.1386: mark_inode_dirty error [ 83.357438][ T7833] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1386: corrupted inode contents [ 83.371978][ T7833] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1386: corrupted inode contents [ 83.384252][ T7833] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.1386: mark_inode_dirty error [ 83.396561][ T7833] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1386: corrupted inode contents [ 83.409946][ T7833] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1386: mark_inode_dirty error [ 83.421654][ T7833] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1386: corrupted inode contents [ 83.434975][ T7833] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.1386: mark_inode_dirty error [ 83.466919][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.499777][ T7849] __nla_validate_parse: 2 callbacks suppressed [ 83.499791][ T7849] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1391'. [ 83.559651][ T7860] loop0: detected capacity change from 0 to 128 [ 83.568080][ T7860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 83.581789][ T7860] System zones: 1-3, 19-19, 35-36 [ 83.591094][ T7860] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.613878][ T7860] ext4 filesystem being mounted at /292/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.671206][ T7869] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 83.716599][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.946433][ T7905] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1413'. [ 84.663050][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 84.663076][ T29] audit: type=1326 audit(1736768072.414:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 84.692726][ T29] audit: type=1326 audit(1736768072.414:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 84.746612][ T29] audit: type=1326 audit(1736768072.414:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 84.770133][ T29] audit: type=1326 audit(1736768072.414:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 84.793769][ T29] audit: type=1326 audit(1736768072.414:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 84.817289][ T29] audit: type=1326 audit(1736768072.464:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 84.840647][ T29] audit: type=1326 audit(1736768072.464:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 84.864056][ T29] audit: type=1326 audit(1736768072.464:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 84.887426][ T29] audit: type=1326 audit(1736768072.464:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 84.910860][ T29] audit: type=1326 audit(1736768072.464:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.5.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe669485d29 code=0x7ffc0000 [ 85.127088][ T7972] syz.0.1440[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.127158][ T7972] syz.0.1440[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.142626][ T7972] syz.0.1440[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.183178][ T7976] syz.4.1442[7976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.197517][ T7976] syz.4.1442[7976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.209072][ T7976] syz.4.1442[7976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.296437][ T7985] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1444'. [ 85.413176][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 85.444885][ T7997] 9pnet: Could not find request transport: tc [ 85.515435][ T8009] xt_TPROXY: Can be used only with -p tcp or -p udp [ 85.796928][ T8043] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.041713][ T8080] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.053457][ T8080] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 86.116712][ T8092] xt_HMARK: spi-set and port-set can't be combined [ 86.133267][ T8090] dccp_close: ABORT with 36 bytes unread [ 86.177124][ T8104] syz.6.1496[8104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.178290][ T8104] syz.6.1496[8104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.206311][ T8104] syz.6.1496[8104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.281604][ T8119] syz.6.1502[8119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.294227][ T8119] syz.6.1502[8119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.312503][ T8119] syz.6.1502[8119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.343402][ T8122] 9pnet: Could not find request transport: tc [ 86.603949][ T8154] 9pnet: Could not find request transport: tc [ 87.428090][ T8219] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1544'. [ 87.717533][ T8258] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 87.743570][ T8260] syz.2.1563[8260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.743688][ T8260] syz.2.1563[8260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.755267][ T8260] syz.2.1563[8260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.159461][ T8267] SELinux: Context @ is not valid (left unmapped). [ 88.249560][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 88.605111][ T8299] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 88.637526][ T3377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.702189][ T8310] syz.4.1585[8310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.703004][ T8310] rdma_op ffff888123cfa180 conn xmit_rdma 0000000000000000 [ 89.328719][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 89.596295][ T8390] bridge0: entered promiscuous mode [ 89.601822][ T8390] macvlan2: entered promiscuous mode [ 89.607989][ T8390] bridge0: port 1(macvlan2) entered blocking state [ 89.614553][ T8390] bridge0: port 1(macvlan2) entered disabled state [ 89.621401][ T8390] macvlan2: entered allmulticast mode [ 89.626805][ T8390] bridge0: entered allmulticast mode [ 89.632850][ T8390] macvlan2: left allmulticast mode [ 89.638035][ T8390] bridge0: left allmulticast mode [ 89.643605][ T8390] bridge0: left promiscuous mode [ 89.668840][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 89.668855][ T29] audit: type=1326 audit(1736768077.424:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 89.698844][ T29] audit: type=1326 audit(1736768077.424:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 89.722398][ T29] audit: type=1326 audit(1736768077.424:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 89.745944][ T29] audit: type=1326 audit(1736768077.424:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 89.769426][ T29] audit: type=1326 audit(1736768077.424:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 89.792865][ T29] audit: type=1326 audit(1736768077.424:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 89.816393][ T29] audit: type=1326 audit(1736768077.424:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 89.840742][ T29] audit: type=1326 audit(1736768077.474:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 89.864409][ T29] audit: type=1326 audit(1736768077.474:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 89.888126][ T29] audit: type=1326 audit(1736768077.484:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8395 comm="syz.6.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 90.255633][ T8434] pim6reg: entered allmulticast mode [ 90.269305][ T8434] pim6reg: left allmulticast mode [ 91.157378][ T8486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8486 comm=syz.6.1661 [ 91.169913][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1661'. [ 91.502268][ T8500] bpf_get_probe_write_proto: 11 callbacks suppressed [ 91.502289][ T8500] syz.0.1669[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.534797][ T8500] syz.0.1669[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.564704][ T8500] syz.0.1669[8500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.837515][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 91.900277][ T8535] syz.4.1684[8535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.900380][ T8535] syz.4.1684[8535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.918607][ T8535] syz.4.1684[8535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.959435][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 92.183686][ T8566] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.612849][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 92.724638][ T8598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8598 comm=syz.2.1711 [ 92.757866][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 92.766886][ T8598] netlink: 'syz.2.1711': attribute type 30 has an invalid length. [ 92.918466][ T8603] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1715'. [ 93.058140][ T8610] syz.0.1718[8610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.058242][ T8610] syz.0.1718[8610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.088447][ T8610] syz.0.1718[8610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.351925][ T8643] syz.0.1731[8643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.890445][ T8678] 9pnet_fd: Insufficient options for proto=fd [ 93.965499][ T8682] tipc: Failed to obtain node identity [ 93.971103][ T8682] tipc: Enabling of bearer rejected, failed to enable media [ 94.040147][ T8687] batman_adv: batadv0: Adding interface: dummy0 [ 94.046539][ T8687] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.088674][ T8687] batman_adv: batadv0: Interface activated: dummy0 [ 94.398658][ T3551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.948900][ T8772] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.956832][ T8774] geneve0: entered allmulticast mode [ 95.006581][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 95.006600][ T29] audit: type=1326 audit(1736768082.754:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 95.047090][ T29] audit: type=1326 audit(1736768082.794:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 95.073240][ T29] audit: type=1326 audit(1736768082.794:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 95.096966][ T29] audit: type=1326 audit(1736768082.804:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 95.122345][ T29] audit: type=1326 audit(1736768082.874:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 95.146152][ T29] audit: type=1326 audit(1736768082.874:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc438d5cce7 code=0x7ffc0000 [ 95.169749][ T29] audit: type=1326 audit(1736768082.874:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc438d01f29 code=0x7ffc0000 [ 95.193348][ T29] audit: type=1326 audit(1736768082.874:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc438d5cce7 code=0x7ffc0000 [ 95.217057][ T29] audit: type=1326 audit(1736768082.874:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc438d01f29 code=0x7ffc0000 [ 95.241266][ T29] audit: type=1326 audit(1736768082.874:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.4.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc438d5cce7 code=0x7ffc0000 [ 95.305055][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1799'. [ 95.416693][ T8812] netlink: 'syz.2.1805': attribute type 4 has an invalid length. [ 95.444556][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 95.506210][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 95.639761][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1821'. [ 95.786331][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 96.020372][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1840'. [ 96.057300][ T8891] SELinux: Context Ì”‡× is not valid (left unmapped). [ 96.118731][ T8900] netlink: 'syz.4.1846': attribute type 4 has an invalid length. [ 96.148521][ T8896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1843'. [ 96.168242][ T8896] netlink: 'syz.2.1843': attribute type 10 has an invalid length. [ 96.191818][ T8896] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.266769][ T8916] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 96.302263][ T8916] bridge0: port 3(bond0) entered disabled state [ 96.308768][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.316252][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.317735][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 96.325969][ T8916] bridge0: entered allmulticast mode [ 96.394752][ T8925] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1856'. [ 96.432373][ T8930] netlink: 'syz.5.1857': attribute type 10 has an invalid length. [ 96.457103][ T8930] team0: Device hsr_slave_0 failed to register rx_handler [ 97.067752][ T8967] bpf_get_probe_write_proto: 23 callbacks suppressed [ 97.067773][ T8967] syz.4.1874[8967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.084545][ T8967] syz.4.1874[8967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.114605][ T8967] syz.4.1874[8967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.142093][ T8967] netlink: 'syz.4.1874': attribute type 10 has an invalid length. [ 97.184147][ T8967] team0: Device hsr_slave_0 failed to register rx_handler [ 97.417368][ T8983] syz.0.1879[8983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.417565][ T8983] syz.0.1879[8983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.438673][ T8983] syz.0.1879[8983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.602346][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'. [ 97.660517][ T8999] syz.0.1889[8999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.660580][ T8999] syz.0.1889[8999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.672052][ T8999] syz.0.1889[8999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.259329][ T9020] geneve0: entered promiscuous mode [ 98.276382][ T9020] geneve0: entered allmulticast mode [ 98.375748][ T9051] tipc: Started in network mode [ 98.380777][ T9051] tipc: Node identity 7f000001, cluster identity 4711 [ 98.390273][ T9051] tipc: Enabled bearer , priority 10 [ 98.403063][ T9051] tipc: Enabled bearer , priority 0 [ 98.710564][ T9076] syz.0.1922[9076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.513114][ T9] tipc: Node number set to 2130706433 [ 99.534114][ T3474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.812422][ T9135] netlink: 'syz.0.1945': attribute type 6 has an invalid length. [ 100.601399][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 100.634005][ T24] IPVS: starting estimator thread 0... [ 100.737259][ T9180] IPVS: using max 2304 ests per chain, 115200 per kthread [ 100.745642][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 100.745700][ T29] audit: type=1326 audit(1736768088.494:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 100.788976][ T29] audit: type=1326 audit(1736768088.524:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 100.812685][ T29] audit: type=1326 audit(1736768088.524:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 100.836628][ T29] audit: type=1326 audit(1736768088.534:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 100.860627][ T29] audit: type=1326 audit(1736768088.534:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 100.884212][ T29] audit: type=1326 audit(1736768088.534:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 100.907694][ T29] audit: type=1326 audit(1736768088.534:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 100.931222][ T29] audit: type=1326 audit(1736768088.534:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 100.954645][ T29] audit: type=1326 audit(1736768088.534:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3d8b5d29 code=0x7ffc0000 [ 101.179813][ T29] audit: type=1400 audit(1736768088.924:2554): avc: denied { create } for pid=9213 comm="syz.2.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.232718][ T9197] Set syz1 is full, maxelem 65536 reached [ 101.448273][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 101.897060][ T9289] vlan0: entered allmulticast mode [ 102.256983][ T9330] bpf_get_probe_write_proto: 11 callbacks suppressed [ 102.257006][ T9330] syz.4.2033[9330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.270332][ T9330] syz.4.2033[9330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.287502][ T9330] syz.4.2033[9330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.305107][ T9330] syz.4.2033[9330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.316796][ T9330] syz.4.2033[9330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.358177][ T9330] syz.4.2033[9330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.374084][ T9336] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2036'. [ 102.442991][ T9343] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.2039'. [ 102.461144][ T9341] syz.0.2038[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.461252][ T9341] syz.0.2038[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.479278][ T9341] syz.0.2038[9341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.615637][ T9358] atomic_op ffff888117950d28 conn xmit_atomic 0000000000000000 [ 102.757946][ T9373] netlink: 452 bytes leftover after parsing attributes in process `syz.6.2052'. [ 103.009088][ T9406] bridge0: entered promiscuous mode [ 103.014384][ T9406] macvlan2: entered promiscuous mode [ 103.020597][ T9406] bridge0: port 1(macvlan2) entered blocking state [ 103.027278][ T9406] bridge0: port 1(macvlan2) entered disabled state [ 103.036725][ T9404] syz.5.2069[9404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.041986][ T9406] macvlan2: entered allmulticast mode [ 103.058839][ T9406] bridge0: entered allmulticast mode [ 103.077697][ T9406] macvlan2: left allmulticast mode [ 103.082883][ T9406] bridge0: left allmulticast mode [ 103.089113][ T9406] bridge0: left promiscuous mode [ 103.238499][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2081'. [ 103.262242][ T9431] bond2: entered promiscuous mode [ 103.289581][ T9431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.298421][ T9431] bond3: entered promiscuous mode [ 103.303754][ T9431] bond2: (slave bond3): Enslaving as an active interface with an up link [ 103.358326][ T9443] bond2 (unregistering): (slave bond3): Releasing backup interface [ 103.383384][ T9443] bond3: left promiscuous mode [ 103.398308][ T9443] bond2 (unregistering): Released all slaves [ 103.628271][ T9473] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2096'. [ 103.771590][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'. [ 103.940586][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2110'. [ 103.967271][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2110'. [ 104.244893][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 104.301141][ T9556] vlan0: entered allmulticast mode [ 104.306429][ T9556] bridge_slave_0: entered allmulticast mode [ 104.349741][ T9556] bridge_slave_0: left allmulticast mode [ 104.362189][ T9565] ebtables: ebtables: counters copy to user failed while replacing table [ 104.600025][ T9610] netlink: 'syz.0.2158': attribute type 4 has an invalid length. [ 104.638482][ T3551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.856120][ T9644] bridge0: entered promiscuous mode [ 104.862011][ T9644] macvlan2: entered promiscuous mode [ 104.869400][ T9644] bridge0: port 1(macvlan2) entered blocking state [ 104.876042][ T9644] bridge0: port 1(macvlan2) entered disabled state [ 104.883694][ T9644] macvlan2: entered allmulticast mode [ 104.889206][ T9644] bridge0: entered allmulticast mode [ 104.898608][ T9644] macvlan2: left allmulticast mode [ 104.903769][ T9644] bridge0: left allmulticast mode [ 104.920915][ T9644] bridge0: left promiscuous mode [ 105.863098][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 105.863116][ T29] audit: type=1326 audit(1736768093.614:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 105.913338][ T29] audit: type=1326 audit(1736768093.644:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 105.937348][ T9714] __nla_validate_parse: 4 callbacks suppressed [ 105.937443][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2198'. [ 105.958642][ T29] audit: type=1326 audit(1736768093.644:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 105.982119][ T29] audit: type=1326 audit(1736768093.644:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 106.005533][ T29] audit: type=1326 audit(1736768093.644:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.0.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 106.162650][ T9734] futex_wake_op: syz.2.2208 tries to shift op by -1; fix this program [ 106.163096][ T29] audit: type=1326 audit(1736768093.914:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 106.230441][ T29] audit: type=1326 audit(1736768093.944:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 106.254056][ T29] audit: type=1326 audit(1736768093.944:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 106.277496][ T29] audit: type=1326 audit(1736768093.944:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 106.301164][ T29] audit: type=1326 audit(1736768093.954:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd615d29 code=0x7ffc0000 [ 106.637929][ T9745] Set syz1 is full, maxelem 65536 reached [ 106.947765][ T9790] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2230'. [ 106.959847][ T9784] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2230'. [ 106.989192][ T9789] 0ªX¹¦À: left allmulticast mode [ 106.996742][ T9789] geneve0: left allmulticast mode [ 107.081499][ T9789] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.090010][ T9789] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.098446][ T9789] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.107008][ T9789] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.122369][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2236'. [ 107.200161][ T3551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 107.211040][ T9789] vxlan0: left promiscuous mode [ 107.343552][ T9801] futex_wake_op: syz.4.2234 tries to shift op by -1; fix this program [ 107.689805][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2250'. [ 107.733611][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2252'. [ 107.758256][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2253'. [ 107.816130][ T9815] geneve0: entered promiscuous mode [ 107.821494][ T9815] geneve0: entered allmulticast mode [ 107.930850][ T9858] futex_wake_op: syz.5.2261 tries to shift op by -1; fix this program [ 108.144911][ T9876] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2268'. [ 108.178643][ T9871] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2268'. [ 108.253324][ T9882] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.293247][ T9886] bpf_get_probe_write_proto: 8 callbacks suppressed [ 108.293265][ T9886] syz.4.2273[9886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.318481][ T9882] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.340532][ T9886] syz.4.2273[9886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.340643][ T9886] syz.4.2273[9886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.369859][ T9890] bridge0: port 1(vlan0) entered blocking state [ 108.387602][ T9890] bridge0: port 1(vlan0) entered disabled state [ 108.411750][ T9890] vlan0: entered allmulticast mode [ 108.426901][ T9890] vlan0: left allmulticast mode [ 108.450139][ T9882] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.519292][ T9882] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.541454][ T9899] syz.4.2279[9899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.541550][ T9899] syz.4.2279[9899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.553324][ T9899] syz.4.2279[9899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.604133][ T9882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.629288][ T9882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.648650][ T9882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.671055][ T9882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.689785][ T9910] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2282'. [ 108.849815][ T9928] netlink: 'syz.6.2285': attribute type 6 has an invalid length. [ 110.086533][T10016] rdma_op ffff88812c25fd80 conn xmit_rdma 0000000000000000 [ 110.398780][ T3474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 110.458556][ T9984] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.466986][ T9984] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.475499][ T9984] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.484143][ T9984] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.497397][ T9984] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.505871][ T9984] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.514506][ T9984] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.523163][ T9984] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.559527][T10045] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 111.009224][T10082] bridge0: left allmulticast mode [ 111.087588][T10082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.106034][T10082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.114319][T10082] batadv_slave_1: left promiscuous mode [ 111.529736][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 111.529753][ T29] audit: type=1326 audit(1736768099.284:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 111.587972][ T29] audit: type=1326 audit(1736768099.314:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 111.611666][ T29] audit: type=1326 audit(1736768099.314:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 111.635476][ T29] audit: type=1326 audit(1736768099.314:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10106 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 111.748049][ T29] audit: type=1326 audit(1736768099.504:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 111.750211][T10117] syz.0.2363[10117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.771827][ T29] audit: type=1326 audit(1736768099.504:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 111.796197][T10117] syz.0.2363[10117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.845494][T10117] syz.0.2363[10117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.847250][ T29] audit: type=1326 audit(1736768099.504:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 111.891887][ T29] audit: type=1326 audit(1736768099.504:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 111.915460][ T29] audit: type=1326 audit(1736768099.504:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 111.939041][ T29] audit: type=1326 audit(1736768099.504:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.0.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e59385d29 code=0x7ffc0000 [ 112.238033][ T3549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.428309][T10129] syz.4.2369[10129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.429487][T10129] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.573353][T10141] __nla_validate_parse: 1 callbacks suppressed [ 112.573371][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2373'. [ 112.616865][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2373'. [ 112.716231][T10150] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 112.724705][T10150] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 112.796547][T10144] pimreg: entered allmulticast mode [ 112.812137][T10158] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2380'. [ 112.821319][T10144] pimreg: left allmulticast mode [ 112.962994][T10175] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2390'. [ 112.979447][T10175] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2390'. [ 112.998949][T10175] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2390'. [ 113.020107][T10175] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2390'. [ 113.040009][T10160] netlink: 'syz.4.2383': attribute type 6 has an invalid length. [ 113.059816][T10175] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2390'. [ 113.311638][T10216] netlink: 'syz.2.2405': attribute type 3 has an invalid length. [ 113.630906][T10225] Set syz1 is full, maxelem 65536 reached [ 113.840695][T10264] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 114.631178][T10335] bpf_get_probe_write_proto: 5 callbacks suppressed [ 114.631199][T10335] syz.0.2451[10335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.660927][T10335] syz.0.2451[10335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.676631][T10326] geneve0: entered promiscuous mode [ 114.693318][T10326] geneve0: entered allmulticast mode [ 114.699464][T10335] syz.0.2451[10335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.115819][T10373] netlink: 'syz.5.2465': attribute type 3 has an invalid length. [ 115.218451][T10377] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 115.517695][ T3550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 115.601981][T10404] netlink: 'syz.6.2476': attribute type 6 has an invalid length. [ 115.784514][T10450] netlink: 'syz.6.2497': attribute type 3 has an invalid length. [ 116.762622][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 116.762638][ T29] audit: type=1326 audit(1736768104.514:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 116.805164][ T29] audit: type=1326 audit(1736768104.544:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 116.828756][ T29] audit: type=1326 audit(1736768104.544:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 116.852464][ T29] audit: type=1326 audit(1736768104.544:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 116.876006][ T29] audit: type=1326 audit(1736768104.544:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 116.899557][ T29] audit: type=1326 audit(1736768104.544:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 116.923057][ T29] audit: type=1326 audit(1736768104.544:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 116.946593][ T29] audit: type=1326 audit(1736768104.544:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 116.970297][ T29] audit: type=1326 audit(1736768104.544:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 116.993783][ T29] audit: type=1326 audit(1736768104.544:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc438d65d29 code=0x7ffc0000 [ 117.084751][T10644] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.138823][T10644] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.176095][T10654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10654 comm=syz.2.2526 [ 117.188714][T10654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10654 comm=syz.2.2526 [ 117.218409][T10644] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.268951][T10644] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.326316][T10644] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.348749][T10644] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.363231][T10644] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.374270][T10645] geneve0: entered promiscuous mode [ 117.379554][T10645] geneve0: entered allmulticast mode [ 117.393142][T10644] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.525451][T10675] bridge0: port 1(vlan0) entered blocking state [ 117.531981][T10675] bridge0: port 1(vlan0) entered disabled state [ 117.544247][T10675] vlan0: entered allmulticast mode [ 117.550288][T10675] vlan0: left allmulticast mode [ 117.732802][T10706] ip6tnl1: entered promiscuous mode [ 117.771997][T10710] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.872617][T10726] __nla_validate_parse: 22 callbacks suppressed [ 117.872672][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2560'. [ 117.888055][T10726] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2560'. [ 117.899676][T10710] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.908903][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2561'. [ 117.921636][T10726] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 117.963870][T10710] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.974021][T10733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.069385][T10710] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.089453][ T3484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 118.170742][T10767] hsr_slave_0: left promiscuous mode [ 118.176642][T10767] hsr_slave_1: left promiscuous mode [ 118.333967][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'. [ 118.366838][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2584'. [ 118.405976][T10790] syz.2.2585[10790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.406160][T10790] syz.2.2585[10790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.417950][T10790] syz.2.2585[10790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.880423][T10815] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2596'. [ 119.059352][T10824] syz.0.2601[10824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.059448][T10824] syz.0.2601[10824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.087816][T10824] syz.0.2601[10824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.112866][T10824] syz.0.2601[10824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.277636][T10028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.278549][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.941985][T10710] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.953168][T10710] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.963948][T10710] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.974921][T10710] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.011863][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2606'. [ 122.044707][T10841] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 122.096103][T10851] bpf_get_probe_write_proto: 2 callbacks suppressed [ 122.096119][T10851] syz.0.2613[10851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.117282][T10851] syz.0.2613[10851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.140159][T10851] syz.0.2613[10851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.210466][T10868] syz.4.2621[10868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.235144][T10868] syz.4.2621[10868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.254651][T10868] syz.4.2621[10868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.285267][T10874] vlan0: entered allmulticast mode [ 122.302171][T10874] bridge_slave_0: entered allmulticast mode [ 122.321183][ T3297] ================================================================== [ 122.329314][ T3297] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 122.336810][ T3297] [ 122.339183][ T3297] read-write to 0xffff888111db9278 of 8 bytes by task 10872 on cpu 0: [ 122.347447][ T3297] inode_add_bytes+0x45/0xd0 [ 122.352082][ T3297] __dquot_alloc_space+0x181/0x8a0 [ 122.357249][ T3297] shmem_inode_acct_blocks+0x124/0x230 [ 122.362790][ T3297] shmem_get_folio_gfp+0x5be/0xd90 [ 122.367935][ T3297] shmem_write_begin+0xa2/0x180 [ 122.372821][ T3297] generic_perform_write+0x1a8/0x4a0 [ 122.378129][ T3297] shmem_file_write_iter+0xc2/0xe0 [ 122.383259][ T3297] __kernel_write_iter+0x24b/0x4e0 [ 122.388853][ T3297] dump_user_range+0x3ac/0x550 [ 122.393635][ T3297] elf_core_dump+0x1bdc/0x1ce0 [ 122.398426][ T3297] do_coredump+0x1898/0x1f40 [ 122.403031][ T3297] get_signal+0xd4f/0x1000 [ 122.407464][ T3297] arch_do_signal_or_restart+0x95/0x4b0 [ 122.413036][ T3297] irqentry_exit_to_user_mode+0xa7/0x120 [ 122.418696][ T3297] irqentry_exit+0x12/0x50 [ 122.423133][ T3297] asm_exc_page_fault+0x26/0x30 [ 122.427991][ T3297] [ 122.430317][ T3297] read to 0xffff888111db9278 of 8 bytes by task 3297 on cpu 1: [ 122.437868][ T3297] generic_fillattr+0x274/0x330 [ 122.442745][ T3297] shmem_getattr+0x17b/0x200 [ 122.447357][ T3297] vfs_statx_path+0x171/0x2d0 [ 122.452049][ T3297] vfs_statx+0xe1/0x170 [ 122.456229][ T3297] __se_sys_newfstatat+0xdc/0x300 [ 122.461267][ T3297] __x64_sys_newfstatat+0x55/0x70 [ 122.466314][ T3297] x64_sys_call+0x236d/0x2dc0 [ 122.471002][ T3297] do_syscall_64+0xc9/0x1c0 [ 122.475514][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.481416][ T3297] [ 122.483746][ T3297] value changed: 0x0000000000003898 -> 0x00000000000038a0 [ 122.490940][ T3297] [ 122.493268][ T3297] Reported by Kernel Concurrency Sanitizer on: [ 122.499427][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller #0 [ 122.508640][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.518707][ T3297] ================================================================== [ 122.551933][T10874] bridge_slave_0: left allmulticast mode [ 122.625395][T10879] syz.0.2624[10879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.625553][T10879] syz.0.2624[10879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.638061][T10879] syz.0.2624[10879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.117484][ T3484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 123.598447][T10030] page_pool_release_retry() stalled pool shutdown: id 47, 1 inflight 60 sec [ 127.037888][ T3484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.237483][ T3549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 129.597740][ T3993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration