last executing test programs: 1m56.527910772s ago: executing program 3 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa064, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x628, 0xc88d, 0x43, 0x0, 0x0) 1m55.990042653s ago: executing program 3 (id=61): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstatfs(r0, &(0x7f0000001780)=""/4096) 1m55.886380153s ago: executing program 3 (id=67): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='rxrpc_peer\x00', r1, 0x0, 0xfffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r0}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 1m55.799194201s ago: executing program 3 (id=72): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[], 0xfdef) 1m55.581380822s ago: executing program 3 (id=75): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) 1m55.49596995s ago: executing program 3 (id=77): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m40.440171989s ago: executing program 32 (id=77): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 49.64475399s ago: executing program 4 (id=1417): ioperm(0x7, 0x81, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x578410eb) sendfile(r2, r0, 0x0, 0x100000000) 48.780151102s ago: executing program 4 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 48.686449801s ago: executing program 4 (id=1440): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) close(r2) 48.640005416s ago: executing program 4 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000580)={[{@noquota}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@data_err_ignore}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 48.374773021s ago: executing program 4 (id=1443): r0 = io_uring_setup(0x7f59, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x1009, 0x197}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) listen(r1, 0x4) close_range(r0, r1, 0x0) 48.037441083s ago: executing program 4 (id=1450): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000000240)=0xf71) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 47.990646388s ago: executing program 33 (id=1450): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000000240)=0xf71) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 4.210554568s ago: executing program 5 (id=2402): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 3.950217483s ago: executing program 5 (id=2408): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x34020000) 3.861840701s ago: executing program 5 (id=2412): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000002000000000ffffffff000000000000000000f2000000000004000000000a0060803b0000", @ANYRES32=0xee01, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 3.76567937s ago: executing program 5 (id=2414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.999746914s ago: executing program 5 (id=2422): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1.193805786s ago: executing program 1 (id=2453): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) sendmsg$rds(0xffffffffffffffff, 0x0, 0x800) 887.748455ms ago: executing program 1 (id=2456): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0xffffe000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r4, &(0x7f0000002380)=""/130, 0x82) 514.464061ms ago: executing program 0 (id=2464): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x6b}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) 455.695747ms ago: executing program 2 (id=2466): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 417.87917ms ago: executing program 6 (id=2467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b4933190432c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e953c03513af3a", 0xb2}, {&(0x7f0000001040)="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", 0x71e}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 416.436701ms ago: executing program 0 (id=2468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0xc3200, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) 398.021682ms ago: executing program 6 (id=2469): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 369.819355ms ago: executing program 6 (id=2470): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') close_range(r2, 0xffffffffffffffff, 0x0) 359.298866ms ago: executing program 0 (id=2471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) socket$nl_netfilter(0x10, 0x3, 0xc) 358.918446ms ago: executing program 2 (id=2472): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000140)="bd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)="b9", 0x1}], 0x1}}], 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) shutdown(r0, 0x1) 314.72669ms ago: executing program 6 (id=2473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r2, 0xffffffffffffffff, 0x0) 310.454631ms ago: executing program 1 (id=2474): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x5f0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x40, 0xb, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x207, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x89, 0x4, 0x100, 0x401, 0x8, 0xffffffff, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0xee, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x80000000, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x0, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0xfffd, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x8, 0x2, 0x81, 0xd44, 0x10, 0x7f, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x408, 0xba, 0x2, 0x89, 0x2, 0x8, 0x6, 0x9, 0xffffa3e0, 0x96, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x89, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x6, 0x7, 0x7, 0xfffffa0c, 0x3, 0x0, 0x2, 0x5, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x3, 0x8, 0x28, 0x4000002, 0x5, 0x7ff, 0x6, 0xf, 0xffffffff, 0xa, 0x723, 0x7e, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x40000000, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x6, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0xb160, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 307.848841ms ago: executing program 0 (id=2475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0x21f3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000ed00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0xcf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/157) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth0_to_batadv\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 281.871743ms ago: executing program 6 (id=2476): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) 281.435814ms ago: executing program 1 (id=2477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000000000000000000000000000010500000010000000000000000000000b02"], 0x0, 0x4e}, 0x20) socket(0x25, 0xa, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) 254.978366ms ago: executing program 2 (id=2478): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_notify(0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x4, &(0x7f0000006680)) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\x00') semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) 234.735518ms ago: executing program 1 (id=2479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b4933190432c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e953c03513af3a", 0xb2}, {&(0x7f0000001040)="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", 0x71e}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 209.056381ms ago: executing program 1 (id=2480): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x2, 0x5) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0xc49, 0x1, 0x0, 0x0) pause() 188.599952ms ago: executing program 5 (id=2481): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 136.999967ms ago: executing program 2 (id=2482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000100001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 129.935988ms ago: executing program 2 (id=2483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 44.970906ms ago: executing program 2 (id=2484): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') close_range(r2, 0xffffffffffffffff, 0x0) 42.789426ms ago: executing program 0 (id=2494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 23.849258ms ago: executing program 0 (id=2485): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0xffffe000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r4, &(0x7f0000002380)=""/130, 0x82) 0s ago: executing program 6 (id=2486): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x10000001}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): change from 0 to 8192 [ 76.467583][ T4379] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 76.475551][ T4379] FAT-fs (loop5): Filesystem has been set read-only [ 76.523588][ T29] audit: type=1326 audit(1766363635.036:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6250 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 76.547208][ T29] audit: type=1326 audit(1766363635.046:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6250 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 76.590603][ T29] audit: type=1326 audit(1766363635.046:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6250 comm="syz.5.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 76.640772][ T6259] loop2: detected capacity change from 0 to 128 [ 76.646914][ T6257] pim6reg: entered allmulticast mode [ 76.668875][ T6259] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.682009][ T6259] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.689563][ T6262] pim6reg: left allmulticast mode [ 76.715808][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.743779][ T6256] lo speed is unknown, defaulting to 1000 [ 77.083431][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'. [ 77.145594][ T3483] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 77.169742][ T3483] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.324558][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 77.363094][ T6298] pim6reg: entered allmulticast mode [ 77.370686][ T6298] pim6reg: left allmulticast mode [ 77.400370][ T6296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.863'. [ 77.652456][ T6313] bridge0: port 1(gretap0) entered blocking state [ 77.659019][ T6313] bridge0: port 1(gretap0) entered disabled state [ 77.666042][ T6313] gretap0: entered allmulticast mode [ 77.672074][ T6313] gretap0: entered promiscuous mode [ 77.677750][ T6313] bridge0: port 1(gretap0) entered blocking state [ 77.684329][ T6313] bridge0: port 1(gretap0) entered forwarding state [ 77.694464][ T6313] gretap0: left allmulticast mode [ 77.699550][ T6313] gretap0: left promiscuous mode [ 77.704762][ T6313] bridge0: port 1(gretap0) entered disabled state [ 77.728636][ T6315] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 78.381070][ T6340] loop5: detected capacity change from 0 to 764 [ 78.412057][ T6340] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 79.052788][ T6370] loop0: detected capacity change from 0 to 128 [ 79.066863][ T6370] syz.0.897: attempt to access beyond end of device [ 79.066863][ T6370] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 79.082371][ T6370] syz.0.897: attempt to access beyond end of device [ 79.082371][ T6370] loop0: rw=0, sector=97, nr_sectors = 32 limit=128 [ 79.096247][ T6370] syz.0.897: attempt to access beyond end of device [ 79.096247][ T6370] loop0: rw=0, sector=145, nr_sectors = 3 limit=128 [ 79.135407][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'. [ 79.149418][ T1683] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.158388][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'. [ 79.161528][ T1683] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.175829][ T1683] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.184473][ T1683] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.267367][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.303240][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 79.312281][ T6391] netlink: 'syz.1.907': attribute type 12 has an invalid length. [ 79.325071][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.333813][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.342656][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 79.351664][ T6391] netlink: 'syz.1.907': attribute type 12 has an invalid length. [ 79.359950][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.368328][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.416386][ T6396] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.426308][ T6396] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.456063][ T6396] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.465918][ T6396] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.516097][ T6396] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.526117][ T6396] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.586253][ T6396] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.596126][ T6396] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.683785][ T1678] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.684570][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'. [ 79.692107][ T1678] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.723935][ T1678] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.732235][ T1678] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.740546][ T1678] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.748924][ T1678] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.761881][ T1678] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.770196][ T1678] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.827777][ T6411] loop5: detected capacity change from 0 to 128 [ 79.843902][ T6411] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.884300][ T6411] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.979358][ T4379] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.060664][ T6424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6424 comm=syz.5.919 [ 80.336556][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.414042][ T3426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.497392][ T6451] loop1: detected capacity change from 0 to 128 [ 80.515825][ T6451] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.563857][ T6451] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.588266][ T1683] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.624221][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.632495][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.641000][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.649376][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.664069][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.672370][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.680662][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.751444][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 80.751463][ T29] audit: type=1400 audit(1766363639.266:1108): avc: denied { connect } for pid=6470 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.804693][ T6473] loop4: detected capacity change from 0 to 764 [ 80.814478][ T6473] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 80.941339][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 81.114216][ T6500] loop2: detected capacity change from 0 to 512 [ 81.137274][ T6500] ------------[ cut here ]------------ [ 81.142788][ T6500] EA inode 11 i_nlink=2 [ 81.142807][ T6500] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.2.952/6500 [ 81.157780][ T6500] Modules linked in: [ 81.161811][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.2.952 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.171550][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.181745][ T6500] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 81.188522][ T6500] Code: 81 e2 9c ff 4c 8d 2d 3a f1 20 05 49 8d 7e 40 e8 81 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 95 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 8c ad ba 03 66 66 66 2e 0f 1f 84 [ 81.208223][ T6500] RSP: 0018:ffffc9001010b5a0 EFLAGS: 00010246 [ 81.214428][ T6500] RAX: ffff88811834cc90 RBX: ffff88811a88a080 RCX: ffffffff81bb1c6b [ 81.222442][ T6500] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0d90 [ 81.230555][ T6500] RBP: 000000000000000b R08: 000188811a88a033 R09: 0000000000000000 [ 81.238680][ T6500] R10: ffffc9001010b4d0 R11: 0001c9001010b4d0 R12: ffff88811a88a030 [ 81.246772][ T6500] R13: ffffffff86dc0d90 R14: ffff88811a889fe8 R15: 0000000000000001 [ 81.254808][ T6500] FS: 00007f4374ce76c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 81.263873][ T6500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.270511][ T6500] CR2: 00007f4376262a60 CR3: 000000012342c000 CR4: 00000000003506f0 [ 81.278661][ T6500] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 81.286763][ T6500] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 81.294809][ T6500] Call Trace: [ 81.298150][ T6500] [ 81.301115][ T6500] ext4_xattr_set_entry+0x77f/0x1020 [ 81.306565][ T6500] ext4_xattr_ibody_set+0x184/0x3c0 [ 81.311885][ T6500] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 81.317852][ T6500] __ext4_expand_extra_isize+0x246/0x280 [ 81.323598][ T6500] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 81.329122][ T6500] ext4_evict_inode+0x7c4/0xd40 [ 81.334070][ T6500] ? __pfx_ext4_evict_inode+0x10/0x10 [ 81.339557][ T6500] evict+0x2af/0x510 [ 81.343530][ T6500] ? __dquot_initialize+0x146/0x7c0 [ 81.348773][ T6500] iput+0x4bd/0x650 [ 81.352680][ T6500] ext4_process_orphan+0x1a9/0x1c0 [ 81.357957][ T6500] ext4_orphan_cleanup+0x6a8/0xa00 [ 81.362173][ T6509] loop4: detected capacity change from 0 to 128 [ 81.363157][ T6500] ext4_fill_super+0x3411/0x37a0 [ 81.374455][ T6500] ? set_blocksize+0x1a8/0x310 [ 81.379279][ T6500] ? sb_set_blocksize+0xfc/0x170 [ 81.384316][ T6500] ? setup_bdev_super+0x30e/0x370 [ 81.389470][ T6500] ? __pfx_ext4_fill_super+0x10/0x10 [ 81.394891][ T6500] get_tree_bdev_flags+0x291/0x300 [ 81.396784][ T6509] syz.4.956: attempt to access beyond end of device [ 81.396784][ T6509] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 81.400080][ T6500] ? __pfx_ext4_fill_super+0x10/0x10 [ 81.418730][ T6500] get_tree_bdev+0x1f/0x30 [ 81.423268][ T6500] ext4_get_tree+0x1c/0x30 [ 81.427854][ T6500] vfs_get_tree+0x57/0x1d0 [ 81.432320][ T6500] do_new_mount+0x24d/0x6a0 [ 81.437090][ T6500] path_mount+0x4ab/0xb80 [ 81.441468][ T6500] ? user_path_at+0xbf/0x130 [ 81.441460][ T6509] syz.4.956: attempt to access beyond end of device [ 81.441460][ T6509] loop4: rw=0, sector=97, nr_sectors = 32 limit=128 [ 81.441521][ T6509] syz.4.956: attempt to access beyond end of device [ 81.441521][ T6509] loop4: rw=0, sector=145, nr_sectors = 3 limit=128 [ 81.446156][ T6500] __se_sys_mount+0x28c/0x2e0 [ 81.477103][ T6500] __x64_sys_mount+0x67/0x80 [ 81.481711][ T6500] x64_sys_call+0x2cca/0x3000 [ 81.486456][ T6500] do_syscall_64+0xca/0x2b0 [ 81.491032][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.497138][ T6500] RIP: 0033:0x7f4376280eea [ 81.501622][ T6500] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.521484][ T6500] RSP: 002b:00007f4374ce6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.529945][ T6500] RAX: ffffffffffffffda RBX: 00007f4374ce6ef0 RCX: 00007f4376280eea [ 81.537983][ T6500] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f4374ce6eb0 [ 81.546162][ T6500] RBP: 0000200000000180 R08: 00007f4374ce6ef0 R09: 0000000000800718 [ 81.554219][ T6500] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 81.562221][ T6500] R13: 00007f4374ce6eb0 R14: 000000000000046f R15: 0000200000000200 [ 81.570299][ T6500] [ 81.573497][ T6500] ---[ end trace 0000000000000000 ]--- [ 81.579653][ T6500] EXT4-fs (loop2): 1 orphan inode deleted [ 81.589460][ T6500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.640064][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.694079][ T6518] netlink: 176 bytes leftover after parsing attributes in process `syz.4.963'. [ 81.714776][ T6519] loop2: detected capacity change from 0 to 764 [ 81.721356][ T6521] SELinux: policydb version 0 does not match my version range 15-35 [ 81.733010][ T6519] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 81.759531][ T6521] SELinux: failed to load policy [ 82.252955][ T29] audit: type=1400 audit(1766363640.766:1109): avc: denied { read } for pid=6562 comm="syz.4.980" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.276584][ T29] audit: type=1400 audit(1766363640.766:1110): avc: denied { open } for pid=6562 comm="syz.4.980" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.317108][ T29] audit: type=1400 audit(1766363640.796:1111): avc: denied { ioctl } for pid=6562 comm="syz.4.980" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.374764][ T29] audit: type=1400 audit(1766363640.896:1112): avc: denied { ioctl } for pid=6568 comm="syz.4.983" path="socket:[17049]" dev="sockfs" ino=17049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.443061][ T6574] loop1: detected capacity change from 0 to 512 [ 82.452674][ T6574] EXT4-fs: Ignoring removed i_version option [ 82.458923][ T6574] EXT4-fs: Ignoring removed bh option [ 82.493074][ T6574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.510181][ T6584] all: renamed from team_slave_0 [ 82.522254][ T6574] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.563588][ T29] audit: type=1400 audit(1766363641.076:1113): avc: denied { append } for pid=6572 comm="syz.1.986" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.598816][ T6586] __nla_validate_parse: 4 callbacks suppressed [ 82.598894][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.5.990'. [ 82.643648][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.703265][ T6597] bridge0: port 3(gretap0) entered blocking state [ 82.709868][ T6597] bridge0: port 3(gretap0) entered disabled state [ 82.716735][ T6597] gretap0: entered allmulticast mode [ 82.722771][ T6597] gretap0: entered promiscuous mode [ 82.728561][ T6597] bridge0: port 3(gretap0) entered blocking state [ 82.735058][ T6597] bridge0: port 3(gretap0) entered forwarding state [ 82.745723][ T6597] gretap0: left allmulticast mode [ 82.750829][ T6597] gretap0: left promiscuous mode [ 82.756016][ T6597] bridge0: port 3(gretap0) entered disabled state [ 82.799773][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 82.817801][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 82.993740][ T342] batadv1: left promiscuous mode [ 83.166564][ T29] audit: type=1400 audit(1766363641.656:1114): avc: denied { mount } for pid=6614 comm="syz.2.1002" name="/" dev="gadgetfs" ino=4715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.188986][ T29] audit: type=1400 audit(1766363641.656:1115): avc: denied { mounton } for pid=6614 comm="syz.2.1002" path="/" dev="gadgetfs" ino=4715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 83.210889][ T29] audit: type=1400 audit(1766363641.686:1116): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.240593][ T6619] loop5: detected capacity change from 0 to 1024 [ 83.247837][ T6619] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 83.339596][ T6621] 9pnet: p9_errstr2errno: server reported unknown error [ 83.603702][ T29] audit: type=1326 audit(1766363642.046:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437627f749 code=0x7ffc0000 [ 83.923962][ T6643] loop4: detected capacity change from 0 to 2048 [ 83.930829][ T6643] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.945910][ T6643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.990325][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.032734][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 84.476375][ T3383] net_ratelimit: 7 callbacks suppressed [ 84.476395][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.535603][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'. [ 84.632773][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1037'. [ 84.673809][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 84.678883][ T6697] syzkaller0: create flow: hash 1479651217 index 1 [ 84.706741][ T6691] syzkaller0: entered promiscuous mode [ 84.712305][ T6691] syzkaller0: entered allmulticast mode [ 84.726920][ T342] syzkaller0: tun_net_xmit 48 [ 84.737567][ T6690] syzkaller0: delete flow: hash 1479651217 index 1 [ 84.789122][ T6695] syz.0.1038 (6695) used greatest stack depth: 10192 bytes left [ 84.801620][ T6700] bridge0: port 3(gretap0) entered blocking state [ 84.808186][ T6700] bridge0: port 3(gretap0) entered disabled state [ 84.818031][ T6700] gretap0: entered allmulticast mode [ 84.834512][ T6700] gretap0: entered promiscuous mode [ 84.844809][ T6700] gretap0: left allmulticast mode [ 84.849901][ T6700] gretap0: left promiscuous mode [ 84.855158][ T6700] bridge0: port 3(gretap0) entered disabled state [ 84.864292][ T6702] syzkaller1: entered promiscuous mode [ 84.869986][ T6702] syzkaller1: entered allmulticast mode [ 84.878879][ T6704] loop4: detected capacity change from 0 to 128 [ 84.897108][ T6704] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.909546][ T6704] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.937949][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.970478][ T6712] loop5: detected capacity change from 0 to 128 [ 85.011657][ T6712] syz.5.1045: attempt to access beyond end of device [ 85.011657][ T6712] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 85.026967][ T6712] syz.5.1045: attempt to access beyond end of device [ 85.026967][ T6712] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 85.046953][ T6712] syz.5.1045: attempt to access beyond end of device [ 85.046953][ T6712] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 85.061781][ T6717] syz.5.1045: attempt to access beyond end of device [ 85.061781][ T6717] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 85.089570][ T6712] syz.5.1045: attempt to access beyond end of device [ 85.089570][ T6712] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 85.106009][ T6719] loop2: detected capacity change from 0 to 256 [ 85.114298][ T6717] syz.5.1045: attempt to access beyond end of device [ 85.114298][ T6717] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 85.129993][ T6712] syz.5.1045: attempt to access beyond end of device [ 85.129993][ T6712] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 85.147055][ T6717] syz.5.1045: attempt to access beyond end of device [ 85.147055][ T6717] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 85.161000][ T6712] syz.5.1045: attempt to access beyond end of device [ 85.161000][ T6712] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 85.174666][ T6717] syz.5.1045: attempt to access beyond end of device [ 85.174666][ T6717] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 85.506485][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.661006][ T6767] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 85.671137][ T6767] bond0: (slave dummy0): Releasing backup interface [ 85.681013][ T6767] team0: Port device dummy0 added [ 85.692243][ T6764] bridge0: port 1(gretap0) entered blocking state [ 85.694937][ T6767] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 85.699009][ T6764] bridge0: port 1(gretap0) entered disabled state [ 85.713576][ T6764] gretap0: entered allmulticast mode [ 85.720211][ T6764] gretap0: entered promiscuous mode [ 85.745387][ T6767] team0: Port device dummy0 removed [ 85.753154][ T6769] loop4: detected capacity change from 0 to 2048 [ 85.753549][ T6767] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.791489][ T6770] gretap0: left allmulticast mode [ 85.796795][ T6770] gretap0: left promiscuous mode [ 85.801960][ T6770] bridge0: port 1(gretap0) entered disabled state [ 85.816354][ T3539] GPT:first_usable_lbas don't match. [ 85.821748][ T3539] GPT:34 != 290 [ 85.825445][ T3539] GPT: Use GNU Parted to correct GPT errors. [ 85.831593][ T3539] loop4: p1 p2 p3 [ 85.851236][ T6769] GPT:first_usable_lbas don't match. [ 85.856727][ T6769] GPT:34 != 290 [ 85.860260][ T6769] GPT: Use GNU Parted to correct GPT errors. [ 85.866626][ T6769] loop4: p1 p2 p3 [ 85.990966][ T6784] udevd[6784]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 85.997297][ T6783] udevd[6783]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 86.010950][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 86.042388][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 86.042406][ T29] audit: type=1400 audit(1766363644.556:1171): avc: denied { write } for pid=6788 comm="syz.0.1075" name="unix" dev="proc" ino=4026532424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 86.109610][ T6783] udevd[6783]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 86.115997][ T6784] udevd[6784]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 86.130605][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 86.202035][ T29] audit: type=1326 audit(1766363644.716:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 86.236318][ T29] audit: type=1326 audit(1766363644.746:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 86.241610][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 86.260174][ T29] audit: type=1326 audit(1766363644.746:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a0ffaf783 code=0x7ffc0000 [ 86.292146][ T29] audit: type=1326 audit(1766363644.746:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a0ffaf783 code=0x7ffc0000 [ 86.315475][ T29] audit: type=1326 audit(1766363644.746:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 86.339011][ T29] audit: type=1326 audit(1766363644.746:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 86.362469][ T29] audit: type=1326 audit(1766363644.746:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 86.386135][ T29] audit: type=1326 audit(1766363644.746:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 86.409584][ T29] audit: type=1326 audit(1766363644.746:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.5.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 86.442837][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 86.465028][ T3484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.548788][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.787118][ T6808] loop2: detected capacity change from 0 to 512 [ 86.802894][ T6808] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1083: error while reading EA inode 32 err=-116 [ 86.818546][ T6808] EXT4-fs (loop2): Remounting filesystem read-only [ 86.825279][ T6808] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 86.835794][ T6808] EXT4-fs (loop2): 1 orphan inode deleted [ 86.842151][ T6808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.873296][ T6811] bridge0: port 1(gretap0) entered blocking state [ 86.879965][ T6811] bridge0: port 1(gretap0) entered disabled state [ 86.886920][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.887309][ T6811] gretap0: entered allmulticast mode [ 86.902285][ T6811] gretap0: entered promiscuous mode [ 86.925195][ T6811] bridge0: port 1(gretap0) entered blocking state [ 86.931887][ T6811] bridge0: port 1(gretap0) entered forwarding state [ 86.955334][ T6817] gretap0: left allmulticast mode [ 86.960475][ T6817] gretap0: left promiscuous mode [ 86.965795][ T6817] bridge0: port 1(gretap0) entered disabled state [ 86.980980][ T6821] netlink: 'syz.0.1096': attribute type 4 has an invalid length. [ 86.988854][ T6821] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1096'. [ 87.000004][ T6821] .`: renamed from $Hÿ [ 87.213998][ T6843] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 87.423911][ T3484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.586613][ T3406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.777655][ T6851] bridge0: port 4(gretap0) entered blocking state [ 87.784219][ T6851] bridge0: port 4(gretap0) entered disabled state [ 87.790907][ T6851] gretap0: entered allmulticast mode [ 87.797186][ T6851] gretap0: entered promiscuous mode [ 87.802922][ T6851] bridge0: port 4(gretap0) entered blocking state [ 87.809404][ T6851] bridge0: port 4(gretap0) entered forwarding state [ 87.821353][ T6852] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.861184][ T6851] gretap0: left allmulticast mode [ 87.866300][ T6851] gretap0: left promiscuous mode [ 87.871409][ T6851] bridge0: port 4(gretap0) entered disabled state [ 87.914139][ T6852] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.941130][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1106'. [ 87.950231][ T6864] netlink: 'syz.0.1106': attribute type 7 has an invalid length. [ 87.958189][ T6864] netlink: 'syz.0.1106': attribute type 8 has an invalid length. [ 87.965990][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 87.994431][ T6862] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 88.016275][ T6852] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.063639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.128598][ T6852] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.182788][ T1579] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.196232][ T1579] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.209589][ T1579] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.222386][ T1579] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.290172][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 88.319808][ T6890] bridge0: port 1(gretap0) entered blocking state [ 88.326492][ T6890] bridge0: port 1(gretap0) entered disabled state [ 88.333311][ T6890] gretap0: entered allmulticast mode [ 88.339629][ T6890] gretap0: entered promiscuous mode [ 88.345224][ T6890] bridge0: port 1(gretap0) entered blocking state [ 88.351697][ T6890] bridge0: port 1(gretap0) entered forwarding state [ 88.366189][ T6890] gretap0: left allmulticast mode [ 88.371324][ T6890] gretap0: left promiscuous mode [ 88.376566][ T6890] bridge0: port 1(gretap0) entered disabled state [ 88.547616][ T6906] infiniband syz!: set active [ 88.552417][ T6906] infiniband syz!: added team_slave_0 [ 88.570722][ T6906] RDS/IB: syz!: added [ 88.574928][ T6906] smc: adding ib device syz! with port count 1 [ 88.581340][ T6906] smc: ib device syz! port 1 has no pnetid [ 88.627342][ T3483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.698818][ T6911] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.708927][ T6911] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.750834][ T6911] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.760713][ T6911] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.806740][ T6911] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.816592][ T6911] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.867772][ T6911] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.877650][ T6911] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.921305][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 88.963269][ T6919] bridge0: port 3(gretap0) entered blocking state [ 88.969866][ T6919] bridge0: port 3(gretap0) entered disabled state [ 88.989367][ T6919] gretap0: entered allmulticast mode [ 88.999448][ T6919] gretap0: entered promiscuous mode [ 89.008332][ T52] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.016610][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.025125][ T6919] gretap0: left allmulticast mode [ 89.030244][ T6919] gretap0: left promiscuous mode [ 89.035546][ T6919] bridge0: port 3(gretap0) entered disabled state [ 89.069490][ T6923] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1133'. [ 89.090180][ T52] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.098524][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.135580][ T52] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.143865][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.155579][ T52] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.163900][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.185679][ T6932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1137'. [ 89.236102][ T6935] syzkaller1: entered promiscuous mode [ 89.241783][ T6935] syzkaller1: entered allmulticast mode [ 89.316032][ T6938] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6938 comm=syz.1.1140 [ 89.553825][ T6952] netlink: 'syz.1.1147': attribute type 3 has an invalid length. [ 89.572744][ T6952] netlink: 'syz.1.1147': attribute type 3 has an invalid length. [ 89.605834][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1150'. [ 89.666899][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.713213][ T6966] netlink: 'syz.4.1152': attribute type 10 has an invalid length. [ 89.721913][ T6968] all: renamed from team_slave_0 (while UP) [ 89.763798][ T6973] netlink: 'syz.4.1152': attribute type 10 has an invalid length. [ 89.779235][ T6966] bridge0: port 3(dummy0) entered disabled state [ 89.813544][ T6966] dummy0: left allmulticast mode [ 89.818577][ T6966] dummy0: left promiscuous mode [ 89.823823][ T6966] bridge0: port 3(dummy0) entered disabled state [ 89.846616][ T6966] team0: Port device dummy0 added [ 89.862345][ T6973] team0: Port device dummy0 removed [ 89.879391][ T6973] dummy0: entered promiscuous mode [ 89.890787][ T6973] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 89.977696][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1162'. [ 89.987009][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1162'. [ 90.029748][ T6994] loop5: detected capacity change from 0 to 512 [ 90.044552][ T6994] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 90.126070][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 90.202917][ T7005] loop5: detected capacity change from 0 to 1024 [ 90.227727][ T7005] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.257312][ T7005] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #3: block 1: comm syz.5.1168: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.271699][ T7005] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1168: Failed to acquire dquot type 0 [ 90.283601][ T7005] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.1168: Freeing blocks not in datazone - block = 0, count = 4096 [ 90.299770][ T7005] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1168: Invalid inode bitmap blk 0 in block_group 0 [ 90.312726][ T37] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.333628][ T7005] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 90.343569][ T37] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 90.356416][ T7005] EXT4-fs (loop5): 1 orphan inode deleted [ 90.367564][ T7005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.375534][ T7015] bridge0: port 1(batadv1) entered blocking state [ 90.386603][ T7015] bridge0: port 1(batadv1) entered disabled state [ 90.394988][ T7015] batadv1: entered allmulticast mode [ 90.400914][ T7015] batadv1: entered promiscuous mode [ 90.432303][ T4379] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.443881][ T37] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.463712][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.463868][ T37] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 90.677784][ T7043] IPv6: Can't replace route, no match found [ 90.708059][ T4692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.787201][ T7053] loop0: detected capacity change from 0 to 512 [ 90.832958][ T7053] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.852916][ T7052] lo speed is unknown, defaulting to 1000 [ 90.862952][ T7053] EXT4-fs (loop0): 1 truncate cleaned up [ 90.869673][ T7053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.886477][ T52] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 90.895754][ T52] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 91.078406][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.090650][ T7069] netlink: 'syz.4.1194': attribute type 3 has an invalid length. [ 91.099480][ T7069] netlink: 'syz.4.1194': attribute type 3 has an invalid length. [ 91.293558][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.776031][ T7101] netlink: 'syz.2.1206': attribute type 3 has an invalid length. [ 91.891114][ T7101] netlink: 'syz.2.1206': attribute type 3 has an invalid length. [ 92.003781][ T7116] SELinux: failed to load policy [ 92.273492][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 92.273512][ T29] audit: type=1400 audit(1766363650.746:1327): avc: denied { read } for pid=7139 comm="syz.0.1221" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.302542][ T29] audit: type=1400 audit(1766363650.746:1328): avc: denied { open } for pid=7139 comm="syz.0.1221" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.425714][ T7173] veth1_to_bond: entered promiscuous mode [ 92.598023][ T7199] netlink: 'syz.5.1232': attribute type 13 has an invalid length. [ 92.676557][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.683796][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.751474][ T29] audit: type=1400 audit(1766363651.266:1329): avc: denied { create } for pid=7210 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.810622][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.818083][ T29] audit: type=1400 audit(1766363651.266:1330): avc: denied { bind } for pid=7210 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.853215][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.941938][ T7164] veth1_to_bond: left promiscuous mode [ 92.948793][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.975604][ T52] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.014284][ T29] audit: type=1326 audit(1766363651.526:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7274 comm="syz.0.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 93.037950][ T29] audit: type=1326 audit(1766363651.526:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7274 comm="syz.0.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 93.061333][ T29] audit: type=1326 audit(1766363651.526:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7274 comm="syz.0.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 93.064340][ T52] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.084879][ T29] audit: type=1326 audit(1766363651.526:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7274 comm="syz.0.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 93.104557][ T52] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.116539][ T29] audit: type=1326 audit(1766363651.526:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7274 comm="syz.0.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 93.148226][ T29] audit: type=1326 audit(1766363651.526:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7274 comm="syz.0.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 93.223729][ T7286] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 93.279368][ T7292] bridge0: port 3(batadv1) entered blocking state [ 93.285913][ T7292] bridge0: port 3(batadv1) entered disabled state [ 93.309443][ T7292] batadv1: entered allmulticast mode [ 93.321186][ T7292] batadv1: entered promiscuous mode [ 93.365702][ T7311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7311 comm=syz.1.1243 [ 93.425455][ T7317] SELinux: failed to load policy [ 93.573236][ T7332] SELinux: failed to load policy [ 93.655024][ T7348] bridge0: port 3(batadv2) entered blocking state [ 93.661630][ T7348] bridge0: port 3(batadv2) entered disabled state [ 93.668277][ T7348] batadv2: entered allmulticast mode [ 93.674076][ T7348] batadv2: entered promiscuous mode [ 93.728382][ T7353] netlink: 'syz.0.1260': attribute type 5 has an invalid length. [ 93.783429][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 93.792725][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 93.825496][ T7358] netlink: 'syz.2.1262': attribute type 30 has an invalid length. [ 93.918751][ T7369] netlink: 'syz.0.1277': attribute type 30 has an invalid length. [ 93.977820][ T7371] veth1_to_bond: entered promiscuous mode [ 94.153499][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 94.162950][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 94.231744][ T7368] veth1_to_bond: left promiscuous mode [ 95.246663][ T7410] tipc: Enabling of bearer rejected, failed to enable media [ 95.292892][ T1579] tipc: Subscription rejected, illegal request [ 95.391983][ T7425] __nla_validate_parse: 21 callbacks suppressed [ 95.391997][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 95.407483][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1292'. [ 95.416732][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 95.427978][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1292'. [ 95.437025][ T7425] netlink: 'syz.4.1292': attribute type 6 has an invalid length. [ 95.509004][ T7437] netlink: 'syz.1.1296': attribute type 13 has an invalid length. [ 95.652332][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.696143][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.706370][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.755743][ T52] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.764374][ T52] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.773737][ T52] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.782241][ T52] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.833426][ T52] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.841926][ T52] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.872697][ T52] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.881179][ T52] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.132718][ T7472] loop2: detected capacity change from 0 to 2048 [ 96.195431][ T7472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 96.331235][ T7472] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.386911][ T7472] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 654 with error 28 [ 96.399567][ T7472] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.399567][ T7472] [ 96.409398][ T7472] EXT4-fs (loop2): Total free blocks count 0 [ 96.415652][ T7472] EXT4-fs (loop2): Free/Dirty block details [ 96.421673][ T7472] EXT4-fs (loop2): free_blocks=2415919104 [ 96.427605][ T7472] EXT4-fs (loop2): dirty_blocks=656 [ 96.432819][ T7472] EXT4-fs (loop2): Block reservation details [ 96.438871][ T7472] EXT4-fs (loop2): i_reserved_data_blocks=41 [ 96.462262][ T7492] netlink: 'syz.4.1315': attribute type 13 has an invalid length. [ 96.541942][ T7472] syz.2.1311 (7472) used greatest stack depth: 10120 bytes left [ 96.616846][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.624283][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.634786][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1317'. [ 96.674814][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 96.915510][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.966060][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.066798][ T3484] lo speed is unknown, defaulting to 1000 [ 97.072610][ T3484] syz1: Port: 1 Link DOWN [ 97.078188][ T52] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.086807][ T52] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.095457][ T4700] lo speed is unknown, defaulting to 1000 [ 97.105477][ T3427] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 97.142153][ T52] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.150783][ T52] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.159653][ T52] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.168157][ T52] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.177458][ T52] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.185967][ T52] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.264416][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 97.273400][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 97.431880][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 97.431898][ T29] audit: type=1400 audit(1766363655.946:1425): avc: denied { connect } for pid=7525 comm="syz.1.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.468365][ T7531] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1329'. [ 97.478671][ T7531] netlink: zone id is out of range [ 97.483884][ T7531] netlink: zone id is out of range [ 97.489517][ T7531] netlink: zone id is out of range [ 97.494743][ T7531] netlink: zone id is out of range [ 97.499921][ T7531] netlink: zone id is out of range [ 97.505397][ T7531] netlink: del zone limit has 8 unknown bytes [ 97.548280][ T7536] all: renamed from team_slave_0 [ 97.839781][ T29] audit: type=1326 audit(1766363656.356:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1c20f749 code=0x7ffc0000 [ 97.888443][ T29] audit: type=1326 audit(1766363656.396:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d1c20f749 code=0x7ffc0000 [ 97.912003][ T29] audit: type=1326 audit(1766363656.396:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1c20f749 code=0x7ffc0000 [ 97.935458][ T29] audit: type=1326 audit(1766363656.396:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1c20f749 code=0x7ffc0000 [ 97.959148][ T29] audit: type=1326 audit(1766363656.406:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f6d1c20f749 code=0x7ffc0000 [ 97.982787][ T29] audit: type=1326 audit(1766363656.406:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1c20f749 code=0x7ffc0000 [ 98.006234][ T29] audit: type=1326 audit(1766363656.406:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7555 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1c20f749 code=0x7ffc0000 [ 98.056341][ T7561] loop4: detected capacity change from 0 to 2048 [ 98.085808][ T29] audit: type=1326 audit(1766363656.606:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.5.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 98.168713][ T29] audit: type=1326 audit(1766363656.626:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.5.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 98.170013][ T7561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 98.350304][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 98.376064][ T7580] SELinux: failed to load policy [ 98.380103][ T7561] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.400057][ T7561] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1368 with error 28 [ 98.405825][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 98.412795][ T7561] EXT4-fs (loop4): This should not happen!! Data will be lost [ 98.412795][ T7561] [ 98.431198][ T7561] EXT4-fs (loop4): Total free blocks count 0 [ 98.437260][ T7561] EXT4-fs (loop4): Free/Dirty block details [ 98.443168][ T7561] EXT4-fs (loop4): free_blocks=2415919104 [ 98.448957][ T7561] EXT4-fs (loop4): dirty_blocks=1376 [ 98.454294][ T7561] EXT4-fs (loop4): Block reservation details [ 98.460311][ T7561] EXT4-fs (loop4): i_reserved_data_blocks=86 [ 98.476807][ T7584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.539512][ T7590] bond3 (unregistering): Released all slaves [ 98.575442][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 98.872370][ T7624] bridge0: port 4(gretap0) entered blocking state [ 98.878941][ T7624] bridge0: port 4(gretap0) entered disabled state [ 98.886009][ T7624] gretap0: entered allmulticast mode [ 98.891986][ T7624] gretap0: entered promiscuous mode [ 98.900074][ T7624] gretap0: left allmulticast mode [ 98.905225][ T7624] gretap0: left promiscuous mode [ 98.910403][ T7624] bridge0: port 4(gretap0) entered disabled state [ 99.472348][ T7668] lo speed is unknown, defaulting to 1000 [ 99.742930][ T7686] netlink: 'syz.4.1390': attribute type 4 has an invalid length. [ 99.766410][ T7686] .`: renamed from $Hÿ [ 100.056157][ T7710] sctp: [Deprecated]: syz.0.1400 (pid 7710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.056157][ T7710] Use struct sctp_sack_info instead [ 100.253491][ T7718] SELinux: failed to load policy [ 100.809476][ T7761] lo speed is unknown, defaulting to 1000 [ 101.157977][ T7759] __nla_validate_parse: 10 callbacks suppressed [ 101.157996][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 101.382186][ T7782] tipc: Enabled bearer , priority 0 [ 101.420491][ T7782] tipc: Disabling bearer [ 101.688698][ T7804] loop4: detected capacity change from 0 to 512 [ 101.725534][ T7804] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1441: Parent and EA inode have the same ino 15 [ 101.791161][ T7804] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1441: Parent and EA inode have the same ino 15 [ 101.824669][ T7804] EXT4-fs (loop4): 1 orphan inode deleted [ 101.830891][ T7804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.876588][ T3328] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 101.897331][ T3328] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 15 [ 101.909551][ T3328] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 15 [ 102.095911][ T7815] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.109177][ T7815] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 102.165886][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1447'. [ 102.244878][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.516938][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 102.533521][ T7852] bridge_slave_1: left allmulticast mode [ 102.539204][ T7852] bridge_slave_1: left promiscuous mode [ 102.544952][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.559390][ T7854] netlink: 'syz.5.1461': attribute type 13 has an invalid length. [ 102.621684][ T7829] lo speed is unknown, defaulting to 1000 [ 102.708060][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 102.708078][ T29] audit: type=1400 audit(1766363661.226:1533): avc: denied { write } for pid=7872 comm="syz.0.1469" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.941085][ T7829] chnl_net:caif_netlink_parms(): no params data found [ 103.020696][ T7901] loop2: detected capacity change from 0 to 1024 [ 103.080082][ T7901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.143528][ T7901] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.191140][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.198312][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.213541][ T7829] bridge_slave_0: entered allmulticast mode [ 103.220117][ T7829] bridge_slave_0: entered promiscuous mode [ 103.227283][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.234506][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.241745][ T7829] bridge_slave_1: entered allmulticast mode [ 103.248363][ T7829] bridge_slave_1: entered promiscuous mode [ 103.264109][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.287017][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.305104][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.318590][ T7900] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1480: bg 0: block 112: padding at end of block bitmap is not set [ 103.350439][ T7829] team0: Port device team_slave_0 added [ 103.357360][ T7829] team0: Port device team_slave_1 added [ 103.382302][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.389338][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.415475][ T7829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.449313][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.460250][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.467351][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.493394][ T7829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.564982][ T7829] hsr_slave_0: entered promiscuous mode [ 103.571100][ T7829] hsr_slave_1: entered promiscuous mode [ 103.577274][ T7829] debugfs: 'hsr0' already exists in 'hsr' [ 103.583024][ T7829] Cannot create hsr debugfs directory [ 103.677064][ T7940] tipc: Started in network mode [ 103.682025][ T7940] tipc: Node identity 0e91ad089588, cluster identity 4711 [ 103.689288][ T7940] tipc: Enabled bearer , priority 0 [ 103.719925][ T7940] tipc: Disabling bearer [ 103.783003][ T7829] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.799280][ T7953] netlink: 'syz.2.1489': attribute type 15 has an invalid length. [ 103.807215][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1489'. [ 103.851604][ T7829] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.874273][ T7829] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.898828][ T7829] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.910922][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 103.921433][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 103.931885][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 103.942050][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 104.003552][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.017547][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.027776][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.034904][ T1896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.047171][ T1683] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.054293][ T1683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.162057][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.373224][ T7829] veth0_vlan: entered promiscuous mode [ 104.386075][ T7829] veth1_vlan: entered promiscuous mode [ 104.414409][ T7829] veth0_macvtap: entered promiscuous mode [ 104.426353][ T7829] veth1_macvtap: entered promiscuous mode [ 104.445110][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.458844][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.486455][ T1678] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.515598][ T1678] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.526396][ T29] audit: type=1400 audit(1766363663.046:1534): avc: denied { mounton } for pid=7829 comm="syz-executor" path="/root/syzkaller.5gSPKQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 104.557335][ T1678] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.567224][ T1678] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.982414][ T29] audit: type=1326 audit(1766363663.496:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 105.016940][ T29] audit: type=1326 audit(1766363663.496:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 105.040432][ T29] audit: type=1326 audit(1766363663.506:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 105.063849][ T29] audit: type=1326 audit(1766363663.526:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 105.087341][ T29] audit: type=1326 audit(1766363663.526:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 105.110884][ T29] audit: type=1326 audit(1766363663.526:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 105.134672][ T29] audit: type=1326 audit(1766363663.526:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 105.158311][ T29] audit: type=1326 audit(1766363663.526:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.6.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 105.343479][ T3534] Bluetooth: hci0: command 0x1003 tx timeout [ 105.343513][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.469755][ T8124] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 105.481269][ T8124] bond0: (slave dummy0): Releasing backup interface [ 105.490680][ T8124] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.500002][ T8124] team0: Failed to send options change via netlink (err -105) [ 105.507621][ T8124] team0: Port device dummy0 added [ 105.520647][ T8128] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 105.529522][ T8128] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.539976][ T8128] team0: Failed to send options change via netlink (err -105) [ 105.548303][ T8128] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.557919][ T8128] team0: Port device dummy0 removed [ 105.565245][ T8128] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.644069][ T8136] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 105.654989][ T8136] bond3 (unregistering): Released all slaves [ 105.814781][ T8152] vlan2: entered allmulticast mode [ 105.946410][ T8163] loop2: detected capacity change from 0 to 256 [ 105.966245][ T8163] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 106.269032][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 106.293462][ T8183] batadv1: left allmulticast mode [ 106.298564][ T8183] batadv1: left promiscuous mode [ 106.303703][ T8183] bridge0: port 1(batadv1) entered disabled state [ 106.539682][ T8208] loop6: detected capacity change from 0 to 1024 [ 106.567032][ T8208] EXT4-fs: Ignoring removed orlov option [ 106.606133][ T8208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.646628][ T8208] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1535'. [ 106.655919][ T8208] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 106.735197][ T7829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.134143][ T8293] netlink: 'syz.1.1555': attribute type 13 has an invalid length. [ 107.148183][ T8293] gretap0: refused to change device tx_queue_len [ 107.162964][ T8293] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 107.358567][ T8326] netlink: 'syz.1.1560': attribute type 10 has an invalid length. [ 107.368692][ T8326] team0: Failed to send options change via netlink (err -105) [ 107.376221][ T8326] team0: Port device dummy0 added [ 107.383560][ T8326] netlink: 'syz.1.1560': attribute type 10 has an invalid length. [ 107.392009][ T8326] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.419293][ T8326] team0: Failed to send options change via netlink (err -105) [ 107.427383][ T8326] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.436472][ T8326] team0: Port device dummy0 removed [ 107.443554][ T8326] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.583880][ T8355] netlink: 'syz.0.1567': attribute type 13 has an invalid length. [ 107.614481][ T8355] gretap0: refused to change device tx_queue_len [ 107.621717][ T8355] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 107.710227][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 107.749240][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 107.835675][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 107.835691][ T29] audit: type=1400 audit(1766363666.356:1855): avc: denied { ioctl } for pid=8382 comm="syz.0.1573" path="socket:[25052]" dev="sockfs" ino=25052 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.881734][ T29] audit: type=1326 audit(1766363666.396:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 107.905351][ T29] audit: type=1326 audit(1766363666.396:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 107.928795][ T29] audit: type=1326 audit(1766363666.396:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 107.952194][ T29] audit: type=1326 audit(1766363666.396:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 107.975744][ T29] audit: type=1326 audit(1766363666.396:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 107.999186][ T29] audit: type=1326 audit(1766363666.396:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 108.022618][ T29] audit: type=1326 audit(1766363666.396:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 108.046106][ T29] audit: type=1326 audit(1766363666.396:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 108.069564][ T29] audit: type=1326 audit(1766363666.396:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d78aa65e7 code=0x7ffc0000 [ 108.203633][ T8407] syz_tun: entered allmulticast mode [ 108.213245][ T8407] pimreg: entered allmulticast mode [ 108.220449][ T8406] syz_tun: left allmulticast mode [ 108.334166][ T8417] ref_ctr increment failed for inode: 0x6c5 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8881049e0d80 [ 108.359529][ T8416] uprobe: syz.0.1581:8416 failed to unregister, leaking uprobe [ 108.367583][ T8416] uprobe: syz.0.1581:8416 failed to unregister, leaking uprobe [ 108.778736][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1588'. [ 108.800396][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1588'. [ 108.840546][ T8442] loop6: detected capacity change from 0 to 512 [ 108.854120][ T8442] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 108.866678][ T8442] EXT4-fs (loop6): 1 truncate cleaned up [ 108.875536][ T8442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.895472][ T8442] EXT4-fs (loop6): shut down requested (0) [ 108.940641][ T7829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.558363][ T8481] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1615' sets config #1 [ 109.668925][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1618'. [ 109.678015][ T8489] bridge_slave_0: default FDB implementation only supports local addresses [ 109.713862][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1609'. [ 109.951501][ T8512] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1619' sets config #1 [ 109.986284][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'. [ 109.995434][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'. [ 110.127487][ T8520] bridge_slave_0: default FDB implementation only supports local addresses [ 110.149061][ T8531] loop6: detected capacity change from 0 to 1024 [ 110.162329][ T8531] EXT4-fs: Ignoring removed orlov option [ 110.193233][ T8531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.231831][ T8540] lo speed is unknown, defaulting to 1000 [ 110.249853][ T8531] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 110.329587][ T7829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.630295][ T8552] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1634' sets config #1 [ 110.728078][ T8560] loop0: detected capacity change from 0 to 164 [ 110.747083][ T8560] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 110.780964][ T8560] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 110.794067][ T8560] Symlink component flag not implemented [ 110.799766][ T8560] Symlink component flag not implemented [ 111.582357][ T8576] Set syz1 is full, maxelem 65536 reached [ 111.803309][ T8598] Invalid argument reading file caps for ./file0 [ 111.883522][ T8603] __nla_validate_parse: 5 callbacks suppressed [ 111.883544][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 111.898776][ T8603] bridge_slave_0: default FDB implementation only supports local addresses [ 111.995693][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 112.122194][ T8613] team1: entered promiscuous mode [ 112.127373][ T8613] team1: entered allmulticast mode [ 112.133323][ T8613] 8021q: adding VLAN 0 to HW filter on device team1 [ 112.560392][ T8643] lo speed is unknown, defaulting to 1000 [ 112.569921][ T8645] netlink: 'syz.6.1675': attribute type 4 has an invalid length. [ 112.586031][ T8645] netlink: 'syz.6.1675': attribute type 4 has an invalid length. [ 112.854757][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 112.854794][ T29] audit: type=1326 audit(1766363671.376:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 112.884527][ T29] audit: type=1326 audit(1766363671.376:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 112.916988][ T3483] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 112.926501][ T3483] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.006121][ T29] audit: type=1326 audit(1766363671.426:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 113.029647][ T29] audit: type=1326 audit(1766363671.426:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 113.053202][ T29] audit: type=1326 audit(1766363671.426:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 113.076664][ T29] audit: type=1326 audit(1766363671.426:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 113.076727][ T8670] fido_id[8670]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.113672][ T29] audit: type=1326 audit(1766363671.426:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 113.137134][ T29] audit: type=1326 audit(1766363671.426:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 113.160633][ T29] audit: type=1326 audit(1766363671.426:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 113.184075][ T29] audit: type=1326 audit(1766363671.436:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.6.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 113.430326][ T3413] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 113.440357][ T3413] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.480164][ T8698] fido_id[8698]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.568538][ T8708] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1700'. [ 113.577783][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1700'. [ 113.590433][ T8707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8707 comm=syz.0.1702 [ 113.725972][ T8712] loop0: detected capacity change from 0 to 1024 [ 113.732998][ T8712] EXT4-fs: Ignoring removed orlov option [ 113.759368][ T8712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.864362][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.947111][ T3413] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 113.967587][ T3413] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.002859][ T8732] fido_id[8732]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.185879][ T8746] loop0: detected capacity change from 0 to 512 [ 114.228547][ T8746] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1718: bg 0: block 248: padding at end of block bitmap is not set [ 114.273972][ T8746] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1718: Failed to acquire dquot type 1 [ 114.285967][ T8746] EXT4-fs (loop0): 1 truncate cleaned up [ 114.292298][ T8746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.306807][ T8746] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.318958][ T8746] syz.0.1718 (8746) used greatest stack depth: 9088 bytes left [ 114.356220][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.535075][ T8768] 9p: Bad value for 'rfdno' [ 114.625831][ T8777] wireguard0: entered promiscuous mode [ 114.631381][ T8777] wireguard0: entered allmulticast mode [ 115.122978][ T8812] netlink: 'syz.5.1742': attribute type 4 has an invalid length. [ 115.140127][ T8812] netlink: 'syz.5.1742': attribute type 4 has an invalid length. [ 115.173888][ T8816] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1744'. [ 115.182940][ T8816] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1744'. [ 115.208551][ T8816] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1744'. [ 115.217715][ T8816] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1744'. [ 115.268657][ T8816] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1744'. [ 115.277818][ T8816] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1744'. [ 115.295100][ T8823] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 115.590643][ T8900] bridge: RTM_NEWNEIGH with invalid ether address [ 115.874591][ T8915] loop6: detected capacity change from 0 to 2048 [ 115.905269][ T3539] loop6: p1 < > p4 [ 115.910427][ T3539] loop6: p4 size 8388608 extends beyond EOD, truncated [ 115.920101][ T8915] loop6: p1 < > p4 [ 115.934214][ T8915] loop6: p4 size 8388608 extends beyond EOD, truncated [ 115.941867][ T8919] Set syz1 is full, maxelem 65536 reached [ 115.957116][ T3009] udevd[3009]: worker [3539] terminated by signal 33 (Unknown signal 33) [ 115.984762][ T3009] udevd[3009]: worker [3539] failed while handling '/devices/virtual/block/loop6' [ 116.031511][ T6783] udevd[6783]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 116.032048][ T8927] loop6: detected capacity change from 0 to 1024 [ 116.053271][ T8927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.055612][ T6784] udevd[6784]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 116.083154][ T8927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 116.094431][ T8924] loop0: detected capacity change from 0 to 2048 [ 116.108870][ T8927] System zones: 0-1, 3-36 [ 116.113808][ T6784] udevd[6784]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 116.120315][ T6783] udevd[6783]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 116.134896][ T8927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.164677][ T3311] loop0: p1 < > p4 [ 116.169953][ T3311] loop0: p4 size 8388608 extends beyond EOD, truncated [ 116.195349][ T8924] loop0: p1 < > p4 [ 116.213966][ T8924] loop0: p4 size 8388608 extends beyond EOD, truncated [ 116.239080][ T3009] udevd[3009]: worker [3311] terminated by signal 33 (Unknown signal 33) [ 116.250320][ T7829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.258371][ T3009] udevd[3009]: worker [3311] failed while handling '/devices/virtual/block/loop0' [ 116.328931][ T8939] loop6: detected capacity change from 0 to 512 [ 116.341215][ T8939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.362373][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 116.363135][ T6783] udevd[6783]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 116.409708][ T8939] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.425046][ T8939] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.1770: corrupted inode contents [ 116.438315][ T8939] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.1770: mark_inode_dirty error [ 116.455138][ T8939] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.1770: corrupted inode contents [ 116.467861][ T8946] netlink: 'syz.0.1775': attribute type 1 has an invalid length. [ 116.533584][ T7829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.574040][ T8959] loop2: detected capacity change from 0 to 512 [ 116.598312][ T8959] EXT4-fs: Ignoring removed i_version option [ 116.604478][ T8959] EXT4-fs: Ignoring removed bh option [ 116.653748][ T8959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.671575][ T8959] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.711769][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.833596][ T4142] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.841782][ T8975] loop2: detected capacity change from 0 to 2048 [ 116.853730][ T4142] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.936401][ T6783] loop2: p1 < > p4 [ 116.941172][ T6783] loop2: p4 size 8388608 extends beyond EOD, truncated [ 116.971364][ T8975] loop2: p1 < > p4 [ 116.986214][ T8975] loop2: p4 size 8388608 extends beyond EOD, truncated [ 117.111169][ T8985] sctp: [Deprecated]: syz.2.1790 (pid 8985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.111169][ T8985] Use struct sctp_sack_info instead [ 117.149266][ T8987] __nla_validate_parse: 1 callbacks suppressed [ 117.149285][ T8987] netlink: 1304 bytes leftover after parsing attributes in process `syz.6.1789'. [ 118.194499][ T9033] wireguard0: entered promiscuous mode [ 118.200244][ T9033] wireguard0: entered allmulticast mode [ 118.284116][ T9040] EXT4-fs: test_dummy_encryption option not supported [ 118.408651][ T9052] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1818'. [ 118.416689][ T9050] loop2: detected capacity change from 0 to 2048 [ 118.417883][ T9052] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1818'. [ 118.461928][ T9050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.482830][ T9052] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1818'. [ 118.489419][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 118.489471][ T29] audit: type=1400 audit(1766363676.996:2531): avc: denied { mounton } for pid=9049 comm="syz.2.1819" path="/390/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.492318][ T9052] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1818'. [ 118.545305][ T3318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 118.560595][ T3318] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 118.575551][ T29] audit: type=1400 audit(1766363677.096:2532): avc: denied { unlink } for pid=3318 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.599595][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.637801][ T9052] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1818'. [ 118.646952][ T9052] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1818'. [ 118.659522][ T9065] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1823'. [ 118.683994][ T29] audit: type=1400 audit(1766363677.186:2533): avc: denied { name_connect } for pid=9067 comm="syz.1.1824" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 118.791028][ T29] audit: type=1400 audit(1766363677.306:2534): avc: denied { bind } for pid=9075 comm="syz.5.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.959851][ T29] audit: type=1326 audit(1766363677.476:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 118.984258][ T29] audit: type=1326 audit(1766363677.506:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 119.008212][ T29] audit: type=1326 audit(1766363677.526:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 119.033443][ T29] audit: type=1326 audit(1766363677.546:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 119.056955][ T29] audit: type=1326 audit(1766363677.546:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 119.080429][ T29] audit: type=1326 audit(1766363677.546:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9084 comm="syz.0.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 119.546509][ T9098] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1837'. [ 119.555660][ T9098] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1837'. [ 119.669600][ T9111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.696839][ T9111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.735059][ T9136] netlink: 'syz.5.1843': attribute type 30 has an invalid length. [ 119.746033][ T9122] loop6: detected capacity change from 0 to 1024 [ 119.786962][ T9122] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.828307][ T9122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.856350][ T7829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.314034][ T9179] cgroup: fork rejected by pids controller in /syz6 [ 120.339496][ T9185] tipc: Enabled bearer , priority 10 [ 120.351116][ T9371] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 120.374108][ T9371] SELinux: failed to load policy [ 120.697191][T11083] syz_tun: entered allmulticast mode [ 121.252578][T15105] loop6: detected capacity change from 0 to 2048 [ 121.320103][T15105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.449200][ T7829] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 121.465926][ T3413] tipc: Node number set to 2886997007 [ 121.498581][T15120] lo speed is unknown, defaulting to 1000 [ 121.517126][ T7829] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 121.550875][ T7829] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.056175][T15174] netlink: 'syz.6.1922': attribute type 30 has an invalid length. [ 122.084263][ T8868] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.093261][ T8868] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.117457][ T8868] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.138438][ T8868] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.291820][T15197] tipc: New replicast peer: 255.255.255.83 [ 122.297945][T15197] tipc: Enabled bearer , priority 10 [ 122.306425][T15200] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.633244][ T3413] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.641584][ T3413] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.660033][T15217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.676518][T15217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.924432][T15239] wg2: left promiscuous mode [ 122.929120][T15239] wg2: left allmulticast mode [ 122.938028][T15239] wg2: entered promiscuous mode [ 122.942954][T15239] wg2: entered allmulticast mode [ 123.160125][T15270] lo speed is unknown, defaulting to 1000 [ 123.175241][T15272] loop2: detected capacity change from 0 to 512 [ 123.225405][T15272] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 123.261071][T15272] System zones: 0-2, 18-18, 34-34 [ 123.282430][T15272] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1950: bg 0: block 248: padding at end of block bitmap is not set [ 123.304136][ T3413] tipc: Node number set to 2886997007 [ 123.341293][T15272] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1950: Failed to acquire dquot type 1 [ 123.367467][T15272] EXT4-fs (loop2): 1 truncate cleaned up [ 123.383966][T15272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.397495][T15272] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.423731][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.497216][T15282] pimreg: entered allmulticast mode [ 123.508321][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 123.508340][ T29] audit: type=1107 audit(1766363682.026:2693): pid=15283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='LÓQ' [ 123.538757][T15285] pimreg: left allmulticast mode [ 123.585508][T15277] __nla_validate_parse: 9 callbacks suppressed [ 123.585524][T15277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1951'. [ 123.602479][T15289] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 123.685419][T15291] loop2: detected capacity change from 0 to 128 [ 123.717871][T15291] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.804753][T15291] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.944122][ T29] audit: type=1326 audit(1766363682.446:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 123.967786][ T29] audit: type=1326 audit(1766363682.446:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 123.990175][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.992339][ T29] audit: type=1326 audit(1766363682.446:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 124.023880][ T29] audit: type=1326 audit(1766363682.446:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 124.074447][ T29] audit: type=1326 audit(1766363682.506:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 124.098162][ T29] audit: type=1326 audit(1766363682.506:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 124.121852][ T29] audit: type=1326 audit(1766363682.506:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 124.145490][ T29] audit: type=1326 audit(1766363682.566:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 124.169157][ T29] audit: type=1326 audit(1766363682.566:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15306 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d78aaf749 code=0x7ffc0000 [ 124.293737][T15320] loop2: detected capacity change from 0 to 2048 [ 124.352806][T15320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.190184][ T8854] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 125.228467][ T8854] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 125.241020][ T8854] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.241020][ T8854] [ 125.250716][ T8854] EXT4-fs (loop2): Total free blocks count 0 [ 125.256788][ T8854] EXT4-fs (loop2): Free/Dirty block details [ 125.262715][ T8854] EXT4-fs (loop2): free_blocks=2415919504 [ 125.268529][ T8854] EXT4-fs (loop2): dirty_blocks=2416 [ 125.273923][ T8854] EXT4-fs (loop2): Block reservation details [ 125.279946][ T8854] EXT4-fs (loop2): i_reserved_data_blocks=151 [ 125.382915][ T8854] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 350 with error 28 [ 125.664955][T15478] netlink: 'syz.2.1978': attribute type 4 has an invalid length. [ 125.792604][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 126.253865][T15513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15513 comm=syz.2.1995 [ 127.074684][T15559] netlink: 'syz.0.2014': attribute type 12 has an invalid length. [ 127.149286][T15563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2016'. [ 127.166235][T15565] loop2: detected capacity change from 0 to 128 [ 127.195338][T15565] bio_check_eod: 1 callbacks suppressed [ 127.195354][T15565] syz.2.2017: attempt to access beyond end of device [ 127.195354][T15565] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 127.215783][T15565] syz.2.2017: attempt to access beyond end of device [ 127.215783][T15565] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 127.229694][T15565] syz.2.2017: attempt to access beyond end of device [ 127.229694][T15565] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 127.244046][T15565] syz.2.2017: attempt to access beyond end of device [ 127.244046][T15565] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 127.258097][T15570] syz.2.2017: attempt to access beyond end of device [ 127.258097][T15570] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 127.272213][T15565] syz.2.2017: attempt to access beyond end of device [ 127.272213][T15565] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 127.286543][T15570] syz.2.2017: attempt to access beyond end of device [ 127.286543][T15570] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 127.301659][T15565] syz.2.2017: attempt to access beyond end of device [ 127.301659][T15565] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 127.320953][T15570] syz.2.2017: attempt to access beyond end of device [ 127.320953][T15570] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 127.334739][T15565] syz.2.2017: attempt to access beyond end of device [ 127.334739][T15565] loop2: rw=2049, sector=297, nr_sectors = 9 limit=128 [ 127.368119][T15574] netlink: 'syz.5.2020': attribute type 10 has an invalid length. [ 127.378113][T15574] team0: Port device dummy0 added [ 127.423836][T15578] netlink: 'syz.6.2022': attribute type 39 has an invalid length. [ 127.571871][T15598] pimreg: entered allmulticast mode [ 127.594155][T15598] pimreg: left allmulticast mode [ 128.589914][T15643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15643 comm=syz.1.2050 [ 128.638204][T15643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2050'. [ 128.683238][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2052'. [ 128.757501][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2053'. [ 128.766661][T15649] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2053'. [ 128.780097][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 128.780119][ T29] audit: type=1326 audit(1766363687.296:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 128.790643][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2053'. [ 128.847890][T15649] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2053'. [ 128.874557][ T29] audit: type=1326 audit(1766363687.326:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 128.898153][ T29] audit: type=1326 audit(1766363687.326:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 128.921766][ T29] audit: type=1326 audit(1766363687.336:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 128.945479][ T29] audit: type=1326 audit(1766363687.336:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 128.969063][ T29] audit: type=1326 audit(1766363687.336:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 128.992586][ T29] audit: type=1326 audit(1766363687.336:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 129.016108][ T29] audit: type=1326 audit(1766363687.336:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 129.039690][ T29] audit: type=1326 audit(1766363687.336:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 129.063314][ T29] audit: type=1326 audit(1766363687.336:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15650 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 129.402161][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'. [ 131.226186][T15749] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2095'. [ 131.307699][T15757] netlink: 'syz.6.2099': attribute type 3 has an invalid length. [ 132.060684][T15803] ip6gre1: entered promiscuous mode [ 132.066208][T15803] ip6gre1: entered allmulticast mode [ 132.938869][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 132.953312][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.991614][T15868] fido_id[15868]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.201346][ T8864] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.846499][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 133.846517][ T29] audit: type=1326 audit(1766363692.366:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 133.924572][ T29] audit: type=1326 audit(1766363692.376:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 133.948370][ T29] audit: type=1326 audit(1766363692.376:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 133.972278][ T29] audit: type=1326 audit(1766363692.396:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 133.995807][ T29] audit: type=1326 audit(1766363692.426:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 134.019379][ T29] audit: type=1326 audit(1766363692.426:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 134.042915][ T29] audit: type=1326 audit(1766363692.426:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 134.066501][ T29] audit: type=1326 audit(1766363692.426:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb970432005 code=0x7ffc0000 [ 134.090045][ T29] audit: type=1326 audit(1766363692.426:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.6.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb970432005 code=0x7ffc0000 [ 134.113554][ T29] audit: type=1326 audit(1766363692.426:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15903 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ffaf749 code=0x7ffc0000 [ 134.211923][T15915] ip6gre1: entered promiscuous mode [ 134.217265][T15915] ip6gre1: entered allmulticast mode [ 134.248028][T15919] loop6: detected capacity change from 0 to 512 [ 134.283214][T15919] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.360560][T15919] EXT4-fs (loop6): mount failed [ 134.672573][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 135.060696][T15965] capability: warning: `syz.0.2185' uses deprecated v2 capabilities in a way that may be insecure [ 135.101961][T15969] ip6gre2: entered allmulticast mode [ 135.182977][T15974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15974 comm=syz.0.2188 [ 135.263411][ T3534] Bluetooth: hci0: command 0x1003 tx timeout [ 135.269891][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.308374][T15976] syzkaller0: entered allmulticast mode [ 135.314799][T15976] syzkaller0: entered promiscuous mode [ 135.322216][T15976] syzkaller0 (unregistering): left allmulticast mode [ 135.329012][T15976] syzkaller0 (unregistering): left promiscuous mode [ 135.471055][T15979] ip6gre1: entered promiscuous mode [ 135.476423][T15979] ip6gre1: entered allmulticast mode [ 135.525237][T15988] tipc: Failed to remove unknown binding: 66,1,1/0:48448903/48448905 [ 135.537224][T15988] tipc: Failed to remove unknown binding: 66,1,1/0:48448903/48448905 [ 135.565122][T15990] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 135.597666][T15990] bond3: entered promiscuous mode [ 135.602827][T15990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.651137][T15990] bond3: (slave bridge3): making interface the new active one [ 135.658725][T15990] bridge3: entered promiscuous mode [ 135.668823][T15990] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 135.711204][ T3009] udevd[3009]: worker [6783] terminated by signal 33 (Unknown signal 33) [ 135.731891][ T3009] udevd[3009]: worker [6783] failed while handling '/devices/virtual/block/loop2' [ 135.806288][T16013] ip6gre2: entered allmulticast mode [ 137.327599][T16145] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2226'. [ 137.336765][T16145] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2226'. [ 137.390643][T16145] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2226'. [ 137.399716][T16145] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2226'. [ 137.445409][T16145] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2226'. [ 137.454521][T16145] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2226'. [ 137.669026][T16178] ip6gre1: entered allmulticast mode [ 137.730805][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2232'. [ 137.739842][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2232'. [ 137.748858][T16187] netlink: 'syz.5.2232': attribute type 6 has an invalid length. [ 137.804896][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2232'. [ 137.813871][T16187] netlink: 'syz.5.2232': attribute type 6 has an invalid length. [ 138.420111][T16243] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 138.599658][T16259] loop6: detected capacity change from 0 to 256 [ 139.089636][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 139.089652][ T29] audit: type=1326 audit(1766363697.606:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.133249][ T29] audit: type=1326 audit(1766363697.606:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.157078][ T29] audit: type=1326 audit(1766363697.606:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.180612][ T29] audit: type=1326 audit(1766363697.636:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.204278][ T29] audit: type=1326 audit(1766363697.636:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.227846][ T29] audit: type=1326 audit(1766363697.646:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.251483][ T29] audit: type=1326 audit(1766363697.646:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.275084][ T29] audit: type=1326 audit(1766363697.646:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.298602][ T29] audit: type=1326 audit(1766363697.646:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.322113][ T29] audit: type=1326 audit(1766363697.646:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16291 comm="syz.0.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1384f749 code=0x7ffc0000 [ 139.673676][T16321] blktrace: Concurrent blktraces are not allowed on loop1 [ 139.815445][T16328] ip6gre3: entered allmulticast mode [ 139.831034][T16330] __nla_validate_parse: 5 callbacks suppressed [ 139.831051][T16330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 139.846296][T16330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 139.870029][T16330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 139.879223][T16330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 139.908190][T16330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 139.917335][T16330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2281'. [ 140.129528][T16344] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.136872][T16344] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.212482][T16344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.231094][T16344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.426409][T16344] ip6gre2: left allmulticast mode [ 140.453601][T16314] syz.2.2272 (16314) used greatest stack depth: 8744 bytes left [ 140.454752][T16344] ip6gre3: left allmulticast mode [ 140.476412][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'. [ 140.494586][ T8871] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.503577][ T8871] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.532877][ T8871] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.541844][ T8871] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.603420][ T8871] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.612448][ T8871] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.654243][ T8871] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.663254][ T8871] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.738315][T16311] syz.2.2272 (16311) used greatest stack depth: 7256 bytes left [ 140.867619][T16368] lo speed is unknown, defaulting to 1000 [ 140.969433][T16372] xt_connbytes: Forcing CT accounting to be enabled [ 141.004990][T16372] set match dimension is over the limit! [ 141.739901][T16443] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2327'. [ 141.750580][T16443] netlink: zone id is out of range [ 141.755793][T16443] netlink: zone id is out of range [ 141.760975][T16443] netlink: zone id is out of range [ 141.775728][T16443] netlink: set zone limit has 8 unknown bytes [ 142.642604][T16486] veth0: entered promiscuous mode [ 142.651553][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2343'. [ 142.661635][T16486] veth0 (unregistering): left promiscuous mode [ 142.903912][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2354'. [ 143.336684][T16520] netem: change failed [ 143.426392][T16533] loop6: detected capacity change from 0 to 128 [ 143.500898][T16538] syz.6.2366: attempt to access beyond end of device [ 143.500898][T16538] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 143.515080][T16538] syz.6.2366: attempt to access beyond end of device [ 143.515080][T16538] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 143.528699][T16538] syz.6.2366: attempt to access beyond end of device [ 143.528699][T16538] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 143.542356][T16538] syz.6.2366: attempt to access beyond end of device [ 143.542356][T16538] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 143.557517][T16538] syz.6.2366: attempt to access beyond end of device [ 143.557517][T16538] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 143.584184][T16538] syz.6.2366: attempt to access beyond end of device [ 143.584184][T16538] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 143.628976][T16538] syz.6.2366: attempt to access beyond end of device [ 143.628976][T16538] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 143.647226][T16538] syz.6.2366: attempt to access beyond end of device [ 143.647226][T16538] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 143.660964][T16538] syz.6.2366: attempt to access beyond end of device [ 143.660964][T16538] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 143.706925][T16538] syz.6.2366: attempt to access beyond end of device [ 143.706925][T16538] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 143.928339][T16567] lo speed is unknown, defaulting to 1000 [ 143.967415][T16573] loop2: detected capacity change from 0 to 512 [ 143.975766][T16579] xt_connbytes: Forcing CT accounting to be enabled [ 143.992649][T16579] set match dimension is over the limit! [ 144.037857][T16573] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 144.066941][T16573] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm +}[@: corrupted inode contents [ 144.094232][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 144.094250][ T29] audit: type=1326 audit(1766363702.616:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.138335][T16573] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm +}[@: mark_inode_dirty error [ 144.161502][T16573] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm +}[@: corrupted inode contents [ 144.169653][ T29] audit: type=1326 audit(1766363702.616:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.195895][T16573] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm +}[@: mark_inode_dirty error [ 144.196523][ T29] audit: type=1326 audit(1766363702.616:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.231062][ T29] audit: type=1326 audit(1766363702.646:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.254674][ T29] audit: type=1326 audit(1766363702.656:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.278202][ T29] audit: type=1326 audit(1766363702.656:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.301697][ T29] audit: type=1326 audit(1766363702.676:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.325194][T16573] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm +}[@: mark inode dirty (error -117) [ 144.376815][T16573] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 144.386425][T16573] EXT4-fs (loop2): 1 orphan inode deleted [ 144.392743][T16573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.421563][ T29] audit: type=1326 audit(1766363702.686:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.445154][ T29] audit: type=1326 audit(1766363702.686:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.468754][ T29] audit: type=1326 audit(1766363702.686:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16576 comm="syz.6.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fb9703ff749 code=0x7ffc0000 [ 144.516949][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.592904][T16610] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.930074][T16659] pimreg: entered allmulticast mode [ 144.976018][T16659] pimreg: left allmulticast mode [ 145.482073][T16721] lo speed is unknown, defaulting to 1000 [ 145.534140][T16731] xt_connbytes: Forcing CT accounting to be enabled [ 145.576042][T16731] set match dimension is over the limit! [ 146.025039][T16762] loop2: detected capacity change from 0 to 4096 [ 146.088793][T16762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.194058][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.452093][T16786] __nla_validate_parse: 4 callbacks suppressed [ 146.452215][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 146.471922][T16786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2410'. [ 146.606473][T16802] syzkaller0: entered allmulticast mode [ 146.615250][T16802] syzkaller0 (unregistering): left allmulticast mode [ 146.660344][T16804] loop2: detected capacity change from 0 to 1024 [ 146.666377][T16801] lo speed is unknown, defaulting to 1000 [ 146.750378][T16804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.940018][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.275869][T16818] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2421'. [ 148.183752][T16902] vlan2: entered allmulticast mode [ 148.188980][T16902] dummy0: entered allmulticast mode [ 148.470182][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2440'. [ 148.786010][T16979] blktrace: Concurrent blktraces are not allowed on loop3 [ 148.948725][T16996] loop6: detected capacity change from 0 to 128 [ 148.980130][T16996] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.993770][T16996] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.026639][ T8848] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.038520][T16996] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.107063][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 149.107107][ T29] audit: type=1400 audit(1766363707.626:3804): avc: denied { create } for pid=17010 comm="syz.6.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.189762][ T29] audit: type=1400 audit(1766363707.656:3805): avc: denied { setopt } for pid=17010 comm="syz.6.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.209641][ T29] audit: type=1400 audit(1766363707.666:3806): avc: denied { bind } for pid=17009 comm="syz.1.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.229436][ T29] audit: type=1400 audit(1766363707.696:3807): avc: denied { mount } for pid=17017 comm="syz.2.2454" name="/" dev="ramfs" ino=33720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 149.334022][ T29] audit: type=1400 audit(1766363707.856:3808): avc: denied { ioctl } for pid=17019 comm="syz.6.2455" path="socket:[33724]" dev="sockfs" ino=33724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.434351][ T29] audit: type=1400 audit(1766363707.956:3809): avc: denied { map } for pid=17025 comm="syz.6.2457" path="socket:[33738]" dev="sockfs" ino=33738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.521517][ T29] audit: type=1400 audit(1766363707.956:3810): avc: denied { read write } for pid=17025 comm="syz.6.2457" path="socket:[33738]" dev="sockfs" ino=33738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.545700][ T29] audit: type=1400 audit(1766363708.016:3811): avc: denied { write } for pid=17029 comm="syz.0.2458" name="fib_trie" dev="proc" ino=4026532405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 149.805266][ T29] audit: type=1400 audit(1766363708.326:3812): avc: denied { watch watch_reads } for pid=17049 comm="syz.6.2465" path="/196/file0" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.838150][ T29] audit: type=1400 audit(1766363708.346:3813): avc: denied { execute } for pid=17049 comm="syz.6.2465" name="file0" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.943771][T17063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2471'. [ 150.022895][T17070] macvtap1: entered allmulticast mode [ 150.028432][T17070] veth0_to_batadv: entered allmulticast mode [ 150.072781][T17070] veth0_to_batadv: left allmulticast mode [ 150.119830][T17087] tipc: New replicast peer: 255.255.255.255 [ 150.125974][T17087] tipc: Enabled bearer , priority 10 [ 150.132424][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'. [ 150.141509][T17087] tipc: Disabling bearer [ 150.179422][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'. [ 150.322907][T17099] ================================================================== [ 150.331032][T17099] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 150.338956][T17099] [ 150.341309][T17099] write to 0xffff88812b990590 of 8 bytes by task 17100 on cpu 0: [ 150.349048][T17099] cpu_map_kthread_run+0x529/0x1560 [ 150.354291][T17099] kthread+0x489/0x510 [ 150.358405][T17099] ret_from_fork+0x149/0x290 [ 150.363020][T17099] ret_from_fork_asm+0x1a/0x30 [ 150.367831][T17099] [ 150.370287][T17099] read to 0xffff88812b990590 of 8 bytes by task 17099 on cpu 1: [ 150.377995][T17099] bq_flush_to_queue+0x124/0x350 [ 150.382974][T17099] cpu_map_enqueue+0x1a6/0x1c0 [ 150.387769][T17099] xdp_do_redirect_frame+0x27c/0x560 [ 150.393087][T17099] bpf_test_run_xdp_live+0x98c/0x11d0 [ 150.398513][T17099] bpf_prog_test_run_xdp+0x525/0x970 [ 150.403861][T17099] bpf_prog_test_run+0x204/0x340 [ 150.408836][T17099] __sys_bpf+0x4c0/0x7c0 [ 150.413092][T17099] __x64_sys_bpf+0x41/0x50 [ 150.417550][T17099] x64_sys_call+0x28e1/0x3000 [ 150.422261][T17099] do_syscall_64+0xca/0x2b0 [ 150.426799][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.432735][T17099] [ 150.435098][T17099] value changed: 0xffff888125a3d070 -> 0x0000000000000000 [ 150.442256][T17099] [ 150.444592][T17099] Reported by Kernel Concurrency Sanitizer on: [ 150.450780][T17099] CPU: 1 UID: 0 PID: 17099 Comm: syz.6.2486 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.462198][T17099] Tainted: [W]=WARN [ 150.466019][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.476094][T17099] ==================================================================