last executing test programs: 55.156821711s ago: executing program 2 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) 55.107207882s ago: executing program 2 (id=181): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 55.046884773s ago: executing program 2 (id=184): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 54.597992409s ago: executing program 2 (id=196): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 54.566154319s ago: executing program 2 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 54.349751903s ago: executing program 2 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 54.349622463s ago: executing program 32 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 51.689294758s ago: executing program 1 (id=264): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x3, 0x200, "fe0140", 0x0, 0xf}) 51.649553399s ago: executing program 1 (id=265): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) 51.59590353s ago: executing program 1 (id=267): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) 51.516068731s ago: executing program 1 (id=270): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 51.455307472s ago: executing program 1 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981"], 0x1000f) 51.088867236s ago: executing program 1 (id=277): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="01000e7a1570"}) 51.047659137s ago: executing program 33 (id=277): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="01000e7a1570"}) 5.705663671s ago: executing program 5 (id=1882): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 4.817501903s ago: executing program 5 (id=1904): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x13, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 3.939955736s ago: executing program 5 (id=1919): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 3.939567316s ago: executing program 5 (id=1920): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) 3.894680056s ago: executing program 5 (id=1922): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x145) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 3.62581275s ago: executing program 5 (id=1927): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0xfffffffc, 0x10100, 0x8}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3.62561468s ago: executing program 34 (id=1927): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0xfffffffc, 0x10100, 0x8}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.527603775s ago: executing program 6 (id=1962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000100), 0x3c) 2.417703447s ago: executing program 6 (id=1963): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = syz_io_uring_setup(0x822, &(0x7f0000000480)={0x0, 0xbdba, 0x80, 0x1, 0x34e}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1fffffffffffffaa, &(0x7f0000000200)=[{0x30, 0x9, 0x0, 0x6}]}, 0xfffffffffffffdf1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 2.272847909s ago: executing program 6 (id=1966): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002800)={0xc, {"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", 0x1000}}, 0x1006) 1.44099594s ago: executing program 7 (id=1928): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x43) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/181, 0xb5}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x2, 0x12001, 0x0) recvfrom(r1, &(0x7f00000005c0)=""/229, 0xe5, 0x40, 0x0, 0x0) 1.328870952s ago: executing program 7 (id=1971): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x2, 0x2, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102) 964.898997ms ago: executing program 6 (id=1974): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0x32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) connect$llc(r0, &(0x7f0000000300)={0x1a, 0x0, 0x1f, 0x0, 0xc9, 0x8, @local}, 0x10) 533.533573ms ago: executing program 0 (id=1984): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x95b2, 0x2, 0xfffffffe, 0x3bd}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000002c0)={0x1a, 0x0, 0xa0, 0x1, 0xc9, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 477.684884ms ago: executing program 4 (id=1985): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f00000000c0)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@oldalloc}, {@usrjquota}]}, 0x1, 0x517, &(0x7f0000000140)="$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") 466.154444ms ago: executing program 7 (id=1986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 415.577644ms ago: executing program 3 (id=1987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)) 369.717025ms ago: executing program 0 (id=1988): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 350.513166ms ago: executing program 0 (id=1989): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ppoll(&(0x7f0000000140)=[{r0, 0x1}, {r1, 0x20}], 0x2, 0x0, 0x0, 0x0) 341.652356ms ago: executing program 3 (id=1990): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 263.752077ms ago: executing program 7 (id=1991): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff9, 0x0, 0x9}) 263.456857ms ago: executing program 4 (id=1992): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f0000000200)={0x0, 0xab62, 0x800, 0x3, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 263.086867ms ago: executing program 0 (id=1993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 242.402257ms ago: executing program 3 (id=1994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) 237.786417ms ago: executing program 7 (id=1995): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 187.051078ms ago: executing program 3 (id=1996): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 185.996938ms ago: executing program 4 (id=1997): r0 = syz_io_uring_setup(0x239, &(0x7f0000000500)={0x0, 0x4668, 0x10100, 0xfffffffd, 0x187}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_SYMLINKAT={0x26, 0x1e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./bus\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x6652, 0x0, 0x0, 0x0, 0x0) 163.153418ms ago: executing program 0 (id=1998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) 137.780269ms ago: executing program 3 (id=1999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) 137.192478ms ago: executing program 4 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x4007}}, '\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 49.85416ms ago: executing program 4 (id=2001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f0000000f80)={0xa, 0x200, 0x0, @loopback, 0xb851}, 0x1c) 49.54664ms ago: executing program 7 (id=2002): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 49.40544ms ago: executing program 6 (id=2003): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r3}, 0x10) close(r0) 48.3791ms ago: executing program 0 (id=2004): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240000c4}, 0x5) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)) semctl$GETZCNT(r0, 0x4, 0xf, 0x0) 48.20794ms ago: executing program 4 (id=2005): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f00000003c0)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) 9.42439ms ago: executing program 6 (id=2006): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) exit(0xc) 0s ago: executing program 3 (id=2007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, '\"'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) kernel console output (not intermixed with test programs): batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.971799][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.981971][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.992746][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.003001][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.013463][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.023329][ T4061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.034000][ T4061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.046494][ T4061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.061962][ T4061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.071485][ T4061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.080872][ T4061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.090095][ T4061] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.142383][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 49.142437][ T29] audit: type=1400 audit(1745862177.677:486): avc: denied { mount } for pid=4061 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.193382][ T3576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.206870][ T29] audit: type=1400 audit(1745862177.677:487): avc: denied { mounton } for pid=4061 comm="syz-executor" path="/root/syzkaller.jBGpZi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.254751][ T4342] loop4: detected capacity change from 0 to 2048 [ 49.270920][ T3576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.313210][ T3576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.327543][ T4342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.373431][ T3576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.406576][ T29] audit: type=1400 audit(1745862177.927:488): avc: denied { read write } for pid=4360 comm="syz.0.283" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.430295][ T29] audit: type=1400 audit(1745862177.927:489): avc: denied { open } for pid=4360 comm="syz.0.283" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.468620][ T29] audit: type=1400 audit(1745862177.997:490): avc: denied { ioctl } for pid=4360 comm="syz.0.283" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.493894][ T29] audit: type=1400 audit(1745862177.997:491): avc: denied { execute } for pid=4341 comm="syz.4.280" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.545409][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.600136][ T3576] bridge_slave_1: left allmulticast mode [ 49.606032][ T3576] bridge_slave_1: left promiscuous mode [ 49.611883][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.622708][ T3576] bridge_slave_0: left allmulticast mode [ 49.629597][ T3576] bridge_slave_0: left promiscuous mode [ 49.635516][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.649022][ T4382] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 49.659079][ T4378] syz.4.287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.766948][ T29] audit: type=1400 audit(1745862178.287:492): avc: denied { setopt } for pid=4395 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.835890][ T29] audit: type=1400 audit(1745862178.357:493): avc: denied { read } for pid=4401 comm="syz.3.296" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.859498][ T29] audit: type=1400 audit(1745862178.357:494): avc: denied { open } for pid=4401 comm="syz.3.296" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.889118][ T4400] loop5: detected capacity change from 0 to 1024 [ 49.900543][ T4400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.933107][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.943262][ T4400] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.295: bg 0: block 88: padding at end of block bitmap is not set [ 49.960325][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.972554][ T3576] bond0 (unregistering): Released all slaves [ 50.001286][ T4410] loop3: detected capacity change from 0 to 1024 [ 50.009757][ T4410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.021969][ T4410] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 50.033165][ T4410] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 50.044366][ T4410] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.054674][ T4410] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.299: inode #1: comm syz.3.299: iget: illegal inode # [ 50.068210][ T3576] hsr_slave_0: left promiscuous mode [ 50.074210][ T4410] EXT4-fs (loop3): Remounting filesystem read-only [ 50.080853][ T4410] EXT4-fs (loop3): no journal found [ 50.087036][ T3576] hsr_slave_1: left promiscuous mode [ 50.087272][ T4061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.093986][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.109354][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.128089][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.135558][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.162074][ T3576] veth1_macvtap: left promiscuous mode [ 50.168312][ T3576] veth0_macvtap: left promiscuous mode [ 50.174171][ T3576] veth1_vlan: left promiscuous mode [ 50.180765][ T29] audit: type=1400 audit(1745862178.727:495): avc: denied { write } for pid=4427 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.200808][ T3576] veth0_vlan: left promiscuous mode [ 50.293202][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 50.303533][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 50.303934][ T4440] netlink: 24 bytes leftover after parsing attributes in process `syz.5.302'. [ 50.351163][ T4344] chnl_net:caif_netlink_parms(): no params data found [ 50.449197][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.456953][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.464710][ T4344] bridge_slave_0: entered allmulticast mode [ 50.471556][ T4344] bridge_slave_0: entered promiscuous mode [ 50.488535][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.495993][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.503488][ T4344] bridge_slave_1: entered allmulticast mode [ 50.510460][ T4344] bridge_slave_1: entered promiscuous mode [ 50.516511][ T4456] binfmt_misc: register: failed to install interpreter file ./file2 [ 50.555494][ T4344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.576651][ T4344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.624639][ T4344] team0: Port device team_slave_0 added [ 50.633234][ T4344] team0: Port device team_slave_1 added [ 50.657336][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.665044][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.691740][ T4344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.706541][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.713953][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.741898][ T4344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.781921][ T4344] hsr_slave_0: entered promiscuous mode [ 50.790660][ T4344] hsr_slave_1: entered promiscuous mode [ 50.807705][ T4483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.320'. [ 50.888867][ T4344] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 50.898327][ T4344] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 50.907655][ T4344] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 50.916606][ T4344] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 50.935270][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.943496][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.952268][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.960179][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.998803][ T4492] loop3: detected capacity change from 0 to 2048 [ 51.042093][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 51.043232][ T4344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.054292][ T4492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.064804][ T4344] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.112076][ T4504] loop5: detected capacity change from 0 to 512 [ 51.143787][ T4504] EXT4-fs (loop5): 1 orphan inode deleted [ 51.152220][ T3616] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:66: Failed to release dquot type 1 [ 51.166354][ T4504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.188752][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.205447][ T4504] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.261074][ T4344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.305885][ T4061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.568076][ T4344] veth0_vlan: entered promiscuous mode [ 51.615450][ T4344] veth1_vlan: entered promiscuous mode [ 51.629370][ T4344] veth0_macvtap: entered promiscuous mode [ 51.637957][ T4551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.347'. [ 51.655141][ T4344] veth1_macvtap: entered promiscuous mode [ 51.657803][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.349'. [ 51.671331][ T4551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.347'. [ 51.673578][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.690938][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.700986][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.711540][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.721474][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.732486][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.742644][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.753217][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.764709][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.773289][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.783771][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.793618][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.804171][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.814325][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.824909][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.834947][ T4344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.846161][ T4344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.857121][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.864509][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.349'. [ 51.874332][ T4344] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.883227][ T4344] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.892018][ T4344] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.900892][ T4344] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.944844][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 51.953907][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.364'. [ 52.031979][ T4580] vhci_hcd: invalid port number 236 [ 52.037341][ T4580] vhci_hcd: default hub control req: 8014 v0f00 i00ec l0 [ 52.041398][ T4582] sd 0:0:1:0: device reset [ 52.118582][ T4592] syz.5.365 uses obsolete (PF_INET,SOCK_PACKET) [ 52.223687][ T4607] loop5: detected capacity change from 0 to 512 [ 52.251662][ T4607] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.277349][ T4607] EXT4-fs (loop5): 1 truncate cleaned up [ 52.294142][ T4607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.333315][ T4617] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 52.341237][ T4617] netlink: 224 bytes leftover after parsing attributes in process `syz.0.376'. [ 52.363573][ T4619] loop4: detected capacity change from 0 to 1024 [ 52.408942][ T4619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.425191][ T4619] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 52.443396][ T4619] EXT4-fs (loop4): Remounting filesystem read-only [ 52.468417][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.489011][ T4061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.565615][ T4645] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 52.587715][ T4649] IPv4: Oversized IP packet from 127.202.26.0 [ 52.745554][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'. [ 52.824188][ T4690] xt_connbytes: Forcing CT accounting to be enabled [ 52.834125][ T4690] Cannot find add_set index 0 as target [ 52.951273][ T4711] loop3: detected capacity change from 0 to 526 [ 52.962403][ T4711] EXT4-fs (loop3): failed to parse options in superblock:  [ 52.975661][ T4711] EXT4-fs (loop3): Unsupported encryption level 28 [ 53.148746][ T4733] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 53.228326][ T4744] loop3: detected capacity change from 0 to 164 [ 53.240597][ T4744] syz.3.435: attempt to access beyond end of device [ 53.240597][ T4744] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 53.258980][ T4744] syz.3.435: attempt to access beyond end of device [ 53.258980][ T4744] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 53.341061][ T4752] IPv4: Oversized IP packet from 127.202.26.0 [ 53.347862][ T4754] loop3: detected capacity change from 0 to 1024 [ 53.355799][ T4754] EXT4-fs: Ignoring removed orlov option [ 53.361883][ T4754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.390596][ T4754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.429658][ T4760] netlink: 'syz.5.440': attribute type 1 has an invalid length. [ 53.438873][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.470292][ T4762] loop5: detected capacity change from 0 to 128 [ 53.521190][ T4766] loop5: detected capacity change from 0 to 2048 [ 53.528387][ T4766] EXT4-fs: Ignoring removed bh option [ 53.560280][ T4766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.644356][ T4773] vhci_hcd: invalid port number 236 [ 53.649867][ T4773] vhci_hcd: default hub control req: 8014 v0f00 i00ec l0 [ 54.291930][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 54.291947][ T29] audit: type=1326 audit(1745862182.757:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.6.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb22e969 code=0x7ffc0000 [ 54.323283][ T29] audit: type=1326 audit(1745862182.767:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.6.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd5cb22e969 code=0x7ffc0000 [ 54.347009][ T29] audit: type=1326 audit(1745862182.767:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.6.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb22e969 code=0x7ffc0000 [ 54.371379][ T29] audit: type=1326 audit(1745862182.767:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4793 comm="syz.6.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb22e969 code=0x7ffc0000 [ 54.439720][ T3598] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.457678][ T4797] loop3: detected capacity change from 0 to 1024 [ 54.469835][ T3598] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.483260][ T3598] EXT4-fs (loop5): This should not happen!! Data will be lost [ 54.483260][ T3598] [ 54.494259][ T3598] EXT4-fs (loop5): Total free blocks count 0 [ 54.500437][ T3598] EXT4-fs (loop5): Free/Dirty block details [ 54.506557][ T3598] EXT4-fs (loop5): free_blocks=2415919104 [ 54.512461][ T3598] EXT4-fs (loop5): dirty_blocks=8160 [ 54.518750][ T3598] EXT4-fs (loop5): Block reservation details [ 54.525033][ T3598] EXT4-fs (loop5): i_reserved_data_blocks=510 [ 54.537419][ T4797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.553071][ T4797] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 54.554948][ T3598] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 54.587491][ T4797] EXT4-fs (loop3): Remounting filesystem read-only [ 54.596668][ T4808] loop6: detected capacity change from 0 to 512 [ 54.650739][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.665088][ T4808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.679041][ T4808] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.695500][ T4808] xt_connbytes: Forcing CT accounting to be enabled [ 54.704170][ T4808] Cannot find add_set index 0 as target [ 54.728583][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.816592][ T29] audit: type=1400 audit(1745862183.347:612): avc: denied { bind } for pid=4829 comm="syz.6.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.090343][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.101209][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.118551][ T29] audit: type=1326 audit(1745862183.647:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.5.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 55.144676][ T29] audit: type=1326 audit(1745862183.647:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.5.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 55.173734][ T29] audit: type=1326 audit(1745862183.647:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.5.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 55.200784][ T29] audit: type=1326 audit(1745862183.647:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.5.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 55.225127][ T29] audit: type=1326 audit(1745862183.647:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4863 comm="syz.5.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 55.409830][ T4876] loop4: detected capacity change from 0 to 512 [ 55.471588][ T4876] EXT4-fs (loop4): 1 orphan inode deleted [ 55.483879][ T4876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.511954][ T4876] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.525590][ T3614] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 1 [ 55.588162][ T4874] Set syz1 is full, maxelem 65536 reached [ 55.623587][ T4883] loop5: detected capacity change from 0 to 164 [ 55.658072][ T4883] syz.5.491: attempt to access beyond end of device [ 55.658072][ T4883] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.660161][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.688397][ T4883] syz.5.491: attempt to access beyond end of device [ 55.688397][ T4883] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.849895][ T4902] futex_wake_op: syz.5.499 tries to shift op by -1; fix this program [ 55.860164][ T4904] loop6: detected capacity change from 0 to 1024 [ 55.866953][ T4904] EXT4-fs: Ignoring removed orlov option [ 55.873294][ T4904] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.901598][ T4904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.922741][ T4904] EXT4-fs error (device loop6): ext4_check_all_de:659: inode #12: block 7: comm syz.6.500: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 55.968554][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.982278][ T4912] loop5: detected capacity change from 0 to 256 [ 56.033552][ T4912] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.089578][ T4924] netlink: 'syz.6.509': attribute type 1 has an invalid length. [ 56.186787][ T4936] loop6: detected capacity change from 0 to 512 [ 56.202872][ T4938] futex_wake_op: syz.3.516 tries to shift op by -1; fix this program [ 56.232700][ T4936] EXT4-fs: Ignoring removed nobh option [ 56.262106][ T4936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.281151][ T4936] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.315858][ T4936] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.514: bg 0: block 224: padding at end of block bitmap is not set [ 56.335127][ T4936] EXT4-fs (loop6): Remounting filesystem read-only [ 56.394641][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.441579][ T4962] loop6: detected capacity change from 0 to 1024 [ 56.452612][ T4959] netlink: 'syz.3.525': attribute type 1 has an invalid length. [ 56.462776][ T4962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c018, mo2=0002] [ 56.474644][ T4962] System zones: 0-1, 3-12 [ 56.486877][ T4962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.546675][ T4968] loop3: detected capacity change from 0 to 526 [ 56.583130][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.607920][ T4968] EXT4-fs (loop3): failed to parse options in superblock: gggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg [ 56.621432][ T4968] EXT4-fs (loop3): Unsupported encryption level 122 [ 56.718615][ T4985] netlink: 'syz.6.544': attribute type 1 has an invalid length. [ 56.726634][ T4985] netlink: 'syz.6.544': attribute type 4 has an invalid length. [ 56.734524][ T4985] __nla_validate_parse: 7 callbacks suppressed [ 56.734539][ T4985] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.544'. [ 56.750668][ T4987] loop3: detected capacity change from 0 to 512 [ 56.793964][ T4987] EXT4-fs: Ignoring removed nobh option [ 56.806608][ T4989] SELinux: failed to load policy [ 56.818616][ T4987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.878354][ T4987] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.899332][ T4987] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.535: bg 0: block 224: padding at end of block bitmap is not set [ 56.925790][ T4987] EXT4-fs (loop3): Remounting filesystem read-only [ 56.988628][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.111716][ T5019] loop5: detected capacity change from 0 to 526 [ 57.115493][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 57.121837][ T5019] EXT4-fs (loop5): failed to parse options in superblock: gggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg [ 57.143558][ T5019] EXT4-fs (loop5): Unsupported encryption level 122 [ 57.166286][ T5022] loop6: detected capacity change from 0 to 1024 [ 57.175660][ T5022] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.187441][ T5022] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.190756][ T5026] capability: warning: `syz.4.552' uses deprecated v2 capabilities in a way that may be insecure [ 57.201357][ T5022] JBD2: no valid journal superblock found [ 57.213979][ T5022] EXT4-fs (loop6): Could not load journal inode [ 57.231339][ T5022] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 57.632549][ T5046] loop5: detected capacity change from 0 to 512 [ 57.640949][ T5046] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.654322][ T5046] EXT4-fs (loop5): 1 truncate cleaned up [ 57.661287][ T5046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.686186][ T4061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.893712][ T5073] loop5: detected capacity change from 0 to 1024 [ 57.902003][ T5073] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.914522][ T5073] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.932929][ T5073] JBD2: no valid journal superblock found [ 57.939097][ T5073] EXT4-fs (loop5): Could not load journal inode [ 57.951555][ T5073] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 58.241658][ T5105] ------------[ cut here ]------------ [ 58.247286][ T5105] WARNING: CPU: 1 PID: 5105 at mm/page_alloc.c:4946 __alloc_frozen_pages_noprof+0x218/0x360 [ 58.257789][ T5105] Modules linked in: [ 58.262614][ T5105] CPU: 1 UID: 0 PID: 5105 Comm: syz.6.585 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 58.275793][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.286472][ T5105] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 58.293332][ T5105] Code: 83 3d b3 b6 50 05 02 72 0e 48 83 b8 a0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 a2 b3 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 58.315653][ T5105] RSP: 0018:ffffc9000118b9e8 EFLAGS: 00010246 [ 58.324412][ T5105] RAX: dc294dbf42195000 RBX: 0000000000000016 RCX: 0000000000000000 [ 58.334358][ T5105] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 58.345131][ T5105] RBP: 0000000000000dc0 R08: ffff888119566d98 R09: 0000000000000000 [ 58.355486][ T5105] R10: ffff88811e941eb8 R11: 000188811e941eb8 R12: ffffc9000118bd38 [ 58.364618][ T5105] R13: ffff88811e941eb8 R14: 0000000000040dc0 R15: 0000000000000000 [ 58.374487][ T5105] FS: 00007fd5c98976c0(0000) GS:ffff8882aef51000(0000) knlGS:0000000000000000 [ 58.385395][ T5105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.393019][ T5105] CR2: 0000200000005000 CR3: 000000011ec78000 CR4: 00000000003506f0 [ 58.402000][ T5105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.410482][ T5105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.419252][ T5105] Call Trace: [ 58.422675][ T5105] [ 58.425818][ T5105] __alloc_pages_noprof+0x9/0x20 [ 58.431092][ T5105] ___kmalloc_large_node+0x73/0x130 [ 58.436510][ T5105] __kmalloc_large_node_noprof+0x16/0xa0 [ 58.442442][ T5105] __kmalloc_noprof+0x2ab/0x3e0 [ 58.448306][ T5105] ? hashtab_init+0x9b/0xe0 [ 58.452883][ T5105] hashtab_init+0x9b/0xe0 [ 58.457630][ T5105] symtab_init+0x2c/0x40 [ 58.462123][ T5105] class_read+0x154/0x6d0 [ 58.466594][ T5105] ? __kmalloc_noprof+0x364/0x3e0 [ 58.471802][ T5105] ? hashtab_init+0xbc/0xe0 [ 58.476786][ T5105] ? __pfx_class_read+0x10/0x10 [ 58.482365][ T5105] policydb_read+0x64f/0x1330 [ 58.487412][ T5105] security_load_policy+0xba/0x890 [ 58.493139][ T5105] ? rep_movs_alternative+0x4a/0x90 [ 58.499224][ T5105] sel_write_load+0x1d4/0x380 [ 58.505197][ T5105] ? __pfx_sel_write_load+0x10/0x10 [ 58.510755][ T5105] vfs_write+0x266/0x8d0 [ 58.515602][ T5105] ? __rcu_read_unlock+0x4f/0x70 [ 58.521121][ T5105] ? __fget_files+0x184/0x1c0 [ 58.526522][ T5105] ksys_write+0xda/0x1a0 [ 58.531380][ T5105] __x64_sys_write+0x40/0x50 [ 58.536532][ T5105] x64_sys_call+0x2cdd/0x2fb0 [ 58.541537][ T5105] do_syscall_64+0xd0/0x1a0 [ 58.546913][ T5105] ? clear_bhb_loop+0x25/0x80 [ 58.552394][ T5105] ? clear_bhb_loop+0x25/0x80 [ 58.557419][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.563400][ T5105] RIP: 0033:0x7fd5cb22e969 [ 58.567861][ T5105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.588224][ T5105] RSP: 002b:00007fd5c9897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.597180][ T5105] RAX: ffffffffffffffda RBX: 00007fd5cb455fa0 RCX: 00007fd5cb22e969 [ 58.605451][ T5105] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000004 [ 58.613885][ T5105] RBP: 00007fd5cb2b0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 58.622821][ T5105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.631526][ T5105] R13: 0000000000000000 R14: 00007fd5cb455fa0 R15: 00007ffed6180118 [ 58.639916][ T5105] [ 58.643173][ T5105] ---[ end trace 0000000000000000 ]--- [ 58.649193][ T5105] SELinux: failed to load policy [ 58.928229][ T5130] Falling back ldisc for ttyS3. [ 59.134560][ T5150] netlink: 664 bytes leftover after parsing attributes in process `syz.0.606'. [ 59.147464][ T5152] loop6: detected capacity change from 0 to 2048 [ 59.161293][ T5152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.256068][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.292700][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.308145][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 59.308165][ T29] audit: type=1400 audit(1745862187.837:732): avc: denied { write } for pid=5151 comm="syz.6.607" path="/44/file0/cpu.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.315234][ T5152] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.607: bg 0: block 234: padding at end of block bitmap is not set [ 59.360913][ T5152] EXT4-fs (loop6): Remounting filesystem read-only [ 59.375416][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 59.384978][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 59.398003][ T5172] netlink: 'syz.0.614': attribute type 16 has an invalid length. [ 59.406109][ T5172] netlink: 'syz.0.614': attribute type 17 has an invalid length. [ 59.408917][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 59.448179][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 59.458854][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 59.469004][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 59.493677][ T5172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.502651][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 59.615352][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.687502][ T5202] loop5: detected capacity change from 0 to 512 [ 59.701801][ T5202] ext4: Unknown parameter 'dont_measure' [ 59.844072][ T29] audit: type=1400 audit(1745862188.377:733): avc: denied { lock } for pid=5228 comm="syz.0.641" path="socket:[10250]" dev="sockfs" ino=10250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 60.007744][ T5239] loop6: detected capacity change from 0 to 8192 [ 60.071914][ T29] audit: type=1326 audit(1745862188.607:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 60.095674][ T29] audit: type=1326 audit(1745862188.607:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 60.146467][ T29] audit: type=1326 audit(1745862188.637:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 60.169907][ T29] audit: type=1326 audit(1745862188.637:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 60.193778][ T29] audit: type=1326 audit(1745862188.637:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 60.217772][ T29] audit: type=1326 audit(1745862188.637:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 60.241695][ T29] audit: type=1326 audit(1745862188.637:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 60.265365][ T29] audit: type=1326 audit(1745862188.637:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 60.298571][ T5256] tipc: Enabling of bearer rejected, failed to enable media [ 60.504592][ T5276] loop4: detected capacity change from 0 to 128 [ 60.549435][ T5276] syz.4.662: attempt to access beyond end of device [ 60.549435][ T5276] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 60.568324][ T5276] syz.4.662: attempt to access beyond end of device [ 60.568324][ T5276] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 60.589227][ T5276] syz.4.662: attempt to access beyond end of device [ 60.589227][ T5276] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 60.603082][ T5276] syz.4.662: attempt to access beyond end of device [ 60.603082][ T5276] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 60.622518][ T5276] syz.4.662: attempt to access beyond end of device [ 60.622518][ T5276] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 60.637620][ T5276] syz.4.662: attempt to access beyond end of device [ 60.637620][ T5276] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 60.668506][ T5276] syz.4.662: attempt to access beyond end of device [ 60.668506][ T5276] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 60.698325][ T5257] syz.3.655 (5257) used greatest stack depth: 9400 bytes left [ 60.719804][ T5276] syz.4.662: attempt to access beyond end of device [ 60.719804][ T5276] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 60.736980][ T5276] syz.4.662: attempt to access beyond end of device [ 60.736980][ T5276] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 60.750988][ T5276] syz.4.662: attempt to access beyond end of device [ 60.750988][ T5276] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 60.802832][ T5288] loop6: detected capacity change from 0 to 8192 [ 61.024625][ T5304] rdma_op ffff88810146a180 conn xmit_rdma 0000000000000000 [ 61.166030][ T5314] IPVS: Error joining to the multicast group [ 61.542573][ T5361] sd 0:0:1:0: device reset [ 61.544381][ T5362] Invalid ELF header magic: != ELF [ 61.783407][ T5392] __nla_validate_parse: 9 callbacks suppressed [ 61.783426][ T5392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.716'. [ 61.823040][ T5394] usb usb1: usbfs: process 5394 (syz.3.717) did not claim interface 63 before use [ 62.302291][ T5451] msdos: Unknown parameter 'ÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 62.317454][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 62.330317][ T5454] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.339859][ T5454] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.348672][ T5454] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.357624][ T5454] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.366925][ T5454] vxlan0: entered promiscuous mode [ 62.409365][ T5460] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 62.452585][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 62.568248][ T5470] Falling back ldisc for ttyS3. [ 62.890414][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.767'. [ 62.980245][ T5517] loop6: detected capacity change from 0 to 1024 [ 63.011525][ T5517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.025193][ T5517] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.053640][ T5517] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 63.073751][ T5517] EXT4-fs (loop6): Remounting filesystem read-only [ 63.083500][ T3598] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4829: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 63.110865][ T5530] loop5: detected capacity change from 0 to 512 [ 63.148256][ T5530] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.175933][ T5517] syz.6.772 (5517) used greatest stack depth: 9096 bytes left [ 63.187559][ T5530] EXT4-fs (loop5): 1 truncate cleaned up [ 63.197810][ T5530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.209099][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.221900][ T5530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.306392][ T3380] IPVS: starting estimator thread 0... [ 63.306758][ T5549] netlink: 24 bytes leftover after parsing attributes in process `syz.5.788'. [ 63.354446][ T5559] netlink: 76 bytes leftover after parsing attributes in process `syz.6.790'. [ 63.408155][ T5550] IPVS: using max 2400 ests per chain, 120000 per kthread [ 63.460686][ T5578] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 63.517367][ T5587] loop6: detected capacity change from 0 to 512 [ 63.544950][ T5587] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.802: corrupted in-inode xattr: invalid ea_ino [ 63.560598][ T5578] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.561634][ T5587] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.802: couldn't read orphan inode 15 (err -117) [ 63.569860][ T5578] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.569900][ T5578] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.601982][ T5578] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.612407][ T5578] bond1: (slave geneve2): making interface the new active one [ 63.620753][ T5578] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 63.648265][ T5587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.702553][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.848837][ T5614] macvlan2: entered promiscuous mode [ 63.854207][ T5614] macvlan2: entered allmulticast mode [ 63.870313][ T5614] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 63.912664][ T5619] vlan2: entered allmulticast mode [ 63.918250][ T5619] bond0: entered allmulticast mode [ 63.923565][ T5619] bond_slave_0: entered allmulticast mode [ 63.929429][ T5619] bond_slave_1: entered allmulticast mode [ 64.004487][ T5621] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 64.286178][ T5645] wireguard0: entered promiscuous mode [ 64.292331][ T5645] wireguard0: entered allmulticast mode [ 64.318247][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 64.318264][ T29] audit: type=1400 audit(1745862192.857:823): avc: denied { relabelfrom } for pid=5647 comm="syz.3.829" name="" dev="pipefs" ino=12086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 64.518382][ T5664] hub 9-0:1.0: USB hub found [ 64.523891][ T5664] hub 9-0:1.0: 8 ports detected [ 64.589766][ T5671] Falling back ldisc for ttyS3. [ 64.654298][ T29] audit: type=1326 audit(1745862193.187:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb22e969 code=0x7ffc0000 [ 64.683165][ T29] audit: type=1326 audit(1745862193.187:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fd5cb22e969 code=0x7ffc0000 [ 64.709302][ T29] audit: type=1326 audit(1745862193.187:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb22e969 code=0x7ffc0000 [ 64.739607][ T29] audit: type=1326 audit(1745862193.187:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz.6.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb22e969 code=0x7ffc0000 [ 64.811156][ T5688] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 64.904762][ T5699] vlan2: entered allmulticast mode [ 64.911769][ T5699] bond0: entered allmulticast mode [ 64.917651][ T5699] bond_slave_0: entered allmulticast mode [ 64.925103][ T5699] bond_slave_1: entered allmulticast mode [ 65.007839][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811863dc00: rx timeout, send abort [ 65.016929][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811863dc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 65.054240][ T5713] netlink: 'syz.5.861': attribute type 1 has an invalid length. [ 65.079133][ T5713] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.088657][ T5713] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.098299][ T5713] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.107575][ T5713] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.118305][ T5713] bond1: (slave geneve2): making interface the new active one [ 65.128162][ T5713] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.280597][ T29] audit: type=1326 audit(1745862193.817:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 65.315558][ T29] audit: type=1326 audit(1745862193.817:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 65.341248][ T29] audit: type=1326 audit(1745862193.817:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 65.367019][ T29] audit: type=1326 audit(1745862193.817:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 65.393305][ T29] audit: type=1326 audit(1745862193.817:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5728 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 65.451993][ T5735] wireguard0: entered promiscuous mode [ 65.458866][ T5735] wireguard0: entered allmulticast mode [ 65.479660][ T5740] loop4: detected capacity change from 0 to 1024 [ 65.489261][ T5740] EXT4-fs: Ignoring removed oldalloc option [ 65.495924][ T5740] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 65.522239][ T5740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.557836][ T5746] mmap: syz.5.872 (5746): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 65.578312][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.604386][ T5748] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5748 comm=syz.5.874 [ 65.741258][ T5765] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.761198][ T5765] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.826645][ T5779] loop5: detected capacity change from 0 to 128 [ 65.867414][ T5779] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 65.877451][ T5779] FAT-fs (loop5): Filesystem has been set read-only [ 65.894295][ T5779] bio_check_eod: 3 callbacks suppressed [ 65.894317][ T5779] syz.5.889: attempt to access beyond end of device [ 65.894317][ T5779] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 65.930545][ T5791] netlink: 340 bytes leftover after parsing attributes in process `syz.4.895'. [ 65.964834][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.895'. [ 65.975486][ T5793] loop6: detected capacity change from 0 to 2048 [ 65.991036][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 66.019324][ T5793] loop6: p1 < > p4 [ 66.026876][ T5793] loop6: p4 size 8388608 extends beyond EOD, truncated [ 66.040978][ T5799] wireguard0: entered promiscuous mode [ 66.047945][ T5799] wireguard0: entered allmulticast mode [ 66.137536][ T5807] smc: net device bond0 applied user defined pnetid SYZ0 [ 66.155153][ T5807] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.165961][ T5811] netlink: 'syz.6.904': attribute type 30 has an invalid length. [ 66.193323][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 66.406209][ T5834] netlink: 'syz.5.914': attribute type 16 has an invalid length. [ 66.415063][ T5834] netlink: 'syz.5.914': attribute type 17 has an invalid length. [ 66.456084][ T5841] smc: net device bond0 applied user defined pnetid SYZ0 [ 66.469302][ T5841] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.534129][ T5834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.791004][ T5874] __nla_validate_parse: 3 callbacks suppressed [ 66.791023][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 66.806680][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 66.816265][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 66.842858][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 66.852651][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 66.862203][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 66.877424][ T5882] smc: net device bond0 applied user defined pnetid SYZ0 [ 66.886492][ T5882] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.921440][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 66.930989][ T5887] loop4: detected capacity change from 0 to 2048 [ 67.028070][ T5887] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.935: bg 0: block 234: padding at end of block bitmap is not set [ 67.051403][ T5887] EXT4-fs (loop4): Remounting filesystem read-only [ 67.060670][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.940'. [ 67.134727][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.943'. [ 67.166693][ T5911] serio: Serial port ptm0 [ 67.171682][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.947'. [ 67.197892][ T5915] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.206926][ T5915] smc: net device bond0 erased user defined pnetid SYZ0 [ 67.288260][ T5920] Falling back ldisc for ttyS3. [ 67.346211][ T5929] netlink: 'syz.6.953': attribute type 1 has an invalid length. [ 67.364896][ T5929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.412092][ T5929] bond1: (slave syz_tun): making interface the new active one [ 67.421400][ T5929] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 67.651310][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.659195][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.666796][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.674926][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.682526][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.690361][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.697810][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.705801][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.713454][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.721179][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.728658][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.736181][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.737012][ T5959] loop6: detected capacity change from 0 to 512 [ 67.743904][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.760038][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.767649][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.775101][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.782681][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.790290][ T5959] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.790560][ T5959] EXT4-fs (loop6): mount failed [ 67.805470][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.818697][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.826216][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.834004][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.841855][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.849550][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.857112][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.864808][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.872313][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.880111][ T37] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.888281][ T37] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 67.937918][ T5968] rdma_op ffff888103568180 conn xmit_rdma 0000000000000000 [ 68.153460][ T5987] IPVS: Error joining to the multicast group [ 68.195672][ T5991] loop5: detected capacity change from 0 to 512 [ 68.202572][ T5991] EXT4-fs: Ignoring removed orlov option [ 68.221434][ T5991] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.983: casefold flag without casefold feature [ 68.234927][ T5991] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.983: couldn't read orphan inode 15 (err -117) [ 68.428324][ T6018] SELinux: failed to load policy [ 68.489819][ T6026] usb usb1: usbfs: process 6026 (syz.4.1000) did not claim interface 63 before use [ 68.697854][ T6049] loop4: detected capacity change from 0 to 2048 [ 68.839258][ T6057] loop3: detected capacity change from 0 to 4096 [ 68.962829][ T6065] netlink: 'syz.4.1016': attribute type 1 has an invalid length. [ 68.986693][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.005318][ T6065] bond1: (slave syz_tun): making interface the new active one [ 69.018074][ T6065] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 69.188571][ T6086] Falling back ldisc for ttyS3. [ 69.347539][ T6109] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 69.347704][ T6108] IPVS: stopping master sync thread 6109 ... [ 69.404882][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 69.404896][ T29] audit: type=1400 audit(1745862197.937:1146): avc: denied { compute_member } for pid=6113 comm="syz.5.1038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.442102][ T6118] unsupported nla_type 52263 [ 69.444462][ T6116] ip6gretap1: entered allmulticast mode [ 69.487932][ T29] audit: type=1326 audit(1745862198.017:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 69.514022][ T29] audit: type=1326 audit(1745862198.017:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 69.539671][ T29] audit: type=1326 audit(1745862198.027:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 69.592345][ T6126] loop3: detected capacity change from 0 to 2048 [ 69.628687][ T6126] loop3: p1 < > p4 [ 69.633204][ T6126] loop3: p4 size 8388608 extends beyond EOD, truncated [ 69.676445][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.685549][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.693564][ T6134] loop3: detected capacity change from 0 to 2048 [ 69.709960][ T6134] EXT4-fs mount: 6 callbacks suppressed [ 69.709975][ T6134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.787363][ T6134] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1049: bg 0: block 234: padding at end of block bitmap is not set [ 69.802407][ T6134] EXT4-fs (loop3): Remounting filesystem read-only [ 69.907275][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.932259][ T6141] loop3: detected capacity change from 0 to 128 [ 69.952084][ T6141] syz.3.1050: attempt to access beyond end of device [ 69.952084][ T6141] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 69.966106][ T6141] syz.3.1050: attempt to access beyond end of device [ 69.966106][ T6141] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 69.980966][ T6141] syz.3.1050: attempt to access beyond end of device [ 69.980966][ T6141] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 69.995328][ T6141] syz.3.1050: attempt to access beyond end of device [ 69.995328][ T6141] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 70.009432][ T6141] syz.3.1050: attempt to access beyond end of device [ 70.009432][ T6141] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 70.024297][ T6141] syz.3.1050: attempt to access beyond end of device [ 70.024297][ T6141] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 70.038856][ T6141] syz.3.1050: attempt to access beyond end of device [ 70.038856][ T6141] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 70.053905][ T6141] syz.3.1050: attempt to access beyond end of device [ 70.053905][ T6141] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 70.067844][ T6141] syz.3.1050: attempt to access beyond end of device [ 70.067844][ T6141] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 70.375909][ T6170] loop4: detected capacity change from 0 to 2048 [ 70.409214][ T6170] loop4: p1 < > p4 [ 70.422317][ T6170] loop4: p4 size 8388608 extends beyond EOD, truncated [ 70.429001][ T6166] Falling back ldisc for ttyS3. [ 70.567108][ T29] audit: type=1400 audit(1745862199.097:1150): avc: denied { relabelfrom } for pid=6185 comm="syz.4.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 70.587544][ T29] audit: type=1400 audit(1745862199.097:1151): avc: denied { relabelto } for pid=6185 comm="syz.4.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 70.836062][ T29] audit: type=1400 audit(1745862199.367:1152): avc: denied { bind } for pid=6203 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.860309][ T29] audit: type=1400 audit(1745862199.377:1153): avc: denied { ioctl } for pid=6202 comm="syz.3.1082" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.925813][ T29] audit: type=1400 audit(1745862199.457:1154): avc: denied { bind } for pid=6211 comm="syz.4.1086" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.946597][ T29] audit: type=1400 audit(1745862199.457:1155): avc: denied { node_bind } for pid=6211 comm="syz.4.1086" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 70.978341][ T6208] Falling back ldisc for ttyS3. [ 71.086926][ T6234] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.122268][ T6234] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.385037][ T6259] syzkaller1: entered promiscuous mode [ 71.390793][ T6259] syzkaller1: entered allmulticast mode [ 71.434242][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.441753][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.484915][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.497433][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.505248][ T6252] loop3: detected capacity change from 0 to 2048 [ 71.528620][ T6252] loop3: p1 p2 < > p3 p4 < p5 > [ 71.533776][ T6252] loop3: partition table partially beyond EOD, truncated [ 71.542076][ T6252] loop3: p1 start 234883329 is beyond EOD, truncated [ 71.549282][ T6252] loop3: p2 start 4294902784 is beyond EOD, truncated [ 71.556259][ T6252] loop3: p3 start 4278191616 is beyond EOD, truncated [ 71.567496][ T6252] loop3: p5 start 234883329 is beyond EOD, truncated [ 71.578876][ T6259] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.589562][ T6259] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.598684][ T6259] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.608301][ T6259] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.792962][ T6300] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 72.486154][ T6286] syz.3.1117 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 72.497381][ T6286] CPU: 1 UID: 0 PID: 6286 Comm: syz.3.1117 Tainted: G W 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 72.497456][ T6286] Tainted: [W]=WARN [ 72.497461][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.497472][ T6286] Call Trace: [ 72.497477][ T6286] [ 72.497484][ T6286] __dump_stack+0x1d/0x30 [ 72.497503][ T6286] dump_stack_lvl+0xe8/0x140 [ 72.497521][ T6286] dump_stack+0x15/0x1b [ 72.497579][ T6286] dump_header+0x81/0x220 [ 72.497681][ T6286] oom_kill_process+0x334/0x3f0 [ 72.497704][ T6286] out_of_memory+0x979/0xb80 [ 72.497726][ T6286] ? css_next_descendant_pre+0x138/0x160 [ 72.497791][ T6286] mem_cgroup_out_of_memory+0x13d/0x190 [ 72.497823][ T6286] try_charge_memcg+0x5e2/0x870 [ 72.497849][ T6286] charge_memcg+0x51/0xc0 [ 72.497912][ T6286] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 72.497946][ T6286] __read_swap_cache_async+0x1df/0x350 [ 72.497972][ T6286] swap_cluster_readahead+0x277/0x3e0 [ 72.497997][ T6286] swapin_readahead+0xde/0x6f0 [ 72.498029][ T6286] ? __filemap_get_folio+0x49f/0x650 [ 72.498060][ T6286] ? __rcu_read_unlock+0x34/0x70 [ 72.498086][ T6286] ? swap_cache_get_folio+0x77/0x200 [ 72.498111][ T6286] do_swap_page+0x301/0x2460 [ 72.498199][ T6286] ? perf_trace_run_bpf_submit+0xe6/0x110 [ 72.498219][ T6286] ? perf_trace_memcg_rstat_events+0x1a2/0x1d0 [ 72.498249][ T6286] ? __pfx_default_wake_function+0x10/0x10 [ 72.498333][ T6286] handle_mm_fault+0xb60/0x2ae0 [ 72.498403][ T6286] ? mas_walk+0xf2/0x120 [ 72.498424][ T6286] do_user_addr_fault+0x636/0x1090 [ 72.498450][ T6286] ? restore_fpregs_from_fpstate+0x61/0x120 [ 72.498547][ T6286] ? fpregs_restore_userregs+0xbb/0x190 [ 72.498569][ T6286] ? fpregs_assert_state_consistent+0x84/0xa0 [ 72.498666][ T6286] exc_page_fault+0x54/0xc0 [ 72.498764][ T6286] asm_exc_page_fault+0x26/0x30 [ 72.498781][ T6286] RIP: 0033:0x7ff742e45388 [ 72.498794][ T6286] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 3a 28 35 00 00 0f 8e 09 fe ff ff e8 f3 9f fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 [ 72.498809][ T6286] RSP: 002b:00007ffedd3dbae0 EFLAGS: 00010212 [ 72.498823][ T6286] RAX: 0000000000011b09 RBX: 00007ff743197ba0 RCX: 0000000000011940 [ 72.498839][ T6286] RDX: 00000000000001c9 RSI: 00007ffedd3dbac0 RDI: 0000000000000001 [ 72.498854][ T6286] RBP: 00007ff743197ba0 R08: 000000001b411a22 R09: 7fffffffffffffff [ 72.498880][ T6286] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000011b38 [ 72.498891][ T6286] R13: 00007ffedd3dbbd0 R14: ffffffffffffffff R15: 00007ffedd3dbbf0 [ 72.498908][ T6286] [ 72.760409][ T6286] memory: usage 307200kB, limit 307200kB, failcnt 279 [ 72.767327][ T6286] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 72.775558][ T6286] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 72.783134][ T6286] Memory cgroup stats for /syz3: [ 72.783463][ T6286] cache 0 [ 72.791516][ T6286] rss 0 [ 72.794332][ T6286] shmem 0 [ 72.797318][ T6286] mapped_file 0 [ 72.800840][ T6286] dirty 0 [ 72.803778][ T6286] writeback 0 [ 72.807307][ T6286] workingset_refault_anon 14 [ 72.812154][ T6286] workingset_refault_file 158 [ 72.816999][ T6286] swap 368640 [ 72.820541][ T6286] swapcached 12288 [ 72.824359][ T6286] pgpgin 64009 [ 72.828370][ T6286] pgpgout 64006 [ 72.832209][ T6286] pgfault 52660 [ 72.835993][ T6286] pgmajfault 12 [ 72.840275][ T6286] inactive_anon 12288 [ 72.844915][ T6286] active_anon 0 [ 72.849093][ T6286] inactive_file 0 [ 72.852924][ T6286] active_file 0 [ 72.856443][ T6286] unevictable 0 [ 72.860391][ T6286] hierarchical_memory_limit 314572800 [ 72.866247][ T6286] hierarchical_memsw_limit 9223372036854771712 [ 72.873370][ T6286] total_cache 0 [ 72.877330][ T6286] total_rss 0 [ 72.881103][ T6286] total_shmem 0 [ 72.884676][ T6286] total_mapped_file 0 [ 72.888958][ T6286] total_dirty 0 [ 72.892628][ T6286] total_writeback 0 [ 72.896649][ T6286] total_workingset_refault_anon 14 [ 72.902598][ T6286] total_workingset_refault_file 158 [ 72.908056][ T6286] total_swap 368640 [ 72.912398][ T6286] total_swapcached 12288 [ 72.916655][ T6286] total_pgpgin 64009 [ 72.920756][ T6286] total_pgpgout 64006 [ 72.924791][ T6286] total_pgfault 52660 [ 72.929035][ T6286] total_pgmajfault 12 [ 72.933234][ T6286] total_inactive_anon 12288 [ 72.937778][ T6286] total_active_anon 0 [ 72.941786][ T6286] total_inactive_file 0 [ 72.946152][ T6286] total_active_file 0 [ 72.950271][ T6286] total_unevictable 0 [ 72.954283][ T6286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1117,pid=6286,uid=0 [ 72.969070][ T6286] Memory cgroup out of memory: Killed process 6286 (syz.3.1117) total-vm:95664kB, anon-rss:936kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 73.259075][ T6287] syz.3.1117 (6287) used greatest stack depth: 7208 bytes left [ 73.340293][ T6337] loop4: detected capacity change from 0 to 512 [ 73.361229][ T6337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.374983][ T6337] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.510510][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.637363][ T6385] loop4: detected capacity change from 0 to 512 [ 73.652197][ T6385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.701081][ T6385] EXT4-fs (loop4): 1 truncate cleaned up [ 73.706930][ T6405] __nla_validate_parse: 16 callbacks suppressed [ 73.706944][ T6405] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1167'. [ 73.719043][ T6385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.737464][ T6408] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 73.765601][ T6385] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.781503][ T10] IPVS: starting estimator thread 0... [ 73.793447][ T6413] openvswitch: netlink: Message has 6 unknown bytes. [ 73.811439][ T6415] atomic_op ffff88811980c128 conn xmit_atomic 0000000000000000 [ 73.868443][ T6411] IPVS: using max 2448 ests per chain, 122400 per kthread [ 73.892362][ T6427] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 74.050882][ T6451] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 74.325275][ T6479] syzkaller0: entered promiscuous mode [ 74.330902][ T6479] syzkaller0: entered allmulticast mode [ 74.348772][ T6479] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 74.420786][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 74.420803][ T29] audit: type=1400 audit(1745862202.957:1251): avc: denied { module_request } for pid=6487 comm="syz.6.1205" kmod="snd-timer-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.479655][ T6495] loop3: detected capacity change from 0 to 512 [ 74.488736][ T6489] ALSA: seq fatal error: cannot create timer (-19) [ 74.504036][ T6495] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.542517][ T6495] EXT4-fs (loop3): 1 truncate cleaned up [ 74.556759][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.577914][ T29] audit: type=1400 audit(1745862203.117:1252): avc: denied { mount } for pid=6494 comm="syz.3.1206" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.601469][ T29] audit: type=1400 audit(1745862203.137:1253): avc: denied { name_connect } for pid=6501 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 74.626689][ T29] audit: type=1400 audit(1745862203.157:1254): avc: denied { listen } for pid=6501 comm="syz.0.1208" lport=50601 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.650944][ T29] audit: type=1400 audit(1745862203.157:1255): avc: denied { accept } for pid=6501 comm="syz.0.1208" lport=50601 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.675539][ T29] audit: type=1400 audit(1745862203.157:1256): avc: denied { read } for pid=6501 comm="syz.0.1208" lport=50601 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 74.705934][ T6503] pimreg: entered allmulticast mode [ 74.711514][ T29] audit: type=1400 audit(1745862203.247:1257): avc: denied { setopt } for pid=6501 comm="syz.0.1208" lport=50601 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 74.739438][ T6503] pimreg: left allmulticast mode [ 74.744771][ T29] audit: type=1400 audit(1745862203.277:1258): avc: denied { write } for pid=6494 comm="syz.3.1206" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.767302][ T29] audit: type=1400 audit(1745862203.277:1259): avc: denied { add_name } for pid=6494 comm="syz.3.1206" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.810185][ T29] audit: type=1400 audit(1745862203.277:1260): avc: denied { create } for pid=6494 comm="syz.3.1206" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.862316][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.971250][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 75.007966][ T6538] netlink: 'syz.3.1224': attribute type 1 has an invalid length. [ 75.017118][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 75.050236][ T6538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.074074][ T6538] bond2: (slave ip6gretap1): making interface the new active one [ 75.083236][ T6538] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 75.091478][ T6538] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 75.099691][ T6538] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 75.119047][ T3598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 75.140305][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 75.204500][ T3576] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 75.392141][ T6570] serio: Serial port ptm0 [ 75.690960][ T6601] syzkaller0: entered promiscuous mode [ 75.696617][ T6601] syzkaller0: entered allmulticast mode [ 75.783875][ T6603] pimreg: entered allmulticast mode [ 75.796514][ T6603] pimreg: left allmulticast mode [ 75.929008][ T6622] af_packet: tpacket_rcv: packet too big, clamped from 154 to 4294967286. macoff=82 [ 76.054475][ T6632] netlink: 'syz.5.1263': attribute type 3 has an invalid length. [ 76.069471][ T3380] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 76.168235][ T3598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 76.228207][ T3614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 76.236231][ T3614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 76.278915][ T6648] loop4: detected capacity change from 0 to 1024 [ 76.290007][ T6648] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.301221][ T6648] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 76.317009][ T6648] JBD2: no valid journal superblock found [ 76.323842][ T6648] EXT4-fs (loop4): Could not load journal inode [ 76.352114][ T6648] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 76.411180][ T6661] loop4: detected capacity change from 0 to 512 [ 76.429361][ T6661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.461574][ T6661] EXT4-fs (loop4): 1 truncate cleaned up [ 76.474251][ T6664] netlink: 'syz.6.1278': attribute type 3 has an invalid length. [ 76.490084][ T6661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.514540][ T6661] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.581107][ T6673] netlink: 'syz.6.1281': attribute type 1 has an invalid length. [ 76.597373][ T6673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.621172][ T6673] bond2: (slave ip6gretap1): making interface the new active one [ 76.633142][ T6673] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 76.642692][ T6673] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 76.685419][ T6682] loop6: detected capacity change from 0 to 128 [ 76.692497][ T6682] EXT4-fs: Ignoring removed nobh option [ 76.703633][ T6682] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.716851][ T6682] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.778288][ T4344] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.824715][ T6703] loop4: detected capacity change from 0 to 1024 [ 76.832074][ T6703] EXT4-fs: Ignoring removed nobh option [ 76.837918][ T6703] EXT4-fs: inline encryption not supported [ 76.844196][ T6703] EXT4-fs: Ignoring removed bh option [ 76.861963][ T6703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.882121][ T6703] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1294: Allocating blocks 385-513 which overlap fs metadata [ 76.900374][ T6702] EXT4-fs (loop4): pa ffff8881064fe770: logic 16, phys. 129, len 24 [ 76.908842][ T6702] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 76.946003][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.060244][ T6716] hub 9-0:1.0: USB hub found [ 77.066071][ T6716] hub 9-0:1.0: 8 ports detected [ 77.134296][ T6721] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 77.194092][ T6729] netlink: 1076 bytes leftover after parsing attributes in process `syz.0.1306'. [ 77.255239][ T6739] hsr0: entered promiscuous mode [ 77.261989][ T6739] macvtap1: entered promiscuous mode [ 77.267992][ T6739] macvtap1: entered allmulticast mode [ 77.273674][ T6739] hsr0: entered allmulticast mode [ 77.278883][ T6739] hsr_slave_0: entered allmulticast mode [ 77.284548][ T6739] hsr_slave_1: entered allmulticast mode [ 77.293546][ T6739] hsr0: left allmulticast mode [ 77.298506][ T6739] hsr_slave_0: left allmulticast mode [ 77.304371][ T6739] hsr_slave_1: left allmulticast mode [ 77.314198][ T6741] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.417396][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1317'. [ 77.893542][ T6782] loop3: detected capacity change from 0 to 512 [ 77.923291][ T6782] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.950643][ T6787] loop4: detected capacity change from 0 to 256 [ 77.966109][ T6782] EXT4-fs (loop3): 1 truncate cleaned up [ 77.979023][ T6782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.011700][ T6790] block device autoloading is deprecated and will be removed. [ 78.024728][ T6792] veth0_vlan: entered allmulticast mode [ 78.049613][ T6782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.070740][ T6792] veth0_vlan: left promiscuous mode [ 78.079031][ T6792] veth0_vlan: entered promiscuous mode [ 78.239748][ T6803] bridge0: port 3(vlan2) entered blocking state [ 78.246264][ T6803] bridge0: port 3(vlan2) entered disabled state [ 78.269762][ T6803] vlan2: entered allmulticast mode [ 78.270062][ T6805] loop3: detected capacity change from 0 to 512 [ 78.275264][ T6803] bridge0: entered allmulticast mode [ 78.287895][ T6803] vlan2: left allmulticast mode [ 78.292918][ T6803] bridge0: left allmulticast mode [ 78.375996][ T6805] EXT4-fs (loop3): 1 orphan inode deleted [ 78.389674][ T6805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.420917][ T6805] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.439503][ T3615] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:65: Failed to release dquot type 1 [ 78.512879][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.531002][ T3616] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:66: Failed to release dquot type 1 [ 78.532920][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1343'. [ 78.650303][ T6830] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1352'. [ 78.722966][ T6838] macsec1: entered promiscuous mode [ 78.728692][ T6838] syz_tun: entered promiscuous mode [ 78.734900][ T6838] macsec1: entered allmulticast mode [ 78.740303][ T6838] syz_tun: entered allmulticast mode [ 78.771480][ T6838] syz_tun: left allmulticast mode [ 78.776523][ T6847] rdma_op ffff88811bddd980 conn xmit_rdma 0000000000000000 [ 78.776619][ T6838] syz_tun: left promiscuous mode [ 78.805411][ T6849] xt_hashlimit: max too large, truncated to 1048576 [ 78.863351][ T6855] netlink: zone id is out of range [ 78.868629][ T6855] netlink: zone id is out of range [ 78.874052][ T6855] netlink: zone id is out of range [ 78.879218][ T6855] netlink: zone id is out of range [ 78.884355][ T6855] netlink: zone id is out of range [ 78.889509][ T6855] netlink: zone id is out of range [ 78.894988][ T6855] netlink: zone id is out of range [ 78.900234][ T6855] netlink: zone id is out of range [ 78.905442][ T6855] netlink: zone id is out of range [ 78.911098][ T6855] netlink: zone id is out of range [ 78.953112][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.987208][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.006972][ T6865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1369'. [ 79.016204][ T6865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1369'. [ 79.025701][ T6865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1369'. [ 79.091913][ T6865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1369'. [ 79.101177][ T6865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1369'. [ 79.110710][ T6865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1369'. [ 79.278278][ T6865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1369'. [ 79.288201][ T6865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1369'. [ 79.297421][ T6865] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1369'. [ 79.523151][ T6899] loop6: detected capacity change from 0 to 512 [ 79.539164][ T6899] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1383: bg 0: block 35: padding at end of block bitmap is not set [ 79.559026][ T6905] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1385'. [ 79.570455][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 79.570504][ T29] audit: type=1400 audit(1745862208.107:1459): avc: denied { name_bind } for pid=6903 comm="syz.3.1386" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 79.598782][ T29] audit: type=1400 audit(1745862208.107:1460): avc: denied { node_bind } for pid=6903 comm="syz.3.1386" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 79.664764][ T6908] uprobe: syz.4.1388:6908 failed to unregister, leaking uprobe [ 79.672700][ T6899] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 79.672982][ T6899] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1383: invalid indirect mapped block 4294967295 (level 1) [ 79.697909][ T29] audit: type=1400 audit(1745862208.197:1461): avc: denied { cpu } for pid=6908 comm="syz.4.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.718854][ T29] audit: type=1400 audit(1745862208.197:1462): avc: denied { execmem } for pid=6908 comm="syz.4.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.729855][ T6899] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1383: invalid indirect mapped block 4294967295 (level 2) [ 79.739851][ T29] audit: type=1400 audit(1745862208.237:1463): avc: denied { name_bind } for pid=6910 comm="syz.5.1389" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.757794][ T6899] EXT4-fs (loop6): 1 truncate cleaned up [ 79.776096][ T29] audit: type=1400 audit(1745862208.257:1464): avc: denied { create } for pid=6910 comm="syz.5.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.783900][ T6899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.801542][ T29] audit: type=1400 audit(1745862208.257:1465): avc: denied { ioctl } for pid=6910 comm="syz.5.1389" path="socket:[16603]" dev="sockfs" ino=16603 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.854241][ T6913] loop3: detected capacity change from 0 to 1024 [ 79.886921][ T6913] EXT4-fs: Ignoring removed nobh option [ 79.929243][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.975781][ T6923] netlink: 'syz.5.1395': attribute type 3 has an invalid length. [ 79.986526][ T6913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.000994][ T29] audit: type=1326 audit(1745862208.487:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d5ade969 code=0x7ffc0000 [ 80.024865][ T29] audit: type=1326 audit(1745862208.487:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d5ade969 code=0x7ffc0000 [ 80.048333][ T29] audit: type=1326 audit(1745862208.497:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.4.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15d5ade969 code=0x7ffc0000 [ 80.101653][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.211589][ T6944] loop6: detected capacity change from 0 to 164 [ 80.235071][ T6944] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.308108][ C1] ip6_tnl_xmit_ctl: 15 callbacks suppressed [ 80.308130][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 80.326470][ T6944] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 80.344707][ T6944] Symlink component flag not implemented [ 80.350715][ T6944] Symlink component flag not implemented [ 80.367546][ T6944] Symlink component flag not implemented (7) [ 80.374196][ T6944] Symlink component flag not implemented (116) [ 80.698219][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 80.771716][ T6861] syz.0.1367 (6861) used greatest stack depth: 4968 bytes left [ 80.827536][ T6978] loop6: detected capacity change from 0 to 512 [ 80.854528][ T6978] EXT4-fs (loop6): 1 orphan inode deleted [ 80.870188][ T3545] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 80.892216][ T6978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.927504][ T6978] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.941069][ T6986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.024835][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.038860][ T3616] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:66: Failed to release dquot type 1 [ 81.111820][ T3616] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 81.766377][ T7047] syzkaller0: entered promiscuous mode [ 81.772018][ T7047] syzkaller0: entered allmulticast mode [ 81.801449][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 81.911890][ T7065] loop3: detected capacity change from 0 to 164 [ 81.930157][ T7065] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 81.952289][ T7065] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 81.961450][ T7065] Symlink component flag not implemented [ 81.967647][ T7065] Symlink component flag not implemented [ 81.976291][ T7065] Symlink component flag not implemented (7) [ 81.982659][ T7065] Symlink component flag not implemented (116) [ 82.012598][ T7069] hsr0: entered promiscuous mode [ 82.022815][ T7069] macvtap1: entered promiscuous mode [ 82.028798][ T7069] macvtap1: entered allmulticast mode [ 82.034232][ T7069] hsr0: entered allmulticast mode [ 82.039524][ T7069] hsr_slave_0: entered allmulticast mode [ 82.045365][ T7069] hsr_slave_1: entered allmulticast mode [ 82.067284][ T7069] hsr0: left allmulticast mode [ 82.072241][ T7069] hsr_slave_0: left allmulticast mode [ 82.077788][ T7069] hsr_slave_1: left allmulticast mode [ 82.148137][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 82.228197][ T3614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 82.824224][ T7122] loop4: detected capacity change from 0 to 256 [ 82.929090][ T3614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 83.043953][ T7141] SELinux: ebitmap: truncated map [ 83.051852][ T7141] SELinux: failed to load policy [ 83.156987][ T7154] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 83.186549][ T7154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.220142][ T7154] bond2 (unregistering): Released all slaves [ 83.328092][ T3576] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 83.532001][ T7174] SELinux: failed to load policy [ 83.592762][ T7188] 9pnet: p9_errstr2errno: server reported unknown error Ÿjâáë=‹ùÆ«&B [ 83.861405][ T7216] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 83.884459][ T7221] loop4: detected capacity change from 0 to 256 [ 83.903410][ T7221] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.997331][ T7225] atomic_op ffff88812daea128 conn xmit_atomic 0000000000000000 [ 84.038333][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 84.094832][ T7231] SELinux: security policydb version 18 (MLS) not backwards compatible [ 84.123799][ T7231] SELinux: failed to load policy [ 84.236278][ T7241] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 84.365134][ T7250] 9pnet: p9_errstr2errno: server reported unknown error Ÿjâáë=‹ùÆ«&B [ 84.429099][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 84.580989][ T7269] Illegal XDP return value 4294967274 on prog (id 1208) dev syz_tun, expect packet loss! [ 84.625574][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 84.625588][ T29] audit: type=1400 audit(1745862213.157:1647): avc: denied { name_bind } for pid=7272 comm="syz.4.1551" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.654667][ T29] audit: type=1400 audit(1745862213.157:1648): avc: denied { node_bind } for pid=7272 comm="syz.4.1551" saddr=255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 84.660590][ T7275] netlink: 'syz.6.1552': attribute type 1 has an invalid length. [ 84.706497][ T29] audit: type=1400 audit(1745862213.237:1649): avc: denied { unlink } for pid=4061 comm="syz-executor" name="file0" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.747507][ T7283] __nla_validate_parse: 5 callbacks suppressed [ 84.747579][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1552'. [ 84.749602][ T29] audit: type=1400 audit(1745862213.277:1650): avc: denied { mount } for pid=7280 comm="syz.4.1555" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.801446][ T29] audit: type=1326 audit(1745862213.327:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 84.826046][ T29] audit: type=1326 audit(1745862213.327:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 84.852111][ T29] audit: type=1326 audit(1745862213.327:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 84.877099][ T29] audit: type=1326 audit(1745862213.327:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fc26e969 code=0x7ffc0000 [ 84.927038][ T7275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.017614][ T7283] bond3 (unregistering): Released all slaves [ 85.057844][ T7289] SELinux: failed to load policy [ 85.102312][ T29] audit: type=1400 audit(1745862213.637:1655): avc: denied { read } for pid=7298 comm="syz.5.1563" dev="nsfs" ino=4026533350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.124950][ T29] audit: type=1400 audit(1745862213.637:1656): avc: denied { open } for pid=7298 comm="syz.5.1563" path="net:[4026533350]" dev="nsfs" ino=4026533350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.152257][ T7299] netlink: 'syz.5.1563': attribute type 1 has an invalid length. [ 85.161646][ T7299] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1563'. [ 85.246986][ T7311] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 85.267609][ T7313] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 85.333178][ T7313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.363425][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1580'. [ 85.364518][ T7315] syzkaller1: entered promiscuous mode [ 85.378314][ T7315] syzkaller1: entered allmulticast mode [ 85.401904][ T7326] netlink: 'syz.3.1574': attribute type 3 has an invalid length. [ 85.450443][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.458135][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.501767][ T7332] random: crng reseeded on system resumption [ 85.581982][ T7322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.592550][ T7322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.618738][ T3553] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 85.618828][ T3553] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.637921][ T7322] hsr0: left promiscuous mode [ 85.679609][ T7322] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.688786][ T7322] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.697834][ T7322] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.706908][ T7322] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.729181][ T7323] bond2 (unregistering): Released all slaves [ 85.874933][ T7349] loop3: detected capacity change from 0 to 4096 [ 85.929243][ T7359] x_tables: duplicate underflow at hook 4 [ 85.976443][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 86.052220][ T7371] atomic_op ffff88812d8e8528 conn xmit_atomic 0000000000000000 [ 86.196739][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1605'. [ 86.399182][ T3553] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 86.547087][ T7408] ALSA: seq fatal error: cannot create timer (-19) [ 86.666988][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 86.797643][ T7435] smc: net device bond0 applied user defined pnetid SYZ0 [ 86.815349][ T7435] smc: net device bond0 erased user defined pnetid SYZ0 [ 87.260622][ T3380] Process accounting resumed [ 87.394863][ T7487] loop3: detected capacity change from 0 to 512 [ 87.402522][ T7487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.422472][ T7487] EXT4-fs (loop3): 1 truncate cleaned up [ 87.439525][ T7487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.460562][ T7495] wireguard0: entered promiscuous mode [ 87.466199][ T7495] wireguard0: entered allmulticast mode [ 87.488335][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.508672][ T3553] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.571983][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1657'. [ 87.824070][ T7518] SELinux: ebitmap: truncated map [ 87.834805][ T7518] SELinux: failed to load policy [ 87.868159][ T7521] batadv0: entered promiscuous mode [ 87.889247][ T7521] batadv_slave_0: entered promiscuous mode [ 87.895391][ T7521] batadv_slave_0: left promiscuous mode [ 87.907710][ T7521] batadv0: left promiscuous mode [ 88.078090][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 88.306879][ T7559] batadv0: entered promiscuous mode [ 88.326723][ T7559] batadv_slave_0: entered promiscuous mode [ 88.332833][ T7559] batadv_slave_0: left promiscuous mode [ 88.358838][ T7559] batadv0: left promiscuous mode [ 88.406915][ T7568] syzkaller0: entered allmulticast mode [ 88.609412][ T3615] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 88.659124][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1698'. [ 88.672492][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1698'. [ 88.720940][ T7600] netlink: 'syz.3.1700': attribute type 16 has an invalid length. [ 88.728958][ T7600] netlink: 'syz.3.1700': attribute type 17 has an invalid length. [ 88.756525][ T7600] net_ratelimit: 290 callbacks suppressed [ 88.756537][ T7600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.833091][ T7615] loop3: detected capacity change from 0 to 2048 [ 88.850185][ T7615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.877117][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.982563][ T7632] batadv0: entered promiscuous mode [ 88.988632][ T7632] batadv_slave_0: entered promiscuous mode [ 88.994601][ T7632] batadv_slave_0: left promiscuous mode [ 89.001923][ T7632] batadv0: left promiscuous mode [ 89.151327][ T7641] wireguard0: entered promiscuous mode [ 89.156923][ T7641] wireguard0: entered allmulticast mode [ 89.599301][ T7676] policy can only be matched on NF_INET_PRE_ROUTING [ 89.599318][ T7676] unable to load match [ 89.656492][ T7681] wireguard0: entered promiscuous mode [ 89.662071][ T7681] wireguard0: entered allmulticast mode [ 89.687607][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 89.687624][ T29] audit: type=1326 audit(1745862218.217:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.718481][ T29] audit: type=1326 audit(1745862218.217:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.742408][ T29] audit: type=1326 audit(1745862218.227:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.743041][ T3553] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 89.766177][ T29] audit: type=1326 audit(1745862218.227:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.798381][ T29] audit: type=1326 audit(1745862218.227:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.822133][ T29] audit: type=1326 audit(1745862218.227:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.847160][ T29] audit: type=1326 audit(1745862218.227:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.870934][ T29] audit: type=1326 audit(1745862218.227:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.894672][ T29] audit: type=1326 audit(1745862218.227:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.918349][ T29] audit: type=1326 audit(1745862218.227:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.0.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x7ffc0000 [ 89.944623][ T7688] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1735'. [ 90.057613][ T7704] sch_tbf: burst 8791 is lower than device lo mtu (65550) ! [ 90.124835][ T7711] netlink: 'syz.0.1744': attribute type 3 has an invalid length. [ 90.134420][ T7711] netlink: 'syz.0.1744': attribute type 3 has an invalid length. [ 90.223313][ T7726] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1751'. [ 90.390666][ T7731] wireguard0: entered promiscuous mode [ 90.396358][ T7731] wireguard0: entered allmulticast mode [ 90.692113][ T7747] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1758'. [ 90.748852][ T7747] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1758'. [ 90.809450][ T7749] netlink: 'syz.4.1759': attribute type 3 has an invalid length. [ 90.817564][ T7749] netlink: 'syz.4.1759': attribute type 3 has an invalid length. [ 90.817629][ T7747] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1758'. [ 90.845554][ T7747] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1758'. [ 90.868639][ T3615] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 90.907036][ T7747] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1758'. [ 90.926898][ T7747] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1758'. [ 91.024960][ T7762] infiniband syz!: set active [ 91.030094][ T7762] infiniband syz!: added team_slave_0 [ 91.055353][ T7762] RDS/IB: syz!: added [ 91.064459][ T7762] smc: adding ib device syz! with port count 1 [ 91.075482][ T7762] smc: ib device syz! port 1 has pnetid [ 91.978204][ T3614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 92.462445][ T7819] sd 0:0:1:0: device reset [ 92.565184][ T7837] bridge0: port 3(vlan2) entered blocking state [ 92.571703][ T7837] bridge0: port 3(vlan2) entered disabled state [ 92.578345][ T7837] vlan2: entered allmulticast mode [ 92.583773][ T7837] bridge0: entered allmulticast mode [ 92.595247][ T7837] vlan2: left allmulticast mode [ 92.600278][ T7837] bridge0: left allmulticast mode [ 92.833281][ T7858] loop3: detected capacity change from 0 to 8192 [ 92.841482][ T7858] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 92.984806][ T7877] ref_ctr_offset mismatch. inode: 0x73e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 93.047262][ T7886] loop3: detected capacity change from 0 to 256 [ 93.054605][ T7886] FAT-fs (loop3): bogus number of FAT sectors [ 93.061072][ T7886] FAT-fs (loop3): Can't find a valid FAT filesystem [ 93.088423][ T3614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 93.120624][ T7889] wireguard0: entered promiscuous mode [ 93.126416][ T7889] wireguard0: entered allmulticast mode [ 93.164396][ T7899] loop3: detected capacity change from 0 to 512 [ 93.199153][ T7899] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.1827: corrupted in-inode xattr: invalid ea_ino [ 93.228552][ T7899] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1827: couldn't read orphan inode 15 (err -117) [ 93.261533][ T7911] tipc: Started in network mode [ 93.266621][ T7911] tipc: Node identity ac14140f, cluster identity 4711 [ 93.267083][ T7899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.274101][ T7911] tipc: New replicast peer: 255.255.255.255 [ 93.294035][ T7911] tipc: Enabled bearer , priority 10 [ 93.335829][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.389730][ T7925] IPv6: Can't replace route, no match found [ 93.402968][ T7915] vlan1: entered allmulticast mode [ 93.416461][ T7915] dummy0: entered allmulticast mode [ 93.418690][ T7927] sctp: [Deprecated]: syz.4.1840 (pid 7927) Use of int in maxseg socket option. [ 93.418690][ T7927] Use struct sctp_assoc_value instead [ 93.530363][ T7939] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 93.844138][ T7952] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1851'. [ 93.969642][ T7970] bond1: (slave syz_tun): Releasing active interface [ 93.977376][ T7970] bridge_slave_0: left allmulticast mode [ 93.983299][ T7970] bridge_slave_0: left promiscuous mode [ 93.989518][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.997806][ T7970] bridge_slave_1: left allmulticast mode [ 94.003665][ T7970] bridge_slave_1: left promiscuous mode [ 94.009590][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.018857][ T7970] bond0: (slave bond_slave_0): Releasing backup interface [ 94.027065][ T7970] bond0: (slave bond_slave_1): Releasing backup interface [ 94.036487][ T7970] team0: Port device team_slave_0 removed [ 94.043537][ T7970] team0: Port device team_slave_1 removed [ 94.049868][ T7970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.057550][ T7970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.065817][ T7970] bond2: (slave ip6gretap1): Releasing active interface [ 94.150523][ T7985] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 94.166853][ T7985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.192215][ T7985] bond2: (slave gretap1): making interface the new active one [ 94.201129][ T7985] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 94.219765][ T3614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 94.289685][ T8000] loop3: detected capacity change from 0 to 512 [ 94.298324][ T3380] tipc: Node number set to 2886997007 [ 94.312101][ T8000] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.329617][ T8000] EXT4-fs (loop3): mount failed [ 94.362475][ T8010] loop6: detected capacity change from 0 to 1024 [ 94.370753][ T8010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.391102][ T8010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.414162][ T8010] EXT4-fs (loop6): shut down requested (0) [ 94.441345][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.506828][ T8027] ipvlan2: entered promiscuous mode [ 94.513884][ T8027] bridge0: port 1(ipvlan2) entered blocking state [ 94.520998][ T8027] bridge0: port 1(ipvlan2) entered disabled state [ 94.528399][ T8027] ipvlan2: entered allmulticast mode [ 94.534694][ T8027] bridge0: entered allmulticast mode [ 94.542205][ T8027] ipvlan2: left allmulticast mode [ 94.547822][ T8027] bridge0: left allmulticast mode [ 94.766880][ T8046] loop3: detected capacity change from 0 to 512 [ 94.775402][ T8046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.799670][ T8046] EXT4-fs (loop3): 1 truncate cleaned up [ 94.807215][ T8046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.834945][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 94.834964][ T29] audit: type=1400 audit(1745862223.367:2097): avc: denied { read write } for pid=8045 comm="+}[@" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.879165][ T29] audit: type=1400 audit(1745862223.367:2098): avc: denied { open } for pid=8045 comm="+}[@" path="/372/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.942427][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.066223][ T29] audit: type=1400 audit(1745862223.597:2099): avc: denied { bind } for pid=8059 comm="syz.6.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.116337][ T8064] random: crng reseeded on system resumption [ 95.328572][ T29] audit: type=1400 audit(1745862223.857:2100): avc: denied { write } for pid=8075 comm="syz.6.1901" path="socket:[21614]" dev="sockfs" ino=21614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.382595][ T8080] loop3: detected capacity change from 0 to 512 [ 95.391475][ T3614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.411103][ T29] audit: type=1400 audit(1745862223.947:2101): avc: denied { write } for pid=8081 comm="syz.5.1904" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.437742][ T8080] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.456703][ T8080] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1902: bad orphan inode 13 [ 95.492282][ T8080] ext4_test_bit(bit=12, block=18) = 1 [ 95.497829][ T8080] is_bad_inode(inode)=0 [ 95.500178][ T29] audit: type=1326 audit(1745862224.027:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.6.1905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5cb22e969 code=0x0 [ 95.502188][ T8080] NEXT_ORPHAN(inode)=2130706432 [ 95.531473][ T8080] max_ino=32 [ 95.534907][ T8080] i_nlink=1 [ 95.573306][ T8095] random: crng reseeded on system resumption [ 95.621057][ T8080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.640020][ T29] audit: type=1326 audit(1745862224.177:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8094 comm="syz.0.1917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x0 [ 95.670327][ T29] audit: type=1400 audit(1745862224.207:2104): avc: denied { execute } for pid=8078 comm="syz.3.1902" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.705975][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.731393][ T8098] wireguard0: entered promiscuous mode [ 95.826763][ T29] audit: type=1326 audit(1745862224.357:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.0.1913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb33fcae969 code=0x0 [ 95.915664][ T8113] atomic_op ffff88811858f528 conn xmit_atomic 0000000000000000 [ 96.277287][ T29] audit: type=1400 audit(1745862224.807:2106): avc: denied { unmount } for pid=8123 comm="syz.5.1920" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.346274][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.355262][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.561012][ T3553] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 96.573995][ T3576] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.585206][ T3576] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.633583][ T3576] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.644332][ T3576] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.701630][ T3576] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.712158][ T3576] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.771536][ T3576] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.782042][ T3576] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.891609][ T8165] vlan2: entered allmulticast mode [ 96.904565][ T8167] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 96.946796][ T3576] bridge_slave_1: left allmulticast mode [ 96.952739][ T3576] bridge_slave_1: left promiscuous mode [ 96.959047][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.979285][ T3576] bridge_slave_0: left allmulticast mode [ 96.985620][ T3576] bridge_slave_0: left promiscuous mode [ 96.991409][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.037747][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1941'. [ 97.046963][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1941'. [ 97.056219][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1941'. [ 97.077475][ T8175] loop6: detected capacity change from 0 to 1024 [ 97.104684][ T8175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.136744][ T3576] bond1 (unregistering): (slave geneve2): Releasing active interface [ 97.147682][ T8175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.163009][ T8175] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 97.176775][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.187761][ T4344] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.197299][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.207649][ T3576] bond0 (unregistering): Released all slaves [ 97.217367][ T3576] bond1 (unregistering): Released all slaves [ 97.235139][ T8182] netem: change failed [ 97.291383][ T3576] tipc: Disabling bearer [ 97.296961][ T3576] tipc: Left network mode [ 97.312849][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 97.395634][ T3576] hsr_slave_0: left promiscuous mode [ 97.403512][ T3576] hsr_slave_1: left promiscuous mode [ 97.418481][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.427373][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.438807][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.446613][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.460501][ T3576] veth1_macvtap: left promiscuous mode [ 97.466202][ T3576] veth0_macvtap: left promiscuous mode [ 97.473749][ T3576] veth1_vlan: left promiscuous mode [ 97.479269][ T3576] veth0_vlan: left promiscuous mode [ 97.580704][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 97.602002][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 97.612153][ T3615] smc: removing ib device syz! [ 97.684294][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.691535][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.699733][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 97.700892][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1961'. [ 97.734571][ T8141] bridge_slave_0: entered allmulticast mode [ 97.751587][ T8141] bridge_slave_0: entered promiscuous mode [ 97.769600][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.776964][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.788858][ T8141] bridge_slave_1: entered allmulticast mode [ 97.795789][ T8141] bridge_slave_1: entered promiscuous mode [ 97.840277][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.871438][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.908560][ T1038] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 97.927886][ T1038] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 97.944401][ T8141] team0: Port device team_slave_0 added [ 97.957976][ T8141] team0: Port device team_slave_1 added [ 97.993427][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.001130][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.027224][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.039559][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.046524][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.072824][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.119086][ T8141] hsr_slave_0: entered promiscuous mode [ 98.125850][ T8141] hsr_slave_1: entered promiscuous mode [ 98.132721][ T8141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.140721][ T8141] Cannot create hsr debugfs directory [ 98.217057][ T8141] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 98.226845][ T8141] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 98.237278][ T8141] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 98.247124][ T8141] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 98.263476][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.271130][ T8141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.301740][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.313597][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.330814][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.341712][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.349639][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.360040][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.367348][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.436082][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.543786][ T8141] veth0_vlan: entered promiscuous mode [ 98.551972][ T8141] veth1_vlan: entered promiscuous mode [ 98.567949][ T8141] veth0_macvtap: entered promiscuous mode [ 98.575659][ T8141] veth1_macvtap: entered promiscuous mode [ 98.586817][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.597508][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.607469][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.618406][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.629459][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.640791][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.652062][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.663075][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.675095][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.688310][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.699087][ T8141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.709035][ T8141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.722963][ T8141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.732097][ T8141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.838240][ T3576] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 99.702619][ T8300] loop4: detected capacity change from 0 to 512 [ 99.710463][ T8300] EXT4-fs: Ignoring removed oldalloc option [ 99.717211][ T8300] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.728231][ T8300] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 99.749644][ T8300] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.1985: inode #15: comm syz.4.1985: iget: illegal inode # [ 99.780310][ T8300] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1985: couldn't read orphan inode 15 (err -117) [ 99.808968][ T8300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.826612][ T8306] ALSA: seq fatal error: cannot create timer (-22) [ 99.884763][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 99.884778][ T29] audit: type=1400 audit(1745862228.417:2159): avc: denied { write } for pid=8309 comm="syz.0.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.927177][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.938787][ T3614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 99.986883][ T29] audit: type=1400 audit(1745862228.517:2160): avc: denied { write } for pid=8319 comm="syz.3.1994" name="kcm" dev="proc" ino=4026532854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 100.079824][ T8329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.082189][ T8333] sd 0:0:1:0: device reset [ 100.100726][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 100.124675][ T29] audit: type=1400 audit(1745862228.657:2161): avc: denied { setopt } for pid=8334 comm="syz.4.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.178915][ T29] audit: type=1400 audit(1745862228.717:2162): avc: denied { listen } for pid=8336 comm="syz.7.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.204036][ T8341] loop4: detected capacity change from 0 to 128 [ 100.204458][ T29] audit: type=1400 audit(1745862228.737:2163): avc: denied { accept } for pid=8336 comm="syz.7.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.303418][ T8353] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 100.303418][ T8353] The task syz.0.2004 (8353) triggered the difference, watch for misbehavior. [ 100.939907][ T8352] ================================================================== [ 100.949130][ T8352] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 100.956566][ T8352] [ 100.959044][ T8352] write to 0xffff888106755d14 of 4 bytes by task 8341 on cpu 0: [ 100.966713][ T8352] __xa_set_mark+0x172/0x1a0 [ 100.971342][ T8352] __folio_mark_dirty+0x3af/0x4c0 [ 100.977671][ T8352] mark_buffer_dirty+0x11e/0x210 [ 100.982732][ T8352] block_write_end+0x12e/0x210 [ 100.987704][ T8352] generic_write_end+0x57/0x150 [ 100.992858][ T8352] fat_write_end+0x4f/0x160 [ 100.997482][ T8352] generic_perform_write+0x30f/0x490 [ 101.002989][ T8352] __generic_file_write_iter+0x9e/0x120 [ 101.008689][ T8352] generic_file_write_iter+0x8d/0x2f0 [ 101.015014][ T8352] iter_file_splice_write+0x5ef/0x970 [ 101.020799][ T8352] direct_splice_actor+0x153/0x2a0 [ 101.025986][ T8352] splice_direct_to_actor+0x30f/0x680 [ 101.031402][ T8352] do_splice_direct+0xda/0x150 [ 101.036450][ T8352] do_sendfile+0x380/0x640 [ 101.041004][ T8352] __x64_sys_sendfile64+0x105/0x150 [ 101.046352][ T8352] x64_sys_call+0xb39/0x2fb0 [ 101.051191][ T8352] do_syscall_64+0xd0/0x1a0 [ 101.055730][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.061788][ T8352] [ 101.064300][ T8352] read to 0xffff888106755d14 of 4 bytes by task 8352 on cpu 1: [ 101.072037][ T8352] xas_find_marked+0x5dc/0x620 [ 101.076943][ T8352] find_get_entry+0x5d/0x380 [ 101.081671][ T8352] filemap_get_folios_tag+0x92/0x210 [ 101.087098][ T8352] file_write_and_wait_range+0x1ea/0x2c0 [ 101.092863][ T8352] __generic_file_fsync+0x46/0x140 [ 101.098437][ T8352] fat_file_fsync+0x49/0x100 [ 101.103391][ T8352] vfs_fsync_range+0x10a/0x130 [ 101.108312][ T8352] generic_file_write_iter+0x1b8/0x2f0 [ 101.114019][ T8352] iter_file_splice_write+0x5ef/0x970 [ 101.120454][ T8352] direct_splice_actor+0x153/0x2a0 [ 101.125962][ T8352] splice_direct_to_actor+0x30f/0x680 [ 101.132076][ T8352] do_splice_direct+0xda/0x150 [ 101.137052][ T8352] do_sendfile+0x380/0x640 [ 101.141913][ T8352] __x64_sys_sendfile64+0x105/0x150 [ 101.148089][ T8352] x64_sys_call+0xb39/0x2fb0 [ 101.153059][ T8352] do_syscall_64+0xd0/0x1a0 [ 101.158965][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.164976][ T8352] [ 101.167332][ T8352] value changed: 0x04000021 -> 0x0e000021 [ 101.173341][ T8352] [ 101.176165][ T8352] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 101.182694][ T8352] CPU: 1 UID: 0 PID: 8352 Comm: syz.4.2005 Tainted: G W 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(voluntary) [ 101.197813][ T8352] Tainted: [W]=WARN [ 101.201722][ T8352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.212770][ T8352] ================================================================== [ 101.221516][ T3553] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 101.247095][ T29] audit: type=1400 audit(1745862229.767:2164): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[561]" dev="pipefs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 101.271793][ T29] audit: type=1400 audit(1745862229.777:2165): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 101.294045][ T29] audit: type=1400 audit(1745862229.777:2166): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.318809][ T29] audit: type=1400 audit(1745862229.777:2167): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.343888][ T29] audit: type=1400 audit(1745862229.777:2168): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.493085][ T6974] bond1: (slave syz_tun): Releasing active interface [ 101.949707][ T3553] bond0 (unregistering): Released all slaves [ 101.959113][ T3553] bond1 (unregistering): Released all slaves [ 101.969965][ T3553] bond2 (unregistering): Released all slaves [ 102.030036][ T3553] IPVS: stopping backup sync thread 6408 ... [ 102.037970][ T3553] hsr_slave_0: left promiscuous mode [ 102.043677][ T3553] hsr_slave_1: left promiscuous mode [ 102.338221][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 102.413028][ T3553] IPVS: stop unused estimator thread 0... [ 102.663553][ T3553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.674352][ T3553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.685702][ T3553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.730673][ T3553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.741410][ T3553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.753360][ T3553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.791025][ T3553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.801427][ T3553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.811917][ T3553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.860639][ T3553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.871504][ T3553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.882274][ T3553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.945211][ T3553] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.010930][ T3553] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.070725][ T3553] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.130847][ T3553] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.204515][ T3553] bond1: left allmulticast mode [ 103.209958][ T3553] bond1: left promiscuous mode [ 103.215373][ T3553] bridge0: port 3(bond1) entered disabled state [ 103.223793][ T3553] bridge_slave_1: left allmulticast mode [ 103.229688][ T3553] bridge_slave_1: left promiscuous mode [ 103.235601][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.243804][ T3553] bridge_slave_0: left allmulticast mode [ 103.250149][ T3553] bridge_slave_0: left promiscuous mode [ 103.256363][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.265227][ T3553] bridge_slave_1: left allmulticast mode [ 103.272115][ T3553] bridge_slave_1: left promiscuous mode [ 103.278959][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.287408][ T3553] bridge_slave_0: left allmulticast mode [ 103.293592][ T3553] bridge_slave_0: left promiscuous mode [ 103.299625][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.308879][ T3553] bridge_slave_1: left allmulticast mode [ 103.316143][ T3553] bridge_slave_1: left promiscuous mode [ 103.323596][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.333154][ T3553] bridge_slave_0: left promiscuous mode [ 103.340042][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.414217][ T3553] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 103.457082][ T3553] bond2 (unregistering): (slave gretap1): Releasing active interface [ 103.481323][ T3553] bond1 (unregistering): (slave geneve2): Releasing active interface [ 103.670628][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.679935][ T3553] bond_slave_0: left allmulticast mode [ 103.686132][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.695489][ T3553] bond_slave_1: left allmulticast mode [ 103.702422][ T3553] bond0 (unregistering): Released all slaves [ 103.711312][ T3553] bond1 (unregistering): Released all slaves [ 103.720958][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.731447][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.740983][ T3553] bond0 (unregistering): Released all slaves [ 103.749312][ T3553] bond1 (unregistering): Released all slaves [ 103.757632][ T3553] bond2 (unregistering): Released all slaves [ 103.767416][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.776372][ T3553] bond_slave_0: left allmulticast mode [ 103.783112][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.791943][ T3553] bond_slave_1: left allmulticast mode [ 103.799234][ T3553] bond0 (unregistering): Released all slaves [ 103.807518][ T3553] bond1 (unregistering): Released all slaves [ 103.816353][ T3553] bond2 (unregistering): Released all slaves [ 103.886036][ T3553] hsr_slave_0: left promiscuous mode [ 103.892665][ T3553] hsr_slave_1: left promiscuous mode [ 103.898443][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.906133][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.915589][ T3553] hsr_slave_0: left promiscuous mode [ 103.921622][ T3553] hsr_slave_1: left promiscuous mode [ 103.927528][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.935492][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.943405][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.951089][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.960373][ T3553] hsr_slave_0: left promiscuous mode [ 103.966051][ T3553] hsr_slave_1: left promiscuous mode [ 103.971919][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.980491][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.989056][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.996481][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.008954][ T3553] veth1_macvtap: left promiscuous mode [ 104.014807][ T3553] veth0_macvtap: left promiscuous mode [ 104.020533][ T3553] veth1_vlan: left promiscuous mode [ 104.025986][ T3553] veth0_vlan: left promiscuous mode [ 104.033018][ T3553] veth1_macvtap: left promiscuous mode [ 104.038813][ T3553] veth0_macvtap: left promiscuous mode [ 104.044741][ T3553] veth1_vlan: left promiscuous mode [ 104.050299][ T3553] veth0_vlan: left promiscuous mode [ 104.143317][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 104.152901][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 104.207492][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 104.217562][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 104.269869][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 104.280368][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 104.867499][ T3553] IPVS: stop unused estimator thread 0... [ 104.902200][ T3553] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.961020][ T3553] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.020689][ T3553] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.061108][ T3553] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.132058][ T3553] bridge_slave_1: left allmulticast mode [ 105.138692][ T3553] bridge_slave_1: left promiscuous mode [ 105.144927][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.153397][ T3553] bridge_slave_0: left allmulticast mode [ 105.161541][ T3553] bridge_slave_0: left promiscuous mode [ 105.168460][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.249906][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.261226][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.271054][ T3553] bond0 (unregistering): Released all slaves [ 105.321280][ T3553] hsr_slave_0: left promiscuous mode [ 105.327835][ T3553] hsr_slave_1: left promiscuous mode [ 105.333726][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.341439][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.349505][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.357110][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.367091][ T3553] veth1_macvtap: left promiscuous mode [ 105.372716][ T3553] veth0_macvtap: left promiscuous mode [ 105.378358][ T3553] veth1_vlan: left promiscuous mode [ 105.384144][ T3553] veth0_vlan: left promiscuous mode [ 105.444615][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 105.454630][ T3553] team0 (unregistering): Port device team_slave_0 removed